last executing test programs: 2m55.563762979s ago: executing program 1 (id=356): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, 0x0, &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000a800"/28], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000310000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000011c0)={&(0x7f0000000140)='kfree\x00', r3}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x3, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r4}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={r4, 0x0, &(0x7f0000000000)=""/48}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000280), &(0x7f0000000300)=r0}, 0x20) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000007d00000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x40900) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x2c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xdc}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @tail_call={{0x18, 0x2, 0x1, 0x0, r5}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @alu={0x7, 0x0, 0x5, 0xa, 0x2, 0x50, 0xfffffffffffffffd}, @generic={0x0, 0xa, 0x0, 0x7f, 0x2}, @ldst={0x3, 0x2, 0x2, 0x8, 0x7, 0x100, 0x10}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @cb_func={0x18, 0x1, 0x4, 0x0, 0x8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r8, 0x0) ftruncate(r8, 0x81ff) ioctl$sock_qrtr_SIOCGIFADDR(r8, 0x8915, &(0x7f0000000080)={'hsr0\x00'}) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r9}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000940)) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000140000001100"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b04000000000000000002005420a6c846db0000050004802800018007000100637400001c0002800800014000000002080002400000000c05000300000000000900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0x80}}, 0x0) syz_emit_ethernet(0x3b6, &(0x7f00000009c0)={@link_local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x380, 0x3a, 0xff, @dev, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x7ff, 0x0, [{0x0, 0xa, "a741e54006598080a8030000004023493b87aafaff0500ffffffe723732472eefa45ad96579269748e254c1e4a948b580a9bc430d3be27df3e34060000ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "000100000000001995319cff"}, {0x3, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5c6186c0d3baa75af390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8064e240069f656d3a05fecf894222a141123f5acaa556b9f30dcab2b90aa235a670670ffc5dc49dfb58d89310000000000"}, {0x3, 0xb, "d47ae6e8805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x7, "fcf98a102ec1876d4e6fa3b20519bbaa8a029cee00b8d3485e3b63ed09bdb581c9fe68a356f542b043059ff05932e740e077e1d16212fb"}, {0x0, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa76ffff9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4828288e62afbf03269f1f98aea6a58cf45d7c5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c258a6f"}, {0x0, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02c226a6bce65f81ed"}]}}}}}}, 0x0) 2m55.266621195s ago: executing program 1 (id=358): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x8) mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0xc96) perf_event_open(&(0x7f0000000040)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, r0, 0x3) r1 = syz_io_uring_setup(0x671e, 0x0, 0x0, &(0x7f0000000100)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000000000000000000c5000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000001000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b70300000000ffff850000000400000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) brk(0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r2}, 0x10) openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x88002, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_enter(r1, 0x47ba, 0x0, 0x0, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffb2, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r6 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x40, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000080)}, 0x10010, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r6) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480), 0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r7}, 0x10) unlink(0x0) symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') rename(0x0, 0x0) 2m54.861582649s ago: executing program 1 (id=365): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000006c0)='kmem_cache_free\x00', r0}, 0x10) io_setup(0xffff, &(0x7f0000001080)) 2m54.652585701s ago: executing program 1 (id=371): bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000240), 0x4) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x40, &(0x7f0000000340), 0x1, 0x573, &(0x7f0000000ec0)="$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") syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x88a, &(0x7f00000001c0)={[{@usrquota}, {@usrjquota, 0x22}, {@errors_continue}, {@noload}, {@data_err_ignore}, {@grpjquota, 0x22}, {@grpquota}, {@jqfmt_vfsold}, {@noblock_validity}]}, 0xfe, 0x44e, &(0x7f0000000900)="$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") syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0x20064, &(0x7f00000001c0)=ANY=[], 0x1, 0x0, &(0x7f0000000000)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0) fallocate(r0, 0x1, 0xffc, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000810"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000e80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace(0x11, r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x0, 0x0) flock(r4, 0x5) r5 = dup2(r4, 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r5}, 0x10) getresuid(&(0x7f0000000f80), &(0x7f0000000fc0), &(0x7f0000001000)) 2m54.49880086s ago: executing program 1 (id=374): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYRES32], 0x38}}, 0x0) 2m54.078400575s ago: executing program 1 (id=380): r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000240)='4', 0x1}], 0x1) (fail_nth: 2) 2m54.072862235s ago: executing program 32 (id=380): r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000240)='4', 0x1}], 0x1) (fail_nth: 2) 2m53.920361144s ago: executing program 2 (id=387): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18090000002300810000000000000000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) r0 = socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r1}, 0x0, &(0x7f0000000340)=r2}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x65, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000640)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b8, 0xd0, 0x0, 0xd0, 0x2c0, 0xd0, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [0x0, 0xffffff00], [0x0, 0x0, 0x0, 0xffffff00], 'veth1\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x3a010000}}, @HL={0x28}}, {{@ipv6={@mcast2, @loopback, [0x0, 0x0, 0xff000000], [0x0, 0x0, 0xffffff00], 'veth1_virt_wifi\x00', 'pimreg\x00', {}, {}, 0x3b}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x2c0}}, {{@uncond, 0x0, 0xd8, 0x120, 0x0, {}, [@common=@frag={{0x30}, {[0xfffffffe]}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@local, 'hsr0\x00', {0x6}}}}, {{@ipv6={@mcast1, @empty, [0xff, 0xffffff00, 0xffffffff, 0xff000000], [0xff000000, 0x0, 0xffffff00, 0xffffff00], 'veth0_to_bridge\x00', 'wg2\x00', {0xff}, {0x101}, 0x4, 0x80, 0x7, 0x23}, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@multicast2}}}, {{@ipv6={@loopback, @private2, [], [], 'ip6erspan0\x00', 'veth0_to_batadv\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}, {0x10}}]}, @inet=@DSCP={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x618) 2m53.900105816s ago: executing program 2 (id=388): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000740)={'macsec0\x00', 0x0}) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x7ff, 0x0, 0xffffffffffffffff, 0x3330, '\x00', r2, 0xffffffffffffffff, 0x4, 0x2, 0x2, 0x0, @void, @value, @void, @value}, 0x50) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x4040, 0x0) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000340), 0x4) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1b00000000000000000000000400000000000000", @ANYRES32, @ANYBLOB="06aa09279a4596a2006bea61b33042d28c8d9646a23a1ba390fd1f4c9e479d0d39c79df41b69a17ce100"/56, @ANYRES32=r2, @ANYRES32, @ANYBLOB="02000000020000000100"/28], 0x50) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000480)={{0x1, 0x1, 0x18, r0, {0x58cf}}, './file0\x00'}) r8 = syz_io_uring_setup(0x53a3, &(0x7f00000005c0)={0x0, 0xa2a1, 0x10, 0x1, 0x390}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000340)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r9, r10, &(0x7f0000000180)=@IORING_OP_UNLINKAT={0x24, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r8, 0x1d69, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x1b, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4d73, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@exit, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @map_val={0x18, 0x2, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x2400}, @ldst={0x2, 0x3, 0x0, 0x0, 0x6, 0x50, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xb7}, @generic={0x2, 0x9, 0xf, 0x3, 0x1}, @cb_func={0x18, 0x8, 0x4, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x24ea87c4, 0x0, 0x0, 0x0, 0x9}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000280)='syzkaller\x00', 0x7, 0x57, &(0x7f00000002c0)=""/87, 0x41000, 0x51, '\x00', 0x0, 0x25, r5, 0x8, &(0x7f0000000380)={0x4, 0x3}, 0x8, 0x10, &(0x7f00000003c0)={0x1, 0x1, 0x9, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[r6, r7, 0xffffffffffffffff], 0x0, 0x10, 0x5, @void, @value}, 0x94) pipe2$9p(&(0x7f0000000000), 0x80000) bpf$PROG_LOAD(0x5, 0x0, 0x0) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000540)={{r11}, &(0x7f00000004c0), &(0x7f0000000500)='%-5lx \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) r12 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r12, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020900000700000000000000000000000500", @ANYRES32], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0xffffffff, 0x0, {0x0, 0x0, 0x74, r2, {0x0, 0x7}, {0x0, 0x4}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 2m53.48105875s ago: executing program 2 (id=393): r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0x121880, 0x0) r1 = syz_io_uring_setup(0x3bc1, &(0x7f0000000780)={0x0, 0x942e, 0x10100, 0x2, 0x289}, &(0x7f0000000540)=0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4007, @fd=r0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/4, 0x4}], 0x1}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000003c0)='kmem_cache_free\x00', r3}, 0x18) io_uring_enter(r1, 0x567, 0x72, 0x0, 0x0, 0x0) 2m53.330346439s ago: executing program 2 (id=395): bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000240), 0x4) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x40, &(0x7f0000000340), 0x1, 0x573, &(0x7f0000000ec0)="$eJzs3T1sG+UbAPDnzvG/X/mTIoEEqEMFSEWq6iT9gMLUrohKlTogsUDkuFEVJ47iBJooQ7pXiA4IUJeywcAIYmBALIysLCBmpIpGIDUdwMhfaZo4wSl1XHK/n3T2vfee/bzvnZ/XvtOdHEBmHa0/pBHPRsTFJGJoXd1AtCqPNtdbXVkq3ltZKiZRq136LYkkIu6uLBXb6yet50MRsRwRz0TEd/mI4+nmuNWFxcmxcrk02yoPz03NDFcXFk9cmRqbKE2Upk+98uqZs6fPjJ4cXf+ye7X1pfzO+nr95xvvX//h9Vs3Pv/iyHLxw7EkzsVgq259Px6l5jbJx7kNy0/3IlgfJf1uAA8l18rzeio9HUORa2V9J7WhXW0a0GO1fRE1IKMS+Q8Z1f4dUD/+bU+7+fvj9vnmAUg97mpratYMNM9NxP7GscnB35MHjkzqx5uHd7Oh7EnL1yJiZGBg8+c/aX3+Ht7Io2ggPfXt+eaO2rz/07XxJzqMP4Ptc6f/Unv8W900/t2Pn9ti/LvYZYw/3/rlky3jX4t4rmP8ZC1+0iF+GhHvdBn/5ptfn92qrvZpxLHoHL8t2f788PDlK+XSSPOxY4xvjh15bbv+H9wifvOc7f7G10yn7T/TZf+/+v7L55e3if/SC9vv/07b/0BEfNBl/CfvfvbGVnW3ryV36r8Cdrr/68tudRn/5XNHf+pyVQAAAAAAAAAAYAfSxrVsSVpYm0/TQqF5D+9TcTAtV6pzxy9X5qfHm9e8HY582r7SaqhZTurl0db1uO3yyQ3lU7lWwNyBRrlQrJTH+9x3AAAAAAAAAAAAAAAAAAAAeFwc2nD//x+5xv3/G/+uGtirtv7Lb2Cvk/+QXQ/mf9K3dgC7z/c/ZFZN/kN2yX/ILvkP2SX/IbvkP2SX/Ifskv8AAAAAAAAAAAAAAAAAAAAAAAAAANATFy9cqE+1eytLxXp5fGBhfrLy7onxUnWyMDVfLBQrszOFiUplolwqFCtT//R+SaUyMxLT81eH50rVueHqwuLbU5X56fZ/ipbyPe8RAAAAAAAAAAAAAAAAAAAA/PcMNqYkLURE2phP00Ih4v8RcTjyyeUr5dJIRDwRET/m8vvq5dF+NxoAAAAAAAAAAAAAAAAAAAD2mOrC4uRYuVyazcjMwE5WjojlR9uM+jvu+FX51r56XLahmSzM9HlgAgAAAAAAAAAAAAAAAACADLp/02+3r/irtw0CAAAAAAAAAAAAAAAAAACATEp/TSKiPh0benFwY+3/ktVc4zki3rt56aOrY3Nzs6P15XfWls993Fp+sh/tB7rVztN2HgMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD3VRcWJ8fK5dJsD2f63UcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAh/F3AAAA///pCdd8") syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x88a, &(0x7f00000001c0)={[{@usrquota}, {@usrjquota, 0x22}, {@errors_continue}, {@noload}, {@data_err_ignore}, {@grpjquota, 0x22}, {@grpquota}, {@jqfmt_vfsold}, {@noblock_validity}]}, 0xfe, 0x44e, &(0x7f0000000900)="$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") syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0x20064, &(0x7f00000001c0)=ANY=[], 0x1, 0x0, &(0x7f0000000000)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0) fallocate(r0, 0x1, 0xffc, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000810"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000e80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace(0x11, r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x0, 0x0) flock(r4, 0x5) r5 = dup2(r4, 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r5}, 0x10) getresuid(&(0x7f0000000f80), &(0x7f0000000fc0), &(0x7f0000001000)) 2m53.114443082s ago: executing program 2 (id=396): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=@newlink={0x38, 0x10, 0x7, 0x0, 0x0, {0x0, 0x0, 0x0, r1, 0x0, 0x840}, [@IFLA_LINKINFO={0x18, 0x37, 0x0, 0x1, @gretap={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x38}}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000240)="5c00000014006b04000000d86e6c1d0002887ea6ea65670000000000000090f9c3dc90f8f41f8ecff32c6e020075e300250045586c8da718ad4b4460bc24eab55600000000000000bf9367b4fa51f60a64c9f4d4938037e786a6d0bd", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 2m52.222158504s ago: executing program 2 (id=406): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18090000002300810000000000000000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r3}, 0x0, &(0x7f0000000340)=r4}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x65, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10) sendmsg$nl_route_sched(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000a40)=@newtaction={0xc0, 0x30, 0x216822a75a8bdd29, 0xffe4, 0x0, {}, [{0xac, 0x1, [@m_connmark={0x34, 0x2, 0x0, 0x0, {{0xd}, {0x4}, {0x4}, {0xc}, {0xc}}}, @m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x30, 0x3, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0xc0}}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000640)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b8, 0xd0, 0x0, 0xd0, 0x2c0, 0xd0, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [0x0, 0xffffff00], [0x0, 0x0, 0x0, 0xffffff00], 'veth1\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x3a010000}}, @HL={0x28}}, {{@ipv6={@mcast2, @loopback, [0x0, 0x0, 0xff000000], [0x0, 0x0, 0xffffff00], 'veth1_virt_wifi\x00', 'pimreg\x00', {}, {}, 0x3b}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x2c0}}, {{@uncond, 0x0, 0xd8, 0x120, 0x0, {}, [@common=@frag={{0x30}, {[0xfffffffe]}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@local, 'hsr0\x00', {0x6}}}}, {{@ipv6={@mcast1, @empty, [0xff, 0xffffff00, 0xffffffff, 0xff000000], [0xff000000, 0x0, 0xffffff00, 0xffffff00], 'veth0_to_bridge\x00', 'wg2\x00', {0xff}, {0x101}, 0x4, 0x80, 0x7, 0x23}, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@multicast2}}}, {{@ipv6={@loopback, @private2, [], [], 'ip6erspan0\x00', 'veth0_to_batadv\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}, {0x10}}]}, @inet=@DSCP={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x618) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000540), 0x84) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r6, 0x0) perf_event_open(&(0x7f0000000400)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x200000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x9}, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r9}, 0x10) openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r10}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r11, 0x0, 0x200000000200}, 0x18) r12 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xe, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r12}, &(0x7f0000000240), &(0x7f00000003c0)}, 0x20) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x1e, 0x12, r7, 0x0) 2m52.201912025s ago: executing program 33 (id=406): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18090000002300810000000000000000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r3}, 0x0, &(0x7f0000000340)=r4}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x65, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10) sendmsg$nl_route_sched(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000a40)=@newtaction={0xc0, 0x30, 0x216822a75a8bdd29, 0xffe4, 0x0, {}, [{0xac, 0x1, [@m_connmark={0x34, 0x2, 0x0, 0x0, {{0xd}, {0x4}, {0x4}, {0xc}, {0xc}}}, @m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x30, 0x3, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0xc0}}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000640)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b8, 0xd0, 0x0, 0xd0, 0x2c0, 0xd0, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [0x0, 0xffffff00], [0x0, 0x0, 0x0, 0xffffff00], 'veth1\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x3a010000}}, @HL={0x28}}, {{@ipv6={@mcast2, @loopback, [0x0, 0x0, 0xff000000], [0x0, 0x0, 0xffffff00], 'veth1_virt_wifi\x00', 'pimreg\x00', {}, {}, 0x3b}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x2c0}}, {{@uncond, 0x0, 0xd8, 0x120, 0x0, {}, [@common=@frag={{0x30}, {[0xfffffffe]}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@local, 'hsr0\x00', {0x6}}}}, {{@ipv6={@mcast1, @empty, [0xff, 0xffffff00, 0xffffffff, 0xff000000], [0xff000000, 0x0, 0xffffff00, 0xffffff00], 'veth0_to_bridge\x00', 'wg2\x00', {0xff}, {0x101}, 0x4, 0x80, 0x7, 0x23}, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@multicast2}}}, {{@ipv6={@loopback, @private2, [], [], 'ip6erspan0\x00', 'veth0_to_batadv\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}, {0x10}}]}, @inet=@DSCP={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x618) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000540), 0x84) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r6, 0x0) perf_event_open(&(0x7f0000000400)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x200000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x9}, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r9}, 0x10) openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r10}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r11, 0x0, 0x200000000200}, 0x18) r12 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xe, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r12}, &(0x7f0000000240), &(0x7f00000003c0)}, 0x20) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x1e, 0x12, r7, 0x0) 1.638242674s ago: executing program 5 (id=3672): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) socket$pppoe(0x18, 0x1, 0x0) pipe2$9p(&(0x7f0000000200), 0x0) r0 = io_uring_setup(0x40004c5f, &(0x7f0000000340)={0x0, 0x413c, 0x40, 0x3, 0x181}) io_uring_register$IORING_UNREGISTER_RING_FDS(r0, 0x15, &(0x7f0000000580)=[{0x0, 0x0, 0x0, 0x0, 0x0}], 0x1) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x20902, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x20000000000000f4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1050f0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x2904, 0x4, 0x4, 0x0, 0x0, 0xfffffffe, 0xffff, 0x0, 0x3}, 0x0, 0x1, 0xffffffffffffffff, 0x3) 1.599958546s ago: executing program 4 (id=3673): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x19, 0x4, 0x8, 0x7fff, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) mbind(&(0x7f0000bdf000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x2, 0x0) socket$kcm(0x21, 0x2, 0x2) syz_clone(0x22023500, 0x0, 0x0, 0x0, 0x0, 0x0) 1.549324729s ago: executing program 5 (id=3674): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000008c8af8ff00f10bf0c8476111ee00000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x5, 0x0}, 0x8) r3 = socket(0x28, 0x5, 0x0) r4 