last executing test programs: 16m7.486421086s ago: executing program 0 (id=177): socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00'}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r1, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)="68377863ac6ea61666eaa696435a75f1626fe3a3acedcaf71527ff51d446daac757559d2d6fc2b90952355ec6c61d718c91784312b1b4771888a0811895b02ffb658934b0bbd6466c9cc04cc7252f1f1deea5a8b9c6797c8f1263db526cf88899f7ecab544662eb34743cefb660a78cb9468d2900b3cda4cca9d89ab6d341d145acf249276dda272407bc98d9e5431316d468b9e4750f2316589dc4de3157592d27fd723a512c85b08035842b75ec422346f9696f4bb3226b0ca75d135ebd8cae46fb83b71c103e1fdcb1934fd1d28b4916abe2c44e26ea72be426c27052e816212096000155788943b846746ccb492175fc9e01", 0xf4}, {&(0x7f00000003c0)="5453b4b759f9d4f4f33bda880b70e0dadde06223919f4585429ef69078a4956f646ea03bfd4c090a003c01f32b1a175baf38c1eb4572c8b372a4cf9128062e58ff575546876a2804144c3aea98c4a3533396f87e860de8c66bceb0e6b387ec853b7e91c57587d38436637e702ae18eeccefdcd7a3cdd7bfc327b5d619b57d56afe1628b65e2948af5ee0e3f52746a5aff58bb7c6d253a58bf745584d1bc19fe5e42b5534eab9e9d2587b413e81f68b60f56130f82b327f5fe900e3e107bc6b783d1d23a056426d6502133386b51e657046c1c43a2a2c4a7611ee6592a5ee08700d24d832163b3def", 0xe8}, {&(0x7f0000000640)="d48c8225ddfdf2c06c27763617468581389d34126760ba3dd0fe077a7c2ce378dd62cafeeb4ba1493766d09fd561d69a5bf8109ffcd3e43d8c16b9c3fa92d4439c5af1fa4775d01dcf0748a24ab51b52fbe75287a4b9aaa18fd479bdd154b4efe531a242d90a1ca2799c242bfd4ddd8271448d3415bd3a907ad340dc2fa2471393212d02eb25242808cffdc4e7a646211c18ac8602f5fc1e4f82b72871a8d42f37988365ff226c1523bf01617976641421438e", 0xb3}], 0x3}}], 0x1, 0xc0) 16m7.291642919s ago: executing program 0 (id=181): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$UHID_INPUT(r0, 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) 16m7.291385959s ago: executing program 0 (id=182): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000180)={'wpan1\x00', 0x0}) r3 = getpid() r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r4) sendmsg$IEEE802154_ADD_IFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x28, r5, 0x1, 0x4, 0x0, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x24, r1, 0x1, 0x70bd27, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_PID={0x8, 0x1c, r3}]}, 0x24}}, 0x0) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) 16m7.128465721s ago: executing program 0 (id=186): mount$nfs(&(0x7f0000000000)='-:,*\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x101904a, 0x0) 16m7.095378822s ago: executing program 0 (id=187): r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x10) creat(&(0x7f0000000200)='./file1\x00', 0x0) 16m7.025755683s ago: executing program 0 (id=189): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000000000)={0x10, 0x0, 0x2ddfdbff, 0x2ffffffff}, 0xc) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r0, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x1802, &(0x7f00000003c0)={&(0x7f00000004c0)={0x30, r3, 0x1, 0x70bd2c, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x1c}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}, 0x1, 0xff07}, 0x2000000) 15m52.038242075s ago: executing program 32 (id=189): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000000000)={0x10, 0x0, 0x2ddfdbff, 0x2ffffffff}, 0xc) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r0, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x1802, &(0x7f00000003c0)={&(0x7f00000004c0)={0x30, r3, 0x1, 0x70bd2c, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x1c}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}, 0x1, 0xff07}, 0x2000000) 15m36.8589915s ago: executing program 1 (id=1055): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x28, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x9c}}, 0x0) 15m36.843238061s ago: executing program 1 (id=1056): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@newtaction={0x2c4, 0x30, 0x800, 0x71bd2a, 0x25dfdbff, {}, [{0x2b0, 0x1, [@m_gact={0x170, 0x17, 0x0, 0x0, {{0x9}, {0x64, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0x1ae8, 0x5}}, @TCA_GACT_PARMS={0x18, 0x2, {0x65d6, 0x1, 0x8, 0xb, 0x1}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x12c5, 0x20000005}}, @TCA_GACT_PARMS={0x18, 0x2, {0x9, 0x8, 0x0, 0xbd1c, 0x4}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x583, 