last executing test programs: 10.431617098s ago: executing program 3 (id=3058): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18090000002300810000000000000000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYRES8=r0, @ANYRESDEC=r1, @ANYRES16=r1], 0x40}}, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000840}, 0x24004000) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f0000000600)=r0}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000700)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000680), &(0x7f00000006c0)='%+9llu \x00'}, 0x20) r5 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000780)=@generic={&(0x7f0000000740)='./file0\x00', 0x0, 0x18}, 0x18) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/bus/input/handlers\x00', 0x0, 0x0) pread64(r7, &(0x7f0000000440)=""/92, 0x5c, 0x58) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x6, 0x17, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x22}, [@call={0x85, 0x0, 0x0, 0xca}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}, @ldst={0x2, 0x1, 0x6, 0x3, 0x0, 0xffffffffffffff80}, @map_fd={0x18, 0x6, 0x1, 0x0, 0x1}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x3}, @map_fd={0x18, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x4}, @call={0x85, 0x0, 0x0, 0x5}]}, &(0x7f0000000480)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x5c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000540)={0x4, 0xd, 0x1000, 0xf2fc86d}, 0x10, 0x0, 0x0, 0xa, &(0x7f00000007c0)=[r3, r4, r5, r6, r7], &(0x7f0000000800)=[{0x1, 0x3, 0x4, 0x2}, {0x8, 0x5, 0xa, 0xb}, {0x0, 0x1, 0x7, 0xc}, {0x5, 0x2, 0xb, 0xc}, {0x3, 0x1, 0xd, 0x3}, {0x2, 0x1, 0xd, 0x4}, {0x0, 0x2, 0x8, 0x9}, {0x0, 0x3, 0x5, 0xc}, {0x1, 0x1, 0xb, 0xb}, {0x4, 0x2, 0xe, 0x4}], 0x10, 0x800, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800710, &(0x7f0000000100)={[{@quota}, {@bsdgroups}, {@nouid32}, {@user_xattr}, {@errors_remount}, {@oldalloc}, {@stripe={'stripe', 0x3d, 0x5}}]}, 0x2, 0x462, &(0x7f0000000d80)="$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") r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r8, 0x40305829, &(0x7f0000000240)={0x17c04, 0xffffffffffffffff, 0x4, 0x100000001}) socket$nl_rdma(0x10, 0x3, 0x14) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[], 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000900)=@newlink={0x40, 0x10, 0xc11, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e23}, @IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e23}]}}}]}, 0x40}}, 0x20000000) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000140)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000200000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r11}, 0x10) renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0) r12 = socket$nl_rdma(0x10, 0x3, 0x14) unshare(0x62040200) sendmsg$RDMA_NLDEV_CMD_DELLINK(r12, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x18, 0x1404, 0x1, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) 9.432574224s ago: executing program 3 (id=3068): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000010000b70400000000000085000000c300000095"], 0x0, 0x33, 0x0, 0x0, 0x41000, 0x64, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x6) symlinkat(&(0x7f0000000400)='./file0/../file0\x00', r2, &(0x7f00000003c0)='./file0\x00') readlinkat(r2, &(0x7f00000001c0)='./file0/../file0\x00', &(0x7f00000002c0)=""/198, 0xc6) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x13, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0xfffffffffffffe31, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x19, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10) syz_mount_image$iso9660(&(0x7f0000000380), &(0x7f0000000800)='./file0\x00', 0x200482, &(0x7f0000000b40)=ANY=[], 0x1, 0x6a5, &(0x7f00000013c0)="$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") r4 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x2) write$binfmt_script(r4, &(0x7f0000000300)={'#! ', './file0'}, 0xb) r5 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_misc(r5, &(0x7f0000000240), 0xfffffecc) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r6}, 0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000510700140000000000000001b7080000000000007b8af8ff00000000b7080000fcffffff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r7, 0x0, 0x10}, 0x18) r8 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r8, 0x0, 0x4000000a, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000500)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) execveat(r4, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 5.207973944s ago: executing program 2 (id=3104): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x65, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x100) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0) 5.169653814s ago: executing program 2 (id=3106): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x65, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_SENDMSG={0x9, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000440)={&(0x7f0000000340)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x0, {0x2, 0x0, @multicast1}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000480)="10ab119b497ad23a1c1142ce24b27ffa12477294d5f95fbf8890c08a1c7a02944cf58f9e6725ddafac32a98ed3ec927d19a01a193c99058915996d97a79d6e364c97cd620d3e639b4374dae2de1c616415fbc228c3f6bbaacf237291ea1c763bc9f9405da6d699a83194b49c8848fe72407cbcd06881dbc687e9a9967c4031632fbbb883db18c6b0c40a546715fa886040c2", 0x5d}], 0x100000000000000f, 0x0, 0xfffffe5e}, 0x0, 0x80840, 0x1}) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f00000001c0)=@req={0x4, 0x7, 0x1, 0x6}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x100) setreuid(0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0) 5.125879335s ago: executing program 2 (id=3107): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x40, 0x7ffc1ffb}]}) socket$caif_seqpacket(0x25, 0x5, 0x5) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="040000000000007a589574a398e8bf0000004300008ea4245ab68adf50e9", @ANYRES32, @ANYBLOB='\x00'/13, @ANYRES32=0x0, @ANYBLOB='\x00'/22], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000001000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b70300000000ffff850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x6) close(r1) readahead(0xffffffffffffffff, 0x3, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0xc7e, &(0x7f0000006680)) bpf$PROG_LOAD(0x5, 0x0, 0x0) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='kfree\x00', r2}, 0x18) quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, 0x0, &(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) setresuid(0xee01, 0x0, 0x0) timer_create(0x3, 0x0, &(0x7f00000003c0)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) timer_delete(0x0) 4.111138302s ago: executing program 2 (id=3112): socket$pppl2tp(0x18, 0x1, 0x1) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) munlockall() socket$netlink(0x10, 0x3, 0x10) remap_file_pages(&(0x7f0000330000/0x2000)=nil, 0x2000, 0x100000b, 0x400, 0x2) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r1, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a00000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) socketpair$unix(0x1, 0x9, 0x0, &(0x7f0000000280)) syz_open_dev$tty20(0xc, 0x4, 0x1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) bpf$PROG_LOAD(0x5, 0x0, 0x0) process_vm_readv(0x0, &(0x7f0000008400)=[{0x0}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, 0x0, 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, &(0x7f0000000140)={0x0, 0x0}) write(r2, &(0x7f0000000000)="fa", 0xfffffdef) getsockopt$nfc_llcp(0xffffffffffffffff, 0x6, 0x12, 0x0, 0x2000e881) dup2(0xffffffffffffffff, 0xffffffffffffffff) getrandom(&(0x7f0000000080)=""/240, 0xfffffffffffffe77, 0x0) syz_usb_connect$hid(0x5, 0x36, 0x0, 0x0) 2.371693154s ago: executing program 3 (id=3081): sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) (fail_nth: 6) 2.078701906s ago: executing program 3 (id=3116): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x65, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_SENDMSG={0x9, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000440)={&(0x7f0000000340)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x0, {0x2, 0x0, @multicast1}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000480)="10ab119b497ad23a1c1142ce24b27ffa12477294d5f95fbf8890c08a1c7a02944cf58f9e6725ddafac32a98ed3ec927d19a01a193c99058915996d97a79d6e364c97cd620d3e639b4374dae2de1c616415fbc228c3f6bbaacf237291ea1c763bc9f9405da6d699a83194b49c8848fe72407cbcd06881dbc687e9a9967c4031632fbbb883db18c6b0c40a546715fa886040c2", 0x5d}], 0x100000000000000f, 0x0, 0xfffffe5e}, 0x0, 0x80840, 0x1}) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f00000001c0)=@req={0x4, 0x7, 0x1, 0x6}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x100) setreuid(0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0) 2.077928046s ago: executing program 3 (id=3117): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18090000002300810000000000000000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYRES8=r0, @ANYRESDEC=r1, @ANYRES16=r1], 0x40}}, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x4000840}, 0x24004000) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f0000000600)=r0}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000700)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000680), &(0x7f00000006c0)='%+9llu \x00'}, 0x20) r5 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000780)=@generic={&(0x7f0000000740)='./file0\x00', 0x0, 0x18}, 0x18) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/bus/input/handlers\x00', 0x0, 0x0) pread64(r7, &(0x7f0000000440)=""/92, 0x5c, 0x58) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x6, 0x17, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x22}, [@call={0x85, 0x0, 0x0, 0xca}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}, @ldst={0x2, 0x1, 0x6, 0x3, 0x0, 0xffffffffffffff80}, @map_fd={0x18, 0x6, 0x1, 0x0, 0x1}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x3}, @map_fd={0x18, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x4}, @call={0x85, 0x0, 0x0, 0x5}]}, &(0x7f0000000480)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x5c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000540)={0x4, 0xd, 0x1000, 0xf2fc86d}, 0x10, 0x0, 0x0, 0xa, &(0x7f00000007c0)=[r3, r4, r5, r6, r7], &(0x7f0000000800)=[{0x1, 0x3, 0x4, 0x2}, {0x8, 0x5, 0xa, 0xb}, {0x0, 0x1, 0x7, 0xc}, {0x5, 0x2, 0xb, 0xc}, {0x3, 0x1, 0xd, 0x3}, {0x2, 0x1, 0xd, 0x4}, {0x0, 0x2, 0x8, 0x9}, {0x0, 0x3, 0x5, 0xc}, {0x1, 0x1, 0xb, 0xb}, {0x4, 0x2, 0xe, 0x4}], 0x10, 0x800, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800710, &(0x7f0000000100)={[{@quota}, {@bsdgroups}, {@nouid32}, {@user_xattr}, {@errors_remount}, {@oldalloc}, {@stripe={'stripe', 0x3d, 0x5}}]}, 0x2, 0x462, &(0x7f0000000d80)="$eJzs3M9vFFUcAPDvTFtQfrUi/gBRq8TY+KOlBZWDF40mHjCa6AH1VNtCCAs1tCZCiFRj8GJiSPSsHk38C7x5MerJxKveDQlRLqCnmpmdgd1lt93SpVu7n08y8N6+t/ve2zdv5s28nQbQs4azf5KIbRHxe0QMVqP1GYar/127cm7qnyvnppJYXHzjryTPd/XKuakya/m+rUVkJI1IP0mKQurNnTl7YrJSmTldxMfmT743Nnfm7NPHT04emzk2c2ri0KGDB8afe3bimY60M2vX1T0fzu7d/cpbF1+dOnLx3Z+/y+q7rUivbcct2XTzS8NZw/9ezDWmPbaqwtaf7TXhpL+LFWFF+iIi666BfPwPRl/c6LzBePnjrlYOuK2yc9Pm1skLi8AGlkS3awB0R3miz65/y22Nph7rwuUXqhdAWbuvFVs1pT/SIs9Aw/VtJw1HxJGFf7/KtujEfQgAgGV8NvXl4Xiq2fwvjXtr8u0o1lCGIuKuiNgZEXdHxK6IuCciz3tfRNy/wvIbl4Zunv+kl26pYW3K5n/PF2tb9fO/cvYXQ31FbHve/oHk6PHKzP7iOxmJgc1ZfHyJMn546bfPW6XVzv+yLSu/nAsW9bjU33CDbnpyfjKflHbA5Y8i9vQ3a39yfSUgiYjdEbFnZR+9owwcf+Lbva0yLd/+JXRgnWnxm4jHq/2/EA3tLyVLr0+O3RGVmf1j5V5xs19+vfB6q/JX1f4OyPp/S/3+X6R8faYIDL1Tu147t/IyLvzxactrmlvd/zclb+bHo3LZ9YPJ+fnT4xGbksN5vO71iRvvLeNl/qz9I/uaj/+dxXuy/n8gIrKd+MGIeCgiHi7q/khEPBoR+5Zo/08vtk5bD/0/3fT4d33/H0rq+n/lgb4TP37fqvz2+v9gHhopXsmPf8tot4Kr+e4AAADg/yLNfwOfpKPXw2k6Olr9Df+u2JJWZufmnzw6+/6p6epv5YdiIC3vdA3W3A8dTxaKT6zGJ4p7xWX6geK+8Rd9d+bx0anZynSX2w69bmuL8Z/5s6/btQNuu2braBNNHmgDNp7G8Z/WR8+/tpaVAdaU57Whdy0z/tO1qgew9pz/oXc1G//nG+LWAmBjcv6H3mX8Q+8y/qF3NYx/l/rQG1bzXL9ALwciXRfVaCvQ/t+DuN2Bt9dHNdoIdPvIBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0Bn/BQAA//8cWu+A") r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r8, 0x40305829, &(0x7f0000000240)={0x17c04, 0xffffffffffffffff, 0x4, 0x100000001}) socket$nl_rdma(0x10, 0x3, 0x14) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[], 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000900)=@newlink={0x40, 0x10, 0xc11, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e23}, @IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e23}]}}}]}, 0x40}}, 0x20000000) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000140)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000200000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r11}, 0x10) renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0) r12 = socket$nl_rdma(0x10, 0x3, 0x14) unshare(0x62040200) sendmsg$RDMA_NLDEV_CMD_DELLINK(r12, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x18, 0x1404, 0x1, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) 1.867228267s ago: executing program 0 (id=3118): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00'}, 0x10) socket$nl_rdma(0x10, 0x3, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000380), 0x1, 0x4ce, &(0x7f0000001f80)="$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") 1.658517489s ago: executing program 1 (id=3120): r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_config_ext, 0x0, 0xb2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c00170000000000120000f1850000007d00"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x2041, 0x0) ioctl$TCSETAF(r2, 0x5408, &(0x7f00000000c0)={0x49de, 0x0, 0x0, 0xfff7, 0x1a, "0000ff04ebff8800"}) write$binfmt_aout(r2, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x200c9, 0x0, "0062005707f7ffffffff00"}) r3 = syz_open_pts(r2, 0x2000) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000240)={0x202, 0x0, 0xf376, 0x101, 0x8, "764613e5f420bb31a74e44353513e29a308e28"}) r4 = dup3(r3, r2, 0x0) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000000)=0x44) r5 = openat(r4, &(0x7f0000000100)='./file1\x00', 0x121342, 0x1ff) write$binfmt_elf64(r5, &(0x7f0000000b00)=ANY=[@ANYBLOB="7f454c4600010000000000000000000003003e0000000000ba020000000000004000000000000000000000000000000000000000030038000100000000000000030000005a00000004000000000000000000000000000000040f00000000000003"], 0x78) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', r6}, 0x18) close(r5) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r7}, 0x18) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r10, 0xc020f509, &(0x7f0000000380)={r8, 0x4, 0xb6, 0x2}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000180)={'macvtap0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}]}, 0x40}}, 0x0) sendmsg$TCPDIAG_GETSOCK(r5, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000580)={0x37c, 0x12, 0x12, 0x70bd2c, 0x25dfdbfd, {0x2a, 0x80, 0x4e, 0x10, {0x4e21, 0x4e20, [0x9, 0x3000, 0x6], [0x0, 0x8000, 0x2, 0x9], r11, [0x80000001, 0xb]}, 0x1, 0xe789}, [@INET_DIAG_REQ_BYTECODE={0x102, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0xec, 0x1, "376e555eb0957da3bbfa0ca185ae4ab61f1bf5db5d6b026854bd8d1e386ec001a89f17fefee14160101403599a09d6ac09c94e53c60c04ee64facb27c162d841a347134d22c85e4124d215f4e040624ffea16cc8f122a5dd3b3c03fe34612cc5c06242bfd530d826791c6c41dd45534cd688aa6c4e8f20d81f6d31c07cdcd4d494617da1a92bc6e0dc0765f53a98d7d20d9014d3f9dae2ce64f7beb1ce4eef7938a969b157145cb2d66dc757a701782be2f1d1382bf7edd1dbb4b34512ff022297beca3685c6d4c1b25e7e3405a3cf8009b925162ef69248643920be3e1fee690aaa3d826f87cedd"}, @INET_DIAG_REQ_BYTECODE={0xc9, 0x1, "2fad7a9f7a08afe10a65d713ad46b00cdc30d479ab8d5f6e793056358f85fe61cfc4b107869884e89d476e295105dcf5d8f861d84e9a8b183a2072d410fa2050e6398731a2c8266d84609bc55ebc64df03bf7003b153ba0f753b2bd646295a1258ab2144fcf1cab8c1d2a358d1b9b4213f79f353c8e7819bb0575e12fa3d202b03094d4b0ebf6b3ebbe195151d51d1f00ef9db99d48ac96efb56d2a2d4c45f6b483c8d217cd50df8b8fbba32c9195674838af4bd42167b76173ee418f45e28c2e83ead3147"}, @INET_DIAG_REQ_BYTECODE={0x71, 0x1, "fe58262fe667b93247c898198fe71b3cdc6144ebd2c8e727488c4000ddea0f456a2a5707de6f2f8c7781825b4bb5deada06c4989a12f1cee13eb41b9bfa14133976d3bc053c6f6cc8a6bc82bc7a7092c44bb55117bdf3a197e3ea908ebd507fe64a6350daeaf34f8c3d15cdda0"}]}, 0x37c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40800) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) readv(r0, &(0x7f0000000d80)=[{&(0x7f0000000000)=""/206, 0xce}, {0x0}], 0x2) 1.46271995s ago: executing program 0 (id=3121): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x40, 0x7ffc1ffb}]}) socket$caif_seqpacket(0x25, 0x5, 0x5) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="040000000000007a589574a398e8bf0000004300008ea4245ab68adf50e9", @ANYRES32, @ANYBLOB='\x00'/13, @ANYRES32=0x0, @ANYBLOB='\x00'/22], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000001000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b70300000000ffff850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r1}, 0x18) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x6) close(r2) readahead(0xffffffffffffffff, 0x3, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0xc7e, &(0x7f0000006680)) bpf$PROG_LOAD(0x5, 0x0, 0x0) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='kfree\x00', r3}, 0x18) quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, 0x0, &(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) setresuid(0xee01, 0x0, 0x0) timer_create(0x3, 0x0, &(0x7f00000003c0)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) timer_delete(0x0) 1.314892311s ago: executing program 1 (id=3122): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @local, 'bridge_slave_0\x00'}}, 0x1e) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet_udp(0x2, 0x2, 0x0) socket$packet(0x11, 0x2, 0x300) socket$inet6(0xa, 0x2, 0x0) r4 = socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r4], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, @void, @value}, 0x94) r5 = syz_io_uring_setup(0xcf, &(0x7f0000000480)={0x0, 0x0, 0x80, 0x20000, 0x1f9}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x3c}}, 0x0) fcntl$setown(r3, 0x8, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) syz_io_uring_submit(r6, r7, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x4e, 0x2004, @fd_index=0x6, 0xfffffffffffffff9, 0x0, 0x0, 0x8, 0x0, {0x3}}) io_uring_enter(r5, 0x47ba, 0x0, 0x0, 0x0, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @local, 'geneve0\x00'}}, 0x1e) 1.305242141s ago: executing program 1 (id=3123): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x65, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x100) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0) 1.239197641s ago: executing program 1 (id=3124): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000004c0)='kfree\x00', r0, 0x0, 0x1}, 0x18) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x101c02, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)) ioctl$PPPIOCSACTIVE(r1, 0x40107446, &(0x7f0000000240)={0x1, &(0x7f0000000180)=[{0x16, 0x0, 0x20, 0x3}]}) 1.216390512s ago: executing program 2 (id=3125): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18090000002300810000000000000000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYRES8=r0, @ANYRESDEC=r1, @ANYRES16=r1], 0x40}}, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x4000840}, 0x24004000) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f0000000600)=r0}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000700)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000680), &(0x7f00000006c0)='%+9llu \x00'}, 0x20) r5 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000780)=@generic={&(0x7f0000000740)='./file0\x00', 0x0, 0x18}, 0x18) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/bus/input/handlers\x00', 0x0, 0x0) pread64(r7, &(0x7f0000000440)=""/92, 0x5c, 0x58) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x6, 0x17, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x22}, [@call={0x85, 0x0, 0x0, 0xca}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}, @ldst={0x2, 0x1, 0x6, 0x3, 0x0, 0xffffffffffffff80}, @map_fd={0x18, 0x6, 0x1, 0x0, 0x1}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x3}, @map_fd={0x18, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x4}, @call={0x85, 0x0, 0x0, 0x5}]}, &(0x7f0000000480)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x5c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000540)={0x4, 0xd, 0x1000, 0xf2fc86d}, 0x10, 0x0, 0x0, 0xa, &(0x7f00000007c0)=[r3, r4, r5, r6, r7], &(0x7f0000000800)=[{0x1, 0x3, 0x4, 0x2}, {0x8, 0x5, 0xa, 0xb}, {0x0, 0x1, 0x7, 0xc}, {0x5, 0x2, 0xb, 0xc}, {0x3, 0x1, 0xd, 0x3}, {0x2, 0x1, 0xd, 0x4}, {0x0, 0x2, 0x8, 0x9}, {0x0, 0x3, 0x5, 0xc}, {0x1, 0x1, 0xb, 0xb}, {0x4, 0x2, 0xe, 0x4}], 0x10, 0x800, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800710, &(0x7f0000000100)={[{@quota}, {@bsdgroups}, {@nouid32}, {@user_xattr}, {@errors_remount}, {@oldalloc}, {@stripe={'stripe', 0x3d, 0x5}}]}, 0x2, 0x462, &(0x7f0000000d80)="$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") r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r8, 0x40305829, &(0x7f0000000240)={0x17c04, 0xffffffffffffffff, 0x4, 0x100000001}) socket$nl_rdma(0x10, 0x3, 0x14) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[], 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000900)=@newlink={0x40, 0x10, 0xc11, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e23}, @IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e23}]}}}]}, 0x40}}, 0x20000000) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000140)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000200000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r11}, 0x10) renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0) r12 = socket$nl_rdma(0x10, 0x3, 0x14) unshare(0x62040200) sendmsg$RDMA_NLDEV_CMD_DELLINK(r12, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x18, 0x1404, 0x1, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) 1.142826182s ago: executing program 1 (id=3127): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") prctl$PR_SET_NAME(0xf, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000780)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getgid() sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x85, &(0x7f0000000480)={r2, @in={{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x0, 0x1ff}, 0x90) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) wait4(r3, &(0x7f0000000000), 0x8, &(0x7f0000000800)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) unshare(0x40000000) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000000c0)) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f00000001c0), r6) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r0, 0x0, 0xa5, 0x6c, &(0x7f00000002c0)="67c39e418ebb9b466a9b6ba12e5b5d14961e0e0fcc2c61f8d76d1c5489c8b2968e1b21613f6837107a4ba82ddc772ab5720e12fa07c1e7b47a3338b7b4239583435a6a915cec0620a73e9fedf43ac8f981199d53d78336418b1068c3b72db93aeef32c16331e74fc9b071fa44fb708e05358fc91d9ec29fe4f9469f4634cdbbc370b17144361c6eefe7f557501f796afa87297b51f313fb0e30f00d2bb1aaeffe38650b924", &(0x7f00000003c0)=""/108, 0x10000, 0x0, 0x67, 0x4d, &(0x7f0000000440)="ddfc2aa4f61c8b38c1e4485949983e2ebdf84aa5d8f544d492eb504cb52214d5023c983520fa16a2e20a93f7ba9d6be30caae5679307d04a733533fc8ad822492db2308fed580e2d6ab0f7ea8b6554f1ab85f347717478190e265987d044c9b9112f2be28d3d76", &(0x7f00000004c0)="1b1ac03a951e307fd90dbd50dbf098de89a6d3c1e6ca21986bb3ebdf4fcb8ab8518c4c99af843c720b268d372397c11ad78bf382c44bdc1ca53759015c036acf4de19117230e7af48e3395119a", 0x3}, 0x50) write$nci(r5, &(0x7f0000000040)=ANY=[@ANYBLOB="414601", @ANYRES32=r6], 0x4) chmod(&(0x7f0000000280)='./file0\x00', 0x42) setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) truncate(&(0x7f0000000100)='./file0/file0\x00', 0x9) setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file1\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) 1.092891103s ago: executing program 0 (id=3128): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000280)="69de", 0x2, 0x9000) r1 = openat$tcp_congestion(0xffffff9c, &(0x7f0000000340), 0x1, 0x0) sendfile(r1, r0, 0x0, 0xff) r2 = socket$netlink(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0xb, &(0x7f0000000000)=0x16, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r3}, 0x10) r4 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f00000003c0)='ceph\x00', 0x0, &(0x7f0000000400)="010000000037a788a11d18000000000000006923c63a4541062101a59ea9cba39a989ca8", 0x24, r4) r5 = socket$phonet_pipe(0x23, 0x5, 0x2) r6 = io_uring_setup(0x177f, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0xfffffffd}) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$unix(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) r8 = socket$kcm(0x10, 0x2, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000640)={&(0x7f0000000340)='kfree\x00', r9, 0x0, 0x8000000000000000}, 0x18) prctl$PR_SET_NAME(0xf, 0x0) sendmsg$kcm(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000140)="d800000018007b29e00212ba0d8105040a601800fe0f040b067c55a1bc000900b80006990600000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ccd40dd601edef3d93452a92307ff0ff0e97031e9f05e9f16e9cb500"/216, 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x0) bind$inet(r7, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) writev(r7, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) close_range(r6, 0xffffffffffffffff, 0x0) getsockopt$PNPIPE_HANDLE(r5, 0x113, 0x3, 0x0, &(0x7f0000002980)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000002c0)=0x1) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@newqdisc={0x24, 0x24, 0x59be386d9135c8f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0x1}, {0xb, 0xffe0}, {0xa, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) 1.039110393s ago: executing program 3 (id=3130): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) lsetxattr$system_posix_acl(&(0x7f0000001c40)='./file0\x00', &(0x7f0000001c80)='system.posix_acl_access\x00', &(0x7f0000004100)=ANY=[@ANYRESOCT=r0, @ANYRESHEX=r1, @ANYRES16=r0], 0x24, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) 1.034579293s ago: executing program 0 (id=3131): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000a80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000008385000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) flock(r1, 0x5) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) dup3(r2, r1, 0x0) 971.332943ms ago: executing program 0 (id=3132): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00'}, 0x10) socket$nl_rdma(0x10, 0x3, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000380), 0x1, 0x4ce, &(0x7f0000001f80)="$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") 675.709196ms ago: executing program 4 (id=3133): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @local, 'bridge_slave_0\x00'}}, 0x1e) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet_udp(0x2, 0x2, 0x0) socket$packet(0x11, 0x2, 0x300) socket$inet6(0xa, 0x2, 0x0) r4 = socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r4], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, @void, @value}, 0x94) r5 = syz_io_uring_setup(0xcf, &(0x7f0000000480)={0x0, 0x0, 0x80, 0x20000, 0x1f9}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x3c}}, 0x0) fcntl$setown(r3, 0x8, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) syz_io_uring_submit(r6, r7, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x4e, 0x2004, @fd_index=0x6, 0xfffffffffffffff9, 0x0, 0x0, 0x8, 0x0, {0x3}}) io_uring_enter(r5, 0x47ba, 0x0, 0x0, 0x0, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @local, 'geneve0\x00'}}, 0x1e) 581.562567ms ago: executing program 4 (id=3134): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffc}]}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) shutdown(r0, 0x4000000) 497.354867ms ago: executing program 4 (id=3135): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x65, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x100) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0) 496.527287ms ago: executing program 4 (id=3145): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000bdc900000900000001000000", @ANYRES32, @ANYBLOB='\x00'/17], 0x48) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000380)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1802000000000005000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000340)='xen_mmu_pmd_clear\x00', r2}, 0x18) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r3, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r4, &(0x7f0000001280), 0x6) 469.831547ms ago: executing program 0 (id=3136): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x40, 0x7ffc1ffb}]}) socket$caif_seqpacket(0x25, 0x5, 0x5) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="040000000000007a589574a398e8bf0000004300008ea4245ab68adf50e9", @ANYRES32, @ANYBLOB='\x00'/13, @ANYRES32=0x0, @ANYBLOB='\x00'/22], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000001000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b70300000000ffff8500", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x6) close(r2) readahead(0xffffffffffffffff, 0x3, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0xc7e, &(0x7f0000006680)) bpf$PROG_LOAD(0x5, 0x0, 0x0) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='kfree\x00', r3}, 0x18) quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, 0x0, &(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) setresuid(0xee01, 0x0, 0x0) timer_create(0x3, 0x0, &(0x7f00000003c0)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) timer_delete(0x0) 436.755437ms ago: executing program 4 (id=3137): r0 = syz_io_uring_setup(0x1114, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x21e}, &(0x7f00000001c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0xa, 0x0, 0x0, 0x200, 0x0, 0x1}) io_uring_enter(r0, 0x47fa, 0x0, 0x0, 0x0, 0x0) 255.169668ms ago: executing program 1 (id=3138): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x40, 0x7ffc1ffb}]}) socket$caif_seqpacket(0x25, 0x5, 0x5) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="040000000000007a589574a398e8bf0000004300008ea4245ab68adf50e9", @ANYRES32, @ANYBLOB='\x00'/13, @ANYRES32=0x0, @ANYBLOB='\x00'/22], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000001000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b70300000000ffff850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r1}, 0x18) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x6) close(r2) readahead(0xffffffffffffffff, 0x3, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0xc7e, &(0x7f0000006680)) bpf$PROG_LOAD(0x5, 0x0, 0x0) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='kfree\x00', r3}, 0x18) quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, 0x0, &(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) setresuid(0xee01, 0x0, 0x0) timer_create(0x3, 0x0, &(0x7f00000003c0)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) timer_delete(0x0) 30.01016ms ago: executing program 4 (id=3139): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000010000b70400000000000085000000c300000095"], 0x0, 0x33, 0x0, 0x0, 0x41000, 0x64, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x6) symlinkat(&(0x7f0000000400)='./file0/../file0\x00', r2, &(0x7f00000003c0)='./file0\x00') readlinkat(r2, &(0x7f00000001c0)='./file0/../file0\x00', &(0x7f00000002c0)=""/198, 0xc6) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x13, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0xfffffffffffffe31, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x19, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10) r4 = syz_mount_image$iso9660(&(0x7f0000000380), &(0x7f0000000800)='./file0\x00', 0x200482, &(0x7f0000000b40)=ANY=[], 0x1, 0x6a5, &(0x7f00000013c0)="$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") r5 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x2) write$binfmt_script(r5, &(0x7f0000000300)={'#! ', './file0'}, 0xb) r6 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_misc(r6, &(0x7f0000000240), 0xfffffecc) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r7}, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0x10}, 0x18) fspick(r4, &(0x7f0000000180)='./file0\x00', 0x1) r8 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r8, 0x0, 0x4000000a, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000500)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) execveat(r5, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 0s ago: executing program 2 (id=3140): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000004c0)='kfree\x00', r0, 0x0, 0x1}, 0x18) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x101c02, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)) ioctl$PPPIOCSACTIVE(r1, 0x40107446, &(0x7f0000000240)={0x1, &(0x7f0000000180)=[{0x16, 0x0, 0x20, 0x3}]}) kernel console output (not intermixed with test programs): none. [ 241.429968][ T172] bond0 (unregistering): Released all slaves [ 241.439014][ T172] bond1 (unregistering): Released all slaves [ 241.447913][ T172] bond2 (unregistering): Released all slaves [ 241.456821][ T172] bond3 (unregistering): Released all slaves [ 241.465311][ T172] bond4 (unregistering): Released all slaves [ 241.474180][ T172] bond5 (unregistering): Released all slaves [ 241.482373][T11214] chnl_net:caif_netlink_parms(): no params data found [ 241.544365][T11214] bridge0: port 1(bridge_slave_0) entered blocking state [ 241.551626][T11214] bridge0: port 1(bridge_slave_0) entered disabled state [ 241.559032][T11214] bridge_slave_0: entered allmulticast mode [ 241.565849][T11214] bridge_slave_0: entered promiscuous mode [ 241.572429][ T172] tipc: Left network mode [ 241.572675][T11214] bridge0: port 2(bridge_slave_1) entered blocking state [ 241.583879][T11214] bridge0: port 2(bridge_slave_1) entered disabled state [ 241.591631][T11214] bridge_slave_1: entered allmulticast mode [ 241.598787][T11214] bridge_slave_1: entered promiscuous mode [ 241.639137][T11214] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 241.881544][T11245] loop3: detected capacity change from 0 to 1024 [ 241.924759][T11245] EXT4-fs: Ignoring removed orlov option [ 241.930618][T11245] EXT4-fs: Ignoring removed nomblk_io_submit option [ 241.973997][ T172] hsr_slave_0: left promiscuous mode [ 241.994781][T11245] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 242.007492][ T172] hsr_slave_1: left promiscuous mode [ 242.017366][ T172] veth1_macvtap: left promiscuous mode [ 242.030825][ T172] veth0_macvtap: left promiscuous mode [ 242.042406][ T172] veth1_vlan: left promiscuous mode [ 242.049097][ T172] veth0_vlan: left promiscuous mode [ 242.169280][T11265] loop0: detected capacity change from 0 to 1024 [ 242.248240][T11265] EXT4-fs: Ignoring removed orlov option [ 242.254021][T11265] EXT4-fs: Ignoring removed nomblk_io_submit option [ 242.362383][T11214] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 242.396608][T11258] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 242.505675][T11214] team0: Port device team_slave_0 added [ 242.512831][T11214] team0: Port device team_slave_1 added [ 242.532130][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 242.547420][T11265] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 242.573081][T11214] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 242.580136][T11214] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 242.606170][T11214] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 242.617557][T11214] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 242.624535][T11214] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 242.650913][T11214] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 242.743924][T11214] hsr_slave_0: entered promiscuous mode [ 242.750300][T11214] hsr_slave_1: entered promiscuous mode [ 242.756258][T11214] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 242.763904][T11214] Cannot create hsr debugfs directory [ 242.809491][T11289] loop2: detected capacity change from 0 to 512 [ 242.834927][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 242.872596][T11289] EXT4-fs (loop2): too many log groups per flexible block group [ 242.880366][T11289] EXT4-fs (loop2): failed to initialize mballoc (-12) [ 243.072887][T11289] EXT4-fs (loop2): mount failed [ 243.174095][T11301] IPv6: Can't replace route, no match found [ 243.187709][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 243.208303][T11301] netlink: 16 bytes leftover after parsing attributes in process `\'. [ 243.277042][T11309] FAULT_INJECTION: forcing a failure. [ 243.277042][T11309] name failslab, interval 1, probability 0, space 0, times 0 [ 243.289814][T11309] CPU: 1 UID: 0 PID: 11309 Comm: syz.2.2752 Not tainted 6.14.0-rc7-syzkaller-00074-ga7f2e10ecd8f #0 [ 243.289843][T11309] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 243.289857][T11309] Call Trace: [ 243.289863][T11309] [ 243.289873][T11309] dump_stack_lvl+0xf2/0x150 [ 243.289907][T11309] dump_stack+0x15/0x1a [ 243.290035][T11309] should_fail_ex+0x24a/0x260 [ 243.290072][T11309] should_failslab+0x8f/0xb0 [ 243.290179][T11309] kmem_cache_alloc_node_noprof+0x59/0x320 [ 243.290209][T11309] ? __alloc_skb+0x10b/0x310 [ 243.290237][T11309] __alloc_skb+0x10b/0x310 [ 243.290329][T11309] alloc_skb_with_frags+0x80/0x450 [ 243.290388][T11309] ? avc_has_perm_noaudit+0x1cc/0x210 [ 243.290416][T11309] sock_alloc_send_pskb+0x435/0x4f0 [ 243.290453][T11309] ? selinux_socket_sendmsg+0x185/0x1c0 [ 243.290479][T11309] hci_sock_sendmsg+0x11e/0x920 [ 243.290503][T11309] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 243.290589][T11309] __sock_sendmsg+0x140/0x180 [ 243.290629][T11309] sock_write_iter+0x15e/0x1a0 [ 243.290750][T11309] vfs_write+0x77b/0x920 [ 243.290782][T11309] ? __pfx_sock_write_iter+0x10/0x10 [ 243.290816][T11309] ksys_write+0xe8/0x1b0 [ 243.290843][T11309] __x64_sys_write+0x42/0x50 [ 243.290872][T11309] x64_sys_call+0x287e/0x2dc0 [ 243.290927][T11309] do_syscall_64+0xc9/0x1c0 [ 243.291066][T11309] ? clear_bhb_loop+0x55/0xb0 [ 243.291092][T11309] ? clear_bhb_loop+0x55/0xb0 [ 243.291118][T11309] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.291151][T11309] RIP: 0033:0x7f63a51bd169 [ 243.291176][T11309] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 243.291194][T11309] RSP: 002b:00007f63a3827038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 243.291212][T11309] RAX: ffffffffffffffda RBX: 00007f63a53d5fa0 RCX: 00007f63a51bd169 [ 243.291263][T11309] RDX: 0000000000000006 RSI: 0000400000001280 RDI: 0000000000000004 [ 243.291274][T11309] RBP: 00007f63a3827090 R08: 0000000000000000 R09: 0000000000000000 [ 243.291286][T11309] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 243.291297][T11309] R13: 0000000000000000 R14: 00007f63a53d5fa0 R15: 00007ffe7d2c87a8 [ 243.291324][T11309] [ 243.540794][T11314] xt_CT: You must specify a L4 protocol and not use inversions on it [ 243.554053][T11314] loop0: detected capacity change from 0 to 164 [ 243.561379][T11314] Unable to read rock-ridge attributes [ 243.593373][T11318] loop0: detected capacity change from 0 to 1024 [ 243.596362][T11214] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 243.602044][T11318] EXT4-fs: Ignoring removed orlov option [ 243.612396][T11318] EXT4-fs: Ignoring removed nomblk_io_submit option [ 243.627027][T11318] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 243.630439][T11214] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 243.658578][T11316] loop2: detected capacity change from 0 to 2048 [ 243.667869][T11214] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 243.698012][T11214] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 243.749821][T11316] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 243.752392][T11214] 8021q: adding VLAN 0 to HW filter on device bond0 [ 243.767520][T11316] ext4 filesystem being mounted at /492/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 243.772952][T11214] 8021q: adding VLAN 0 to HW filter on device team0 [ 243.790995][ T9422] bridge0: port 1(bridge_slave_0) entered blocking state [ 243.798144][ T9422] bridge0: port 1(bridge_slave_0) entered forwarding state [ 243.809344][ T9422] bridge0: port 2(bridge_slave_1) entered blocking state [ 243.816550][ T9422] bridge0: port 2(bridge_slave_1) entered forwarding state [ 243.851954][T11214] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 243.862408][T11214] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 244.224478][T11335] loop3: detected capacity change from 0 to 128 [ 244.295783][T11214] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 244.336058][T11342] bio_check_eod: 216 callbacks suppressed [ 244.336115][T11342] syz.3.2758: attempt to access beyond end of device [ 244.336115][T11342] loop3: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 244.384528][T11342] syz.3.2758: attempt to access beyond end of device [ 244.384528][T11342] loop3: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 244.411235][T11342] syz.3.2758: attempt to access beyond end of device [ 244.411235][T11342] loop3: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 244.416308][T11214] veth0_vlan: entered promiscuous mode [ 244.432718][T11342] syz.3.2758: attempt to access beyond end of device [ 244.432718][T11342] loop3: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 244.448578][T11342] syz.3.2758: attempt to access beyond end of device [ 244.448578][T11342] loop3: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 244.469487][T11342] syz.3.2758: attempt to access beyond end of device [ 244.469487][T11342] loop3: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 244.483346][T11342] syz.3.2758: attempt to access beyond end of device [ 244.483346][T11342] loop3: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 244.496934][T11342] syz.3.2758: attempt to access beyond end of device [ 244.496934][T11342] loop3: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 244.513403][T11342] syz.3.2758: attempt to access beyond end of device [ 244.513403][T11342] loop3: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 244.530811][T11342] syz.3.2758: attempt to access beyond end of device [ 244.530811][T11342] loop3: rw=2049, sector=289, nr_sectors = 8 limit=128 [ 244.543979][ T9447] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm kworker/u8:48: bg 0: block 345: padding at end of block bitmap is not set [ 244.561998][ T9447] EXT4-fs (loop2): Remounting filesystem read-only [ 244.562045][T11214] veth1_vlan: entered promiscuous mode [ 244.570326][ T9422] EXT4-fs warning (device loop2): ext4_convert_unwritten_extents:4883: inode #15: block 9: len 7: ext4_ext_map_blocks returned -5 [ 244.574517][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 244.624152][T11214] veth0_macvtap: entered promiscuous mode [ 244.635719][T11214] veth1_macvtap: entered promiscuous mode [ 244.646356][T11214] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 244.656882][T11214] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.666749][T11214] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 244.677293][T11214] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.688238][T11214] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 244.697170][T11351] loop3: detected capacity change from 0 to 1024 [ 244.704786][T11214] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 244.715400][T11214] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.725323][T11214] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 244.735763][T11214] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.743553][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 244.747360][T11214] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 244.755087][T11351] EXT4-fs: Ignoring removed orlov option [ 244.767885][T11351] EXT4-fs: Ignoring removed nomblk_io_submit option [ 244.778151][T11214] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.786995][T11214] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.795863][T11214] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.804575][T11214] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.819129][T11351] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 244.863851][T11358] loop0: detected capacity change from 0 to 512 [ 244.888702][T11358] EXT4-fs error (device loop0): ext4_quota_enable:7101: comm syz.0.2761: inode #33554432: comm syz.0.2761: iget: illegal inode # [ 244.911839][T11358] EXT4-fs error (device loop0): ext4_quota_enable:7104: comm syz.0.2761: Bad quota inode: 33554432, type: 2 [ 244.925292][T11358] EXT4-fs warning (device loop0): ext4_enable_quotas:7145: Failed to enable quota tracking (type=2, err=-117, ino=33554432). Please run e2fsck to fix. [ 244.942394][T11358] EXT4-fs (loop0): mount failed [ 244.951104][ T30] kauditd_printk_skb: 140 callbacks suppressed [ 244.951121][ T30] audit: type=1400 audit(1742439842.192:9709): avc: denied { mounton } for pid=11214 comm="syz-executor" path="/root/syzkaller.sOC7jd/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 244.985515][ T30] audit: type=1400 audit(1742439842.232:9710): avc: denied { mount } for pid=11214 comm="syz-executor" name="/" dev="gadgetfs" ino=4235 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 245.452215][T11374] loop2: detected capacity change from 0 to 128 [ 245.458613][T11373] loop1: detected capacity change from 0 to 164 [ 245.528605][T11374] EXT4-fs: Ignoring removed nobh option [ 245.581208][T11376] IPv6: Can't replace route, no match found [ 245.590120][T11374] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 245.604556][T11376] netlink: 16 bytes leftover after parsing attributes in process `\'. [ 245.614914][T11374] ext4 filesystem being mounted at /495/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 245.657196][ T30] audit: type=1326 audit(1742439842.892:9711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11352 comm="syz.0.2761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0a00dd169 code=0x7ffc0000 [ 245.657241][ T30] audit: type=1326 audit(1742439842.892:9712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11352 comm="syz.0.2761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=140 compat=0 ip=0x7fe0a00dd169 code=0x7ffc0000 [ 245.657294][ T30] audit: type=1326 audit(1742439842.892:9713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11352 comm="syz.0.2761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0a00dd169 code=0x7ffc0000 [ 245.727864][ T30] audit: type=1326 audit(1742439842.892:9714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11352 comm="syz.0.2761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fe0a00dd169 code=0x7ffc0000 [ 245.751369][ T30] audit: type=1326 audit(1742439842.892:9715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11352 comm="syz.0.2761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0a00dd169 code=0x7ffc0000 [ 245.775018][ T30] audit: type=1326 audit(1742439842.892:9716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11352 comm="syz.0.2761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fe0a00deffc code=0x7ffc0000 [ 245.798652][ T30] audit: type=1326 audit(1742439842.892:9717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11352 comm="syz.0.2761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fe0a00def34 code=0x7ffc0000 [ 245.822090][ T30] audit: type=1326 audit(1742439842.892:9718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11352 comm="syz.0.2761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fe0a00def34 code=0x7ffc0000 [ 245.854175][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 245.863709][ T3308] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 245.917313][T11383] loop4: detected capacity change from 0 to 2048 [ 245.947675][T11383] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 245.959960][T11383] ext4 filesystem being mounted at /590/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 245.973674][T11394] loop3: detected capacity change from 0 to 128 [ 246.018119][T11396] loop0: detected capacity change from 0 to 128 [ 246.283492][ T9447] Buffer I/O error on dev loop3, logical block 1000, lost async page write [ 246.284862][ T9411] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm kworker/u8:14: bg 0: block 345: padding at end of block bitmap is not set [ 246.324532][ T9411] EXT4-fs (loop4): Remounting filesystem read-only [ 246.334292][ T29] EXT4-fs warning (device loop4): ext4_convert_unwritten_extents:4883: inode #15: block 9: len 7: ext4_ext_map_blocks returned -5 [ 246.356501][ T29] Buffer I/O error on dev loop0, logical block 744, lost async page write [ 246.432746][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 246.489363][T11409] loop4: detected capacity change from 0 to 1024 [ 246.510533][T11411] IPv6: Can't replace route, no match found [ 246.518887][T11411] netlink: 16 bytes leftover after parsing attributes in process `\'. [ 246.519722][T11409] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 246.567029][T11415] netlink: 'syz.3.2778': attribute type 3 has an invalid length. [ 246.591574][T11417] FAULT_INJECTION: forcing a failure. [ 246.591574][T11417] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 246.604753][T11417] CPU: 0 UID: 0 PID: 11417 Comm: syz.3.2779 Not tainted 6.14.0-rc7-syzkaller-00074-ga7f2e10ecd8f #0 [ 246.604777][T11417] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 246.604789][T11417] Call Trace: [ 246.604796][T11417] [ 246.604804][T11417] dump_stack_lvl+0xf2/0x150 [ 246.604838][T11417] dump_stack+0x15/0x1a [ 246.604942][T11417] should_fail_ex+0x24a/0x260 [ 246.604981][T11417] should_fail+0xb/0x10 [ 246.605016][T11417] should_fail_usercopy+0x1a/0x20 [ 246.605101][T11417] _copy_from_iter+0xd5/0xd00 [ 246.605145][T11417] ? kmalloc_reserve+0x16e/0x190 [ 246.605171][T11417] ? __build_skb_around+0x196/0x1f0 [ 246.605199][T11417] ? __alloc_skb+0x21f/0x310 [ 246.605268][T11417] ? __virt_addr_valid+0x1ed/0x250 [ 246.605300][T11417] ? __check_object_size+0x364/0x520 [ 246.605388][T11417] netlink_sendmsg+0x460/0x6e0 [ 246.605417][T11417] ? __pfx_netlink_sendmsg+0x10/0x10 [ 246.605441][T11417] __sock_sendmsg+0x140/0x180 [ 246.605481][T11417] ____sys_sendmsg+0x326/0x4b0 [ 246.605510][T11417] __sys_sendmsg+0x19d/0x230 [ 246.605589][T11417] __x64_sys_sendmsg+0x46/0x50 [ 246.605621][T11417] x64_sys_call+0x2734/0x2dc0 [ 246.605650][T11417] do_syscall_64+0xc9/0x1c0 [ 246.605691][T11417] ? clear_bhb_loop+0x55/0xb0 [ 246.605729][T11417] ? clear_bhb_loop+0x55/0xb0 [ 246.605762][T11417] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.605815][T11417] RIP: 0033:0x7f4ad1afd169 [ 246.605831][T11417] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 246.605850][T11417] RSP: 002b:00007f4ad0167038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 246.605872][T11417] RAX: ffffffffffffffda RBX: 00007f4ad1d15fa0 RCX: 00007f4ad1afd169 [ 246.605887][T11417] RDX: 0000000020000000 RSI: 00004000000018c0 RDI: 0000000000000003 [ 246.605902][T11417] RBP: 00007f4ad0167090 R08: 0000000000000000 R09: 0000000000000000 [ 246.605915][T11417] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 246.606008][T11417] R13: 0000000000000000 R14: 00007f4ad1d15fa0 R15: 00007ffe990c1858 [ 246.606026][T11417] [ 246.819368][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 246.899425][T11425] loop4: detected capacity change from 0 to 2048 [ 246.920978][T11425] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 246.943732][T11425] ext4 filesystem being mounted at /594/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 247.147239][T11431] loop2: detected capacity change from 0 to 128 [ 247.263773][T11407] Process accounting resumed [ 247.479116][ T29] Buffer I/O error on dev loop2, logical block 192, lost async page write [ 247.525244][ T9411] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm kworker/u8:14: bg 0: block 345: padding at end of block bitmap is not set [ 247.560604][T11439] loop0: detected capacity change from 0 to 128 [ 247.575180][ T9411] EXT4-fs (loop4): Remounting filesystem read-only [ 247.581832][ T9447] EXT4-fs warning (device loop4): ext4_convert_unwritten_extents:4883: inode #15: block 9: len 7: ext4_ext_map_blocks returned -5 [ 247.760677][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 247.807208][T11445] IPv6: Can't replace route, no match found [ 247.824633][T11445] netlink: 16 bytes leftover after parsing attributes in process `\'. [ 247.833157][ T9411] Buffer I/O error on dev loop0, logical block 672, lost async page write [ 248.150592][T11468] loop1: detected capacity change from 0 to 128 [ 248.233421][T11474] loop0: detected capacity change from 0 to 1024 [ 248.241468][T11474] EXT4-fs: Ignoring removed orlov option [ 248.247245][T11474] EXT4-fs: Ignoring removed nomblk_io_submit option [ 248.261311][T11474] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 248.345709][T11481] IPv6: Can't replace route, no match found [ 248.356587][T11481] netlink: 16 bytes leftover after parsing attributes in process `\'. [ 249.087729][T11501] netlink: 'syz.1.2808': attribute type 1 has an invalid length. [ 249.139543][T11496] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 249.153990][T11501] 8021q: adding VLAN 0 to HW filter on device bond1 [ 249.396000][T11488] xt_TPROXY: Can be used only with -p tcp or -p udp [ 249.444850][T11509] loop4: detected capacity change from 0 to 1024 [ 249.465636][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 249.480666][T11509] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 249.513342][T11513] loop2: detected capacity change from 0 to 128 [ 249.601710][T11514] loop0: detected capacity change from 0 to 1024 [ 249.632314][T11517] bio_check_eod: 668 callbacks suppressed [ 249.632334][T11517] syz.2.2812: attempt to access beyond end of device [ 249.632334][T11517] loop2: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 249.656187][T11514] EXT4-fs (loop0): couldn't mount as ext2 due to feature incompatibilities [ 249.835901][T11517] syz.2.2812: attempt to access beyond end of device [ 249.835901][T11517] loop2: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 249.862512][T11521] IPv6: Can't replace route, no match found [ 249.876706][T11521] netlink: 16 bytes leftover after parsing attributes in process `\'. [ 249.956263][T11517] syz.2.2812: attempt to access beyond end of device [ 249.956263][T11517] loop2: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 250.100259][T11528] loop3: detected capacity change from 0 to 1024 [ 250.112079][T11517] syz.2.2812: attempt to access beyond end of device [ 250.112079][T11517] loop2: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 250.167324][T11528] EXT4-fs: Ignoring removed orlov option [ 250.173122][T11528] EXT4-fs: Ignoring removed nomblk_io_submit option [ 250.187090][T11517] syz.2.2812: attempt to access beyond end of device [ 250.187090][T11517] loop2: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 250.246868][T11528] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 250.266023][ T30] kauditd_printk_skb: 190 callbacks suppressed [ 250.266040][ T30] audit: type=1326 audit(1742439847.512:9909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11536 comm="syz.0.2821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0a00dd169 code=0x7ffc0000 [ 250.295883][ T30] audit: type=1326 audit(1742439847.512:9910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11536 comm="syz.0.2821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0a00dd169 code=0x7ffc0000 [ 250.335196][T11517] syz.2.2812: attempt to access beyond end of device [ 250.335196][T11517] loop2: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 250.473212][ T30] audit: type=1326 audit(1742439847.562:9911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11536 comm="syz.0.2821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe0a00dd169 code=0x7ffc0000 [ 250.496824][ T30] audit: type=1326 audit(1742439847.562:9912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11536 comm="syz.0.2821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0a00dd169 code=0x7ffc0000 [ 250.520377][ T30] audit: type=1326 audit(1742439847.562:9913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11536 comm="syz.0.2821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0a00dd169 code=0x7ffc0000 [ 250.545076][ T30] audit: type=1326 audit(1742439847.572:9914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11536 comm="syz.0.2821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe0a00dd169 code=0x7ffc0000 [ 250.568763][ T30] audit: type=1326 audit(1742439847.572:9915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11536 comm="syz.0.2821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0a00dd169 code=0x7ffc0000 [ 250.592323][ T30] audit: type=1326 audit(1742439847.572:9916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11536 comm="syz.0.2821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0a00dd169 code=0x7ffc0000 [ 250.595372][T11517] syz.2.2812: attempt to access beyond end of device [ 250.595372][T11517] loop2: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 250.615889][ T30] audit: type=1326 audit(1742439847.572:9917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11536 comm="syz.0.2821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe0a00dd169 code=0x7ffc0000 [ 250.615950][ T30] audit: type=1326 audit(1742439847.572:9918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11536 comm="syz.0.2821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0a00dd169 code=0x7ffc0000 [ 250.680840][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 250.702629][T11547] loop1: detected capacity change from 0 to 1024 [ 250.710524][T11517] syz.2.2812: attempt to access beyond end of device [ 250.710524][T11517] loop2: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 250.720471][T11547] EXT4-fs (loop1): couldn't mount as ext2 due to feature incompatibilities [ 250.734425][T11517] syz.2.2812: attempt to access beyond end of device [ 250.734425][T11517] loop2: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 250.749826][T11517] syz.2.2812: attempt to access beyond end of device [ 250.749826][T11517] loop2: rw=2049, sector=289, nr_sectors = 8 limit=128 [ 251.102759][T11555] netlink: 'syz.2.2828': attribute type 3 has an invalid length. [ 251.122436][T11556] rdma_rxe: rxe_newlink: failed to add bond0 [ 251.156009][T11556] loop1: detected capacity change from 0 to 512 [ 251.194179][T11556] EXT4-fs: Ignoring removed oldalloc option [ 251.223070][T11558] loop2: detected capacity change from 0 to 1024 [ 251.233095][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 251.244221][T11556] EXT4-fs (loop1): 1 truncate cleaned up [ 251.252272][T11556] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 251.266982][T11556] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 251.275653][T11556] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 251.292352][T11558] EXT4-fs: Ignoring removed orlov option [ 251.298108][T11558] EXT4-fs: Ignoring removed nomblk_io_submit option [ 251.343819][T11564] loop3: detected capacity change from 0 to 164 [ 251.377625][T11558] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 252.031759][T11559] chnl_net:caif_netlink_parms(): no params data found [ 252.113516][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 252.147594][ T29] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.172421][T11596] loop0: detected capacity change from 0 to 1024 [ 252.193446][T11596] EXT4-fs (loop0): couldn't mount as ext2 due to feature incompatibilities [ 252.202901][T11559] bridge0: port 1(bridge_slave_0) entered blocking state [ 252.210037][T11559] bridge0: port 1(bridge_slave_0) entered disabled state [ 252.212142][T11600] loop2: detected capacity change from 0 to 164 [ 252.245327][T11559] bridge_slave_0: entered allmulticast mode [ 252.246105][T11559] bridge_slave_0: entered promiscuous mode [ 252.250238][ T29] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.251528][T11559] bridge0: port 2(bridge_slave_1) entered blocking state [ 252.251562][T11559] bridge0: port 2(bridge_slave_1) entered disabled state [ 252.251774][T11559] bridge_slave_1: entered allmulticast mode [ 252.252369][T11214] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 252.252669][T11559] bridge_slave_1: entered promiscuous mode [ 252.277928][T11559] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 252.279197][T11559] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 252.308350][T11559] team0: Port device team_slave_0 added [ 252.309445][T11559] team0: Port device team_slave_1 added [ 252.325406][ T29] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.332323][T11607] netlink: 'syz.0.2839': attribute type 3 has an invalid length. [ 252.335804][T11559] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 252.335820][T11559] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 252.335868][T11559] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 252.336463][T11559] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 252.336474][T11559] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 252.336508][T11559] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 252.360865][T11559] hsr_slave_0: entered promiscuous mode [ 252.361320][T11559] hsr_slave_1: entered promiscuous mode [ 252.361596][T11559] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 252.361613][T11559] Cannot create hsr debugfs directory [ 252.390815][ T29] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.456861][T11614] IPv6: Can't replace route, no match found [ 252.458175][T11614] netlink: 16 bytes leftover after parsing attributes in process `\'. [ 252.478743][T11617] netlink: 'syz.0.2843': attribute type 3 has an invalid length. [ 252.710569][ T29] bond0 (unregistering): Released all slaves [ 252.719087][ T9422] smc: removing ib device syz0 [ 252.738313][ T29] bond1 (unregistering): Released all slaves [ 252.778582][ T29] bond2 (unregistering): Released all slaves [ 252.798005][ T29] bond3 (unregistering): Released all slaves [ 252.800765][ T29] bond4 (unregistering): Released all slaves [ 252.829814][ T29] bond5 (unregistering): Released all slaves [ 252.838284][ T29] bond6 (unregistering): Released all slaves [ 252.841131][ T29] bond7 (unregistering): Released all slaves [ 252.856287][ T29] bond8 (unregistering): Released all slaves [ 252.929755][T11626] loop0: detected capacity change from 0 to 1024 [ 252.930183][T11626] EXT4-fs: Ignoring removed orlov option [ 252.930260][T11626] EXT4-fs: Ignoring removed nomblk_io_submit option [ 252.957644][T11630] loop3: detected capacity change from 0 to 1024 [ 252.959698][T11630] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities [ 252.961115][T11626] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 253.022885][T11633] IPv6: Can't replace route, no match found [ 253.024836][T11633] netlink: 16 bytes leftover after parsing attributes in process `\'. [ 253.145331][T11636] loop2: detected capacity change from 0 to 2048 [ 253.201877][T11644] IPv6: Can't replace route, no match found [ 253.210356][T11636] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 253.217961][T11644] netlink: 16 bytes leftover after parsing attributes in process `\'. [ 253.222996][T11636] ext4 filesystem being mounted at /508/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 253.245870][ T29] tipc: Left network mode [ 253.252941][ T29] hsr_slave_0: left promiscuous mode [ 253.258666][ T29] hsr_slave_1: left promiscuous mode [ 253.272331][ T29] veth1_macvtap: left promiscuous mode [ 253.279287][ T29] veth1_vlan: left promiscuous mode [ 253.315235][ T29] veth0_vlan: left promiscuous mode [ 253.599599][T11655] loop3: detected capacity change from 0 to 164 [ 253.848814][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 253.863729][T11559] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 253.877246][T11559] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 253.887119][T11559] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 253.897529][T11559] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 253.940361][T11559] 8021q: adding VLAN 0 to HW filter on device bond0 [ 253.958798][T11664] loop1: detected capacity change from 0 to 1024 [ 253.960337][T11559] 8021q: adding VLAN 0 to HW filter on device team0 [ 253.976306][ T9411] bridge0: port 1(bridge_slave_0) entered blocking state [ 253.983455][ T9411] bridge0: port 1(bridge_slave_0) entered forwarding state [ 254.002085][T11664] EXT4-fs (loop1): couldn't mount as ext2 due to feature incompatibilities [ 254.046280][ T9447] bridge0: port 2(bridge_slave_1) entered blocking state [ 254.053369][ T9447] bridge0: port 2(bridge_slave_1) entered forwarding state [ 254.064359][ T9411] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm kworker/u8:14: bg 0: block 345: padding at end of block bitmap is not set [ 254.107188][T11559] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 254.125819][ T9411] EXT4-fs (loop2): Remounting filesystem read-only [ 254.132459][ T172] EXT4-fs warning (device loop2): ext4_convert_unwritten_extents:4883: inode #15: block 9: len 7: ext4_ext_map_blocks returned -5 [ 254.245085][T11559] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 254.266928][T11683] FAULT_INJECTION: forcing a failure. [ 254.266928][T11683] name failslab, interval 1, probability 0, space 0, times 0 [ 254.279626][T11683] CPU: 0 UID: 0 PID: 11683 Comm: syz.1.2866 Not tainted 6.14.0-rc7-syzkaller-00074-ga7f2e10ecd8f #0 [ 254.279664][T11683] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 254.279678][T11683] Call Trace: [ 254.279685][T11683] [ 254.279693][T11683] dump_stack_lvl+0xf2/0x150 [ 254.279726][T11683] dump_stack+0x15/0x1a [ 254.279751][T11683] should_fail_ex+0x24a/0x260 [ 254.279800][T11683] should_failslab+0x8f/0xb0 [ 254.279830][T11683] __kmalloc_node_noprof+0xad/0x410 [ 254.279854][T11683] ? __kvmalloc_node_noprof+0x72/0x170 [ 254.279889][T11683] __kvmalloc_node_noprof+0x72/0x170 [ 254.279969][T11683] io_alloc_cache_init+0x33/0xa0 [ 254.280066][T11683] io_ring_ctx_alloc+0x2d3/0x730 [ 254.280101][T11683] io_uring_create+0x40/0x6d0 [ 254.280132][T11683] __se_sys_io_uring_setup+0x1d2/0x1e0 [ 254.280214][T11683] __x64_sys_io_uring_setup+0x31/0x40 [ 254.280237][T11683] x64_sys_call+0x270c/0x2dc0 [ 254.280269][T11683] do_syscall_64+0xc9/0x1c0 [ 254.280312][T11683] ? clear_bhb_loop+0x55/0xb0 [ 254.280352][T11683] ? clear_bhb_loop+0x55/0xb0 [ 254.280381][T11683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.280407][T11683] RIP: 0033:0x7f55fc78d169 [ 254.280421][T11683] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 254.280442][T11683] RSP: 002b:00007f55fadf6fc8 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 254.280465][T11683] RAX: ffffffffffffffda RBX: 00007f55fc9a5fa0 RCX: 00007f55fc78d169 [ 254.280513][T11683] RDX: 0000000000000000 RSI: 0000400000000400 RDI: 0000000000002c0a [ 254.280525][T11683] RBP: 0000400000000400 R08: 0000000000000000 R09: 0000000000000000 [ 254.280539][T11683] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000001 [ 254.280625][T11683] R13: 0000000000000000 R14: 0000000000002c0a R15: 0000000000000000 [ 254.280643][T11683] [ 254.317690][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 254.610529][T11703] loop1: detected capacity change from 0 to 2048 [ 254.627952][T11709] loop2: detected capacity change from 0 to 1024 [ 254.641148][T11559] veth0_vlan: entered promiscuous mode [ 254.647267][T11709] EXT4-fs (loop2): couldn't mount as ext2 due to feature incompatibilities [ 254.651844][T11559] veth1_vlan: entered promiscuous mode [ 254.668370][T11703] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 254.712862][T11559] veth0_macvtap: entered promiscuous mode [ 254.726871][T11559] veth1_macvtap: entered promiscuous mode [ 254.736650][T11559] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 254.747154][T11559] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.756064][T11703] ext4 filesystem being mounted at /20/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 254.756987][T11559] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 254.777844][T11559] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.788059][T11559] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 254.798617][T11559] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.809213][T11559] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 254.817632][T11559] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 254.828162][T11559] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.838114][T11559] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 254.848641][T11559] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.858517][T11559] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 254.869131][T11559] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.890368][T11559] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 254.899365][T11559] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.908162][T11559] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.917077][T11559] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.926005][T11559] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.953585][T11723] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2875'. [ 255.009534][T11655] bio_check_eod: 106 callbacks suppressed [ 255.009551][T11655] syz.3.2854: attempt to access beyond end of device [ 255.009551][T11655] loop3: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 255.035587][T11655] syz.3.2854: attempt to access beyond end of device [ 255.035587][T11655] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 255.143306][T11734] lo speed is unknown, defaulting to 1000 [ 255.156847][T11734] lo speed is unknown, defaulting to 1000 [ 255.204053][T11734] lo speed is unknown, defaulting to 1000 [ 255.226936][T11734] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 255.255804][ T29] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm kworker/u8:1: bg 0: block 345: padding at end of block bitmap is not set [ 255.275068][T11734] lo speed is unknown, defaulting to 1000 [ 255.286262][ T29] EXT4-fs (loop1): Remounting filesystem read-only [ 255.292902][ T9411] EXT4-fs warning (device loop1): ext4_convert_unwritten_extents:4883: inode #15: block 9: len 7: ext4_ext_map_blocks returned -5 [ 255.316118][T11734] lo speed is unknown, defaulting to 1000 [ 255.316310][T11742] netlink: 'syz.0.2881': attribute type 13 has an invalid length. [ 255.359997][T11744] loop3: detected capacity change from 0 to 1024 [ 255.368590][T11744] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities [ 255.382230][T11742] bridge0: port 2(bridge_slave_1) entered disabled state [ 255.389613][T11742] bridge0: port 1(bridge_slave_0) entered disabled state [ 255.442230][T11742] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 255.453234][T11742] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 255.470931][T11214] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 255.485942][T11749] loop3: detected capacity change from 0 to 1024 [ 255.492722][T11749] EXT4-fs: Ignoring removed orlov option [ 255.498559][T11749] EXT4-fs: Ignoring removed nomblk_io_submit option [ 255.506645][T11742] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.515801][T11742] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.525007][T11742] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.533943][T11742] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.553582][T11749] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 255.569276][T11734] lo speed is unknown, defaulting to 1000 [ 255.585708][T11734] lo speed is unknown, defaulting to 1000 [ 255.593265][T11753] xt_CT: You must specify a L4 protocol and not use inversions on it [ 255.593946][T11734] lo speed is unknown, defaulting to 1000 [ 255.609214][T11734] lo speed is unknown, defaulting to 1000 [ 255.617660][T11753] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 255.661116][T11757] loop0: detected capacity change from 0 to 164 [ 255.922880][T11764] loop4: detected capacity change from 0 to 256 [ 256.381433][T11762] lo speed is unknown, defaulting to 1000 [ 256.458464][T11776] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2890'. [ 256.493000][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 256.510174][T11778] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2891'. [ 256.518105][T11785] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2893'. [ 256.519290][T11778] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2891'. [ 256.579587][T11778] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2891'. [ 256.593960][T11787] loop4: detected capacity change from 0 to 2048 [ 256.630258][T11787] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 256.658021][T11795] loop3: detected capacity change from 0 to 1024 [ 256.675430][T11787] ext4 filesystem being mounted at /2/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 256.685958][T11795] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities [ 256.734364][T11797] rdma_rxe: rxe_newlink: failed to add bond0 [ 256.767215][T11797] loop3: detected capacity change from 0 to 512 [ 256.786573][T11797] EXT4-fs: Ignoring removed oldalloc option [ 256.814145][T11797] EXT4-fs (loop3): 1 truncate cleaned up [ 256.841932][T11797] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 256.959488][T11757] syz.0.2888: attempt to access beyond end of device [ 256.959488][T11757] loop0: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 256.975326][T11757] syz.0.2888: attempt to access beyond end of device [ 256.975326][T11757] loop0: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 257.007176][T11797] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 257.016108][T11797] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 257.024565][ T9447] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm kworker/u8:48: bg 0: block 345: padding at end of block bitmap is not set [ 257.039252][ T30] kauditd_printk_skb: 105 callbacks suppressed [ 257.039265][ T30] audit: type=1326 audit(1742439854.282:10024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11796 comm="syz.3.2896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ad1afd169 code=0x7ffc0000 [ 257.047837][T11797] lo speed is unknown, defaulting to 1000 [ 257.069060][ T30] audit: type=1326 audit(1742439854.282:10025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11796 comm="syz.3.2896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ad1afd169 code=0x7ffc0000 [ 257.098422][ T30] audit: type=1326 audit(1742439854.282:10026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11796 comm="syz.3.2896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4ad1afd169 code=0x7ffc0000 [ 257.122087][ T30] audit: type=1326 audit(1742439854.282:10027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11796 comm="syz.3.2896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ad1afd169 code=0x7ffc0000 [ 257.145888][ T30] audit: type=1326 audit(1742439854.282:10028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11796 comm="syz.3.2896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4ad1afd169 