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r4, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r4, 0x0) connect$vsock_stream(r3, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) sendmmsg(r3, &(0x7f0000000100)=[{{0x0, 0x2d, &(0x7f00000000c0)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x0) r5 = accept4$unix(r4, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x8031, 0xffffffffffffffff, 0x0) recvfrom$unix(r5, &(0x7f0000000140)=""/129, 0x81, 0x0, 0x0, 0x0) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000140), 0x100, 0x0) r7 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) r8 = geteuid() syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f00000002c0)='./bus\x00', 0x200041, &(0x7f0000000780)={[], [{@dont_hash}, {@euid_eq={'euid', 0x3d, r8}}, {@dont_measure}, {@obj_type={'obj_type', 0x3d, '\x00'}}, {@uid_lt={'uid<', r8}}, {@audit}, {@context={'context', 0x3d, 'sysadm_u'}}, {@subj_type={'subj_type', 0x3d, '\x00'}}]}, 0x64, 0x521, &(0x7f00000011c0)="$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") r9 = socket(0x10, 0x2, 0x4) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) getsockopt$PNPIPE_IFINDEX(r9, 0x113, 0x2, &(0x7f00000004c0)=0x0, &(0x7f0000000500)=0x4) r12 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f0000000540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x4c, 0x4c, 0x6, [@struct={0x0, 0x3, 0x0, 0x4, 0x1, 0xd28, [{0x1, 0x3, 0xffffff27}, {0x7, 0x4, 0xf6}, {0xf, 0x4, 0x3}]}, @decl_tag={0x9, 0x0, 0x0, 0x11, 0x3, 0xa}, @const={0x4, 0x0, 0x0, 0xa, 0x5}]}, {0x0, [0x5f, 0x61, 0x2e, 0x61]}}, &(0x7f00000008c0)=""/150, 0x6a, 0x96, 0x1, 0x3, 0x0, @void, @value}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000f40)={0x6, 0x6, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000ff01000000000000060000007483500001000000186200001000000000000000070000009500744bb7e8af8d"], &(0x7f0000000380)='GPL\x00', 0x6478000, 0x72, &(0x7f00000003c0)=""/114, 0x40f00, 0xd, '\x00', r11, 0x25, r12, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000980)={0x5, 0xc, 0x7fff, 0x5}, 0x10, 0x0, 0x0, 0x4, &(0x7f00000009c0)=[r0], &(0x7f0000000a00)=[{0x0, 0x2, 0x4, 0xc}, {0x4, 0x1, 0x8, 0x9}, {0x2, 0x1, 0x1, 0x9}, {0x5, 0x2, 0x7, 0x4}], 0x10, 0x6, @void, @value}, 0x94) setregid(0x0, r10) setgroups(0x1, &(0x7f0000001740)=[r10]) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r6, 0xc018937b, &(0x7f0000000280)={{0x1, 0x1, 0x18, r7, {r8, r10}}, './bus\x00'}) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100)=r2, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./bus\x00', 0x20001e, &(0x7f0000000040)={[{@nodelalloc}, {@orlov}, {@auto_da_alloc}]}, 0x1, 0x4fa, &(0x7f0000000a40)="$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") r13 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x141042, 0x0) pwritev2(r13, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) 1.460602294s ago: executing program 4 (id=3675): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000010000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x64, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='rxrpc_local\x00', r0}, 0x10) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x80, 0x0, 0x0, 0x0, 0x10b8}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$eJzs3c9rHFUcAPDvbJL+1qZQinqQQA9WajdN4o8KQutRtFjQe12SaSjZdEt2U5pYaHuwFy9SBBEL4h/g3WPxH/CvKGihSAl68BKZzWy7TbL5uXW3zucD0743M5s3b998335nZ5cNoLBGsn9KEa9GxDdJxOG2bYORbxxZ2W/p8Y3JbEliefmzP5NI8nWt/ZP8/4N55ZWI+PWriJOlte3WFxZnKtVqOpfXRxuzV0frC4unLs9WptPp9Mr4xMSZdybG33/v3a719c0Lf3//6f2Pznx9fOm7nx8euZvEuTiUb2vvxy7caq+MxEj+nAzFuVU7jnWhsX6S9PoA2JGBPM6HIpsDDsdAHvXA/9/NiFgGCioR/1BQrTygdW3fpevgF8ajD1cugNb2f3DlvZHY17w2OrCUPHNllF3vDneh/ayNX/64dzdbYpP3IW52oT2Allu3I+L04ODa+S/J57+dO91883hjq9so2usP9NL9LP95a738p/Qk/4l18p+D68TuTmwe/6WHXWimoyz/+2Dd/PfJ1DU8kNdeauZ8Q8mly9X0dES8HBEnYmhvVt/ofs6ZpQfLnba153/ZkrXfygXz43g4uPfZx0xVGpXd9Lndo9sRrz3Nf5NYM//va+a6q8c/ez4ubLGNY+m91ztt27z/7bqfAS//FPHGuuP/9I5WsvH9ydHm+TDaOivW+uvOsd86tb+9/ndfNv4HNu7/cNJ+v7a+/TZ+3PdP2mnbTs//PcnnzfKefN31SqMxNxaxJ/lk7frxp49t1Vv7Z/0/cXzj+W+9839/RHyxxf7fOXqn4679MP5T2xr/7RcefPzlD53a39r4v90sncjXbGX+2+oB7ua5AwAAAAAAgH5TiohDkZTKT8qlUrm88vmOo3GgVK3VGycv1eavTEXzu7LDMVRq3ek+3PZ5iLH887Ct+viq+kREHImIbwf2N+vlyVp1qtedBwAAAAAAAAAAAAAAAAAAgD5xsMP3/zO/D/T66IDnzk9+Q3FtGv/d+KUnoC95/YfiEv9QXOIfikv8Q3GJfygu8Q/FJf6huMQ/AAAAAAAAAAAAAAAAAAAAAAAAAAAAdNWF8+ezZXnp8Y3JrD51bWF+pnbt1FRanynPzk+WJ2tzV8vTtdp0NS1P1mY3+3vVWu3q2HjMXx9tpPXGaH1h8eJsbf5K4+Ll2cp0ejEd+k96BQAAAAAAAAAAAAAAAAAAAC+W+sLiTKVaTecUOhbORl8cxo4LyWajfDY/GXbUxGDvO6jwHAo9npgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoM2/AQAA///fKTPH") bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000280)='sched_switch\x00'}, 0x10) r3 = open(&(0x7f0000000080)='./file1\x00', 0x64842, 0x0) pwritev2(r3, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x140000}], 0x1, 0x7800, 0x0, 0x3) 1.353524841s ago: executing program 0 (id=3676): bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000080)={0x5, 0x0}, 0x8) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000240)='./file0\x00', 0x444, &(0x7f0000000d00)=ANY=[@ANYBLOB="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", @ANYRESDEC, @ANYRESHEX], 0xfe, 0x667, &(0x7f00000002c0)="$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") r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0) faccessat(r3, &(0x7f0000000000)='./file0\x00', 0x5) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0x1}, 0x8) sendto$inet6(r5, &(0x7f0000000040)="aa", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) r6 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000000), 0x49) sendmsg$kcm(r6, &(0x7f00000001c0)={&(0x7f0000000100)=@phonet={0x23, 0x0, 0x0, 0xd}, 0x80, &(0x7f00000018c0)=[{&(0x7f0000000180)="27050200160014000600002fb96dbcf706e10500070088a800008100", 0x1c}, {&(0x7f0000000280)="cb4e64b0af329873eef1", 0xa}], 0x2}, 0x0) 1.294844644s ago: executing program 4 (id=3678): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x17, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x64, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x18, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000010100008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000280)='sched_switch\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000680)={{0x1, 0x1, 0x18, r0, {0x0, 0xffffffffffffffff}}, './file1/file0\x00'}) ioctl$PTP_EXTTS_REQUEST2(r2, 0x40103d0b, &(0x7f00000006c0)={0x9, 0x4}) r3 = open(&(0x7f0000000080)='./file1\x00', 0x64842, 0x0) pwritev2(r3, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x140000}], 0x1, 0x7800, 0x0, 0x3) 1.215186789s ago: executing program 0 (id=3679): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0x1}, 0x8) sendto$inet6(r0, &(0x7f0000000040)="aa", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) shutdown(r0, 0x1) 1.18392485s ago: executing program 0 (id=3680): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000010000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x64, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='rxrpc_local\x00', r0}, 0x10) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[], 0x10b8}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000280)='sched_switch\x00'}, 0x10) r3 = open(&(0x7f0000000080)='./file1\x00', 0x64842, 0x0) pwritev2(r3, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x140000}], 0x1, 0x7800, 0x0, 0x3) 1.129126504s ago: executing program 5 (id=3681): r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x5, 0x0, 0x7fff, 0x0, 0x4, 0xfffc}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3, 0x31, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000040)=0x9, 0x8, 0x3) mmap(&(0x7f0000543000/0x1000)=nil, 0x1000, 0x0, 0x2031, 0xffffffffffffffff, 0xcc4c6000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x2000, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001800090400000800000000020a0000000000000600"], 0x24}}, 0x0) 1.060738488s ago: executing program 4 (id=3682): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000357500007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000820000009500000000000000"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0, r0, 0x0, 0x3}, 0x18) fcntl$notify(0xffffffffffffffff, 0x402, 0x3) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x800000, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$nl_route(0x10, 0x3, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000140)='\\', 0x1}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) lsm_set_self_attr(0x64, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setpriority(0x1, 0xff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) connect$llc(0xffffffffffffffff, &(0x7f0000000180)={0x1a, 0x0, 0xfc, 0x8, 0x8, 0x40, @multicast}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000000), 0x400000000000253, 0x40, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 1.060042648s ago: executing program 5 (id=3683): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000180)='kfree\x00', r1}, 0x18) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000740)=ANY=[@ANYBLOB="540100001a001307000000000000001cac141400"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff0000000000000000000000000000000032000000ac141417000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c001c"], 0x154}}, 0x0) 1.054966128s ago: executing program 0 (id=3684): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r0}, &(0x7f00000002c0), &(0x7f0000000300)=r1}, 0x20) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) 1.007534121s ago: executing program 5 (id=3685): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010023010000050000000200000008000100", @ANYRES32=r2], 0x1c}}, 0x0) r5 = syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000740)='./file0\x00', &(0x7f0000000780), 0x8, &(0x7f0000000940)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@loose}, {@mmap}, {@uname={'uname', 0x3d, 'nl802154\x00'}}, {@access_uid={'access', 0x3d, 0xee01}}, {@aname={'aname', 0x3d, 'wpan3\x00'}}, {@version_u}], [{@dont_hash}, {@obj_user}, {@dont_measure}, {@fsname}, {@dont_appraise}]}}) syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r3) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000400)={'wpan4\x00'}) sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYRES16=r5, @ANYBLOB, @ANYRES32, @ANYBLOB], 0x7c}}, 0x0) syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000040)) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000080)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.bfq.sectors\x00', 0x26e1, 0x0) 994.250622ms ago: executing program 0 (id=3686): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000002900000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0xc, &(0x7f0000000680)=ANY=[@ANYBLOB="180000006006000000000000000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000fdffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000180)='kfree\x00', r2}, 0x18) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000014c0)=@newsa={0x154, 0x10, 0x1, 0x0, 0x0, {{@in6=@remote, @in6=@mcast1, 0x0, 0x0, 0x4e21}, {@in, 0x0, 0x32}, @in6=@loopback, {}, {0x0, 0x0, 0x9}, {}, 0x0, 0x0, 0x2, 0x0, 0x0, 0xaf}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @replay_esn_val={0x1c, 0x17, {0x0, 0x0, 0x4}}]}, 0x154}}, 0x0) 975.429603ms ago: executing program 0 (id=3687): openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000001780)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) connect$inet6(r0, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) io_setup(0x81, &(0x7f0000000040)) syz_open_procfs(0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) close(r3) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xff, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000001000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b703000000000000850000000400000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r4, 0x28, 0x1, &(0x7f0000000100)=0xfffffffffffffffe, 0x112) writev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f00000005c0)}], 0x1) 617.327014ms ago: executing program 6 (id=3691): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x34, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = creat(&(0x7f0000010280)='./file0\x00', 0x182) mount$9p_fd(0x0, &(0x7f0000000740)='./file0\x00', &(0x7f0000000780), 0x8, &(0x7f0000000940)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@loose}, {@mmap}, {@uname={'uname', 0x3d, 'nl802154\x00'}}, {@access_uid={'access', 0x3d, 0xee01}}, {@aname={'aname', 0x3d, 'wpan3\x00'}}, {@version_u}]}}) 590.321165ms ago: executing program 6 (id=3692): bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000080)={0x5, 0x0}, 0x8) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000240)='./file0\x00', 0x444, &(0x7f0000000d00)=ANY=[@ANYBLOB="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", @ANYRESDEC, @ANYRESHEX], 0xfe, 0x667, &(0x7f00000002c0)="$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") r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0) faccessat(r3, &(0x7f0000000000)='./file0\x00', 0x5) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0x1}, 0x8) sendto$inet6(r5, &(0x7f0000000040)="aa", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) r6 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000000), 0x49) shutdown(r5, 0x1) 541.218878ms ago: executing program 6 (id=3693): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x17, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x64, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x18, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000010100008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000280)='sched_switch\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000680)={{0x1, 0x1, 0x18, r0, {0x0, 0xffffffffffffffff}}, './file1/file0\x00'}) ioctl$PTP_EXTTS_REQUEST2(r2, 0x40103d0b, &(0x7f00000006c0)={0x9, 0x4}) r3 = open(&(0x7f0000000080)='./file1\x00', 0x64842, 0x0) pwritev2(r3, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x140000}], 0x1, 0x7800, 0x0, 0x3) 491.670411ms ago: executing program 3 (id=3694): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x34, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = creat(&(0x7f0000010280)='./file0\x00', 0x182) mount$9p_fd(0x0, &(0x7f0000000740)='./file0\x00', &(0x7f0000000780), 0x8, &(0x7f0000000940)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@loose}, {@mmap}, {@uname={'uname', 0x3d, 'nl802154\x00'}}, {@access_uid={'access', 0x3d, 0xee01}}, {@aname={'aname', 0x3d, 'wpan3\x00'}}, {@version_u}]}}) 440.294254ms ago: executing program 3 (id=3695): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.self_freezing\x00', 0x275a, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000}) fcntl$lock(r0, 0x25, &(0x7f0000000380)={0x2, 0x2, 0x28c9d}) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1e000000040000000c0020000400000000000100", @ANYRES32=r0, @ANYBLOB="01000100"/20, @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="0200000004000000000000000400"/24, @ANYRES32=r0, @ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) symlinkat(&(0x7f0000000700)='./file0\x00', r2, &(0x7f0000000740)='./file0\x00') 417.057145ms ago: executing program 3 (id=3696): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000180)='kfree\x00', r1}, 0x18) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000740)=ANY=[@ANYBLOB="540100001a001307000000000000001cac141400"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff0000000000000000000000000000000032000000ac141417000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c001c"], 0x154}}, 0x0) 391.480967ms ago: executing program 6 (id=3697): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000002900000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0xc, &(0x7f0000000680)=ANY=[@ANYBLOB="180000006006000000000000000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000fdffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000180)='kfree\x00', r2}, 0x18) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000014c0)=@newsa={0x154, 0x10, 0x1, 0x0, 0x0, {{@in6=@remote, @in6=@mcast1, 0x0, 0x0, 0x4e21}, {@in, 0x0, 0x32}, @in6=@loopback, {}, {0x0, 0x0, 0x9}, {}, 0x0, 0x0, 0x2, 0x0, 0x0, 0xaf}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @replay_esn_val={0x1c, 0x17, {0x0, 0x0, 0x4}}]}, 0x154}}, 0x0) 348.212379ms ago: executing program 6 (id=3698): r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000000500)=[{{&(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='p\x00\x00\x00\x00\x00\x00\x00v'], 0x70}}], 0x1, 0x2000c044) (fail_nth: 5) 325.899181ms ago: executing program 3 (id=3699): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x20, &(0x7f0000000780)={&(0x7f0000000040)=@ipv4_newroute={0x1c, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, 0x1c}}, 0x0) 83.065225ms ago: executing program 6 (id=3700): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000bc0)={&(0x7f0000000b00)=ANY=[@ANYBLOB="9feb0100180000400000000028000000280000000900000009000000010000930900000004000000a7000000010000000900000000000011030000000a00000000005f3061302e0000"], &(0x7f0000000b80), 0x49, 0x0, 0x0, 0x10000, 0x10000, @value}, 0x28) r1 = getpid() setreuid(0xee00, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000300)='btrfs_failed_cluster_setup\x00', r3}, 0x18) r4 = syz_pidfd_open(r1, 0x0) setns(r4, 0x24020000) syz_clone3(&(0x7f00000008c0)={0x15340180, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[r1], 0x1}, 0x58) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="180000000000000000000000000073a5f998eb7c350f702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000ac0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x13, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000001, 0x12, r6, 0x100000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r5, 0x0, 0xfffffffffffffffd}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r7 = getpid() r8 = getpgrp(0xffffffffffffffff) sched_rr_get_interval(r8, &(0x7f0000000280)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x84515000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r9, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r10, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r9, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), r6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000003680)='sched_switch\x00', r11}, 0x10) io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) 82.380495ms ago: executing program 5 (id=3701): bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000080)={0x5, 0x0}, 0x8) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000240)='./file0\x00', 0x444, &(0x7f0000000d00)=ANY=[@ANYBLOB="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", @ANYRESDEC, @ANYRESHEX], 0xfe, 0x667, &(0x7f00000002c0)="$eJzs3U1v28gdx/EfZfmxQFC0xSIIsvFs0gUcNFUkeeOFkR7KUpTNrSQKJF3Yp0W6sRdB5GybpEDjy9aXPgDtG+htL3voiyjQc899Az0WWLS3Ar2oIClKskRZip+Sdr8fI9GI/JPzJ4fRhBY5FAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAkOXUyuWKpYbX2tk1kzm1wG+eMj9d27zupoW7U+uVrPiPlpZ0PZ10/TuD2e/Ef93WzfTdTS3FL0s6+sY733z47WIhW/6UhM5Cr7vCF6+Onj7qdPafn622rnWW5S7FWCYqzLDUltvyQt9r2luu8ULfbG5slO9v10NT9xpuuBdGbtM4gVuI/MCsOXdNZXNz3bilPX+ntVWzG2428cPvV8vlDfPRYq/5739UCp1tr9HwWltJTDw7jlnsHyGu3TTm4Elnf31aknFQZZag6rSgarlarVSq1crGg80HH5bLxbEJ5REaixgctG9P4+MqXdAnN3B+hbj//7slNbSklna0K5P746imQL6aE+b3ZP3/+/fdU+sd7v+zXv76YPYNJf3/rfTdrUn9/4RcjEyyQN4ca8L0s/280Csd6akeqaOO9vX8Yta7enEZXu7PllSUPIXy5akpW1tyZXpTjDa1oQ2V9bG2VVcoo7o8NeQq1J5CRXLVTNokkCtbkXwFMlqTo7syqmhTm1qXkauS9uRrRy1tqSZb/+52uwd6kuz39VNyVBZUmSWo2D8Gx4Mm9f8//Txd4vX6f/z/6R87M8QAb1y3d/4/2VzexNXLywgAAAAAAFw0K/ntu5V8d/+upK7qXsMtv+m0AAAAAADABUq++b8Zv8zHpXdlTTj/7159bgAAAAAA4GJYyT12lqSV5KJ+a3An1CwXAeTeHAAAAAAAAN4uyff/txakbjK02qqs1zr/BwAAAAAA/wN+OzTGfjEbY7ebfa1fkBS2F60//3NRwbx13N79rnVox3Psw17M2BUAUf2GVVQ6UG8yXu+CpOSd4960euMD9wbBtNKBfaWvDqaN9W8FIwkszGW/vshJ4NrRUAIbxd47/V7vpTHv9ep9fFRQMietZaXuNdyS4zceVmTb1wqRuxv94tmTX0pBfzsPnnT2S5981nmc5HIcTzo+jPP4/EQ6hWm5vEzGW0juucjb4mXVsyp/12quWEm95Wz752QfFoYrmm37f63bacztlfR15ShrAVm/6hUqpaTJBlufjA5hDbKojG55XkNMyGIpyeJOGnNn7U76kuWXtsLS9+akamm8DYLhLKrDWUzfF9a/xvbFlCziY2E9zuIv8YomZLH+elmMtQgAvCkHg14oGcR8fIz90X73LJ9y03v3H56s5eUfu+kNh3NSsffdRHoT4qR+RfEn+loatpCO4l68kfOJXu71K0ua8IlePkfvFtf1p8EzkHpp9+YU+1n8p9vtPqwk9f5hpFf9Il7gi4n1ho3qXLwL7788/FkyAH7s0/1P959Vq+sb5Q/K5QdVzSeb0Xuh7wEA5Jj+jJ2TEUuD/qzfd3/QP6t+/I/309KJfvdb/UsKSvpEn6mjx7qXPUJgNb/elaHLEO6Nn7XGscvSaGxF9yae1SV96VBstR87r2yRk/9fGMSuX3YzAABwpW5P6YdH+/+8c/d72Xn32o3c8+6TffnoE4InxVaueE8AAPD14QZfWSvRb6wg8NofVzY3K3a07ZrAd35sAq+25RqvFbmBs223tlzTDvzId/yGaQda9GpuaMKddtsPIlP3A9P2Q283efK76T36PXSbdivynLDdcO3QNY7fimwnMjUvdEx750cNL9x2g2ThsO06Xt1z7MjzWyb0l+W4JWNC1x0K9GpuK/LqXlxsmXbgNe1gz/zEb+w0XVNzQyfw2pGfrjCry2vV/aCZrLak7mkPOgQA4Gvjxaujp486nf3npxSOlRay69FOCV7IW+Eb3kQAADCCXhoAAAAAAAAAAAAAAAAAAAAAgLffLPf/nVrIbgrMpswrJ1jqT/n5tZnWbGkw5cu/nSvDMxQKo1N6I+12py/+17RQzItZjgsLkjrZ7h+OOb7QrVidKVhpoXjx+3BZyjsSLq3wg4OTx+FYTDwzd9Zivy2K5//nkFd49uWEWdOPqMWT+3DhtA08WShKer5wjia4+s8iAFfrvwEAAP//pJI9bA==") r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0) faccessat(r3, &(0x7f0000000000)='./file0\x00', 