code=0x7ffc0000 [ 257.169507][ T30] audit: type=1326 audit(1742439854.282:10029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11796 comm="syz.3.2896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ad1afd169 code=0x7ffc0000 [ 257.193134][ T30] audit: type=1326 audit(1742439854.282:10030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11796 comm="syz.3.2896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4ad1afd169 code=0x7ffc0000 [ 257.216880][ T30] audit: type=1326 audit(1742439854.282:10031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11796 comm="syz.3.2896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ad1afd169 code=0x7ffc0000 [ 257.240519][ T30] audit: type=1326 audit(1742439854.282:10032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11796 comm="syz.3.2896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=316 compat=0 ip=0x7f4ad1afd169 code=0x7ffc0000 [ 257.264189][ T30] audit: type=1326 audit(1742439854.282:10033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11796 comm="syz.3.2896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ad1afd169 code=0x7ffc0000 [ 257.276938][ T9447] EXT4-fs (loop4): Remounting filesystem read-only [ 257.294542][ T9426] EXT4-fs warning (device loop4): ext4_convert_unwritten_extents:4883: inode #15: block 9: len 7: ext4_ext_map_blocks returned -5 [ 257.366207][T11559] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 257.454952][T11813] loop1: detected capacity change from 0 to 1024 [ 257.468101][T11812] loop4: detected capacity change from 0 to 164 [ 257.471880][T11813] EXT4-fs: Ignoring removed orlov option [ 257.480115][T11813] EXT4-fs: Ignoring removed nomblk_io_submit option [ 257.514512][T11813] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 257.706956][T11818] syz.4.2901: attempt to access beyond end of device [ 257.706956][T11818] loop4: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 257.706999][T11818] syz.4.2901: attempt to access beyond end of device [ 257.706999][T11818] loop4: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 257.751970][T11817] lo speed is unknown, defaulting to 1000 [ 257.907000][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 258.069252][T11830] loop3: detected capacity change from 0 to 1024 [ 258.071049][T11830] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities [ 258.319270][T11842] netlink: 'syz.3.2911': attribute type 3 has an invalid length. [ 258.340823][T11214] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 258.363258][T11846] rdma_rxe: rxe_newlink: failed to add bond0 [ 258.367172][T11846] loop0: detected capacity change from 0 to 512 [ 258.367794][T11846] EXT4-fs: Ignoring removed oldalloc option [ 258.405706][T11846] EXT4-fs (loop0): 1 truncate cleaned up [ 258.406363][T11846] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 258.419715][T11849] netlink: 'syz.2.2910': attribute type 1 has an invalid length. [ 258.422706][T11846] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 258.422857][T11846] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 258.525091][T11849] 8021q: adding VLAN 0 to HW filter on device bond6 [ 258.535288][T11853] lo speed is unknown, defaulting to 1000 [ 258.688949][T11856] loop1: detected capacity change from 0 to 2048 [ 258.701689][T11856] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 258.701805][T11856] ext4 filesystem being mounted at /28/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 258.875435][T11861] IPv6: Can't replace route, no match found [ 258.877546][T11861] netlink: 16 bytes leftover after parsing attributes in process `\'. [ 259.223384][T11867] loop4: detected capacity change from 0 to 1024 [ 259.237875][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 259.268761][T11867] EXT4-fs (loop4): couldn't mount as ext2 due to feature incompatibilities [ 259.485069][T11876] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 259.494009][T11876] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 259.502736][T11876] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 259.511540][T11876] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 259.523946][T11878] netlink: 'syz.0.2923': attribute type 3 has an invalid length. [ 259.534206][ T9422] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm kworker/u8:25: bg 0: block 345: padding at end of block bitmap is not set [ 259.551474][ T9422] EXT4-fs (loop1): Remounting filesystem read-only [ 259.628244][T11880] loop0: detected capacity change from 0 to 1024 [ 259.638493][T11214] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 259.656611][T11880] EXT4-fs: Ignoring removed orlov option [ 259.662395][T11880] EXT4-fs: Ignoring removed nomblk_io_submit option [ 259.686966][T11880] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 259.875895][T11887] loop1: detected capacity change from 0 to 1024 [ 259.889042][T11888] loop4: detected capacity change from 0 to 512 [ 259.961769][T11893] lo speed is unknown, defaulting to 1000 [ 260.078414][T11894] IPv6: Can't replace route, no match found [ 260.088991][T11887] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 260.124202][T11897] loop3: detected capacity change from 0 to 164 [ 260.134984][T11890] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2927'. [ 260.147187][T11888] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2240: inode #15: comm syz.4.2926: corrupted in-inode xattr: invalid ea_ino [ 260.256336][T11888] EXT4-fs error (device loop4): ext4_orphan_get:1394: comm syz.4.2926: couldn't read orphan inode 15 (err -117) [ 260.258891][T11888] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 260.337567][T11901] rdma_rxe: rxe_newlink: failed to add bond0 [ 260.340962][T11901] loop2: detected capacity change from 0 to 512 [ 260.341185][T11901] EXT4-fs: Ignoring removed oldalloc option [ 260.345097][T11901] EXT4-fs (loop2): 1 truncate cleaned up [ 260.369097][T11901] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 260.403829][T11901] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 260.403883][T11901] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 260.419856][T11904] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 0, id = 0 [ 260.423233][T11899] syz.3.2928: attempt to access beyond end of device [ 260.423233][T11899] loop3: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 260.423277][T11899] syz.3.2928: attempt to access beyond end of device [ 260.423277][T11899] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 260.428943][T11901] lo speed is unknown, defaulting to 1000 [ 260.493942][T11559] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 260.577095][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 260.593822][T11907] loop4: detected capacity change from 0 to 1024 [ 260.594364][T11907] EXT4-fs (loop4): couldn't mount as ext2 due to feature incompatibilities [ 260.692984][T11915] loop4: detected capacity change from 0 to 2048 [ 260.697303][T11917] netlink: 'syz.0.2935': attribute type 3 has an invalid length. [ 260.716239][T11915] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 260.757334][T11214] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 260.759031][T11915] ext4 filesystem being mounted at /11/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 260.781524][T11922] loop0: detected capacity change from 0 to 1024 [ 260.817267][T11922] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 261.041222][T11930] IPv6: Can't replace route, no match found [ 261.061082][T11930] netlink: 16 bytes leftover after parsing attributes in process `\'. [ 261.153776][T11936] loop3: detected capacity change from 0 to 1024 [ 261.188925][T11936] EXT4-fs: Ignoring removed orlov option [ 261.194978][T11936] EXT4-fs: Ignoring removed nomblk_io_submit option [ 261.210117][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 261.238046][T11936] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 261.257924][T11940] loop2: detected capacity change from 0 to 1024 [ 261.325791][T11940] EXT4-fs (loop2): couldn't mount as ext2 due to feature incompatibilities [ 261.404173][ T9411] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm kworker/u8:14: bg 0: block 345: padding at end of block bitmap is not set [ 261.420642][ T9411] EXT4-fs (loop4): Remounting filesystem read-only [ 261.505210][ T9422] EXT4-fs warning (device loop4): ext4_convert_unwritten_extents:4883: inode #15: block 9: len 7: ext4_ext_map_blocks returned -5 [ 261.522634][T11948] lo speed is unknown, defaulting to 1000 [ 261.730746][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 261.783122][T11954] netlink: 'syz.0.2947': attribute type 3 has an invalid length. [ 261.808425][T11559] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 261.811450][T11953] loop1: detected capacity change from 0 to 2048 [ 261.855459][T11960] loop4: detected capacity change from 0 to 1024 [ 261.862102][T11960] EXT4-fs: Ignoring removed orlov option [ 261.867876][T11960] EXT4-fs: Ignoring removed nomblk_io_submit option [ 261.875846][T11953] loop1: p1 < > p4 [ 261.880227][T11953] loop1: p4 size 8388608 extends beyond EOD, truncated [ 261.888712][T11960] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 262.032813][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 262.091056][T11969] loop3: detected capacity change from 0 to 512 [ 262.098079][T11969] EXT4-fs: Ignoring removed oldalloc option [ 262.114196][T11969] EXT4-fs (loop3): 1 truncate cleaned up [ 262.141489][T11971] lo speed is unknown, defaulting to 1000 [ 262.297169][T11969] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 262.322580][T11975] loop1: detected capacity change from 0 to 1024 [ 262.360595][T11975] EXT4-fs (loop1): couldn't mount as ext2 due to feature incompatibilities [ 262.399542][T11978] xt_CT: You must specify a L4 protocol and not use inversions on it [ 262.413734][T11978] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 262.461634][T11969] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 262.492397][T11979] netlink: 'syz.2.2954': attribute type 10 has an invalid length. [ 262.502565][T11969] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 262.545281][ T30] kauditd_printk_skb: 127 callbacks suppressed [ 262.545298][ T30] audit: type=1326 audit(1742439859.782:10161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11968 comm="syz.3.2952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ad1afd169 code=0x7ffc0000 [ 262.575183][ T30] audit: type=1326 audit(1742439859.782:10162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11968 comm="syz.3.2952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ad1afd169 code=0x7ffc0000 [ 262.655082][T11981] loop0: detected capacity change from 0 to 2048 [ 262.664907][T11979] hsr_slave_0: left promiscuous mode [ 262.673844][T11979] hsr_slave_1: left promiscuous mode [ 262.703285][T11969] lo speed is unknown, defaulting to 1000 [ 262.713569][T11981] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 262.734850][T11981] ext4 filesystem being mounted at /586/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 262.751257][ T30] audit: type=1326 audit(1742439859.842:10163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11968 comm="syz.3.2952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4ad1afd169 code=0x7ffc0000 [ 262.774936][ T30] audit: type=1326 audit(1742439859.842:10164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11968 comm="syz.3.2952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ad1afd169 code=0x7ffc0000 [ 262.798618][ T30] audit: type=1326 audit(1742439859.842:10165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11968 comm="syz.3.2952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ad1afd169 code=0x7ffc0000 [ 262.822357][ T30] audit: type=1326 audit(1742439859.852:10166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11968 comm="syz.3.2952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4ad1afd169 code=0x7ffc0000 [ 262.845998][ T30] audit: type=1326 audit(1742439859.852:10167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11968 comm="syz.3.2952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ad1afd169 code=0x7ffc0000 [ 262.869740][ T30] audit: type=1326 audit(1742439859.852:10168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11968 comm="syz.3.2952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ad1afd169 code=0x7ffc0000 [ 262.893675][ T30] audit: type=1326 audit(1742439859.852:10169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11968 comm="syz.3.2952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4ad1afd169 code=0x7ffc0000 [ 262.917318][ T30] audit: type=1326 audit(1742439859.852:10170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11968 comm="syz.3.2952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ad1afd169 code=0x7ffc0000 [ 263.006108][T11559] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 263.153813][ T9422] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm kworker/u8:25: bg 0: block 345: padding at end of block bitmap is not set [ 263.172337][ T9422] EXT4-fs (loop0): Remounting filesystem read-only [ 263.179043][ T9411] EXT4-fs warning (device loop0): ext4_convert_unwritten_extents:4883: inode #15: block 9: len 7: ext4_ext_map_blocks returned -5 [ 263.269200][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 263.294416][T12000] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2960'. [ 263.304086][T12000] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2960'. [ 263.347813][T12002] netlink: 'syz.0.2961': attribute type 3 has an invalid length. [ 263.376896][T12004] loop0: detected capacity change from 0 to 1024 [ 263.383577][T12004] EXT4-fs: Ignoring removed orlov option [ 263.389447][T12004] EXT4-fs: Ignoring removed nomblk_io_submit option [ 263.406676][T12004] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 263.516616][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 263.538142][T12009] loop3: detected capacity change from 0 to 1024 [ 263.548070][T12009] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 263.631319][T12011] lo speed is unknown, defaulting to 1000 [ 263.883154][T12017] loop2: detected capacity change from 0 to 1024 [ 263.892449][T12017] EXT4-fs (loop2): couldn't mount as ext2 due to feature incompatibilities [ 263.959246][T12024] xt_CT: You must specify a L4 protocol and not use inversions on it [ 263.966859][T12024] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 264.004465][T12026] loop4: detected capacity change from 0 to 2048 [ 264.017589][T12030] FAULT_INJECTION: forcing a failure. [ 264.017589][T12030] name failslab, interval 1, probability 0, space 0, times 0 [ 264.030376][T12030] CPU: 0 UID: 0 PID: 12030 Comm: syz.2.2969 Not tainted 6.14.0-rc7-syzkaller-00074-ga7f2e10ecd8f #0 [ 264.030408][T12030] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 264.030456][T12030] Call Trace: [ 264.030463][T12030] [ 264.030472][T12030] dump_stack_lvl+0xf2/0x150 [ 264.030503][T12030] dump_stack+0x15/0x1a [ 264.030525][T12030] should_fail_ex+0x24a/0x260 [ 264.030555][T12030] should_failslab+0x8f/0xb0 [ 264.030647][T12030] kmem_cache_alloc_noprof+0x52/0x320 [ 264.030674][T12030] ? skb_clone+0x154/0x1f0 [ 264.030740][T12030] skb_clone+0x154/0x1f0 [ 264.030771][T12030] __netlink_deliver_tap+0x2bd/0x4f0 [ 264.030957][T12030] netlink_unicast+0x64a/0x670 [ 264.031000][T12030] netlink_sendmsg+0x5cc/0x6e0 [ 264.031028][T12030] ? __pfx_netlink_sendmsg+0x10/0x10 [ 264.031120][T12030] __sock_sendmsg+0x140/0x180 [ 264.031214][T12030] ____sys_sendmsg+0x326/0x4b0 [ 264.031245][T12030] __sys_sendmsg+0x19d/0x230 [ 264.031299][T12030] __x64_sys_sendmsg+0x46/0x50 [ 264.031331][T12030] x64_sys_call+0x2734/0x2dc0 [ 264.031361][T12030] do_syscall_64+0xc9/0x1c0 [ 264.031396][T12030] ? clear_bhb_loop+0x55/0xb0 [ 264.031481][T12030] ? clear_bhb_loop+0x55/0xb0 [ 264.031661][T12030] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 264.031692][T12030] RIP: 0033:0x7f63a51bd169 [ 264.031710][T12030] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 264.031795][T12030] RSP: 002b:00007f63a3806038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 264.031815][T12030] RAX: ffffffffffffffda RBX: 00007f63a53d6080 RCX: 00007f63a51bd169 [ 264.031830][T12030] RDX: 0000000000000000 RSI: 0000400000000600 RDI: 000000000000000e [ 264.031844][T12030] RBP: 00007f63a3806090 R08: 0000000000000000 R09: 0000000000000000 [ 264.031857][T12030] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 264.031871][T12030] R13: 0000000000000000 R14: 00007f63a53d6080 R15: 00007ffe7d2c87a8 [ 264.031892][T12030] [ 264.031905][T12030] netlink: 'syz.2.2969': attribute type 10 has an invalid length. [ 264.290760][T12026] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 264.306852][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 264.315405][T12026] ext4 filesystem being mounted at /18/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 264.369416][T12032] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2971'. [ 264.417315][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 264.447518][T12037] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2973'. [ 264.462243][T12041] netlink: 'syz.3.2972': attribute type 3 has an invalid length. [ 264.497460][T12043] loop3: detected capacity change from 0 to 512 [ 264.504589][T12043] EXT4-fs: Ignoring removed oldalloc option [ 264.523687][T12043] EXT4-fs (loop3): 1 truncate cleaned up [ 264.530193][T12043] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 264.546589][T12043] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 264.557406][T12043] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 264.581195][T12043] lo speed is unknown, defaulting to 1000 [ 264.667739][ T9411] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm kworker/u8:14: bg 0: block 345: padding at end of block bitmap is not set [ 264.694501][ T9411] EXT4-fs (loop4): Remounting filesystem read-only [ 264.701352][ T9447] EXT4-fs warning (device loop4): ext4_convert_unwritten_extents:4883: inode #15: block 9: len 7: ext4_ext_map_blocks returned -5 [ 264.714935][T12053] loop1: detected capacity change from 0 to 1024 [ 264.721876][T12053] EXT4-fs (loop1): couldn't mount as ext2 due to feature incompatibilities [ 264.774078][T12057] loop1: detected capacity change from 0 to 164 [ 264.777432][T11559] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 264.842721][T12060] syz.1.2981: attempt to access beyond end of device [ 264.842721][T12060] loop1: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 264.842757][T12060] syz.1.2981: attempt to access beyond end of device [ 264.842757][T12060] loop1: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 264.852731][T12061] msdos: Unknown parameter '}'A&GR4YXbN+y _F?TPp(WBcPe*`륛7neY}zDjA69ɚ.'2[(lqbST҆`8' [ 264.887019][T12061] rdma_rxe: rxe_newlink: failed to add bond0 [ 265.141182][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 265.173414][T12065] loop3: detected capacity change from 0 to 1024 [ 265.193741][T12065] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 265.300586][T12070] netlink: 'syz.2.2985': attribute type 3 has an invalid length. [ 265.338667][T12072] loop0: detected capacity change from 0 to 164 [ 265.401740][T12076] loop2: detected capacity change from 0 to 2048 [ 265.410261][T12078] syz.0.2987: attempt to access beyond end of device [ 265.410261][T12078] loop0: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 265.410344][T12078] syz.0.2987: attempt to access beyond end of device [ 265.410344][T12078] loop0: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 265.469295][T12076] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 265.469368][T12076] ext4 filesystem being mounted at /537/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 265.736867][T12085] loop4: detected capacity change from 0 to 1024 [ 265.743512][T12085] EXT4-fs (loop4): couldn't mount as ext2 due to feature incompatibilities [ 265.858397][ T29] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm kworker/u8:1: bg 0: block 345: padding at end of block bitmap is not set [ 265.875798][ T29] EXT4-fs (loop2): Remounting filesystem read-only [ 265.875950][ T9411] EXT4-fs warning (device loop2): ext4_convert_unwritten_extents:4883: inode #15: block 9: len 7: ext4_ext_map_blocks returned -5 [ 265.911976][T12089] loop4: detected capacity change from 0 to 8192 [ 265.969451][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 266.009759][T12093] loop2: detected capacity change from 0 to 512 [ 266.010069][T12093] EXT4-fs: Ignoring removed oldalloc option [ 266.025393][T12093] EXT4-fs (loop2): 1 truncate cleaned up [ 266.025911][T12093] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 266.028334][T12093] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 266.028389][T12093] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 266.040578][T12093] lo speed is unknown, defaulting to 1000 [ 266.052325][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 266.244635][T12104] netlink: 'syz.0.2997': attribute type 3 has an invalid length. [ 266.279052][T12108] loop0: detected capacity change from 0 to 164 [ 266.394941][T12112] syz.0.2999: attempt to access beyond end of device [ 266.394941][T12112] loop0: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 266.395001][T12112] syz.0.2999: attempt to access beyond end of device [ 266.395001][T12112] loop0: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 266.523255][T12114] cgroup: fork rejected by pids controller in /syz1 [ 266.703975][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 266.763477][T12220] loop2: detected capacity change from 0 to 2048 [ 266.767113][T12220] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 266.806010][T12220] ext4 filesystem being mounted at /540/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 266.843875][T12226] loop4: detected capacity change from 0 to 1024 [ 266.873353][T12226] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 266.910623][ T9447] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.947729][ T9447] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.025282][ T9447] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.083993][T12229] lo speed is unknown, defaulting to 1000 [ 267.118130][ T9447] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.240171][T12247] netlink: 'syz.0.3009': attribute type 3 has an invalid length. [ 267.249078][T12229] chnl_net:caif_netlink_parms(): no params data found [ 267.293752][ T9447] bridge_slave_1: left allmulticast mode [ 267.299469][ T9447] bridge_slave_1: left promiscuous mode [ 267.305206][ T9447] bridge0: port 2(bridge_slave_1) entered disabled state [ 267.319241][ T9447] bridge_slave_0: left allmulticast mode [ 267.324929][ T9447] bridge_slave_0: left promiscuous mode [ 267.330600][ T9447] bridge0: port 1(bridge_slave_0) entered disabled state [ 267.378719][ T29] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm kworker/u8:1: bg 0: block 345: padding at end of block bitmap is not set [ 267.398583][T12257] loop3: detected capacity change from 0 to 256 [ 267.414221][ T29] EXT4-fs (loop2): Remounting filesystem read-only [ 267.414872][T12257] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 267.420875][ T9411] EXT4-fs warning (device loop2): ext4_convert_unwritten_extents:4883: inode #15: block 9: len 7: ext4_ext_map_blocks returned -5 [ 267.454913][ T9447] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 267.469846][ T9447] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 267.486441][ T9447] bond0 (unregistering): Released all slaves [ 267.498465][ T9447] bond1 (unregistering): Released all slaves [ 267.507862][T12259] FAULT_INJECTION: forcing a failure. [ 267.507862][T12259] name failslab, interval 1, probability 0, space 0, times 0 [ 267.520637][T12259] CPU: 1 UID: 0 PID: 12259 Comm: syz.3.3015 Not tainted 6.14.0-rc7-syzkaller-00074-ga7f2e10ecd8f #0 [ 267.520666][T12259] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 267.520691][T12259] Call Trace: [ 267.520762][T12259] [ 267.520771][T12259] dump_stack_lvl+0xf2/0x150 [ 267.520804][T12259] dump_stack+0x15/0x1a [ 267.520860][T12259] should_fail_ex+0x24a/0x260 [ 267.520892][T12259] should_failslab+0x8f/0xb0 [ 267.520929][T12259] kmem_cache_alloc_node_noprof+0x59/0x320 [ 267.520992][T12259] ? __alloc_skb+0x10b/0x310 [ 267.521031][T12259] ? __rtnl_unlock+0x99/0xb0 [ 267.521070][T12259] __alloc_skb+0x10b/0x310 [ 267.521095][T12259] netlink_ack+0xef/0x4f0 [ 267.521202][T12259] ? ref_tracker_free+0x3a5/0x410 [ 267.521255][T12259] netlink_rcv_skb+0x19c/0x230 [ 267.521312][T12259] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 267.521384][T12259] rtnetlink_rcv+0x1c/0x30 [ 267.521409][T12259] netlink_unicast+0x599/0x670 [ 267.521440][T12259] netlink_sendmsg+0x5cc/0x6e0 [ 267.521472][T12259] ? __pfx_netlink_sendmsg+0x10/0x10 [ 267.521532][T12259] __sock_sendmsg+0x140/0x180 [ 267.521575][T12259] ____sys_sendmsg+0x326/0x4b0 [ 267.521659][T12259] __sys_sendmmsg+0x227/0x4b0 [ 267.521705][T12259] __x64_sys_sendmmsg+0x57/0x70 [ 267.521757][T12259] x64_sys_call+0x29aa/0x2dc0 [ 267.521790][T12259] do_syscall_64+0xc9/0x1c0 [ 267.521896][T12259] ? clear_bhb_loop+0x55/0xb0 [ 267.521931][T12259] ? clear_bhb_loop+0x55/0xb0 [ 267.521968][T12259] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.521995][T12259] RIP: 0033:0x7f4ad1afd169 [ 267.522012][T12259] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 267.522047][T12259] RSP: 002b:00007f4ad0167038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 267.522070][T12259] RAX: ffffffffffffffda RBX: 00007f4ad1d15fa0 RCX: 00007f4ad1afd169 [ 267.522085][T12259] RDX: 040000000000009f RSI: 00004000000002c0 RDI: 0000000000000004 [ 267.522101][T12259] RBP: 00007f4ad0167090 R08: 0000000000000000 R09: 0000000000000000 [ 267.522115][T12259] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 267.522130][T12259] R13: 0000000000000000 R14: 00007f4ad1d15fa0 R15: 00007ffe990c1858 [ 267.522152][T12259] [ 267.765266][T12263] loop3: detected capacity change from 0 to 1024 [ 267.772172][T11559] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 267.782848][T12263] EXT4-fs: Ignoring removed orlov option [ 267.788717][T12263] EXT4-fs: Ignoring removed nomblk_io_submit option [ 267.805483][T12229] bridge0: port 1(bridge_slave_0) entered blocking state [ 267.812710][T12229] bridge0: port 1(bridge_slave_0) entered disabled state [ 267.820080][T12229] bridge_slave_0: entered allmulticast mode [ 267.826707][T12229] bridge_slave_0: entered promiscuous mode [ 267.833539][T12229] bridge0: port 2(bridge_slave_1) entered blocking state [ 267.840986][T12229] bridge0: port 2(bridge_slave_1) entered disabled state [ 267.854719][T12269] loop2: detected capacity change from 0 to 512 [ 267.861463][T12269] EXT4-fs: Ignoring removed oldalloc option [ 267.872628][T12229] bridge_slave_1: entered allmulticast mode [ 267.879452][T12229] bridge_slave_1: entered promiscuous mode [ 267.902460][T12229] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 267.915847][ T9447] hsr_slave_0: left promiscuous mode [ 267.922075][ T9447] hsr_slave_1: left promiscuous mode [ 267.930824][T12269] EXT4-fs (loop2): 1 truncate cleaned up [ 267.940499][T12269] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 267.941745][ T9447] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 267.949434][T12269] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 267.956400][ T9447] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 267.971949][ T9447] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 267.979525][ T9447] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 267.989137][ T9447] veth1_macvtap: left promiscuous mode [ 267.994661][ T9447] veth0_macvtap: left promiscuous mode [ 268.001004][ T9447] veth1_vlan: left promiscuous mode [ 268.006430][ T9447] veth0_vlan: left promiscuous mode [ 268.018943][ T30] kauditd_printk_skb: 142 callbacks suppressed [ 268.018959][ T30] audit: type=1326 audit(1742439865.262:10313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12266 comm="syz.2.3013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63a51bd169 code=0x7ffc0000 [ 268.048892][ T30] audit: type=1326 audit(1742439865.262:10314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12266 comm="syz.2.3013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63a51bd169 code=0x7ffc0000 [ 268.072632][ T30] audit: type=1326 audit(1742439865.262:10315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12266 comm="syz.2.3013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f63a51bd169 code=0x7ffc0000 [ 268.096451][ T30] audit: type=1326 audit(1742439865.262:10316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12266 comm="syz.2.3013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63a51bd169 code=0x7ffc0000 [ 268.120352][ T30] audit: type=1326 audit(1742439865.262:10317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12266 comm="syz.2.3013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63a51bd169 code=0x7ffc0000 [ 268.144101][ T30] audit: type=1326 audit(1742439865.262:10318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12266 comm="syz.2.3013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f63a51bd169 code=0x7ffc0000 [ 268.167711][ T30] audit: type=1326 audit(1742439865.262:10319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12266 comm="syz.2.3013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63a51bd169 code=0x7ffc0000 [ 268.191345][ T30] audit: type=1326 audit(1742439865.262:10320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12266 comm="syz.2.3013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f63a51bd169 code=0x7ffc0000 [ 268.214964][ T30] audit: type=1326 audit(1742439865.262:10321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12266 comm="syz.2.3013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63a51bd169 code=0x7ffc0000 [ 268.238534][ T30] audit: type=1326 audit(1742439865.262:10322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12266 comm="syz.2.3013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=316 compat=0 ip=0x7f63a51bd169 code=0x7ffc0000 [ 268.377497][ T9447] team0 (unregistering): Port device team_slave_1 removed [ 268.398378][ T9447] team0 (unregistering): Port device team_slave_0 removed [ 268.466710][T12229] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 268.514529][T12229] team0: Port device team_slave_0 added [ 268.521818][T12273] lo speed is unknown, defaulting to 1000 [ 268.530159][T12229] team0: Port device team_slave_1 added [ 268.642261][T12229] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 268.649394][T12229] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 268.675677][T12229] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 268.714669][T12283] hub 9-0:1.0: USB hub found [ 268.723128][T12229] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 268.730126][T12229] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 268.756110][T12229] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 268.757722][T12283] hub 9-0:1.0: 8 ports detected [ 268.780442][T12285] netlink: 'syz.3.3020': attribute type 3 has an invalid length. [ 268.790859][T12229] hsr_slave_0: entered promiscuous mode [ 268.797095][T12229] hsr_slave_1: entered promiscuous mode [ 268.819691][T12288] netlink: 'syz.4.3021': attribute type 3 has an invalid length. [ 268.898114][T12297] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3025'. [ 268.902230][T12292] loop4: detected capacity change from 0 to 2048 [ 268.945031][T12292] ext4 filesystem being mounted at /28/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 268.958738][T12301] lo speed is unknown, defaulting to 1000 [ 269.103238][T12229] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 269.121223][T12229] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 269.140783][T12229] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 269.151836][T12229] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 269.190225][T12229] 8021q: adding VLAN 0 to HW filter on device bond0 [ 269.203179][T12229] 8021q: adding VLAN 0 to HW filter on device team0 [ 269.261197][ T9426] bridge0: port 1(bridge_slave_0) entered blocking state [ 269.268300][ T9426] bridge0: port 1(bridge_slave_0) entered forwarding state [ 269.275434][ T29] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm kworker/u8:1: bg 0: block 345: padding at end of block bitmap is not set [ 269.292721][ T172] bridge0: port 2(bridge_slave_1) entered blocking state [ 269.299838][ T172] bridge0: port 2(bridge_slave_1) entered forwarding state [ 269.317765][ T29] EXT4-fs (loop4): Remounting filesystem read-only [ 269.324476][ T9426] EXT4-fs warning (device loop4): ext4_convert_unwritten_extents:4883: inode #15: block 9: len 7: ext4_ext_map_blocks returned -5 [ 269.381910][T12318] netlink: 'syz.2.3033': attribute type 3 has an invalid length. [ 269.424468][T12229] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 269.459833][T12325] netlink: 'syz.2.3035': attribute type 3 has an invalid length. [ 269.504423][T12229] veth0_vlan: entered promiscuous mode [ 269.515496][T12229] veth1_vlan: entered promiscuous mode [ 269.546830][T12229] veth0_macvtap: entered promiscuous mode [ 269.558395][T12229] veth1_macvtap: entered promiscuous mode [ 269.570607][T12229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 269.581215][T12229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.591289][T12229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 269.602007][T12229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.614719][T12229] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 269.627617][T12229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 269.638135][T12229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.648021][T12229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 269.658501][T12229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.683981][T12229] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 269.694918][T12229] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.703841][T12229] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.712660][T12229] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.721541][T12229] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.770700][T12335] IPv6: Can't replace route, no match found [ 269.778567][T12335] netlink: 16 bytes leftover after parsing attributes in process `\'. [ 269.812106][T12341] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 269.819788][T12341] SELinux: failed to load policy [ 269.826001][T12341] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3038'. [ 269.880074][T12344] loop3: detected capacity change from 0 to 512 [ 269.910536][T12344] EXT4-fs: Ignoring removed oldalloc option [ 269.933848][T12346] loop4: detected capacity change from 0 to 2048 [ 269.941936][T12344] EXT4-fs (loop3): 1 truncate cleaned up [ 269.950411][T12351] sctp: [Deprecated]: syz.1.3043 (pid 12351) Use of int in max_burst socket option. [ 269.950411][T12351] Use struct sctp_assoc_value instead [ 269.972203][T12344] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 269.991062][T12344] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 270.015020][T12346] ext4 filesystem being mounted at /31/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 270.043844][T12344] lo speed is unknown, defaulting to 1000 [ 270.082797][T12366] netlink: 'syz.1.3045': attribute type 3 has an invalid length. [ 270.112491][T12353] lo speed is unknown, defaulting to 1000 [ 270.257799][T12373] loop2: detected capacity change from 0 to 128 [ 270.286215][T12353] chnl_net:caif_netlink_parms(): no params data found [ 270.316487][ T29] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm kworker/u8:1: bg 0: block 345: padding at end of block bitmap is not set [ 270.332031][T12375] syz.2.3047: attempt to access beyond end of device [ 270.332031][T12375] loop2: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 270.348187][T12376] netlink: 'syz.1.3046': attribute type 1 has an invalid length. [ 270.358234][ T29] EXT4-fs (loop4): Remounting filesystem read-only [ 270.364791][ T9426] EXT4-fs warning (device loop4): ext4_convert_unwritten_extents:4883: inode #15: block 9: len 7: ext4_ext_map_blocks returned -5 [ 270.467872][T12375] syz.2.3047: attempt to access beyond end of device [ 270.467872][T12375] loop2: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 270.539158][T12375] syz.2.3047: attempt to access beyond end of device [ 270.539158][T12375] loop2: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 270.554377][T12375] syz.2.3047: attempt to access beyond end of device [ 270.554377][T12375] loop2: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 270.569719][T12375] syz.2.3047: attempt to access beyond end of device [ 270.569719][T12375] loop2: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 270.584565][T12375] syz.2.3047: attempt to access beyond end of device [ 270.584565][T12375] loop2: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 270.599411][T12375] syz.2.3047: attempt to access beyond end of device [ 270.599411][T12375] loop2: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 270.613080][T12375] syz.2.3047: attempt to access beyond end of device [ 270.613080][T12375] loop2: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 270.679953][T12376] 8021q: adding VLAN 0 to HW filter on device bond1 [ 270.775053][T12353] bridge0: port 1(bridge_slave_0) entered blocking state [ 270.782299][T12353] bridge0: port 1(bridge_slave_0) entered disabled state [ 270.842091][T12353] bridge_slave_0: entered allmulticast mode [ 270.859431][T12353] bridge_slave_0: entered promiscuous mode [ 270.869971][T12383] IPv6: Can't replace route, no match found [ 270.898573][T12383] netlink: 16 bytes leftover after parsing attributes in process `\'. [ 270.916470][T12353] bridge0: port 2(bridge_slave_1) entered blocking state [ 270.923628][T12353] bridge0: port 2(bridge_slave_1) entered disabled state [ 271.015434][T12353] bridge_slave_1: entered allmulticast mode [ 271.026909][T12353] bridge_slave_1: entered promiscuous mode [ 271.067538][T12353] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 271.080748][T12353] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 271.101923][T12353] team0: Port device team_slave_0 added [ 271.110108][T12353] team0: Port device team_slave_1 added [ 271.291982][T12394] loop4: detected capacity change from 0 to 1024 [ 271.555880][T12394] EXT4-fs: Ignoring removed orlov option [ 271.561651][T12394] EXT4-fs: Ignoring removed nomblk_io_submit option [ 271.591836][T12353] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 271.598979][T12353] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 271.625207][T12353] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 271.763606][T12396] netlink: 'syz.2.3053': attribute type 1 has an invalid length. [ 271.832824][T12403] netlink: 'syz.1.3055': attribute type 3 has an invalid length. [ 271.856691][T12396] 8021q: adding VLAN 0 to HW filter on device bond7 [ 271.893112][T12353] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 271.900212][T12353] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 271.926296][T12353] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 272.309528][T12353] hsr_slave_0: entered promiscuous mode [ 272.801756][T12410] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 272.802363][T12353] hsr_slave_1: entered promiscuous mode [ 272.817651][T12353] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 272.830349][T12353] Cannot create hsr debugfs directory [ 272.933934][T12418] loop3: detected capacity change from 0 to 512 [ 272.941483][T12418] EXT4-fs: Ignoring removed oldalloc option [ 272.983551][T12420] loop1: detected capacity change from 0 to 2048 [ 273.007250][T12418] EXT4-fs (loop3): 1 truncate cleaned up [ 273.014372][T12420] ext4 filesystem being mounted at /9/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 273.027074][T12418] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 273.053722][T12418] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 273.118486][T12418] lo speed is unknown, defaulting to 1000 [ 273.125257][ T30] kauditd_printk_skb: 100 callbacks suppressed [ 273.125270][ T30] audit: type=1326 audit(1742439870.342:10423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12417 comm="syz.3.3058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ad1afd169 code=0x7ffc0000 [ 273.155063][ T30] audit: type=1326 audit(1742439870.342:10424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12417 comm="syz.3.3058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4ad1afd169 code=0x7ffc0000 [ 273.178928][ T30] audit: type=1326 audit(1742439870.342:10425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12417 comm="syz.3.3058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ad1afd169 code=0x7ffc0000 [ 273.202691][ T30] audit: type=1326 audit(1742439870.342:10426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12417 comm="syz.3.3058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4ad1afd169 code=0x7ffc0000 [ 273.226355][ T30] audit: type=1326 audit(1742439870.342:10427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12417 comm="syz.3.3058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ad1afd169 code=0x7ffc0000 [ 273.249962][ T30] audit: type=1326 audit(1742439870.342:10428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12417 comm="syz.3.3058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4ad1afd169 code=0x7ffc0000 [ 273.273531][ T30] audit: type=1326 audit(1742439870.342:10429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12417 comm="syz.3.3058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ad1afd169 code=0x7ffc0000 [ 273.297114][ T30] audit: type=1326 audit(1742439870.342:10430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12417 comm="syz.3.3058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=316 compat=0 ip=0x7f4ad1afd169 code=0x7ffc0000 [ 273.320903][ T30] audit: type=1326 audit(1742439870.342:10431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12417 comm="syz.3.3058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ad1afd169 code=0x7ffc0000 [ 273.344526][ T30] audit: type=1326 audit(1742439870.342:10432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12417 comm="syz.3.3058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4ad1afd169 code=0x7ffc0000 [ 273.405915][T12428] netlink: 'syz.2.3060': attribute type 3 has an invalid length. [ 273.513378][T12434] bio_check_eod: 104 callbacks suppressed [ 273.513397][T12434] syz.4.3062: attempt to access beyond end of device [ 273.513397][T12434] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 273.536948][T12434] loop4: detected capacity change from 0 to 512 [ 273.548069][T12434] EXT4-fs (loop4): too many log groups per flexible block group [ 273.555956][T12434] EXT4-fs (loop4): failed to initialize mballoc (-12) [ 273.563321][T12434] EXT4-fs (loop4): mount failed [ 273.584021][T12440] loop2: detected capacity change from 0 to 164 [ 273.612641][T12353] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 273.644010][ T9424] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm kworker/u8:27: bg 0: block 345: padding at end of block bitmap is not set [ 273.644886][T12353] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 273.663640][ T9424] EXT4-fs (loop1): Remounting filesystem read-only [ 273.672080][ T172] EXT4-fs warning (device loop1): ext4_convert_unwritten_extents:4883: inode #15: block 9: len 7: ext4_ext_map_blocks returned -5 [ 273.674861][T12353] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 273.710563][T12353] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 273.769600][T12353] 8021q: adding VLAN 0 to HW filter on device bond0 [ 273.790705][T12353] 8021q: adding VLAN 0 to HW filter on device team0 [ 273.816275][ T29] bridge0: port 1(bridge_slave_0) entered blocking state [ 273.823370][ T29] bridge0: port 1(bridge_slave_0) entered forwarding state [ 273.834287][ T29] bridge0: port 2(bridge_slave_1) entered blocking state [ 273.841404][ T29] bridge0: port 2(bridge_slave_1) entered forwarding state [ 273.955829][T12353] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 273.964155][T12457] loop3: detected capacity change from 0 to 164 [ 274.081520][T12447] syz.2.3063: attempt to access beyond end of device [ 274.081520][T12447] loop2: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 274.081559][T12447] syz.2.3063: attempt to access beyond end of device [ 274.081559][T12447] loop2: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 274.085991][T12353] veth0_vlan: entered promiscuous mode [ 274.122739][T12471] syz.3.3068: attempt to access beyond end of device [ 274.122739][T12471] loop3: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 274.122781][T12471] syz.3.3068: attempt to access beyond end of device [ 274.122781][T12471] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 274.127135][T12353] veth1_vlan: entered promiscuous mode [ 274.170482][T12469] IPv6: Can't replace route, no match found [ 274.180393][T12353] veth0_macvtap: entered promiscuous mode [ 274.182799][T12469] netlink: 16 bytes leftover after parsing attributes in process `\'. [ 274.198610][T12353] veth1_macvtap: entered promiscuous mode [ 274.203221][T12353] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 274.203244][T12353] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.203316][T12353] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 274.203330][T12353] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.203394][T12353] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 274.203412][T12353] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.204180][T12353] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 274.213454][T12353] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 274.213481][T12353] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.213501][T12353] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 274.213518][T12353] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.213532][T12353] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 274.213549][T12353] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.214261][T12353] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 274.219427][T12353] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.219470][T12353] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.219508][T12353] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.219544][T12353] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.239845][T12473] netlink: 'syz.1.3072': attribute type 3 has an invalid length. [ 274.390343][T12486] syz.0.3076: attempt to access beyond end of device [ 274.390343][T12486] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 274.391499][T12487] loop1: detected capacity change from 0 to 2048 [ 274.418247][T12487] ext4 filesystem being mounted at /16/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 274.484208][T12494] loop0: detected capacity change from 0 to 1024 [ 274.703704][T12499] netlink: 'syz.4.3079': attribute type 1 has an invalid length. [ 275.006284][ T9426] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm kworker/u8:29: bg 0: block 345: padding at end of block bitmap is not set [ 275.008734][ T9426] EXT4-fs (loop1): Remounting filesystem read-only [ 275.008803][ T9424] EXT4-fs warning (device loop1): ext4_convert_unwritten_extents:4883: inode #15: block 9: len 7: ext4_ext_map_blocks returned -5 [ 275.349154][T12504] IPv6: Can't replace route, no match found [ 275.356903][T12504] netlink: 16 bytes leftover after parsing attributes in process `\'. [ 275.413642][T12515] netlink: 'syz.1.3083': attribute type 3 has an invalid length. [ 275.493045][T12522] loop1: detected capacity change from 0 to 1024 [ 275.497812][T12505] lo speed is unknown, defaulting to 1000 [ 275.513076][T12522] EXT4-fs: Ignoring removed orlov option [ 275.518978][T12522] EXT4-fs: Ignoring removed nomblk_io_submit option [ 275.604584][ T29] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.700047][ T29] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.760863][ T29] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.788983][T12505] chnl_net:caif_netlink_parms(): no params data found [ 275.800091][T12540] loop2: detected capacity change from 0 to 1024 [ 275.825476][T12539] lo speed is unknown, defaulting to 1000 [ 275.826241][T12540] EXT4-fs: Ignoring removed orlov option [ 275.836971][T12540] EXT4-fs: Ignoring removed nomblk_io_submit option [ 275.846606][ T29] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.038245][T12505] bridge0: port 1(bridge_slave_0) entered blocking state [ 276.045365][T12505] bridge0: port 1(bridge_slave_0) entered disabled state [ 276.519505][T12505] bridge_slave_0: entered allmulticast mode [ 276.526536][T12505] bridge_slave_0: entered promiscuous mode [ 276.539557][T12553] lo speed is unknown, defaulting to 1000 [ 276.568632][ T29] bridge_slave_1: left allmulticast mode [ 276.574317][ T29] bridge_slave_1: left promiscuous mode [ 276.580008][ T29] bridge0: port 2(bridge_slave_1) entered disabled state [ 276.643846][ T29] bridge_slave_0: left allmulticast mode [ 276.649703][ T29] bridge_slave_0: left promiscuous mode [ 276.655461][ T29] bridge0: port 1(bridge_slave_0) entered disabled state [ 276.657502][T12559] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3093'. [ 276.751211][ T29] bond4 (unregistering): (slave gretap1): Releasing active interface [ 276.772590][ T29] geneve1 (unregistering): left promiscuous mode [ 276.779060][ T29] geneve1 (unregistering): left allmulticast mode [ 276.806049][ T29] team0: Port device geneve1 removed [ 276.907393][ T29] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 276.921571][ T29] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 276.933236][T12566] rdma_rxe: rxe_newlink: failed to add bond0 [ 276.940124][ T29] bond0 (unregistering): Released all slaves [ 276.946144][T12568] loop2: detected capacity change from 0 to 1024 [ 276.946541][T12568] EXT4-fs: Ignoring removed orlov option [ 276.958286][T12568] EXT4-fs: Ignoring removed nomblk_io_submit option [ 276.958803][ T29] bond1 (unregistering): Released all slaves [ 276.971892][T12566] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3096'. [ 276.976640][ T29] bond2 (unregistering): Released all slaves [ 276.989660][ T29] bond3 (unregistering): Released all slaves [ 276.998559][ T29] bond4 (unregistering): Released all slaves [ 277.007387][ T29] bond5 (unregistering): Released all slaves [ 277.016187][ T29] bond6 (unregistering): Released all slaves [ 277.026452][T12505] bridge0: port 2(bridge_slave_1) entered blocking state [ 277.033542][T12505] bridge0: port 2(bridge_slave_1) entered disabled state [ 277.043376][T12505] bridge_slave_1: entered allmulticast mode [ 277.050028][T12505] bridge_slave_1: entered promiscuous mode [ 277.094893][T12572] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 277.108232][T12572] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 277.142109][T12557] IPv6: Can't replace route, no match found [ 277.150538][T12571] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3096'. [ 277.161172][T12505] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 277.170305][ T29] tipc: Left network mode [ 277.177779][T12505] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 277.283490][T12505] team0: Port device team_slave_0 added [ 277.291041][T12505] team0: Port device team_slave_1 added [ 277.304034][T12571] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12571 comm=syz.4.3096 [ 277.327916][T12585] loop1: detected capacity change from 0 to 1024 [ 277.339722][ T29] hsr_slave_0: left promiscuous mode [ 277.347072][ T29] hsr_slave_1: left promiscuous mode [ 277.368711][ T29] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 277.376231][ T29] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 277.400209][T12571] xt_hashlimit: max too large, truncated to 1048576 [ 277.408230][T12571] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 277.426357][ T29] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 277.433885][ T29] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 277.460659][T12586] loop0: detected capacity change from 0 to 164 [ 277.488099][T12586] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 277.501432][ T29] veth1_macvtap: left promiscuous mode [ 277.511940][ T29] veth0_macvtap: left promiscuous mode [ 277.524662][ T29] veth1_vlan: left promiscuous mode [ 277.530353][ T29] veth0_vlan: left promiscuous mode [ 277.667282][ T29] pim6reg (unregistering): left allmulticast mode [ 277.691015][T12592] loop0: detected capacity change from 0 to 512 [ 277.697711][T12592] EXT4-fs: Ignoring removed oldalloc option [ 277.726140][T12592] EXT4-fs (loop0): 1 truncate cleaned up [ 277.735848][ T29] team_slave_1 (unregistering): left promiscuous mode [ 277.738371][T12592] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 277.742687][ T29] team_slave_1 (unregistering): left allmulticast mode [ 277.758218][ T29] team0 (unregistering): Port device team_slave_1 removed [ 277.759986][T12592] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 277.768014][ T29] team_slave_0 (unregistering): left promiscuous mode [ 277.779955][ T29] team_slave_0 (unregistering): left allmulticast mode [ 277.809093][ T29] team0 (unregistering): Port device team_slave_0 removed [ 277.850159][T12578] lo speed is unknown, defaulting to 1000 [ 277.867026][T12566] lo speed is unknown, defaulting to 1000 [ 277.876469][T12505] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 277.883448][T12505] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 277.909428][T12505] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 277.991102][T12592] lo speed is unknown, defaulting to 1000 [ 278.006469][T12505] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 278.013504][T12505] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 278.039664][T12505] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 278.100115][T12505] hsr_slave_0: entered promiscuous mode [ 278.106709][T12505] hsr_slave_1: entered promiscuous mode [ 278.112615][T12505] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 278.120361][T12505] Cannot create hsr debugfs directory [ 278.225938][ T30] kauditd_printk_skb: 104 callbacks suppressed [ 278.225956][ T30] audit: type=1326 audit(1742439875.472:10537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12604 comm="syz.2.3107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63a51bd169 code=0x7ffc0000 [ 278.274684][ T30] audit: type=1326 audit(1742439875.502:10538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12604 comm="syz.2.3107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f63a51bd169 code=0x7ffc0000 [ 278.298365][ T30] audit: type=1326 audit(1742439875.502:10539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12604 comm="syz.2.3107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63a51bd169 code=0x7ffc0000 [ 278.322000][ T30] audit: type=1326 audit(1742439875.502:10540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12604 comm="syz.2.3107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63a51bd169 code=0x7ffc0000 [ 278.345665][ T30] audit: type=1326 audit(1742439875.502:10541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12604 comm="syz.2.3107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f63a51bd169 code=0x7ffc0000 [ 278.369279][ T30] audit: type=1326 audit(1742439875.502:10542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12604 comm="syz.2.3107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63a51bd169 code=0x7ffc0000 [ 278.393048][ T30] audit: type=1326 audit(1742439875.502:10543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12604 comm="syz.2.3107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63a51bd169 code=0x7ffc0000 [ 278.416719][ T30] audit: type=1326 audit(1742439875.502:10544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12604 comm="syz.2.3107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f63a51bd169 code=0x7ffc0000 [ 278.440360][ T30] audit: type=1326 audit(1742439875.502:10545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12604 comm="syz.2.3107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63a51bd169 code=0x7ffc0000 [ 278.441300][T12609] netlink: 'syz.1.3105': attribute type 1 has an invalid