0x5) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0x1}, 0x8) shutdown(r5, 0x1) 79.486686ms ago: executing program 3 (id=3702): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfaa00000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000006100)='cmdline\x00') read$char_usb(r1, &(0x7f0000000b00)=""/124, 0x7c) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x44, r3, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_BITS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}]}]}]}]}, 0x44}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000180)={'ip6tnl0\x00', 0x0, 0x2f, 0x6, 0x2, 0x4, 0x1, @local, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7, 0x8000, 0x7fff, 0x7}}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000240)=0x14) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x45c, 0x24, 0xd0f, 0x70bd2b, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x9, 0x45, 0x3ff, 0x10000, 0x3, 0x8, 0x4, 0xa0000, 0x4, 0xa0000001, 0x59bc9fd6, 0x2, 0x2, 0x8000, 0x8, 0x4, 0x8, 0x6, 0x114b6000, 0xfffffffe, 0x2a70, 0xffff73cc, 0x81, 0x5, 0x0, 0xa, 0x400045, 0x0, 0x8, 0x5, 0x9, 0x3, 0xe, 0xa, 0x2, 0x4, 0x5, 0x3, 0xffff, 0x3, 0xffffdff8, 0x4, 0x8, 0x1a0055ee, 0x400, 0x1, 0x5, 0x200000, 0x0, 0x22cc, 0x101, 0x4, 0x7, 0x1, 0x800, 0xf9, 0x9, 0x8, 0x2, 0x8, 0x2f, 0x6, 0x0, 0x101, 0x9, 0x7, 0xc5, 0x4, 0x2, 0xffffffff, 0x6, 0x5, 0x5, 0x5, 0x2, 0x9b58, 0x0, 0xb, 0x4be, 0x4, 0x100, 0xa, 0xca6, 0x9fa7, 0x7, 0x38, 0x4, 0xfffffffe, 0x7, 0x4d, 0x7, 0x200, 0x8, 0x401, 0x7, 0x45, 0x20000003, 0x9, 0x0, 0x7, 0x46, 0x9, 0x3, 0x7, 0x4, 0xc, 0x7, 0x8001, 0x7, 0x7, 0x1902, 0xc3c, 0x6, 0x28000000, 0x4000000, 0x30c7, 0xfad, 0x7, 0x8, 0x0, 0x5, 0x10, 0x400, 0xd58, 0x5, 0x2, 0x4, 0x8, 0x2, 0x8, 0x8, 0xea, 0x0, 0x45ba, 0x9, 0x864b, 0xfffffffc, 0x7, 0x9, 0x8001, 0x7, 0x81, 0x3, 0x9, 0x7, 0xffffff80, 0x43, 0x8, 0x1, 0x6, 0x5, 0x9, 0x7fffffff, 0x4, 0x324f035, 0x6, 0x0, 0x7c1, 0x136, 0x6, 0x5, 0x4, 0x3ff, 0x4, 0xb, 0x2, 0x10001, 0xfffffffd, 0x5, 0x4, 0x400, 0x141, 0x4, 0x1b, 0xd589, 0xffffff81, 0x0, 0x4, 0x0, 0x2fe, 0x8, 0x60000000, 0xd3d, 0x0, 0xfffffffe, 0x0, 0x81, 0x2, 0x55, 0x4000004, 0xbc6, 0x8, 0x8, 0x28a6a52, 0x1ff, 0xb, 0x7fff, 0x9, 0x2e4c20b6, 0x1, 0x4, 0x9, 0x7, 0x4, 0x8, 0x0, 0x6, 0x8, 0x3, 0x7, 0x4, 0x9, 0x4, 0xfffffffa, 0x76e8e800, 0x800, 0x403, 0x6, 0x0, 0xcc6, 0xfffffffb, 0x8000, 0xffffff00, 0x894, 0x7, 0xfb3, 0x6, 0x6, 0x2, 0x9, 0x10001, 0x9, 0x4, 0x8, 0x5d, 0x1000003, 0x7, 0x656, 0x8008, 0x80000001, 0x384, 0x9, 0x58b, 0x90000000, 0xe08, 0x0, 0x1, 0x2c821159, 0x0, 0x9, 0xfff, 0x0, 0x7, 0x0, 0x7f]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x6, 0x0, 0x2, 0x8, 0x0, 0xc}, {0xff, 0x1, 0x0, 0x5, 0x5e1d, 0x8}, 0x9, 0x8, 0x99}}]}}]}, 0x45c}}, 0x8840) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 40.785257ms ago: executing program 4 (id=3703): creat(&(0x7f00000000c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r1 = dup(r0) write$P9_RLERRORu(r1, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) creat(&(0x7f00000003c0)='./file0\x00', 0x4) creat(&(0x7f0000000380)='./file0\x00', 0x80) open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) 5.03073ms ago: executing program 3 (id=3704): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000740)={'macsec0\x00', 0x0}) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x7ff, 0x0, 0xffffffffffffffff, 0x3330, '\x00', r2, 0xffffffffffffffff, 0x4, 0x2, 0x2, 0x0, @void, @value, @void, @value}, 0x50) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x4040, 0x0) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000340), 0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1b00000000000000000000000400000000000000", @ANYRES32, @ANYBLOB="06aa09279a4596a2006bea61b33042d28c8d9646a23a1ba390fd1f4c9e479d0d39c79df41b69a17ce100"/56, @ANYRES32=r2, @ANYRES32, @ANYBLOB="02000000020000000100"/28], 0x50) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000480)={{0x1, 0x1, 0x18, r0, {0x58cf}}, './file0\x00'}) r6 = syz_io_uring_setup(0x53a3, &(0x7f00000005c0)={0x0, 0xa2a1, 0x10, 0x1, 0x390}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000340)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f0000000180)=@IORING_OP_UNLINKAT={0x24, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r6, 0x1d69, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x1b, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4d73, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@exit, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @map_val={0x18, 0x2, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x2400}, @ldst={0x2, 0x3, 0x0, 0x0, 0x6, 0x50, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xb7}, @generic={0x2, 0x9, 0xf, 0x3, 0x1}, @cb_func={0x18, 0x8, 0x4, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x24ea87c4, 0x0, 0x0, 0x0, 0x9}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000280)='syzkaller\x00', 0x7, 0x57, &(0x7f00000002c0)=""/87, 0x41000, 0x51, '\x00', 0x0, 0x25, r5, 0x8, &(0x7f0000000380)={0x4, 0x3}, 0x8, 0x10, &(0x7f00000003c0)={0x1, 0x1, 0x9, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000004c0), 0x0, 0x10, 0x5, @void, @value}, 0x94) pipe2$9p(&(0x7f0000000000), 0x80000) bpf$PROG_LOAD(0x5, 0x0, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000540)={{r9}, &(0x7f00000004c0), &(0x7f0000000500)='%-5lx \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r10}, 0x10) r11 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r11, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020900000700000000000000000000000500", @ANYRES32], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0xffffffff, 0x0, {0x0, 0x0, 0x74, r2, {0x0, 0x7}, {0x0, 0x4}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 0s ago: executing program 4 (id=3705): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = io_uring_setup(0x3eae, &(0x7f0000000080)={0x0, 0x0, 0x1}) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x7b, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) 0s ago: executing program 4 (id=3706): syz_mount_image$ext4(&(0x7f0000000d80)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x21881e, &(0x7f0000000280)={[{@mb_optimize_scan}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@stripe={'stripe', 0x3d, 0x9}}]}, 0x1, 0x4fa, &(0x7f0000000dc0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)='2', 0x1, 0x8000c61) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r1, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) (async) symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') (async) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000f80)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', r3, 0x0, 0x0) (async) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc4042, 0x1ff) sendfile(r4, r4, 0x0, 0xfffe80) r5 = shmget$private(0x0, 0x3000, 0x2, &(0x7f0000ffb000/0x3000)=nil) shmctl$SHM_STAT_ANY(r5, 0xf, &(0x7f00000001c0)=""/34) shmctl$SHM_UNLOCK(r5, 0xc) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000080)) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000070000000850000005000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r6}, 0x10) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, 0x0, 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) (async) open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x17d) (async) faccessat2(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x5, 0x1300) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), 0xffffffffffffffff) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) kernel console output (not intermixed with test programs): change from 0 to 512 [ 192.229951][T12038] ext3: Unknown parameter 'dont_hash' [ 192.239890][T12038] loop3: detected capacity change from 0 to 512 [ 192.246494][T12038] EXT4-fs: Ignoring removed orlov option [ 192.266462][T12038] EXT4-fs mount: 54 callbacks suppressed [ 192.266630][T12038] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 192.288431][T12038] ext4 filesystem being mounted at /560/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 192.305959][T12043] veth1_macvtap: left promiscuous mode [ 192.341135][T12047] loop5: detected capacity change from 0 to 1024 [ 192.347936][T12047] EXT4-fs: Ignoring removed orlov option [ 192.353621][T12047] EXT4-fs: Ignoring removed nomblk_io_submit option [ 192.371766][T12047] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 192.385742][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.423536][ T4482] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.458824][T12058] netlink: 'syz.3.2986': attribute type 1 has an invalid length. [ 192.468845][T12058] SELinux: security_context_str_to_sid () failed with errno=-22 [ 192.471409][T12060] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 192.485909][T12060] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 192.500408][T12060] loop5: detected capacity change from 0 to 164 [ 192.511441][T12060] rock: directory entry would overflow storage [ 192.517718][T12060] rock: sig=0x4f50, size=4, remaining=3 [ 192.523314][T12060] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 192.851544][T12077] 9pnet_fd: Insufficient options for proto=fd [ 192.997534][T12083] loop0: detected capacity change from 0 to 512 [ 193.004408][T12083] ext3: Unknown parameter 'dont_hash' [ 193.013881][T12083] loop0: detected capacity change from 0 to 512 [ 193.020387][T12083] EXT4-fs: Ignoring removed orlov option [ 193.056194][T12083] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 193.068975][T12083] ext4 filesystem being mounted at /597/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 193.136965][T12098] netlink: 'syz.4.2999': attribute type 1 has an invalid length. [ 193.146424][T12098] SELinux: security_context_str_to_sid () failed with errno=-22 [ 193.162814][ T3296] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.188449][T12102] loop4: detected capacity change from 0 to 1024 [ 193.196984][T12102] EXT4-fs: Ignoring removed orlov option [ 193.202835][T12102] EXT4-fs: Ignoring removed nomblk_io_submit option [ 193.216232][T12102] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 193.288703][ T53] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.303353][T11682] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.329765][T12116] netlink: 'syz.4.3005': attribute type 1 has an invalid length. [ 193.340039][T12116] SELinux: security_context_str_to_sid () failed with errno=-22 [ 193.355074][ T53] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.405207][T12129] 9pnet_fd: Insufficient options for proto=fd [ 193.405219][T12111] lo speed is unknown, defaulting to 1000 [ 193.420931][ T53] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.468727][ T53] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.510841][T12111] chnl_net:caif_netlink_parms(): no params data found [ 193.571246][ T53] bridge_slave_1: left allmulticast mode [ 193.576966][ T53] bridge_slave_1: left promiscuous mode [ 193.582691][ T53] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.599997][ T53] bridge_slave_0: left allmulticast mode [ 193.605839][ T53] bridge_slave_0: left promiscuous mode [ 193.611508][ T53] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.625133][T12151] loop6: detected capacity change from 0 to 1024 [ 193.632019][T12151] EXT4-fs: Ignoring removed orlov option [ 193.637795][T12151] EXT4-fs: Ignoring removed nomblk_io_submit option [ 193.673075][ T53] team0: Port device geneve1 removed [ 193.677015][T12151] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 193.698403][ T53]  (unregistering): (slave bond_slave_0): Releasing backup interface [ 193.710052][T12160] SELinux: security_context_str_to_sid () failed with errno=-22 [ 193.720267][ T53]  (unregistering): (slave bond_slave_1): Releasing backup interface [ 193.729738][ T53]  (unregistering): Released all slaves [ 193.740343][ T4596] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.751254][T12111] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.758486][T12111] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.765800][T12111] bridge_slave_0: entered allmulticast mode [ 193.772609][T12111] bridge_slave_0: entered promiscuous mode [ 193.789169][T12111] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.796303][T12111] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.811654][T12111] bridge_slave_1: entered allmulticast mode [ 193.818238][T12111] bridge_slave_1: entered promiscuous mode [ 193.826286][ T53] hsr_slave_0: left promiscuous mode [ 193.832037][ T53] hsr_slave_1: left promiscuous mode [ 193.838409][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 193.845877][ T53] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 193.854711][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 193.862188][ T53] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 193.872112][ T53] veth0_macvtap: left promiscuous mode [ 193.878093][ T53] veth1_vlan: left promiscuous mode [ 193.883379][ T53] veth0_vlan: left promiscuous mode [ 193.965367][ T53] team0 (unregistering): Port device team_slave_1 removed [ 193.976311][ T53] team0 (unregistering): Port device team_slave_0 removed [ 194.041557][T12111] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 194.054231][T12177] 9pnet: Unknown protocol version 9p200 [ 194.067824][T12111] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 194.097033][T12111] team0: Port device team_slave_0 added [ 194.106094][T12111] team0: Port device team_slave_1 added [ 194.122340][T12111] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 194.129435][T12111] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 194.155498][T12111] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 194.169613][T12111] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 194.176618][T12111] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 194.202584][T12111] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 194.234649][T12181] random: crng reseeded on system resumption [ 194.319702][T12111] hsr_slave_0: entered promiscuous mode [ 194.326782][T12111] hsr_slave_1: entered promiscuous mode [ 194.337810][T12111] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 194.360755][T12111] Cannot create hsr debugfs directory [ 194.477929][T12191] netlink: 'syz.6.3026': attribute type 1 has an invalid length. [ 194.488041][T12191] SELinux: security_context_str_to_sid () failed with errno=-22 [ 194.730125][T12111] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 194.739282][T12111] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 194.748933][T12111] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 194.757994][T12111] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 194.801195][T12111] 8021q: adding VLAN 0 to HW filter on device bond0 [ 194.814025][T12111] 8021q: adding VLAN 0 to HW filter on device team0 [ 194.823209][ T6748] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.830318][ T6748] bridge0: port 1(bridge_slave_0) entered forwarding state [ 194.841181][ T1599] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.848288][ T1599] bridge0: port 2(bridge_slave_1) entered forwarding state [ 194.904453][T12111] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 194.967231][T12111] veth0_vlan: entered promiscuous mode [ 194.975363][T12111] veth1_vlan: entered promiscuous mode [ 194.989720][T12111] veth0_macvtap: entered promiscuous mode [ 194.997186][T12111] veth1_macvtap: entered promiscuous mode [ 195.007829][T12111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 195.018388][T12111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.028244][T12111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 195.038744][T12111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.048622][T12111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 195.059140][T12111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.069036][T12111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 195.079601][T12111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.091039][T12111] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 195.102351][T12111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 195.112934][T12111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.122780][T12111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 195.133343][T12111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.143195][T12111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 195.153682][T12111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.163548][T12111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 195.174088][T12111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.185325][T12111] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 195.195725][T12111] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.197169][T12230] SELinux: security_context_str_to_sid () failed with errno=-22 [ 195.204499][T12111] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.221056][T12111] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.229901][T12111] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.277625][T12235] 9pnet_fd: Insufficient options for proto=fd [ 195.298759][T12239] random: crng reseeded on system resumption [ 195.368850][T12243] __nla_validate_parse: 3 callbacks suppressed [ 195.368867][T12243] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3040'. [ 195.399475][T12245] loop6: detected capacity change from 0 to 1024 [ 195.409244][T12245] EXT4-fs: Ignoring removed orlov option [ 195.415056][T12245] EXT4-fs: Ignoring removed nomblk_io_submit option [ 195.426589][ T29] kauditd_printk_skb: 79 callbacks suppressed [ 195.426605][ T29] audit: type=1326 audit(1739837440.787:8142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12238 comm="syz.0.3039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f44becde9 code=0x7ffc0000 [ 195.457875][ T29] audit: type=1326 audit(1739837440.827:8143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12238 comm="syz.0.3039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=117 compat=0 ip=0x7f0f44becde9 code=0x7ffc0000 [ 195.481494][ T29] audit: type=1326 audit(1739837440.827:8144): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12238 comm="syz.0.3039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f44becde9 code=0x7ffc0000 [ 195.505479][ T29] audit: type=1326 audit(1739837440.827:8145): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12238 comm="syz.0.3039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f0f44becde9 code=0x7ffc0000 [ 195.529556][ T29] audit: type=1326 audit(1739837440.827:8146): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12238 comm="syz.0.3039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f44becde9 code=0x7ffc0000 [ 195.535358][T12245] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 195.553477][ T29] audit: type=1326 audit(1739837440.827:8147): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12238 comm="syz.0.3039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=141 compat=0 ip=0x7f0f44becde9 code=0x7ffc0000 [ 195.589623][ T29] audit: type=1326 audit(1739837440.827:8148): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12238 comm="syz.0.3039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f44becde9 code=0x7ffc0000 [ 195.613508][ T29] audit: type=1326 audit(1739837440.827:8149): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12238 comm="syz.0.3039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f44becde9 code=0x7ffc0000 [ 195.666194][T12253] SELinux: security_context_str_to_sid () failed with errno=-22 [ 195.680437][ T4596] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.703247][T12259] netlink: 'syz.6.3056': attribute type 1 has an invalid length. [ 195.713431][T12259] SELinux: security_context_str_to_sid () failed with errno=-22 [ 195.737226][T12261] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3047'. [ 195.747904][T12265] netlink: 68 bytes leftover after parsing attributes in process `syz.6.3048'. [ 196.147061][ T29] audit: type=1326 audit(1739837441.507:8150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12280 comm="syz.5.3054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde3044cde9 code=0x7ffc0000 [ 196.198055][ T29] audit: type=1326 audit(1739837441.527:8151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12280 comm="syz.5.3054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fde3044cde9 code=0x7ffc0000 [ 196.249030][T12285] SELinux: security_context_str_to_sid () failed with errno=-22 [ 196.290812][T12289] netlink: 'syz.0.3059': attribute type 1 has an invalid length. [ 196.307124][T12289] SELinux: security_context_str_to_sid () failed with errno=-22 [ 196.362654][T12293] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3061'. [ 196.394891][T12293] veth1_macvtap: left promiscuous mode [ 196.486947][T12291] loop5: detected capacity change from 0 to 512 [ 196.493609][T12291] ext3: Unknown parameter 'dont_hash' [ 196.504290][T12291] loop5: detected capacity change from 0 to 512 [ 196.510700][T12291] EXT4-fs: Ignoring removed orlov option [ 196.537422][T12291] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 196.549998][T12291] ext4 filesystem being mounted at /572/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 196.563604][T12299] netlink: 'syz.3.3062': attribute type 1 has an invalid length. [ 196.572235][T12299] SELinux: security_context_str_to_sid () failed with errno=-22 [ 196.617652][T12303] SELinux: security_context_str_to_sid () failed with errno=-22 [ 196.647192][T12305] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3065'. [ 196.673350][ T4482] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.711955][T12313] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3069'. [ 196.738067][T12317] loop5: detected capacity change from 0 to 1024 [ 196.746024][T12317] EXT4-fs: Ignoring removed orlov option [ 196.751799][T12317] EXT4-fs: Ignoring removed nomblk_io_submit option [ 196.776275][T12317] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 196.818825][T12326] random: crng reseeded on system resumption [ 196.856697][ T4482] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.911883][T12333] loop5: detected capacity change from 0 to 1024 [ 196.918634][T12333] EXT4-fs: Ignoring removed orlov option [ 196.924431][T12333] EXT4-fs: Ignoring removed nomblk_io_submit option [ 196.945641][T12333] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 196.996584][ T4482] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.671625][T12347] loop3: detected capacity change from 0 to 1024 [ 197.678371][T12347] EXT4-fs: Ignoring removed orlov option [ 197.684142][T12347] EXT4-fs: Ignoring removed nomblk_io_submit option [ 197.695570][T12347] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 197.736274][T12351] netlink: 68 bytes leftover after parsing attributes in process `syz.6.3082'. [ 197.749655][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.811296][T12357] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3085'. [ 197.843580][T12365] netlink: 'syz.3.3088': attribute type 1 has an invalid length. [ 197.853866][T12365] SELinux: security_context_str_to_sid () failed with errno=-22 [ 197.937120][T12363] loop6: detected capacity change from 0 to 512 [ 197.946569][T12363] ext3: Unknown parameter 'dont_hash' [ 197.956726][T12363] loop6: detected capacity change from 0 to 512 [ 197.963180][T12363] EXT4-fs: Ignoring removed orlov option [ 197.995565][T12363] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 198.008371][T12363] ext4 filesystem being mounted at /518/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 198.048102][T12369] loop3: detected capacity change from 0 to 512 [ 198.055055][T12369] ext3: Unknown parameter 'dont_hash' [ 198.066568][T12369] loop3: detected capacity change from 0 to 512 [ 198.073201][T12369] EXT4-fs: Ignoring removed orlov option [ 198.080274][ T4596] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.095757][T12369] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 198.108943][T12369] ext4 filesystem being mounted at /595/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 198.176322][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.209985][T12391] loop0: detected capacity change from 0 to 1024 [ 198.216772][T12391] EXT4-fs: Ignoring removed orlov option [ 198.222495][T12391] EXT4-fs: Ignoring removed nomblk_io_submit option [ 198.236838][T12391] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 198.282472][T12111] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.305219][T12400] loop0: detected capacity change from 0 to 512 [ 198.312325][T12400] EXT4-fs (loop0): couldn't mount as ext2 due to feature incompatibilities [ 198.372710][ T50] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.428829][ T50] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.432174][T12411] random: crng reseeded on system resumption [ 198.502850][T12406] lo speed is unknown, defaulting to 1000 [ 198.510971][ T50] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.569798][ T50] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.616148][T12406] chnl_net:caif_netlink_parms(): no params data found [ 198.679727][ T50] bridge_slave_1: left allmulticast mode [ 198.685510][ T50] bridge_slave_1: left promiscuous mode [ 198.691307][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.702027][ T50] bridge_slave_0: left allmulticast mode [ 198.707760][ T50] bridge_slave_0: left promiscuous mode [ 198.713465][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.807478][T12430] 9pnet: Unknown protocol version 9p200 [ 198.822738][T12430] siw: device registration error -23 [ 198.877597][ T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 198.888935][ T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 198.900473][ T50] bond0 (unregistering): Released all slaves [ 199.046422][T12433] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3106'. [ 199.060812][ T50] hsr_slave_0: left promiscuous mode [ 199.066938][ T50] hsr_slave_1: left promiscuous mode [ 199.072694][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 199.080188][ T50] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 199.089553][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 199.096999][ T50] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 199.106602][ T50] veth0_macvtap: left promiscuous mode [ 199.112181][ T50] veth1_vlan: left promiscuous mode [ 199.117508][ T50] veth0_vlan: left promiscuous mode [ 199.188442][ T50] team0 (unregistering): Port device team_slave_1 removed [ 199.198288][ T50] team0 (unregistering): Port device team_slave_0 removed [ 199.232548][ T3340] lo speed is unknown, defaulting to 1000 [ 199.238386][ T3340] infiniband syz2: ib_query_port failed (-19) [ 199.251281][T12406] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.258570][T12406] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.268707][T12406] bridge_slave_0: entered allmulticast mode [ 199.275382][T12406] bridge_slave_0: entered promiscuous mode [ 199.283917][T12406] bridge0: port 2(bridge_slave_1) entered blocking state [ 199.291034][T12406] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.298350][T12406] bridge_slave_1: entered allmulticast mode [ 199.306449][T12406] bridge_slave_1: entered promiscuous mode [ 199.333227][T12406] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 199.344001][T12406] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 199.366451][T12406] team0: Port device team_slave_0 added [ 199.373484][T12406] team0: Port device team_slave_1 added [ 199.381376][T12445] loop5: detected capacity change from 0 to 1024 [ 199.389017][T12445] EXT4-fs: Ignoring removed orlov option [ 199.394859][T12445] EXT4-fs: Ignoring removed nomblk_io_submit option [ 199.402747][T12406] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 199.409781][T12406] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 199.435773][T12406] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 199.442049][T12445] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 199.449133][T12406] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 199.465355][T12406] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 199.491357][T12406] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 199.572360][T12406] hsr_slave_0: entered promiscuous mode [ 199.578515][T12406] hsr_slave_1: entered promiscuous mode [ 199.591409][T12406] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 199.602585][T12406] Cannot create hsr debugfs directory [ 199.609119][T12463] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 199.623171][ T4482] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.629458][T12463] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 199.650764][T12463] loop0: detected capacity change from 0 to 164 [ 199.657449][T12465] netlink: 'syz.6.3116': attribute type 1 has an invalid length. [ 199.669819][T12467] loop4: detected capacity change from 0 to 1024 [ 199.677612][T12465] SELinux: security_context_str_to_sid () failed with errno=-22 [ 199.688826][T12467] EXT4-fs: Ignoring removed orlov option [ 199.694708][T12467] EXT4-fs: Ignoring removed nomblk_io_submit option [ 199.706997][T12463] rock: directory entry would overflow storage [ 199.713281][T12463] rock: sig=0x4f50, size=4, remaining=3 [ 199.718912][T12463] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 199.732571][T12467] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 199.746466][T12470] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3117'. [ 199.787908][T12478] SELinux: security_context_str_to_sid () failed with errno=-22 [ 199.800982][T11682] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.926016][T12499] loop4: detected capacity change from 0 to 512 [ 199.932974][T12499] EXT4-fs (loop4): couldn't mount as ext2 due to feature incompatibilities [ 199.949545][T12501] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 199.959368][T12501] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 199.972534][T12501] loop5: detected capacity change from 0 to 164 [ 199.982696][T12501] rock: directory entry would overflow storage [ 199.988939][T12501] rock: sig=0x4f50, size=4, remaining=3 [ 199.989158][T12406] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 199.994530][T12501] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 200.011271][T12406] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 200.020581][T12406] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 200.029572][T12406] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 200.065610][T12406] 8021q: adding VLAN 0 to HW filter on device bond0 [ 200.077921][T12406] 8021q: adding VLAN 0 to HW filter on device team0 [ 200.087074][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 200.094254][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 200.105154][ T6748] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.112329][ T6748] bridge0: port 2(bridge_slave_1) entered forwarding state [ 200.170176][T12406] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 200.226653][T12406] veth0_vlan: entered promiscuous mode [ 200.234574][T12406] veth1_vlan: entered promiscuous mode [ 200.252691][T12406] veth0_macvtap: entered promiscuous mode [ 200.261148][T12406] veth1_macvtap: entered promiscuous mode [ 200.273450][T12406] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 200.284076][T12406] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.293924][T12406] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 200.304459][T12406] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.314451][T12406] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 200.324954][T12406] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.334796][T12406] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 200.345257][T12406] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.356213][T12406] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 200.367862][T12406] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 200.378397][T12406] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.388345][T12406] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 200.398810][T12406] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.408676][T12406] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 200.419318][T12406] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.429344][T12406] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 200.439827][T12406] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.450609][T12406] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 200.461018][T12406] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.462746][T12521] SELinux: security_context_str_to_sid () failed with errno=-22 [ 200.470110][T12406] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.486603][T12406] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.495409][T12406] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.572132][T12530] __nla_validate_parse: 2 callbacks suppressed [ 200.572151][T12530] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3134'. [ 200.603610][ T29] kauditd_printk_skb: 497 callbacks suppressed [ 200.603627][ T29] audit: type=1326 audit(1739837445.957:8649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12533 comm="syz.3.3135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feca1d0cde9 code=0x7ffc0000 [ 200.642830][ T29] audit: type=1326 audit(1739837445.997:8650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12533 comm="syz.3.3135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feca1d0cde9 code=0x7ffc0000 [ 200.666427][ T29] audit: type=1326 audit(1739837445.997:8651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12533 comm="syz.3.3135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7feca1d0cde9 code=0x7ffc0000 [ 200.690058][ T29] audit: type=1326 audit(1739837445.997:8652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12533 comm="syz.3.3135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feca1d0cde9 code=0x7ffc0000 [ 200.713945][ T29] audit: type=1326 audit(1739837445.997:8653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12533 comm="syz.3.3135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feca1d0cde9 code=0x7ffc0000 [ 200.737507][ T29] audit: type=1326 audit(1739837445.997:8654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12533 comm="syz.3.3135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7feca1d0cde9 code=0x7ffc0000 [ 200.761130][ T29] audit: type=1326 audit(1739837445.997:8655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12533 comm="syz.3.3135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feca1d0cde9 code=0x7ffc0000 [ 200.784705][ T29] audit: type=1326 audit(1739837445.997:8656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12533 comm="syz.3.3135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feca1d0cde9 code=0x7ffc0000 [ 200.808345][ T29] audit: type=1326 audit(1739837445.997:8657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12533 comm="syz.3.3135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7feca1d0cde9 code=0x7ffc0000 [ 200.831882][ T29] audit: type=1326 audit(1739837445.997:8658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12533 comm="syz.3.3135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feca1d0cde9 code=0x7ffc0000 [ 200.904812][T12548] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 200.927557][T12548] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 200.959633][T12557] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 200.968323][T12548] loop5: detected capacity change from 0 to 164 [ 200.975976][T12557] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 200.988167][T12548] rock: directory entry would overflow storage [ 200.994360][T12548] rock: sig=0x4f50, size=4, remaining=3 [ 200.999940][T12548] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 201.013236][T12557] loop3: detected capacity change from 0 to 164 [ 201.033124][T12557] rock: directory entry would overflow storage [ 201.039435][T12557] rock: sig=0x4f50, size=4, remaining=3 [ 201.045155][T12557] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 201.282412][T12568] 9pnet: Unknown protocol version 9p200 [ 201.314244][T12568] lo speed is unknown, defaulting to 1000 [ 201.320066][T12568] lo speed is unknown, defaulting to 1000 [ 201.326076][T12568] lo speed is unknown, defaulting to 1000 [ 201.332940][T12568] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 201.343772][T12568] lo speed is unknown, defaulting to 1000 [ 201.349903][T12568] lo speed is unknown, defaulting to 1000 [ 201.356041][T12568] lo speed is unknown, defaulting to 1000 [ 201.362193][T12568] lo speed is unknown, defaulting to 1000 [ 201.368247][T12568] lo speed is unknown, defaulting to 1000 [ 201.636498][T12585] netlink: 'syz.5.3155': attribute type 1 has an invalid length. [ 201.645296][T12585] SELinux: security_context_str_to_sid () failed with errno=-22 [ 201.747055][T12593] loop3: detected capacity change from 0 to 512 [ 201.776133][T12593] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.3159: bg 0: block 418: padding at end of block bitmap is not set [ 201.794261][T12593] EXT4-fs (loop3): Remounting filesystem read-only [ 201.846848][T12593] EXT4-fs (loop3): 1 truncate cleaned up [ 201.852847][T12593] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 201.865032][T12593] SELinux: (dev loop3, type ext4) getxattr errno 5 [ 201.871860][T12593] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.919015][T12597] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3160'. [ 202.052977][T12609] FAULT_INJECTION: forcing a failure. [ 202.052977][T12609] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 202.066104][T12609] CPU: 0 UID: 0 PID: 12609 Comm: syz.3.3163 Not tainted 6.14.0-rc3-syzkaller-00012-g2408a807bfc3 #0 [ 202.066127][T12609] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 202.066165][T12609] Call Trace: [ 202.066172][T12609] [ 202.066181][T12609] dump_stack_lvl+0xf2/0x150 [ 202.066250][T12609] dump_stack+0x15/0x1a [ 202.066310][T12609] should_fail_ex+0x24a/0x260 [ 202.066338][T12609] should_fail+0xb/0x10 [ 202.066372][T12609] should_fail_usercopy+0x1a/0x20 [ 202.066403][T12609] _copy_to_user+0x20/0xa0 [ 202.066433][T12609] simple_read_from_buffer+0xa0/0x110 [ 202.066461][T12609] proc_fail_nth_read+0xf9/0x140 [ 202.066559][T12609] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 202.066585][T12609] vfs_read+0x19b/0x6f0 [ 202.066610][T12609] ? __rcu_read_unlock+0x4e/0x70 [ 202.066636][T12609] ? __fget_files+0x17c/0x1c0 [ 202.066738][T12609] ksys_read+0xe8/0x1b0 [ 202.066810][T12609] __x64_sys_read+0x42/0x50 [ 202.066837][T12609] x64_sys_call+0x2874/0x2dc0 [ 202.066981][T12609] do_syscall_64+0xc9/0x1c0 [ 202.067020][T12609] ? clear_bhb_loop+0x55/0xb0 [ 202.067052][T12609] ? clear_bhb_loop+0x55/0xb0 [ 202.067196][T12609] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.067224][T12609] RIP: 0033:0x7feca1d0b7fc [ 202.067238][T12609] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 202.067258][T12609] RSP: 002b:00007feca0377030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 202.067275][T12609] RAX: ffffffffffffffda RBX: 00007feca1f25fa0 RCX: 00007feca1d0b7fc [ 202.067289][T12609] RDX: 000000000000000f RSI: 00007feca03770a0 RDI: 0000000000000003 [ 202.067303][T12609] RBP: 00007feca0377090 R08: 0000000000000000 R09: 0000000000000000 [ 202.067318][T12609] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 202.067331][T12609] R13: 0000000000000000 R14: 00007feca1f25fa0 R15: 00007ffc5186a818 [ 202.067348][T12609] [ 202.413702][T12647] FAULT_INJECTION: forcing a failure. [ 202.413702][T12647] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 202.426915][T12647] CPU: 1 UID: 0 PID: 12647 Comm: syz.0.3176 Not tainted 6.14.0-rc3-syzkaller-00012-g2408a807bfc3 #0 [ 202.426945][T12647] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 202.426960][T12647] Call Trace: [ 202.426967][T12647] [ 202.427020][T12647] dump_stack_lvl+0xf2/0x150 [ 