length. [ 278.464087][ T30] audit: type=1326 audit(1742439875.502:10546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12604 comm="syz.2.3107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f63a51bd169 code=0x7ffc0000 [ 278.608825][T12611] loop0: detected capacity change from 0 to 164 [ 278.787145][T12616] syz.0.3108: attempt to access beyond end of device [ 278.787145][T12616] loop0: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 278.787185][T12616] syz.0.3108: attempt to access beyond end of device [ 278.787185][T12616] loop0: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 279.059094][T12505] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 279.062996][T12505] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 279.065101][T12505] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 279.067415][T12505] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 279.083286][T12618] IPv6: Can't replace route, no match found [ 279.084469][T12618] netlink: 16 bytes leftover after parsing attributes in process `\'. [ 279.129529][T12621] loop4: detected capacity change from 0 to 512 [ 279.130495][T12621] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 279.138310][T12505] 8021q: adding VLAN 0 to HW filter on device bond0 [ 279.149847][T12621] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002] [ 279.150164][T12621] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2240: inode #15: comm syz.4.3111: corrupted in-inode xattr: e_value size too large [ 279.150462][T12621] EXT4-fs error (device loop4): ext4_orphan_get:1394: comm syz.4.3111: couldn't read orphan inode 15 (err -117) [ 279.156776][T12505] 8021q: adding VLAN 0 to HW filter on device team0 [ 279.161025][ T9424] bridge0: port 1(bridge_slave_0) entered blocking state [ 279.161082][ T9424] bridge0: port 1(bridge_slave_0) entered forwarding state [ 279.164005][ T172] bridge0: port 2(bridge_slave_1) entered blocking state [ 279.164114][ T172] bridge0: port 2(bridge_slave_1) entered forwarding state [ 279.206650][T12621] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: none. [ 279.290753][T12505] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 279.310752][T12505] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 279.338372][ T36] hid-generic 0000:0000:0000.002A: unknown main item tag 0x0 [ 279.339461][ T36] hid-generic 0000:0000:0000.002A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 279.347054][T12625] lo speed is unknown, defaulting to 1000 [ 279.396515][T12621] dummy0 speed is unknown, defaulting to 1000 [ 279.403221][T12621] dummy0 speed is unknown, defaulting to 1000 [ 279.420160][T12625] lo speed is unknown, defaulting to 1000 [ 279.439576][T12621] dummy0 speed is unknown, defaulting to 1000 [ 279.468147][T12505] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 279.504401][T12625] lo speed is unknown, defaulting to 1000 [ 279.527591][T12636] netlink: 4 bytes leftover after parsing attributes in process `\'. [ 279.535962][T12636] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 279.543393][T12636] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 279.587108][T12638] netlink: 'syz.0.3113': attribute type 10 has an invalid length. [ 279.594968][T12638] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3113'. [ 279.630090][T12636] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 279.637542][T12636] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 279.687356][T12639] loop9: detected capacity change from 0 to 7 [ 279.708176][T12639] Buffer I/O error on dev loop9, logical block 0, async page read [ 279.743068][T12639] Buffer I/O error on dev loop9, logical block 0, async page read [ 279.751184][T12639] loop9: unable to read partition table [ 279.795298][T12621] infiniband syz2: set active [ 279.800046][T12621] infiniband syz2: added dummy0 [ 279.805566][T12639] loop_reread_partitions: partition scan of loop9 (被xڬdƤݡ [ 279.805566][T12639] U) failed (rc=-5) [ 279.865038][T12638] team0: Port device geneve1 added [ 279.879796][T12621] RDS/IB: syz2: added [ 279.901555][ T7667] dummy0 speed is unknown, defaulting to 1000 [ 280.015183][T12621] smc: adding ib device syz2 with port count 1 [ 280.035197][T12621] smc: ib device syz2 port 1 has pnetid [ 280.041280][ T9] dummy0 speed is unknown, defaulting to 1000 [ 280.049019][T12621] dummy0 speed is unknown, defaulting to 1000 [ 280.224935][T12621] dummy0 speed is unknown, defaulting to 1000 [ 280.279404][T12645] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3114'. [ 280.317844][T12505] veth0_vlan: entered promiscuous mode [ 280.357308][T12505] veth1_vlan: entered promiscuous mode [ 280.401082][T12505] veth0_macvtap: entered promiscuous mode [ 280.419165][T12505] veth1_macvtap: entered promiscuous mode [ 280.456558][T12505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 280.467178][T12505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.477213][T12505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 280.487682][T12505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.559135][T12505] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 280.618021][T12505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 280.628745][T12505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.638753][T12505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 280.649326][T12505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.733155][T12505] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 280.789815][T12621] dummy0 speed is unknown, defaulting to 1000 [ 280.793665][T12505] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.804776][T12505] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.813569][T12505] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.822354][T12505] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.888866][T12621] dummy0 speed is unknown, defaulting to 1000 [ 280.993747][T12653] FAULT_INJECTION: forcing a failure. [ 280.993747][T12653] name failslab, interval 1, probability 0, space 0, times 0 [ 281.003968][T12621] dummy0 speed is unknown, defaulting to 1000 [ 281.006425][T12653] CPU: 1 UID: 0 PID: 12653 Comm: syz.3.3081 Not tainted 6.14.0-rc7-syzkaller-00074-ga7f2e10ecd8f #0 [ 281.006457][T12653] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 281.006473][T12653] Call Trace: [ 281.006549][T12653] [ 281.006558][T12653] dump_stack_lvl+0xf2/0x150 [ 281.006595][T12653] dump_stack+0x15/0x1a [ 281.006622][T12653] should_fail_ex+0x24a/0x260 [ 281.006661][T12653] should_failslab+0x8f/0xb0 [ 281.006702][T12653] kmem_cache_alloc_node_noprof+0x59/0x320 [ 281.006732][T12653] ? __alloc_skb+0x10b/0x310 [ 281.006775][T12653] ? __rtnl_unlock+0x99/0xb0 [ 281.006865][T12653] __alloc_skb+0x10b/0x310 [ 281.006894][T12653] netlink_ack+0xef/0x4f0 [ 281.006944][T12653] ? ref_tracker_free+0x3a5/0x410 [ 281.006985][T12653] netlink_rcv_skb+0x19c/0x230 [ 281.007085][T12653] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 281.007129][T12653] rtnetlink_rcv+0x1c/0x30 [ 281.007172][T12653] netlink_unicast+0x599/0x670 [ 281.007213][T12653] netlink_sendmsg+0x5cc/0x6e0 [ 281.007251][T12653] ? __pfx_netlink_sendmsg+0x10/0x10 [ 281.007275][T12653] __sock_sendmsg+0x140/0x180 [ 281.007317][T12653] ____sys_sendmsg+0x326/0x4b0 [ 281.007426][T12653] __sys_sendmmsg+0x227/0x4b0 [ 281.007487][T12653] __x64_sys_sendmmsg+0x57/0x70 [ 281.007521][T12653] x64_sys_call+0x29aa/0x2dc0 [ 281.007555][T12653] do_syscall_64+0xc9/0x1c0 [ 281.007664][T12653] ? clear_bhb_loop+0x55/0xb0 [ 281.007699][T12653] ? clear_bhb_loop+0x55/0xb0 [ 281.007733][T12653] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 281.007767][T12653] RIP: 0033:0x7efebf13d169 [ 281.007822][T12653] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 281.007845][T12653] RSP: 002b:00007efebd7a1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 281.007869][T12653] RAX: ffffffffffffffda RBX: 00007efebf355fa0 RCX: 00007efebf13d169 [ 281.007886][T12653] RDX: 040000000000009f RSI: 00004000000002c0 RDI: 0000000000000003 [ 281.007904][T12653] RBP: 00007efebd7a1090 R08: 0000000000000000 R09: 0000000000000000 [ 281.007920][T12653] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 281.007945][T12653] R13: 0000000000000000 R14: 00007efebf355fa0 R15: 00007ffd92ae14c8 [ 281.007970][T12653] [ 281.257772][T12657] loop0: detected capacity change from 0 to 1024 [ 281.294760][T12657] EXT4-fs mount: 32 callbacks suppressed [ 281.294775][T12657] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 281.317591][T12661] loop3: detected capacity change from 0 to 512 [ 281.324154][T12661] EXT4-fs: Ignoring removed oldalloc option [ 281.377173][T12661] EXT4-fs (loop3): 1 truncate cleaned up [ 281.393196][T12621] dummy0 speed is unknown, defaulting to 1000 [ 281.401108][T12661] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 281.439227][T12353] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 281.440212][T12661] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 281.465972][T12661] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 281.532412][T12625] infiniband sz1: set active [ 281.537199][T12625] infiniband sz1: added lo [ 281.541838][ T7667] lo speed is unknown, defaulting to 1000 [ 281.550755][T12661] lo speed is unknown, defaulting to 1000 [ 281.557354][T12661] lo speed is unknown, defaulting to 1000 [ 281.567817][T12665] lo speed is unknown, defaulting to 1000 [ 281.574072][T12625] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 281.574233][T12625] infiniband sz1: Couldn't open port 1 [ 281.599085][T12668] loop0: detected capacity change from 0 to 512 [ 281.609501][T12670] netlink: 'syz.1.3119': attribute type 3 has an invalid length. [ 281.618278][T12625] RDS/IB: sz1: added [ 281.623167][T12668] EXT4-fs error (device loop0): ext4_quota_enable:7101: comm syz.0.3118: inode #33554432: comm syz.0.3118: iget: illegal inode # [ 281.625018][T12665] lo speed is unknown, defaulting to 1000 [ 281.638189][T12661] dummy0 speed is unknown, defaulting to 1000 [ 281.648552][T12625] smc: adding ib device sz1 with port count 1 [ 281.654723][T12625] smc: ib device sz1 port 1 has pnetid [ 281.660716][ T7667] lo speed is unknown, defaulting to 1000 [ 281.676873][T12625] lo speed is unknown, defaulting to 1000 [ 281.693861][T12668] EXT4-fs error (device loop0): ext4_quota_enable:7104: comm syz.0.3118: Bad quota inode: 33554432, type: 2 [ 281.716166][T12668] EXT4-fs warning (device loop0): ext4_enable_quotas:7145: Failed to enable quota tracking (type=2, err=-117, ino=33554432). Please run e2fsck to fix. [ 281.735466][T12668] EXT4-fs (loop0): mount failed [ 281.745754][T12665] dummy0 speed is unknown, defaulting to 1000 [ 281.746720][T12674] lo speed is unknown, defaulting to 1000 [ 281.767462][T12674] lo speed is unknown, defaulting to 1000 [ 281.817596][T12625] lo speed is unknown, defaulting to 1000 [ 281.829700][T12674] dummy0 speed is unknown, defaulting to 1000 [ 281.882158][T12625] lo speed is unknown, defaulting to 1000 [ 281.938381][T12625] lo speed is unknown, defaulting to 1000 [ 281.980859][T12625] lo speed is unknown, defaulting to 1000 [ 282.032249][T12625] lo speed is unknown, defaulting to 1000 [ 282.142755][T12689] loop2: detected capacity change from 0 to 512 [ 282.149634][T12689] EXT4-fs: Ignoring removed oldalloc option [ 282.162017][T11559] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 282.172514][T12689] EXT4-fs (loop2): 1 truncate cleaned up [ 282.185774][T12689] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 282.220990][T12689] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 282.244147][T12693] loop1: detected capacity change from 0 to 1024 [ 282.263193][T12689] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 282.266483][T12693] EXT4-fs: Ignoring removed orlov option [ 282.276688][T12693] EXT4-fs: Ignoring removed nomblk_io_submit option [ 282.286251][T12696] IPv6: Can't replace route, no match found [ 282.287580][T12696] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3128'. [ 282.311424][T12505] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 282.312668][T12693] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 282.352920][T12709] lo speed is unknown, defaulting to 1000 [ 282.353242][T12709] lo speed is unknown, defaulting to 1000 [ 282.381791][T12709] dummy0 speed is unknown, defaulting to 1000 [ 282.388129][T12689] lo speed is unknown, defaulting to 1000 [ 282.388532][T12689] lo speed is unknown, defaulting to 1000 [ 282.528581][T12714] loop0: detected capacity change from 0 to 512 [ 282.535904][T12712] lo speed is unknown, defaulting to 1000 [ 282.572262][T12712] lo speed is unknown, defaulting to 1000 [ 282.614450][T12689] dummy0 speed is unknown, defaulting to 1000 [ 282.626549][T12714] EXT4-fs error (device loop0): ext4_quota_enable:7101: comm syz.0.3132: inode #33554432: comm syz.0.3132: iget: illegal inode # [ 282.646245][T12722] netlink: 'syz.3.3130': attribute type 1 has an invalid length. [ 282.713109][T12712] dummy0 speed is unknown, defaulting to 1000 [ 282.729622][T12714] EXT4-fs error (device loop0): ext4_quota_enable:7104: comm syz.0.3132: Bad quota inode: 33554432, type: 2 [ 282.778834][T12714] EXT4-fs warning (device loop0): ext4_enable_quotas:7145: Failed to enable quota tracking (type=2, err=-117, ino=33554432). Please run e2fsck to fix. [ 282.804579][T12714] EXT4-fs (loop0): mount failed [ 283.091290][T12229] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 283.354321][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 283.354328][T12739] loop4: detected capacity change from 0 to 164 [ 283.354429][ T3308] ================================================================== [ 283.354467][ T3308] BUG: KCSAN: data-race in data_alloc / data_push_tail [ 283.354522][ T3308] [ 283.354531][ T3308] write to 0xffffffff88bf3fa0 of 8 bytes by task 12739 on cpu 0: [ 283.354552][ T3308] data_alloc+0x216/0x2c0 [ 283.354587][ T3308] prb_reserve+0x85e/0xb60 [ 283.354622][ T3308] vprintk_store+0x558/0x870 [ 283.354645][ T3308] vprintk_emit+0x168/0x690 [ 283.354664][ T3308] vprintk_default+0x26/0x30 [ 283.354687][ T3308] vprintk+0x1d/0x30 [ 283.354716][ T3308] _printk+0x7a/0xa0 [ 283.354751][ T3308] set_capacity_and_notify+0x151/0x200 [ 283.354782][ T3308] loop_set_size+0x2e/0x70 [ 283.354815][ T3308] loop_configure+0x8bd/0xa50 [ 283.354859][ T3308] lo_ioctl+0x613/0x14f0 [ 283.354893][ T3308] blkdev_ioctl+0x359/0x450 [ 283.354914][ T3308] __se_sys_ioctl+0xc9/0x140 [ 283.354938][ T3308] __x64_sys_ioctl+0x43/0x50 [ 283.354962][ T3308] x64_sys_call+0x1690/0x2dc0 [ 283.354994][ T3308] do_syscall_64+0xc9/0x1c0 [ 283.355027][ T3308] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 283.355056][ T3308] [ 283.355065][ T3308] read to 0xffffffff88bf3fa0 of 8 bytes by task 3308 on cpu 1: [ 283.355087][ T3308] data_push_tail+0x102/0x430 [ 283.355128][ T3308] data_alloc+0xbe/0x2c0 [ 283.355163][ T3308] prb_reserve+0x85e/0xb60 [ 283.355199][ T3308] vprintk_store+0x558/0x870 [ 283.355219][ T3308] vprintk_emit+0x168/0x690 [ 283.355242][ T3308] vprintk_default+0x26/0x30 [ 283.355265][ T3308] vprintk+0x1d/0x30 [ 283.355293][ T3308] _printk+0x7a/0xa0 [ 283.355322][ T3308] __ext4_msg+0x18e/0x1a0 [ 283.355356][ T3308] ext4_put_super+0x91/0x810 [ 283.355398][ T3308] generic_shutdown_super+0xe5/0x220 [ 283.355429][ T3308] kill_block_super+0x2a/0x70 [ 283.355462][ T3308] ext4_kill_sb+0x44/0x80 [ 283.355490][ T3308] deactivate_locked_super+0x7d/0x1c0 [ 283.355513][ T3308] deactivate_super+0x9f/0xb0 [ 283.355541][ T3308] cleanup_mnt+0x268/0x2e0 [ 283.355566][ T3308] __cleanup_mnt+0x19/0x20 [ 283.355591][ T3308] task_work_run+0x13a/0x1a0 [ 283.355626][ T3308] syscall_exit_to_user_mode+0xa8/0x120 [ 283.355658][ T3308] do_syscall_64+0xd6/0x1c0 [ 283.355698][ T3308] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 283.355725][ T3308] [ 283.355730][ T3308] value changed: 0x00000000fffff272 -> 0x00000000fffffe10 [ 283.355747][ T3308] [ 283.355752][ T3308] Reported by Kernel Concurrency Sanitizer on: [ 283.355763][ T3308] CPU: 1 UID: 0 PID: 3308 Comm: syz-executor Not tainted 6.14.0-rc7-syzkaller-00074-ga7f2e10ecd8f #0 [ 283.355788][ T3308] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 283.355804][ T3308] ================================================================== [ 283.423629][ T30] kauditd_printk_skb: 360 callbacks suppressed [ 283.423647][ T30] audit: type=1326 audit(1742439880.662:10907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12736 comm="syz.1.3138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f0d7ad169 code=0x7ffc0000 [ 283.663120][ T30] audit: type=1326 audit(1742439880.782:10908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12736 comm="syz.1.3138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6f0d7ad169 code=0x7ffc0000 [ 283.686834][ T30] audit: type=1326 audit(1742439880.782:10909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12736 comm="syz.1.3138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f0d7ad169 code=0x7ffc0000 [ 283.691024][T12739] syz.4.3139: attempt to access beyond end of device [ 283.691024][T12739] loop4: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 283.710518][ T30] audit: type=1326 audit(1742439880.782:10910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12736 comm="syz.1.3138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f0d7ad169 code=0x7ffc0000 [ 283.710565][ T30] audit: type=1326 audit(1742439880.782:10911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12736 comm="syz.1.3138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6f0d7ad169 code=0x7ffc0000 [ 283.771606][ T30] audit: type=1326 audit(1742439880.782:10912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12736 comm="syz.1.3138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f0d7ad169 code=0x7ffc0000 [ 283.795216][ T30] audit: type=1326 audit(1742439880.782:10913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12736 comm="syz.1.3138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=117 compat=0 ip=0x7f6f0d7ad169 code=0x7ffc0000 [ 283.818840][ T30] audit: type=1326 audit(1742439880.782:10914): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12736 comm="syz.1.3138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f0d7ad169 code=0x7ffc0000 [ 283.843153][ T30] audit: type=1326 audit(1742439880.782:10915): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12736 comm="syz.1.3138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f6f0d7ad169 code=0x7ffc0000 [ 283.867330][ T30] audit: type=1326 audit(1742439880.782:10916): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12736 comm="syz.1.3138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f0d7ad169 code=0x7ffc0000 [ 283.875323][T12739] syz.4.3139: attempt to access beyond end of device [ 283.875323][T12739] loop4: rw=0, sector=263328, nr_sectors = 4 limit=164