202.427048][T12647] dump_stack+0x15/0x1a [ 202.427069][T12647] should_fail_ex+0x24a/0x260 [ 202.427097][T12647] should_fail+0xb/0x10 [ 202.427189][T12647] should_fail_usercopy+0x1a/0x20 [ 202.427218][T12647] _copy_from_user+0x1c/0xa0 [ 202.427333][T12647] copy_msghdr_from_user+0x54/0x2a0 [ 202.427363][T12647] ? __fget_files+0x17c/0x1c0 [ 202.427475][T12647] __sys_sendmmsg+0x1e8/0x4b0 [ 202.427518][T12647] __x64_sys_sendmmsg+0x57/0x70 [ 202.427541][T12647] x64_sys_call+0x29aa/0x2dc0 [ 202.427636][T12647] do_syscall_64+0xc9/0x1c0 [ 202.427664][T12647] ? clear_bhb_loop+0x55/0xb0 [ 202.427690][T12647] ? clear_bhb_loop+0x55/0xb0 [ 202.427715][T12647] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.427817][T12647] RIP: 0033:0x7f0f44becde9 [ 202.427831][T12647] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 202.427849][T12647] RSP: 002b:00007f0f43257038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 202.427866][T12647] RAX: ffffffffffffffda RBX: 00007f0f44e05fa0 RCX: 00007f0f44becde9 [ 202.427878][T12647] RDX: 0000000000000001 RSI: 0000400000004540 RDI: 0000000000000003 [ 202.427889][T12647] RBP: 00007f0f43257090 R08: 0000000000000000 R09: 0000000000000000 [ 202.427900][T12647] R10: 0000000020004050 R11: 0000000000000246 R12: 0000000000000001 [ 202.427951][T12647] R13: 0000000000000000 R14: 00007f0f44e05fa0 R15: 00007ffea9ccd9d8 [ 202.427968][T12647] [ 202.636775][T12649] SELinux: security_context_str_to_sid () failed with errno=-22 [ 202.690631][T12644] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3175'. [ 202.694713][T12655] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3179'. [ 202.713963][T12655] veth1_macvtap: left promiscuous mode [ 203.004037][T12670] 9pnet: Unknown protocol version 9p200 [ 203.063317][T12673] siw: device registration error -23 [ 203.274250][T12679] loop4: detected capacity change from 0 to 1024 [ 203.281225][T12679] EXT4-fs: Ignoring removed orlov option [ 203.286979][T12679] EXT4-fs: Ignoring removed nomblk_io_submit option [ 203.368120][T12687] loop6: detected capacity change from 0 to 1024 [ 203.375701][T12679] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 203.388057][T12687] EXT4-fs: Ignoring removed orlov option [ 203.393842][T12687] EXT4-fs: Ignoring removed nomblk_io_submit option [ 203.405604][T12687] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 203.451027][T12691] loop5: detected capacity change from 0 to 1024 [ 203.462866][T11682] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.468500][T12691] EXT4-fs: Ignoring removed orlov option [ 203.477671][T12691] EXT4-fs: Ignoring removed nomblk_io_submit option [ 203.496181][T12691] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 203.512065][ T4596] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.560944][T12694] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3190'. [ 203.594844][ T4482] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.680804][T12710] loop5: detected capacity change from 0 to 512 [ 203.689264][T12710] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.3192: bg 0: block 418: padding at end of block bitmap is not set [ 203.703921][T12710] EXT4-fs (loop5): Remounting filesystem read-only [ 203.710675][T12710] EXT4-fs (loop5): 1 truncate cleaned up [ 203.716694][T12710] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 203.728842][T12710] SELinux: (dev loop5, type ext4) getxattr errno 5 [ 203.729069][T12717] loop4: detected capacity change from 0 to 2048 [ 203.736317][T12710] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.767138][T12717] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 203.798928][T12712] atomic_op ffff888116086d28 conn xmit_atomic 0000000000000000 [ 203.902154][T11682] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.926635][T12728] SELinux: security_context_str_to_sid () failed with errno=-22 [ 203.969451][T12730] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3203'. [ 204.004961][T12736] random: crng reseeded on system resumption [ 204.730990][ T1599] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.797257][ T1599] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.841812][T12743] lo speed is unknown, defaulting to 1000 [ 204.851203][ T1599] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.922241][ T1599] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.952626][T12743] chnl_net:caif_netlink_parms(): no params data found [ 204.959741][T12772] loop4: detected capacity change from 0 to 1024 [ 204.966525][T12772] EXT4-fs: Ignoring removed orlov option [ 204.972227][T12772] EXT4-fs: Ignoring removed nomblk_io_submit option [ 204.995385][T12772] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 205.028423][T12743] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.035570][T12743] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.043048][T12743] bridge_slave_0: entered allmulticast mode [ 205.050527][T12743] bridge_slave_0: entered promiscuous mode [ 205.060789][T12743] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.061227][T11682] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.067922][T12743] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.084136][T12743] bridge_slave_1: entered allmulticast mode [ 205.090627][T12743] bridge_slave_1: entered promiscuous mode [ 205.098442][ T1599] bridge_slave_1: left allmulticast mode [ 205.104236][ T1599] bridge_slave_1: left promiscuous mode [ 205.109921][ T1599] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.117702][ T1599] bridge_slave_0: left allmulticast mode [ 205.123401][ T1599] bridge_slave_0: left promiscuous mode [ 205.129153][ T1599] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.246188][ T1599]  (unregistering): (slave bond_slave_0): Releasing backup interface [ 205.256077][ T1599]  (unregistering): (slave bond_slave_1): Releasing backup interface [ 205.265858][ T1599]  (unregistering): Released all slaves [ 205.289063][T12743] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 205.299625][T12743] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 205.308876][ T1599] tipc: Left network mode [ 205.337136][T12743] team0: Port device team_slave_0 added [ 205.353162][ T1599] hsr_slave_0: left promiscuous mode [ 205.359806][ T1599] hsr_slave_1: left promiscuous mode [ 205.380413][ T1599] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 205.387885][ T1599] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 205.403249][T12788] loop4: detected capacity change from 0 to 1024 [ 205.419428][T12788] EXT4-fs: Ignoring removed orlov option [ 205.425239][T12788] EXT4-fs: Ignoring removed nomblk_io_submit option [ 205.434109][ T1599] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 205.441550][ T1599] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 205.476293][ T1599] veth0_macvtap: left promiscuous mode [ 205.497618][ T1599] veth1_vlan: left promiscuous mode [ 205.502994][ T1599] veth0_vlan: left promiscuous mode [ 205.516160][T12788] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 205.618014][T11682] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.660372][ T1599] team0 (unregistering): Port device team_slave_1 removed [ 205.688299][ T1599] team0 (unregistering): Port device team_slave_0 removed [ 205.701950][ T6748] smc: removing ib device syz! [ 205.733717][T12743] team0: Port device team_slave_1 added [ 205.763466][T12743] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 205.770495][T12743] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 205.796543][T12743] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 205.821832][T12743] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 205.828834][T12743] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 205.854825][T12743] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 205.904547][T12743] hsr_slave_0: entered promiscuous mode [ 205.911128][T12743] hsr_slave_1: entered promiscuous mode [ 205.942331][ T29] kauditd_printk_skb: 220 callbacks suppressed [ 205.942345][ T29] audit: type=1326 audit(1739837451.297:8879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12803 comm="syz.0.3222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f44becde9 code=0x7ffc0000 [ 205.972912][ T29] audit: type=1326 audit(1739837451.327:8880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12803 comm="syz.0.3222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0f44becde9 code=0x7ffc0000 [ 206.033191][ T29] audit: type=1326 audit(1739837451.327:8881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12803 comm="syz.0.3222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f44becde9 code=0x7ffc0000 [ 206.057069][ T29] audit: type=1326 audit(1739837451.327:8882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12803 comm="syz.0.3222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f44becde9 code=0x7ffc0000 [ 206.081203][ T29] audit: type=1326 audit(1739837451.327:8883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12803 comm="syz.0.3222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0f44becde9 code=0x7ffc0000 [ 206.104734][ T29] audit: type=1326 audit(1739837451.327:8884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12803 comm="syz.0.3222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f44becde9 code=0x7ffc0000 [ 206.128308][ T29] audit: type=1326 audit(1739837451.327:8885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12803 comm="syz.0.3222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f44becde9 code=0x7ffc0000 [ 206.151902][ T29] audit: type=1326 audit(1739837451.327:8886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12803 comm="syz.0.3222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0f44becde9 code=0x7ffc0000 [ 206.175501][ T29] audit: type=1326 audit(1739837451.327:8887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12803 comm="syz.0.3222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f44becde9 code=0x7ffc0000 [ 206.199118][ T29] audit: type=1326 audit(1739837451.327:8888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12803 comm="syz.0.3222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0f44becde9 code=0x7ffc0000 [ 206.367959][T12817] loop6: detected capacity change from 0 to 1024 [ 206.374858][T12817] EXT4-fs: Ignoring removed orlov option [ 206.380730][T12817] EXT4-fs: Ignoring removed nomblk_io_submit option [ 206.406440][T12817] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 206.424022][T12825] FAULT_INJECTION: forcing a failure. [ 206.424022][T12825] name failslab, interval 1, probability 0, space 0, times 0 [ 206.436852][T12825] CPU: 0 UID: 0 PID: 12825 Comm: syz.0.3230 Not tainted 6.14.0-rc3-syzkaller-00012-g2408a807bfc3 #0 [ 206.436882][T12825] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 206.436897][T12825] Call Trace: [ 206.436904][T12825] [ 206.436913][T12825] dump_stack_lvl+0xf2/0x150 [ 206.436957][T12825] dump_stack+0x15/0x1a [ 206.436991][T12825] should_fail_ex+0x24a/0x260 [ 206.437024][T12825] should_failslab+0x8f/0xb0 [ 206.437056][T12825] kmem_cache_alloc_node_noprof+0x59/0x320 [ 206.437082][T12825] ? __alloc_skb+0x10b/0x310 [ 206.437139][T12825] __alloc_skb+0x10b/0x310 [ 206.437179][T12825] netlink_alloc_large_skb+0xad/0xe0 [ 206.437314][T12825] netlink_sendmsg+0x3b4/0x6e0 [ 206.437351][T12825] ? __pfx_netlink_sendmsg+0x10/0x10 [ 206.437448][T12825] __sock_sendmsg+0x140/0x180 [ 206.437477][T12825] ____sys_sendmsg+0x326/0x4b0 [ 206.437507][T12825] __sys_sendmsg+0x19d/0x230 [ 206.437606][T12825] __x64_sys_sendmsg+0x46/0x50 [ 206.437632][T12825] x64_sys_call+0x2734/0x2dc0 [ 206.437670][T12825] do_syscall_64+0xc9/0x1c0 [ 206.437701][T12825] ? clear_bhb_loop+0x55/0xb0 [ 206.437779][T12825] ? clear_bhb_loop+0x55/0xb0 [ 206.437809][T12825] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.437878][T12825] RIP: 0033:0x7f0f44becde9 [ 206.437896][T12825] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 206.437916][T12825] RSP: 002b:00007f0f43257038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 206.437936][T12825] RAX: ffffffffffffffda RBX: 00007f0f44e05fa0 RCX: 00007f0f44becde9 [ 206.437950][T12825] RDX: 0000000000000000 RSI: 0000400000000100 RDI: 0000000000000005 [ 206.437963][T12825] RBP: 00007f0f43257090 R08: 0000000000000000 R09: 0000000000000000 [ 206.437976][T12825] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 206.437989][T12825] R13: 0000000000000000 R14: 00007f0f44e05fa0 R15: 00007ffea9ccd9d8 [ 206.438052][T12825] [ 206.644746][T12827] FAULT_INJECTION: forcing a failure. [ 206.644746][T12827] name failslab, interval 1, probability 0, space 0, times 0 [ 206.657446][T12827] CPU: 1 UID: 0 PID: 12827 Comm: syz.3.3231 Not tainted 6.14.0-rc3-syzkaller-00012-g2408a807bfc3 #0 [ 206.657473][T12827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 206.657488][T12827] Call Trace: [ 206.657555][T12827] [ 206.657562][T12827] dump_stack_lvl+0xf2/0x150 [ 206.657593][T12827] dump_stack+0x15/0x1a [ 206.657653][T12827] should_fail_ex+0x24a/0x260 [ 206.657681][T12827] should_failslab+0x8f/0xb0 [ 206.657771][T12827] kmem_cache_alloc_node_noprof+0x59/0x320 [ 206.657798][T12827] ? __alloc_skb+0x10b/0x310 [ 206.657868][T12827] __alloc_skb+0x10b/0x310 [ 206.657898][T12827] netlink_alloc_large_skb+0xad/0xe0 [ 206.657924][T12827] netlink_sendmsg+0x3b4/0x6e0 [ 206.657978][T12827] ? __pfx_netlink_sendmsg+0x10/0x10 [ 206.658064][T12827] __sock_sendmsg+0x140/0x180 [ 206.658193][T12827] ____sys_sendmsg+0x326/0x4b0 [ 206.658245][T12827] __sys_sendmsg+0x19d/0x230 [ 206.658288][T12827] __x64_sys_sendmsg+0x46/0x50 [ 206.658311][T12827] x64_sys_call+0x2734/0x2dc0 [ 206.658371][T12827] do_syscall_64+0xc9/0x1c0 [ 206.658402][T12827] ? clear_bhb_loop+0x55/0xb0 [ 206.658427][T12827] ? clear_bhb_loop+0x55/0xb0 [ 206.658452][T12827] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.658530][T12827] RIP: 0033:0x7feca1d0cde9 [ 206.658544][T12827] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 206.658561][T12827] RSP: 002b:00007feca0377038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 206.658604][T12827] RAX: ffffffffffffffda RBX: 00007feca1f25fa0 RCX: 00007feca1d0cde9 [ 206.658615][T12827] RDX: 0000000000000000 RSI: 0000400000000180 RDI: 0000000000000004 [ 206.658626][T12827] RBP: 00007feca0377090 R08: 0000000000000000 R09: 0000000000000000 [ 206.658639][T12827] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 206.658653][T12827] R13: 0000000000000000 R14: 00007feca1f25fa0 R15: 00007ffc5186a818 [ 206.658704][T12827] [ 206.861205][T12829] 9pnet_fd: Insufficient options for proto=fd [ 206.890583][T12743] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 206.899723][ T4596] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.920896][T12743] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 206.929948][T12743] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 206.938924][T12743] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 206.989919][T12836] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 207.000926][T12836] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 207.029167][T12836] loop4: detected capacity change from 0 to 164 [ 207.041039][T12743] 8021q: adding VLAN 0 to HW filter on device bond0 [ 207.049695][T12836] rock: directory entry would overflow storage [ 207.049954][T12842] random: crng reseeded on system resumption [ 207.055914][T12836] rock: sig=0x4f50, size=4, remaining=3 [ 207.067619][T12836] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 207.122022][T12843] loop6: detected capacity change from 0 to 2048 [ 207.128906][T12743] 8021q: adding VLAN 0 to HW filter on device team0 [ 207.147307][ T1599] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.149005][T12845] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 207.154412][ T1599] bridge0: port 1(bridge_slave_0) entered forwarding state [ 207.163580][T12845] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 207.172889][ T1599] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.178947][T12843] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 207.184672][ T1599] bridge0: port 2(bridge_slave_1) entered forwarding state [ 207.202152][T12845] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 207.212497][T12845] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 207.221677][T12845] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 207.230192][T12845] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 207.234299][T12843] atomic_op ffff88812c043128 conn xmit_atomic 0000000000000000 [ 207.266432][ T4596] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.291203][T12853] netlink: 68 bytes leftover after parsing attributes in process `syz.6.3240'. [ 207.308256][T12743] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 207.332757][T12858] loop6: detected capacity change from 0 to 1024 [ 207.340712][T12858] EXT4-fs: Ignoring removed orlov option [ 207.346507][T12858] EXT4-fs: Ignoring removed nomblk_io_submit option [ 207.366492][T12858] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 207.417881][ T4596] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.426081][T12743] veth0_vlan: entered promiscuous mode [ 207.434816][T12743] veth1_vlan: entered promiscuous mode [ 207.450434][T12743] veth0_macvtap: entered promiscuous mode [ 207.458287][T12743] veth1_macvtap: entered promiscuous mode [ 207.468703][T12743] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 207.479286][T12743] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.489167][T12743] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 207.499659][T12874] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3243'. [ 207.508586][T12743] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.518406][T12743] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 207.528849][T12743] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.538766][T12743] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 207.549203][T12743] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.560204][T12743] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 207.571456][T12743] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 207.582021][T12743] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.591856][T12743] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 207.602419][T12743] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.612252][T12743] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 207.622685][T12743] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.632596][T12743] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 207.643096][T12743] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.654069][T12743] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 207.666235][T12743] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.675276][T12743] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.684078][T12743] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.692834][T12743] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.707463][T12878] loop6: detected capacity change from 0 to 1024 [ 207.716688][T12878] EXT4-fs: Ignoring removed orlov option [ 207.722389][T12878] EXT4-fs: Ignoring removed nomblk_io_submit option [ 207.756669][T12886] netlink: 'syz.5.3206': attribute type 1 has an invalid length. [ 207.769755][T12886] SELinux: security_context_str_to_sid () failed with errno=-22 [ 207.836957][T12878] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 207.922231][T12895] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3249'. [ 207.940475][ T4596] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.952018][T12903] 9pnet_fd: Insufficient options for proto=fd [ 207.959013][T12895] veth1_macvtap: left promiscuous mode [ 207.966188][T12905] 9pnet: Unknown protocol version 9p200 [ 208.002194][T12909] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 208.008235][T12905] siw: device registration error -23 [ 208.010773][T12909] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 208.028413][T12909] loop6: detected capacity change from 0 to 164 [ 208.038727][T12909] rock: directory entry would overflow storage [ 208.044978][T12909] rock: sig=0x4f50, size=4, remaining=3 [ 208.050638][T12909] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 208.110078][T12913] netlink: 'syz.3.3257': attribute type 1 has an invalid length. [ 208.120597][T12913] SELinux: security_context_str_to_sid () failed with errno=-22 [ 208.836762][T12930] random: crng reseeded on system resumption [ 208.905906][T12936] loop3: detected capacity change from 0 to 512 [ 208.912733][T12936] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities [ 209.050000][T12941] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3268'. [ 209.053160][T12939] netlink: 'syz.0.3267': attribute type 13 has an invalid length. [ 209.106454][T12939] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.113884][T12939] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.122968][T12950] FAULT_INJECTION: forcing a failure. [ 209.122968][T12950] name failslab, interval 1, probability 0, space 0, times 0 [ 209.135738][T12950] CPU: 0 UID: 0 PID: 12950 Comm: syz.4.3271 Not tainted 6.14.0-rc3-syzkaller-00012-g2408a807bfc3 #0 [ 209.135769][T12950] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 209.135785][T12950] Call Trace: [ 209.135869][T12950] [ 209.135877][T12950] dump_stack_lvl+0xf2/0x150 [ 209.135910][T12950] dump_stack+0x15/0x1a [ 209.135936][T12950] should_fail_ex+0x24a/0x260 [ 209.136047][T12950] should_failslab+0x8f/0xb0 [ 209.136077][T12950] kmem_cache_alloc_node_noprof+0x59/0x320 [ 209.136099][T12950] ? __alloc_skb+0x10b/0x310 [ 209.136121][T12950] __alloc_skb+0x10b/0x310 [ 209.136145][T12950] netlink_alloc_large_skb+0xad/0xe0 [ 209.136248][T12950] netlink_sendmsg+0x3b4/0x6e0 [ 209.136317][T12950] ? __pfx_netlink_sendmsg+0x10/0x10 [ 209.136421][T12950] __sock_sendmsg+0x140/0x180 [ 209.136464][T12950] ____sys_sendmsg+0x326/0x4b0 [ 209.136495][T12950] __sys_sendmsg+0x19d/0x230 [ 209.136529][T12950] __x64_sys_sendmsg+0x46/0x50 [ 209.136552][T12950] x64_sys_call+0x2734/0x2dc0 [ 209.136628][T12950] do_syscall_64+0xc9/0x1c0 [ 209.136660][T12950] ? clear_bhb_loop+0x55/0xb0 [ 209.136688][T12950] ? clear_bhb_loop+0x55/0xb0 [ 209.136784][T12950] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 209.136809][T12950] RIP: 0033:0x7fa6d751cde9 [ 209.136826][T12950] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 209.136848][T12950] RSP: 002b:00007fa6d5b81038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 209.136870][T12950] RAX: ffffffffffffffda RBX: 00007fa6d7735fa0 RCX: 00007fa6d751cde9 [ 209.136932][T12950] RDX: 0000000000000000 RSI: 0000400000000100 RDI: 0000000000000005 [ 209.136946][T12950] RBP: 00007fa6d5b81090 R08: 0000000000000000 R09: 0000000000000000 [ 209.136960][T12950] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 209.136974][T12950] R13: 0000000000000000 R14: 00007fa6d7735fa0 R15: 00007ffe9320e378 [ 209.136996][T12950] [ 209.359447][T12939] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 209.369109][T12939] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 209.398125][T12939] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.400479][T12953] netlink: 'syz.4.3272': attribute type 27 has an invalid length. [ 209.407171][T12939] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.424080][T12939] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.433038][T12939] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.474660][T12953] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.481899][T12953] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.522264][T12953] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 209.532626][T12953] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 209.560796][T12953] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.569935][T12953] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.578912][T12953] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.587952][T12953] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.689807][T12966] netlink: 68 bytes leftover after parsing attributes in process `syz.6.3277'. [ 209.750811][T12976] netlink: 'syz.6.3282': attribute type 1 has an invalid length. [ 209.767867][T12976] SELinux: security_context_str_to_sid () failed with errno=-22 [ 209.815710][T12986] random: crng reseeded on system resumption [ 209.951676][T13002] netlink: 68 bytes leftover after parsing attributes in process `syz.6.3290'. [ 210.100207][T13015] netlink: 'syz.6.3297': attribute type 1 has an invalid length. [ 210.109041][T13015] SELinux: security_context_str_to_sid () failed with errno=-22 [ 210.179825][T13022] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3300'. [ 210.382891][T13039] loop6: detected capacity change from 0 to 512 [ 210.389554][T13039] ext3: Unknown parameter 'dont_hash' [ 210.401072][T13039] loop6: detected capacity change from 0 to 512 [ 210.407672][T13039] EXT4-fs: Ignoring removed orlov option [ 210.438373][T13039] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 210.451646][T13039] ext4 filesystem being mounted at /573/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 210.523366][ T4596] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 210.707616][T13052] netlink: 'syz.0.3309': attribute type 1 has an invalid length. [ 210.718233][T13052] SELinux: security_context_str_to_sid () failed with errno=-22 [ 210.772368][T13056] loop0: detected capacity change from 0 to 1024 [ 210.789020][T13056] EXT4-fs: Ignoring removed orlov option [ 210.794794][T13056] EXT4-fs: Ignoring removed nomblk_io_submit option [ 210.825029][T13059] SELinux: security_context_str_to_sid () failed with errno=-22 [ 210.835089][T13056] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 211.040056][T13064] loop6: detected capacity change from 0 to 1024 [ 211.077183][T12111] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 211.093846][T13064] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 211.130678][T13064] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3313'. [ 211.151320][T13064] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3313'. [ 211.313074][ T4596] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 211.645540][T13080] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3318'. [ 211.698190][T13085] random: crng reseeded on system resumption [ 211.709106][T13089] netlink: 'syz.0.3321': attribute type 1 has an invalid length. [ 211.734459][T13089] SELinux: security_context_str_to_sid () failed with errno=-22 [ 211.796587][T13096] SELinux: security_context_str_to_sid () failed with errno=-22 [ 211.801304][T13092] loop5: detected capacity change from 0 to 1024 [ 211.813022][T13092] EXT4-fs: Ignoring removed orlov option [ 211.818817][T13092] EXT4-fs: Ignoring removed nomblk_io_submit option [ 211.838312][T13092] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 211.863875][ T29] kauditd_printk_skb: 191 callbacks suppressed [ 211.863889][ T29] audit: type=1326 audit(1739837457.217:9080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13084 comm="syz.3.3319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feca1d0cde9 code=0x7ffc0000 [ 211.893840][ T29] audit: type=1326 audit(1739837457.217:9081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13084 comm="syz.3.3319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7feca1d0cde9 code=0x7ffc0000 [ 211.917753][ T29] audit: type=1326 audit(1739837457.217:9082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13084 comm="syz.3.3319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feca1d0cde9 code=0x7ffc0000 [ 211.941291][ T29] audit: type=1326 audit(1739837457.217:9083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13084 comm="syz.3.3319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7feca1d0cde9 code=0x7ffc0000 [ 211.964828][ T29] audit: type=1326 audit(1739837457.217:9084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13084 comm="syz.3.3319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feca1d0cde9 code=0x7ffc0000 [ 211.988474][ T29] audit: type=1326 audit(1739837457.217:9085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13084 comm="syz.3.3319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=197 compat=0 ip=0x7feca1d0cde9 code=0x7ffc0000 [ 212.012026][ T29] audit: type=1326 audit(1739837457.217:9086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13084 comm="syz.3.3319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feca1d0cde9 code=0x7ffc0000 [ 212.035851][ T29] audit: type=1326 audit(1739837457.227:9087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13084 comm="syz.3.3319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feca1d0cde9 code=0x7ffc0000 [ 212.089940][T12743] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.157276][T13107] 9pnet: Unknown protocol version 9p200 [ 212.171042][T13107] siw: device registration error -23 [ 212.311663][T13123] netem: change failed [ 212.333652][T13123] syzkaller0: entered promiscuous mode [ 212.339502][T13123] syzkaller0: entered allmulticast mode [ 212.406536][T13129] netlink: 'syz.5.3333': attribute type 1 has an invalid length. [ 212.415397][T13129] SELinux: security_context_str_to_sid () failed with errno=-22 [ 212.462766][T13135] __nla_validate_parse: 1 callbacks suppressed [ 212.462780][T13135] netlink: 68 bytes leftover after parsing attributes in process `syz.5.3336'. [ 212.563498][ T29] audit: type=1400 audit(1739837457.917:9088): avc: denied { create } for pid=13138 comm="syz.6.3338" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 212.618129][T13141] loop3: detected capacity change from 0 to 8192 [ 212.631113][T13133] loop4: detected capacity change from 0 to 512 [ 212.638443][T13133] ext3: Unknown parameter 'dont_hash' [ 212.649213][T13133] loop4: detected capacity change from 0 to 512 [ 212.655843][T13133] EXT4-fs: Ignoring removed orlov option [ 212.665991][T13133] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 212.678930][T13133] ext4 filesystem being mounted at /77/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 212.748306][T11682] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.790177][ T29] audit: type=1326 audit(1739837458.147:9089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13153 comm="syz.3.3341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feca1d0cde9 code=0x7ffc0000 [ 212.867778][T13152] 9pnet: Unknown protocol version 9p200 [ 212.891610][T13152] siw: device registration error -23 [ 212.988757][T13173] loop0: detected capacity change from 0 to 1024 [ 213.004204][T13173] EXT4-fs: Ignoring removed orlov option [ 213.009917][T13173] EXT4-fs: Ignoring removed nomblk_io_submit option [ 213.022382][ T8] lo speed is unknown, defaulting to 1000 [ 213.034356][T13157] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3343'. [ 213.051417][T13163] loop6: detected capacity change from 0 to 512 [ 213.099660][T13163] ext4 filesystem being mounted at /581/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 213.219500][T13186] 9pnet: Unknown protocol version 9p200 [ 213.252943][T13186] siw: device registration error -23 [ 213.272804][T13188] loop0: detected capacity change from 0 to 512 [ 213.314309][T13188] EXT4-fs (loop0): couldn't mount as ext2 due to feature incompatibilities [ 213.339957][T13190] random: crng reseeded on system resumption [ 213.448913][T13183] FAULT_INJECTION: forcing a failure. [ 213.448913][T13183] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 213.462053][T13183] CPU: 0 UID: 0 PID: 13183 Comm: syz.3.3350 Not tainted 6.14.0-rc3-syzkaller-00012-g2408a807bfc3 #0 [ 213.462091][T13183] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 213.462108][T13183] Call Trace: [ 213.462115][T13183] [ 213.462124][T13183] dump_stack_lvl+0xf2/0x150 [ 213.462158][T13183] dump_stack+0x15/0x1a [ 213.462198][T13183] should_fail_ex+0x24a/0x260 [ 213.462319][T13183] should_fail+0xb/0x10 [ 213.462350][T13183] should_fail_usercopy+0x1a/0x20 [ 213.462387][T13183] _copy_from_iter+0xd5/0xd00 [ 213.462475][T13183] ? should_failslab+0x8f/0xb0 [ 213.462512][T13183] ? __kvmalloc_node_noprof+0x72/0x170 [ 213.462586][T13183] ? __virt_addr_valid+0x1ed/0x250 [ 213.462623][T13183] ? __check_object_size+0x364/0x520 [ 213.462665][T13183] file_tty_write+0x329/0x680 [ 213.462693][T13183] tty_write+0x28/0x30 [ 213.462720][T13183] vfs_write+0x77b/0x920 [ 213.462755][T13183] ? __pfx_tty_write+0x10/0x10 [ 213.462806][T13183] ksys_write+0xe8/0x1b0 [ 213.462839][T13183] __x64_sys_write+0x42/0x50 [ 213.462918][T13183] x64_sys_call+0x287e/0x2dc0 [ 213.462948][T13183] do_syscall_64+0xc9/0x1c0 [ 213.462984][T13183] ? clear_bhb_loop+0x55/0xb0 [ 213.463018][T13183] ? clear_bhb_loop+0x55/0xb0 [ 213.463089][T13183] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.463123][T13183] RIP: 0033:0x7feca1d0cde9 [ 213.463185][T13183] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 213.463205][T13183] RSP: 002b:00007feca0377038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 213.463251][T13183] RAX: ffffffffffffffda RBX: 00007feca1f25fa0 RCX: 00007feca1d0cde9 [ 213.463263][T13183] RDX: 0000000000001006 RSI: 0000400000001980 RDI: 0000000000000003 [ 213.463299][T13183] RBP: 00007feca0377090 R08: 0000000000000000 R09: 0000000000000000 [ 213.463313][T13183] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 213.463328][T13183] R13: 0000000000000000 R14: 00007feca1f25fa0 R15: 00007ffc5186a818 [ 213.463350][T13183] [ 213.789805][T13198] loop3: detected capacity change from 0 to 512 [ 213.801505][T13198] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 213.817636][T13198] EXT4-fs (loop3): orphan cleanup on readonly fs [ 213.829468][T13198] EXT4-fs error (device loop3): ext4_acquire_dquot:6927: comm syz.3.3355: Failed to acquire dquot type 1 [ 213.842454][T13198] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.3355: bg 0: block 40: padding at end of block bitmap is not set [ 213.858313][T13198] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 213.867483][T13198] EXT4-fs (loop3): 1 truncate cleaned up [ 213.929211][T13205] SELinux: security_context_str_to_sid () failed with errno=-22 [ 214.136509][T13214] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3362'. [ 214.234993][T13223] netlink: 'syz.5.3365': attribute type 1 has an invalid length. [ 214.247140][T13223] SELinux: security_context_str_to_sid () failed with errno=-22 [ 214.255138][T13230] loop4: detected capacity change from 0 to 512 [ 214.271127][T13230] ext3: Unknown parameter 'dont_hash' [ 214.293419][T13234] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 214.312329][T13209] loop4: detected capacity change from 0 to 512 [ 214.315323][T13236] loop6: detected capacity change from 0 to 1024 [ 214.320964][T13209] EXT4-fs: Ignoring removed orlov option [ 214.331131][T13234] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 214.342221][T13234] loop5: detected capacity change from 0 to 164 [ 214.347643][T13236] EXT4-fs: Ignoring removed orlov option [ 214.354280][T13236] EXT4-fs: Ignoring removed nomblk_io_submit option [ 214.362288][T13234] rock: directory entry would overflow storage [ 214.368514][T13234] rock: sig=0x4f50, size=4, remaining=3 [ 214.374100][T13234] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 214.376253][T13209] ext4 filesystem being mounted at /81/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 214.442737][T13244] SELinux: security_context_str_to_sid () failed with errno=-22 [ 214.843419][T13260] loop3: detected capacity change from 0 to 512 [ 214.850209][T13260] EXT4-fs: Ignoring removed orlov option [ 214.865953][T13260] ext4 filesystem being mounted at /51/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 214.921620][T13269] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3379'. [ 214.965742][T13276] loop3: detected capacity change from 0 to 1024 [ 214.972567][T13276] EXT4-fs: Ignoring removed orlov option [ 214.978385][T13276] EXT4-fs: Ignoring removed nomblk_io_submit option [ 215.047155][T13282] loop3: detected capacity change from 0 to 128 [ 215.053870][T13282] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 215.066973][T13282] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 215.076583][T13278] loop5: detected capacity change from 0 to 512 [ 215.083401][T13278] ext3: Unknown parameter 'dont_hash' [ 215.094268][T13278] loop5: detected capacity change from 0 to 512 [ 215.097976][T13285] SELinux: security_context_str_to_sid () failed with errno=-22 [ 215.100698][T13278] EXT4-fs: Ignoring removed orlov option [ 215.137437][T13278] ext4 filesystem being mounted at /20/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 215.272780][T13296] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3387'. [ 215.320824][T13300] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3388'. [ 215.402755][T13308] netlink: 68 bytes leftover after parsing attributes in process `syz.6.3391'. [ 215.593055][T13318] loop5: detected capacity change from 0 to 512 [ 215.599613][T13318] ext3: Unknown parameter 'dont_hash' [ 215.617221][T13318] loop5: detected capacity change from 0 to 512 [ 215.631132][T13318] EXT4-fs: Ignoring removed orlov option [ 215.648058][T13318] ext4 filesystem being mounted at /26/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 215.878389][T13332] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3401'. [ 215.940167][T13337] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3402'. [ 216.073614][T13349] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3406'. [ 216.153920][T13353] 9pnet: Unknown protocol version 9p200 [ 216.177342][T13353] siw: device registration error -23 [ 216.330289][T13361] FAULT_INJECTION: forcing a failure. [ 216.330289][T13361] name failslab, interval 1, probability 0, space 0, times 0 [ 216.343198][T13361] CPU: 1 UID: 0 PID: 13361 Comm: syz.3.3408 Not tainted 6.14.0-rc3-syzkaller-00012-g2408a807bfc3 #0 [ 216.343228][T13361] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 216.343243][T13361] Call Trace: [ 216.343252][T13361] [ 216.343261][T13361] dump_stack_lvl+0xf2/0x150 [ 216.343296][T13361] dump_stack+0x15/0x1a [ 216.343388][T13361] should_fail_ex+0x24a/0x260 [ 216.343422][T13361] should_failslab+0x8f/0xb0 [ 216.343459][T13361] kmem_cache_alloc_node_noprof+0x59/0x320 [ 216.343528][T13361] ? __alloc_skb+0x10b/0x310 [ 216.343552][T13361] __alloc_skb+0x10b/0x310 [ 216.343577][T13361] netlink_alloc_large_skb+0xad/0xe0 [ 216.343612][T13361] netlink_sendmsg+0x3b4/0x6e0 [ 216.343647][T13361] ? __pfx_netlink_sendmsg+0x10/0x10 [ 216.343710][T13361] __sock_sendmsg+0x140/0x180 [ 216.343752][T13361] ____sys_sendmsg+0x326/0x4b0 [ 216.343783][T13361] __sys_sendmmsg+0x227/0x4b0 [ 216.343917][T13361] __x64_sys_sendmmsg+0x57/0x70 [ 216.343947][T13361] x64_sys_call+0x29aa/0x2dc0 [ 216.343973][T13361] do_syscall_64+0xc9/0x1c0 [ 216.344005][T13361] ? clear_bhb_loop+0x55/0xb0 [ 216.344082][T13361] ? clear_bhb_loop+0x55/0xb0 [ 216.344122][T13361] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.344180][T13361] RIP: 0033:0x7feca1d0cde9 [ 216.344197][T13361] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 216.344271][T13361] RSP: 002b:00007feca0356038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 216.344293][T13361] RAX: ffffffffffffffda RBX: 00007feca1f26080 RCX: 00007feca1d0cde9 [ 216.344309][T13361] RDX: 040000000000009f RSI: 00004000000002c0 RDI: 0000000000000003 [ 216.344324][T13361] RBP: 00007feca0356090 R08: 0000000000000000 R09: 0000000000000000 [ 216.344339][T13361] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 216.344353][T13361] R13: 0000000000000000 R14: 00007feca1f26080 R15: 00007ffc5186a818 [ 216.344387][T13361] [ 216.729196][T13372] SELinux: security_context_str_to_sid () failed with errno=-22 [ 216.773549][T13378] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 216.787737][T13378] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 216.797439][T13380] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 216.806123][T13380] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 216.817194][T13380] loop6: detected capacity change from 0 to 164 [ 216.825449][T13378] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 216.834372][T13378] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 216.846390][T13378] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 216.855186][T13380] rock: directory entry would overflow storage [ 216.861378][T13380] rock: sig=0x4f50, size=4, remaining=3 [ 216.867017][T13380] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 216.876671][T13378] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 216.894854][ T29] kauditd_printk_skb: 194 callbacks suppressed [ 216.894869][ T29] audit: type=1400 audit(1739837462.247:9282): avc: granted { setsecparam } for pid=13377 comm="syz.0.3417" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 216.920439][ T29] audit: type=1400 audit(1739837462.247:9283): avc: granted { setsecparam } for pid=13377 comm="syz.0.3417" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 216.977467][T13385] loop4: detected capacity change from 0 to 512 [ 216.985032][T13385] ext3: Unknown parameter 'dont_hash' [ 216.995185][T13385] loop4: detected capacity change from 0 to 512 [ 217.001829][T13385] EXT4-fs: Ignoring removed orlov option [ 217.027006][T13385] ext4 filesystem being mounted at /86/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 217.053591][ T29] audit: type=1326 audit(1739837462.407:9284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13401 comm="syz.5.3427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5197bdcde9 code=0x7ffc0000 [ 217.093795][ T29] audit: type=1326 audit(1739837462.407:9285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13401 comm="syz.5.3427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5197bdcde9 code=0x7ffc0000 [ 217.117560][ T29] audit: type=1326 audit(1739837462.407:9286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13401 comm="syz.5.3427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5197bdcde9 code=0x7ffc0000 [ 217.141254][ T29] audit: type=1326 audit(1739837462.407:9287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13401 comm="syz.5.3427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5197bdcde9 code=0x7ffc0000 [ 217.164897][ T29] audit: type=1326 audit(1739837462.407:9288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13401 comm="syz.5.3427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5197bdcde9 code=0x7ffc0000 [ 217.188443][ T29] audit: type=1326 audit(1739837462.407:9289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13401 comm="syz.5.3427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5197bdcde9 code=0x7ffc0000 [ 217.212084][ T29] audit: type=1326 audit(1739837462.407:9290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13401 comm="syz.5.3427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5197bdcde9 code=0x7ffc0000 [ 217.235741][ T29] audit: type=1326 audit(1739837462.407:9291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13401 comm="syz.5.3427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5197bdcde9 code=0x7ffc0000 [ 217.335855][T13412] vhci_hcd: invalid port number 0 [ 217.357845][T13416] random: crng reseeded on system resumption [ 217.518597][T13434] loop6: detected capacity change from 0 to 512 [ 217.525542][T13434] EXT4-fs (loop6): couldn't mount as ext2 due to feature incompatibilities [ 217.572842][T13432] loop0: detected capacity change from 0 to 512 [ 217.579435][T13432] ext3: Unknown parameter 'dont_hash' [ 217.589039][T13432] loop0: detected capacity change from 0 to 512 [ 217.596013][T13432] EXT4-fs: Ignoring removed orlov option [ 217.626177][T13432] ext4 filesystem being mounted at /82/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 217.694489][T13440] SELinux: security_context_str_to_sid () failed with errno=-22 [ 217.716598][T13442] __nla_validate_parse: 5 callbacks suppressed [ 217.716610][T13442] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3441'. [ 217.920118][T13455] netlink: 'syz.0.3447': attribute type 1 has an invalid length. [ 217.928846][T13455] SELinux: security_context_str_to_sid () failed with errno=-22 [ 217.953648][T13457] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 217.962317][T13457] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 217.973254][T13457] loop0: detected capacity change from 0 to 164 [ 217.982093][T13457] rock: directory entry would overflow storage [ 217.988331][T13457] rock: sig=0x4f50, size=4, remaining=3 [ 217.993973][T13457] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 218.215778][T13466] xt_CT: No such helper "snmp" [ 218.269861][T13475] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3454'. [ 218.300756][T13479] hub 1-0:1.0: USB hub found [ 218.305568][T13479] hub 1-0:1.0: 8 ports detected [ 218.335349][T13483] loop5: detected capacity change from 0 to 512 [ 218.353360][T13483] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.3458: bg 0: block 35: padding at end of block bitmap is not set [ 218.369799][T13483] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 218.378696][T13483] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.3458: invalid indirect mapped block 4294967295 (level 1) [ 218.393935][T13483] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.3458: invalid indirect mapped block 4294967295 (level 2) [ 218.411865][T13483] EXT4-fs (loop5): 1 truncate cleaned up [ 218.441723][T13491] lo speed is unknown, defaulting to 1000 [ 218.547809][T13510] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3468'. [ 218.559736][T13512] netlink: 'syz.3.3469': attribute type 1 has an invalid length. [ 218.568722][T13512] SELinux: security_context_str_to_sid () failed with errno=-22 [ 218.786988][T13534] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 218.796249][T13534] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 218.807315][T13534] loop0: detected capacity change from 0 to 164 [ 218.816534][T13534] rock: directory entry would overflow storage [ 218.822705][T13534] rock: sig=0x4f50, size=4, remaining=3 [ 218.828294][T13534] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 218.987987][T13543] netlink: 'syz.3.3482': attribute type 1 has an invalid length. [ 218.996866][T13543] SELinux: security_context_str_to_sid () failed with errno=-22 [ 219.140328][T13554] loop4: detected capacity change from 0 to 1024 [ 219.147275][T13554] EXT4-fs: Ignoring removed bh option [ 219.152748][T13554] EXT4-fs: Ignoring removed mblk_io_submit option [ 219.159615][T13554] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 219.170912][T13554] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ee018, mo2=0000] [ 219.180369][T13554] EXT4-fs error (device loop4): ext4_map_blocks:671: inode #3: block 2: comm syz.4.3487: lblock 2 mapped to illegal pblock 2 (length 1) [ 219.194690][T13554] EXT4-fs error (device loop4): ext4_map_blocks:671: inode #3: block 48: comm syz.4.3487: lblock 0 mapped to illegal pblock 48 (length 1) [ 219.210072][T13554] EXT4-fs error (device loop4): ext4_acquire_dquot:6927: comm syz.4.3487: Failed to acquire dquot type 0 [ 219.222428][T13554] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5838: Corrupt filesystem [ 219.233461][T13554] EXT4-fs error (device loop4): ext4_evict_inode:256: inode #11: comm syz.4.3487: mark_inode_dirty error [ 219.247884][T13554] EXT4-fs warning (device loop4): ext4_evict_inode:259: couldn't mark inode dirty (err -117) [ 219.258813][T13554] EXT4-fs (loop4): 1 orphan inode deleted [ 219.287187][ T50] EXT4-fs error (device loop4): ext4_map_blocks:671: inode #3: block 1: comm kworker/u8:3: lblock 1 mapped to illegal pblock 1 (length 1) [ 219.311483][ T50] EXT4-fs error (device loop4): ext4_release_dquot:6950: comm kworker/u8:3: Failed to release dquot type 0 [ 219.330456][ T53] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.389049][ T53] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.427128][ T53] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.452858][T11682] EXT4-fs error (device loop4): __ext4_get_inode_loc:4435: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 219.465909][T13577] loop5: detected capacity change from 0 to 1024 [ 219.471491][T11682] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5838: Corrupt filesystem [ 219.481989][T13577] EXT4-fs: Ignoring removed orlov option [ 219.484530][T11682] EXT4-fs error (device loop4): ext4_quota_off:7194: inode #3: comm syz-executor: mark_inode_dirty error [ 219.487734][T13577] EXT4-fs: Ignoring removed nomblk_io_submit option [ 219.516110][T13559] lo speed is unknown, defaulting to 1000 [ 219.536391][ T53] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.558100][T13584] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=123 sclass=netlink_route_socket pid=13584 comm=syz.0.3496 [ 219.606554][T13589] 9pnet_fd: Insufficient options for proto=fd [ 219.634616][ T53] bridge_slave_1: left allmulticast mode [ 219.640471][ T53] bridge_slave_1: left promiscuous mode [ 219.646166][ T53] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.656506][ T53] bridge_slave_0: left allmulticast mode [ 219.662190][ T53] bridge_slave_0: left promiscuous mode [ 219.667984][ T53] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.721541][T13604] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 219.731218][T13604] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 219.747444][T13604] loop0: detected capacity change from 0 to 164 [ 219.757062][T13604] rock: directory entry would overflow storage [ 219.763270][T13604] rock: sig=0x4f50, size=4, remaining=3 [ 219.768950][T13604] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 219.786101][ T53]  (unregistering): (slave bond_slave_0): Releasing backup interface [ 219.795681][ T53]  (unregistering): (slave bond_slave_1): Releasing backup interface [ 219.805369][ T53]  (unregistering): Released all slaves [ 219.817501][T13559] chnl_net:caif_netlink_parms(): no params data found [ 219.852243][T13559] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.859385][T13559] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.866635][T13559] bridge_slave_0: entered allmulticast mode [ 219.873136][T13559] bridge_slave_0: entered promiscuous mode [ 219.879967][T13559] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.887181][T13559] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.894594][T13559] bridge_slave_1: entered allmulticast mode [ 219.901143][T13559] bridge_slave_1: entered promiscuous mode [ 219.916230][ T53] hsr_slave_0: left promiscuous mode [ 219.922172][ T53] hsr_slave_1: left promiscuous mode [ 219.927867][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 219.935340][ T53] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 219.943062][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 219.950515][ T53] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 219.959958][ T53] veth0_macvtap: left promiscuous mode [ 219.966074][ T53] veth1_vlan: left promiscuous mode [ 219.971384][ T53] veth0_vlan: left promiscuous mode [ 220.040378][ T53] team0 (unregistering): Port device team_slave_1 removed [ 220.050181][ T53] team0 (unregistering): Port device team_slave_0 removed [ 220.089041][T13559] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 220.099636][T13559] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 220.121499][T13559] team0: Port device team_slave_0 added [ 220.128159][T13559] team0: Port device team_slave_1 added [ 220.143987][T13559] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 220.150948][T13559] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 220.176907][T13559] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 220.188233][T13559] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 220.195189][T13559] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 220.221249][T13559] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 220.247030][T13559] hsr_slave_0: entered promiscuous mode [ 220.253103][T13559] hsr_slave_1: entered promiscuous mode [ 220.258913][T13559] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 220.266548][T13559] Cannot create hsr debugfs directory [ 220.332810][T13623] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3510'. [ 220.359924][T13628] netlink: 'syz.0.3511': attribute type 1 has an invalid length. [ 220.369519][T13628] SELinux: security_context_str_to_sid () failed with errno=-22 [ 220.394051][T13630] 9pnet_fd: Insufficient options for proto=fd [ 220.415145][T13632] SELinux: security_context_str_to_sid () failed with errno=-22 [ 220.513374][T13639] loop0: detected capacity change from 0 to 512 [ 220.520799][T13639] EXT4-fs (loop0): couldn't mount as ext2 due to feature incompatibilities [ 220.570063][T13559] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 220.577082][T13643] loop5: detected capacity change from 0 to 1024 [ 220.578743][T13559] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 220.587233][T13643] EXT4-fs: Ignoring removed orlov option [ 220.596139][T13643] EXT4-fs: Ignoring removed nomblk_io_submit option [ 220.604829][T13559] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 220.613611][T13559] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 220.643026][T13559] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.650141][T13559] bridge0: port 2(bridge_slave_1) entered forwarding state [ 220.657522][T13559] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.664661][T13559] bridge0: port 1(bridge_slave_0) entered forwarding state [ 220.674032][T13648] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 220.690104][T13648] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 220.696018][T13559] 8021q: adding VLAN 0 to HW filter on device bond0 [ 220.710020][ T53] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.721303][T13648] loop4: detected capacity change from 0 to 164 [ 220.730331][T13648] rock: directory entry would overflow storage [ 220.730540][ T53] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.736551][T13648] rock: sig=0x4f50, size=4, remaining=3 [ 220.749338][T13648] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 220.763793][T13559] 8021q: adding VLAN 0 to HW filter on device team0 [ 220.774659][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.781788][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 220.792329][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.799424][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 220.873187][T13559] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 221.012276][T13559] veth0_vlan: entered promiscuous mode [ 221.020973][T13559] veth1_vlan: entered promiscuous mode [ 221.037969][T13559] veth0_macvtap: entered promiscuous mode [ 221.046247][T13559] veth1_macvtap: entered promiscuous mode [ 221.069346][T13559] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 221.079963][T13559] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.090241][T13559] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 221.101085][T13559] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.116158][T13559] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 221.124834][T13559] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 221.135318][T13559] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.145238][T13559] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 221.155714][T13559] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.167489][T13559] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 221.181139][T13559] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.190052][T13559] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.198800][T13559] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.207552][T13559] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.231110][T13675] netlink: 'syz.5.3522': attribute type 1 has an invalid length. [ 221.242502][T13675] SELinux: security_context_str_to_sid () failed with errno=-22 [ 221.616173][T13700] netlink: 'syz.6.3529': attribute type 13 has an invalid length. [ 221.658611][T13700] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.661258][T13702] SELinux: security_context_str_to_sid () failed with errno=-22 [ 221.665955][T13700] bridge0: port 1(bridge_slave_0) entered disabled state [ 221.716284][T13700] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 221.727455][T13700] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 221.757104][T13700] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.766136][T13700] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.775100][T13700] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.784033][T13700] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.876231][T13715] netlink: 'syz.6.3535': attribute type 1 has an invalid length. [ 221.885770][T13715] SELinux: security_context_str_to_sid () failed with errno=-22 [ 221.916151][T13717] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3536'. [ 222.264459][T13723] vhci_hcd: invalid port number 0 [ 222.302401][ T29] kauditd_printk_skb: 112 callbacks suppressed [ 222.302418][ T29] audit: type=1326 audit(1739837467.657:9401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13718 comm="syz.5.3537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5197bdcde9 code=0x7ffc0000 [ 222.310070][T13729] loop0: detected capacity change from 0 to 1024 [ 222.332631][ T29] audit: type=1326 audit(1739837467.697:9402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13718 comm="syz.5.3537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5197bdb750 code=0x7ffc0000 [ 222.341358][T13729] EXT4-fs: Ignoring removed orlov option [ 222.368155][T13729] EXT4-fs: Ignoring removed nomblk_io_submit option [ 222.379295][ T29] audit: type=1326 audit(1739837467.737:9403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13718 comm="syz.5.3537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5197bdcde9 code=0x7ffc0000 [ 222.402933][ T29] audit: type=1326 audit(1739837467.737:9404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13718 comm="syz.5.3537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5197bdcde9 code=0x7ffc0000 [ 222.405728][T13732] SELinux: security_context_str_to_sid () failed with errno=-22 [ 222.426418][ T29] audit: type=1326 audit(1739837467.737:9405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13718 comm="syz.5.3537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5197bdcde9 code=0x7ffc0000 [ 222.457774][ T29] audit: type=1326 audit(1739837467.737:9406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13718 comm="syz.5.3537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f5197bdcde9 code=0x7ffc0000 [ 222.481487][ T29] audit: type=1326 audit(1739837467.737:9407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13718 comm="syz.5.3537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5197bdcde9 code=0x7ffc0000 [ 222.505100][ T29] audit: type=1326 audit(1739837467.737:9408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13718 comm="syz.5.3537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=131 compat=0 ip=0x7f5197bdcde9 code=0x7ffc0000 [ 222.528784][ T29] audit: type=1326 audit(1739837467.737:9409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13718 comm="syz.5.3537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5197bdcde9 code=0x7ffc0000 [ 222.552269][ T29] audit: type=1326 audit(1739837467.737:9410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13718 comm="syz.5.3537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=129 compat=0 ip=0x7f5197bdcde9 code=0x7ffc0000 [ 222.580581][T13729] EXT4-fs mount: 30 callbacks suppressed [ 222.580604][T13729] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 222.604670][T13730] vhci_hcd: invalid port number 0 [ 222.616161][T13741] 9pnet_fd: Insufficient options for proto=fd [ 222.675125][T12111] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 222.698918][T13745] loop0: detected capacity change from 0 to 1024 [ 222.705731][T13745] EXT4-fs: Ignoring removed orlov option [ 222.711471][T13745] EXT4-fs: Ignoring removed nomblk_io_submit option [ 222.736059][T13750] 9pnet_fd: Insufficient options for proto=fd [ 222.755575][T13745] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 222.762258][T13754] vhci_hcd: invalid port number 0 [ 222.793187][T13756] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3550'. [ 222.821532][T13758] loop4: detected capacity change from 0 to 164 [ 222.829856][T13758] Unable to read rock-ridge attributes [ 222.832096][T12111] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 222.847708][T13758] Unable to read rock-ridge attributes [ 222.864683][T13760] loop0: detected capacity change from 0 to 2048 [ 222.896241][T13760] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 222.969971][T13770] loop4: detected capacity change from 0 to 512 [ 222.976971][T13770] EXT4-fs (loop4): couldn't mount as ext2 due to feature incompatibilities [ 222.995857][T12111] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.519613][T13776] netlink: 360 bytes leftover after parsing attributes in process `syz.3.3557'. [ 223.556634][T13776] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3557'. [ 223.710084][T13784] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3560'. [ 223.827969][T13793] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3564'. [ 223.903992][T13802] loop4: detected capacity change from 0 to 512 [ 223.910865][T13802] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 223.924266][T13802] EXT4-fs (loop4): 1 truncate cleaned up [ 223.930359][T13802] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 223.963468][T11682] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 224.262162][T13813] 9pnet: Unknown protocol version 9p200 [ 224.284356][T13813] lo speed is unknown, defaulting to 1000 [ 224.290157][T13813] lo speed is unknown, defaulting to 1000 [ 224.296268][T13813] lo speed is unknown, defaulting to 1000 [ 224.303368][T13813] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 224.316725][T13813] lo speed is unknown, defaulting to 1000 [ 224.323184][T13813] lo speed is unknown, defaulting to 1000 [ 224.329635][T13813] lo speed is unknown, defaulting to 1000 [ 224.336401][T13813] lo speed is unknown, defaulting to 1000 [ 224.342649][T13813] lo speed is unknown, defaulting to 1000 [ 224.637360][T13827] 9pnet_fd: Insufficient options for proto=fd [ 224.998922][T13837] loop5: detected capacity change from 0 to 512 [ 225.014099][T13837] ext3: Unknown parameter 'dont_hash' [ 225.025957][T13837] loop5: detected capacity change from 0 to 512 [ 225.038911][T13837] EXT4-fs: Ignoring removed orlov option [ 225.071765][T13837] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 225.086451][T13837] ext4 filesystem being mounted at /62/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 225.161952][T12743] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.246676][T13860] 9pnet_fd: Insufficient options for proto=fd [ 225.756454][T13871] loop0: detected capacity change from 0 to 1024 [ 225.782857][T13871] EXT4-fs: Ignoring removed orlov option [ 225.789159][T13871] EXT4-fs: Ignoring removed nomblk_io_submit option [ 225.840498][T13871] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 225.925904][T13887] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3601'. [ 225.970920][T12111] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.047248][T13898] 9pnet_fd: Insufficient options for proto=fd [ 226.067862][T13900] loop0: detected capacity change from 0 to 164 [ 226.075114][T13900] Unable to read rock-ridge attributes [ 226.081540][T13900] Unable to read rock-ridge attributes [ 226.134349][T13909] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3611'. [ 226.144217][T13909] xt_TPROXY: Can be used only with -p tcp or -p udp [ 226.208608][T13915] loop4: detected capacity change from 0 to 512 [ 226.224067][T13915] EXT4-fs: Ignoring removed mblk_io_submit option [ 226.230814][T13915] EXT4-fs: Ignoring removed oldalloc option [ 226.273419][T13915] EXT4-fs error (device loop4): ext4_xattr_inode_iget:436: comm syz.4.3611: Parent and EA inode have the same ino 15 [ 226.312087][T13915] EXT4-fs error (device loop4): ext4_xattr_inode_iget:436: comm syz.4.3611: Parent and EA inode have the same ino 15 [ 226.340569][T13915] EXT4-fs (loop4): 1 orphan inode deleted [ 226.350223][T13915] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 226.389667][T11682] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.408518][T13927] 9pnet_fd: Insufficient options for proto=fd [ 226.432845][T13933] loop4: detected capacity change from 0 to 164 [ 226.440208][T13933] Unable to read rock-ridge attributes [ 226.446945][T13933] Unable to read rock-ridge attributes [ 226.453083][T13935] loop5: detected capacity change from 0 to 512 [ 226.459942][T13935] EXT4-fs: Ignoring removed orlov option [ 226.475695][T13935] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 226.489606][T13935] ext4 filesystem being mounted at /69/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 226.506308][T13935] bond0: entered allmulticast mode [ 226.514254][T13935] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3621'. [ 226.526683][T13935] bridge0: port 3(batadv1) entered blocking state [ 226.533314][T13935] bridge0: port 3(batadv1) entered disabled state [ 226.540251][T13935] batadv1: entered allmulticast mode [ 226.547724][T13935] batadv1: entered promiscuous mode [ 226.592182][T12743] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.651033][T13956] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 226.659697][T13956] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 226.683405][T13956] loop5: detected capacity change from 0 to 164 [ 226.693109][T13956] rock: directory entry would overflow storage [ 226.699364][T13956] rock: sig=0x4f50, size=4, remaining=3 [ 226.704983][T13956] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 227.011327][T13994] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3629'. [ 227.015415][T13999] 9pnet_fd: Insufficient options for proto=fd [ 227.045543][ T6748] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 227.054932][ T6748] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 227.318745][T14016] loop5: detected capacity change from 0 to 1024 [ 227.327084][T14016] EXT4-fs: Ignoring removed orlov option [ 227.332824][T14016] EXT4-fs: Ignoring removed nomblk_io_submit option [ 227.368259][T14016] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 227.467142][ T29] kauditd_printk_skb: 87 callbacks suppressed [ 227.467158][ T29] audit: type=1400 audit(1739837472.827:9498): avc: denied { connect } for pid=14026 comm="syz.3.3640" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 227.501508][T12743] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 227.559401][T14039] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3643'. [ 227.631486][T14046] SELinux: security_context_str_to_sid () failed with errno=-22 [ 227.670990][T14050] 9pnet_fd: Insufficient options for proto=fd [ 227.716244][T14056] loop5: detected capacity change from 0 to 164 [ 227.724551][T14056] Unable to read rock-ridge attributes [ 227.740704][T14056] Unable to read rock-ridge attributes [ 227.767988][T14058] loop0: detected capacity change from 0 to 1024 [ 227.798432][T14060] __nla_validate_parse: 2 callbacks suppressed [ 227.798451][T14060] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3654'. [ 227.804252][T14058] EXT4-fs: Ignoring removed orlov option [ 227.804727][T14060] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3654'. [ 227.813583][T14058] EXT4-fs: Ignoring removed nomblk_io_submit option [ 227.872610][T14041] loop4: detected capacity change from 0 to 512 [ 227.879409][T14041] ext3: Unknown parameter 'dont_hash' [ 227.889300][T14041] loop4: detected capacity change from 0 to 512 [ 227.896073][T14041] EXT4-fs: Ignoring removed orlov option [ 227.908517][T14058] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 227.935432][T14041] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 227.948078][T14041] ext4 filesystem being mounted at /137/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 227.992279][T12111] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 228.007748][T14070] loop5: detected capacity change from 0 to 764 [ 228.045061][T11682] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 228.054378][T14070] ALSA: seq fatal error: cannot create timer (-19) [ 228.120290][T14078] loop0: detected capacity change from 0 to 2048 [ 228.129250][T14078] EXT4-fs: Ignoring removed i_version option [ 228.146806][T14078] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 228.160041][T14080] syz.5.3659 (14080): attempted to duplicate a private mapping with mremap. This is not supported. [ 228.190678][T14088] random: crng reseeded on system resumption [ 228.306281][T12111] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 228.375251][ T29] audit: type=1326 audit(1739837473.717:9499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14089 comm="syz.4.3662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6d751cde9 code=0x7ffc0000 [ 228.398841][ T29] audit: type=1326 audit(1739837473.717:9500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14089 comm="syz.4.3662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6d751cde9 code=0x7ffc0000 [ 228.422411][ T29] audit: type=1326 audit(1739837473.717:9501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14089 comm="syz.4.3662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa6d751cde9 code=0x7ffc0000 [ 228.445945][ T29] audit: type=1326 audit(1739837473.717:9502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14089 comm="syz.4.3662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6d751cde9 code=0x7ffc0000 [ 228.469508][ T29] audit: type=1326 audit(1739837473.717:9503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14089 comm="syz.4.3662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6d751cde9 code=0x7ffc0000 [ 228.493021][ T29] audit: type=1326 audit(1739837473.717:9504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14089 comm="syz.4.3662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa6d751cde9 code=0x7ffc0000 [ 228.516610][ T29] audit: type=1326 audit(1739837473.717:9505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14089 comm="syz.4.3662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6d751cde9 code=0x7ffc0000 [ 228.540168][ T29] audit: type=1326 audit(1739837473.717:9506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14089 comm="syz.4.3662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6d751cde9 code=0x7ffc0000 [ 228.563670][ T29] audit: type=1326 audit(1739837473.727:9507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14087 comm="syz.6.3661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f503b33cde9 code=0x7ffc0000 [ 228.589593][T14095] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3659'. [ 229.267018][T14103] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3665'. [ 229.297607][T14105] SELinux: security_context_str_to_sid () failed with errno=-22 [ 229.405500][T14109] lo speed is unknown, defaulting to 1000 [ 229.449686][T14111] loop4: detected capacity change from 0 to 512 [ 229.496064][T14111] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.3668: bg 0: block 248: padding at end of block bitmap is not set [ 229.558054][T14111] EXT4-fs error (device loop4): ext4_acquire_dquot:6927: comm syz.4.3668: Failed to acquire dquot type 1 [ 229.636878][T14111] EXT4-fs (loop4): 1 truncate cleaned up [ 229.668887][T14111] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 229.715062][T14111] ext4 filesystem being mounted at /143/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 229.766318][T14111] EXT4-fs error (device loop4): ext4_lookup:1817: inode #2: comm syz.4.3668: deleted inode referenced: 12 [ 229.833013][T11682] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 229.889390][T14116] loop0: detected capacity change from 0 to 512 [ 229.898248][T14116] ext3: Unknown parameter 'dont_hash' [ 229.908207][T14116] loop0: detected capacity change from 0 to 512 [ 229.915110][T14116] EXT4-fs: Ignoring removed orlov option [ 229.932740][T14131] loop4: detected capacity change from 0 to 1024 [ 229.940639][T14116] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 229.955176][T14116] ext4 filesystem being mounted at /131/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 229.966283][T14131] EXT4-fs: Ignoring removed orlov option [ 229.972137][T14131] EXT4-fs: Ignoring removed nomblk_io_submit option [ 230.030607][T14131] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 230.075832][T12111] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 230.099112][T14129] loop5: detected capacity change from 0 to 512 [ 230.106405][T14129] ext3: Unknown parameter 'dont_hash' [ 230.126787][T14140] loop0: detected capacity change from 0 to 164 [ 230.134416][T14129] loop5: detected capacity change from 0 to 512 [ 230.140956][T14129] EXT4-fs: Ignoring removed orlov option [ 230.141745][T14140] Unable to read rock-ridge attributes [ 230.155573][T11682] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 230.168637][T14140] Unable to read rock-ridge attributes [ 230.182486][T14145] loop4: detected capacity change from 0 to 1024 [ 230.189747][T14145] EXT4-fs: Ignoring removed orlov option [ 230.190720][T14129] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 230.195604][T14145] EXT4-fs: Ignoring removed nomblk_io_submit option [ 230.210527][T14129] ext4 filesystem being mounted at /83/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 230.245678][T14145] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 230.269605][T14151] loop0: detected capacity change from 0 to 1024 [ 230.277755][T14151] EXT4-fs: Ignoring removed orlov option [ 230.283515][T14151] EXT4-fs: Ignoring removed nomblk_io_submit option [ 230.301026][T12743] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 230.313525][T14151] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 230.346316][T14156] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3681'. [ 230.375008][T11682] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 230.377376][T12111] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 230.397812][T14158] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3683'. [ 230.524513][T14174] loop6: detected capacity change from 0 to 512 [ 230.546716][T14174] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 230.559435][T14174] ext4 filesystem being mounted at /21/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 230.694621][T13559] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 230.717690][T14184] loop6: detected capacity change from 0 to 164 [ 230.727157][T14184] Unable to read rock-ridge attributes [ 230.736334][T14184] Unable to read rock-ridge attributes [ 230.777733][T14186] loop6: detected capacity change from 0 to 164 [ 230.785200][T14186] Unable to read rock-ridge attributes [ 230.793307][T14186] Unable to read rock-ridge attributes [ 230.821782][T14188] 9pnet_fd: Insufficient options for proto=fd [ 230.850138][T14190] loop6: detected capacity change from 0 to 164 [ 230.857331][T14190] Unable to read rock-ridge attributes [ 230.866446][T14190] Unable to read rock-ridge attributes [ 230.902298][T14192] loop6: detected capacity change from 0 to 1024 [ 230.909331][T14192] EXT4-fs: Ignoring removed orlov option [ 230.915144][T14192] EXT4-fs: Ignoring removed nomblk_io_submit option [ 230.954303][T14194] 9pnet_fd: Insufficient options for proto=fd [ 230.972977][T14192] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 231.024213][T14200] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3696'. [ 231.039825][T13559] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.087416][T14204] FAULT_INJECTION: forcing a failure. [ 231.087416][T14204] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 231.100652][T14204] CPU: 0 UID: 0 PID: 14204 Comm: syz.6.3698 Not tainted 6.14.0-rc3-syzkaller-00012-g2408a807bfc3 #0 [ 231.100678][T14204] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 231.100693][T14204] Call Trace: [ 231.100700][T14204] [ 231.100757][T14204] dump_stack_lvl+0xf2/0x150 [ 231.100790][T14204] dump_stack+0x15/0x1a [ 231.100816][T14204] should_fail_ex+0x24a/0x260 [ 231.100851][T14204] should_fail+0xb/0x10 [ 231.100882][T14204] should_fail_usercopy+0x1a/0x20 [ 231.100969][T14204] _copy_to_user+0x20/0xa0 [ 231.101034][T14204] simple_read_from_buffer+0xa0/0x110 [ 231.101122][T14204] proc_fail_nth_read+0xf9/0x140 [ 231.101160][T14204] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 231.101195][T14204] vfs_read+0x19b/0x6f0 [ 231.101225][T14204] ? __rcu_read_unlock+0x4e/0x70 [ 231.101253][T14204] ? __fget_files+0x17c/0x1c0 [ 231.101360][T14204] ksys_read+0xe8/0x1b0 [ 231.101393][T14204] __x64_sys_read+0x42/0x50 [ 231.101425][T14204] x64_sys_call+0x2874/0x2dc0 [ 231.101458][T14204] do_syscall_64+0xc9/0x1c0 [ 231.101505][T14204] ? clear_bhb_loop+0x55/0xb0 [ 231.101539][T14204] ? clear_bhb_loop+0x55/0xb0 [ 231.101572][T14204] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.101670][T14204] RIP: 0033:0x7f503b33b7fc [ 231.101689][T14204] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 231.101711][T14204] RSP: 002b:00007f50399a7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 231.101734][T14204] RAX: ffffffffffffffda RBX: 00007f503b555fa0 RCX: 00007f503b33b7fc [ 231.101749][T14204] RDX: 000000000000000f RSI: 00007f50399a70a0 RDI: 0000000000000004 [ 231.101763][T14204] RBP: 00007f50399a7090 R08: 0000000000000000 R09: 0000000000000000 [ 231.101797][T14204] R10: 000000002000c044 R11: 0000000000000246 R12: 0000000000000001 [ 231.101809][T14204] R13: 0000000000000000 R14: 00007f503b555fa0 R15: 00007fffe3ce00f8 [ 231.101826][T14204] [ 231.326782][T14210] loop5: detected capacity change from 0 to 164 [ 231.333971][T14210] Unable to read rock-ridge attributes [ 231.340840][T14210] Unable to read rock-ridge attributes [ 231.405433][T14212] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 231.463315][T14221] loop4: detected capacity change from 0 to 512 [ 231.477910][T14221] ================================================================== [ 231.486029][T14221] BUG: KCSAN: data-race in has_bh_in_lru / invalidate_bh_lru [ 231.493421][T14221] [ 231.495744][T14221] write to 0xffff888237c2ba28 of 8 bytes by task 12743 on cpu 0: [ 231.503460][T14221] invalidate_bh_lru+0x8b/0xf0 [ 231.508231][T14221] smp_call_function_many_cond+0x5ab/0xbb0 [ 231.514041][T14221] on_each_cpu_cond_mask+0x3c/0x90 [ 231.519155][T14221] invalidate_bh_lrus+0x2a/0x30 [ 231.524017][T14221] blkdev_flush_mapping+0x9b/0x1a0 [ 231.529144][T14221] bdev_release+0x2f9/0x420 [ 231.533659][T14221] blkdev_release+0x15/0x20 [ 231.538178][T14221] __fput+0x2ac/0x640 [ 231.542171][T14221] ____fput+0x1c/0x30 [ 231.546154][T14221] task_work_run+0x13a/0x1a0 [ 231.550756][T14221] syscall_exit_to_user_mode+0xa8/0x120 [ 231.556309][T14221] do_syscall_64+0xd6/0x1c0 [ 231.560819][T14221] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.566807][T14221] [ 231.569125][T14221] read to 0xffff888237c2ba28 of 8 bytes by task 14221 on cpu 1: [ 231.576753][T14221] has_bh_in_lru+0x35/0x1f0 [ 231.581263][T14221] smp_call_function_many_cond+0x305/0xbb0 [ 231.587074][T14221] on_each_cpu_cond_mask+0x3c/0x90 [ 231.592188][T14221] invalidate_bh_lrus+0x2a/0x30 [ 231.597133][T14221] set_blocksize+0x24f/0x270 [ 231.601727][T14221] sb_set_blocksize+0x2c/0xb0 [ 231.606409][T14221] ext4_fill_super+0x12d9/0x3630 [ 231.611356][T14221] get_tree_bdev_flags+0x29f/0x310 [ 231.616481][T14221] get_tree_bdev+0x1f/0x30 [ 231.620914][T14221] ext4_get_tree+0x1c/0x30 [ 231.625345][T14221] vfs_get_tree+0x56/0x1e0 [ 231.629769][T14221] do_new_mount+0x227/0x690 [ 231.634280][T14221] path_mount+0x49b/0xb30 [ 231.638615][T14221] __se_sys_mount+0x27f/0x2d0 [ 231.643302][T14221] __x64_sys_mount+0x67/0x80 [ 231.647908][T14221] x64_sys_call+0x2c84/0x2dc0 [ 231.652597][T14221] do_syscall_64+0xc9/0x1c0 [ 231.657111][T14221] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.663011][T14221] [ 231.665329][T14221] value changed: 0xffff8881064a03a8 -> 0x0000000000000000 [ 231.672439][T14221] [ 231.674758][T14221] Reported by Kernel Concurrency Sanitizer on: [ 231.680990][T14221] CPU: 1 UID: 0 PID: 14221 Comm: syz.4.3706 Not tainted 6.14.0-rc3-syzkaller-00012-g2408a807bfc3 #0 [ 231.691934][T14221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 231.701993][T14221] ================================================================== [ 231.774227][T14226] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3704'. [ 231.803597][T14224] loop5: detected capacity change from 0 to 512 [ 231.897044][T14221] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 231.911130][T14224] EXT4-fs error (device loop5): ext4_acquire_dquot:6927: comm syz.5.3707: Failed to acquire dquot type 1 [ 231.926632][T14224] EXT4-fs (loop5): 1 truncate cleaned up [ 231.932477][T14221] ext4 filesystem being mounted at /150/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 231.945661][T14224] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 231.990948][T14224] ext4 filesystem being mounted at /88/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 232.118718][T12743] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 232.125970][T11682] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.