0x1}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0xaeb, 0x20000000}}]}, {0xe1, 0x6, "0f617356f0a663079abe295a350af32575b7576a2846e5b3b3d9b048dc90bac2c3b40552dc14f7774371c98d6e2763d4fda783e36f45e224474cc6a0e6a530d841c87c70bbf3448d6187a58197fa3ffb0b318a51ba59415ac311a355fe1d08f8de9966d8ba89a56bfbc37c6af7d37dcdeb618f98f29bf3b05a23cefbbf51193614c08c162352d9eaad342b2f307dd8babd71ab8a1c4f80bbbbccc8ce4d369a33f9c6fc16198b2cfa20bc906e08c92c0642310e03f00a0ed12baa1df64f1bf0502f23ff4d6a5e05aa81fa19a9b88c32227231211d5d298a3c63d5549b1a"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}, @m_sample={0x30, 0x12, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}, @m_bpf={0x74, 0x10, 0x0, 0x0, {{0x8}, {0x10, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}]}, {0x3f, 0x6, "bd3a5376a2440c64d6314cc7f446e251aa486d1931d16d2a624d085a1be90b436fdedf917b760ef37b4272893313d629bb02bcd42142bb0469eba6"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_simple={0x98, 0x2, 0x0, 0x0, {{0xb}, {0x3c, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x19, 0x2, 0x6, 0x50, 0x8}}, @TCA_DEF_DATA={0x8, 0x3, 'bpf\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x101, 0x1, 0x7, 0x187e, 0x8}}]}, {0x34, 0x6, "644cfabbe56830b72d4965b0f9c601f7e7e0a9dc5e0e1b03f719e150808ef459921b7b7a784878285ded9060f2020ae3"}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}, 0x2c4}, 0x1, 0x0, 0x0, 0x4000810}, 0x20040800) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 15m36.815874611s ago: executing program 1 (id=1058): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)=0x1) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f00000000c0)={0x2, &(0x7f0000000100)=[{0x50, 0xff, 0x0, 0x3}, {0x6, 0x62}]}) ioctl$PPPIOCSDEBUG(r0, 0x40047440, &(0x7f0000000340)=0x3) write$ppp(r0, &(0x7f0000000500)='?', 0x1) 15m36.698246413s ago: executing program 1 (id=1061): setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x37, 0x0, &(0x7f0000000140)) 15m36.635620394s ago: executing program 1 (id=1065): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000000)=ANY=[@ANYBLOB="010001"]) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 15m36.516257175s ago: executing program 1 (id=1072): setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000000)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000a5f000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0}, 0x68) ptrace(0x10, 0x1) 15m21.491386618s ago: executing program 33 (id=1072): setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000000)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000a5f000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0}, 0x68) ptrace(0x10, 0x1) 6.447627239s ago: executing program 6 (id=9379): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000001540)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020816c2500000000e12020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000006fd6850000002d00000085000000230000"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sys_enter\x00', r0}, 0x10) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) rename(&(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 6.324544571s ago: executing program 6 (id=9381): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2000002, 0x42032, 0xffffffffffffffff, 0x80000000) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='mm_page_free\x00', 0xffffffffffffffff, 0x0, 0xfffffffff7fffffe}, 0x18) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_SCAN(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, 0x0, 0x0, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @void}}}, 0x14}}, 0x20044000) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x66, 0x0, 0x0) bind$netlink(r3, &(0x7f0000001cc0)={0x10, 0x0, 0x25dfdbfb, 0x2000000}, 0xc) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000180)={&(0x7f0000000080)="3ed3f7d0f6b645b4216abacae16ba366", &(0x7f0000000580)=""/232, &(0x7f0000000680)="46ee24c670f782451614334fe340d458168bb5e4b96cdd26a3d238b3bcbc28fdbe002af126faffdd5da816dd8da6870aca99a73df23068127b46454e2835fb15e559957141d8214fafc21439226958d9bec8f3f962c4d2c6c0ea7ccc1d805f0094657f3004053b3f301f8cb1b8efeca808dff980ef6b49878489c161fc140747448177e5bcc61838947b338862c5bca07c26ae480345a663f543aacb4090f2fad964ca64b7030ffc990013050812970b92fe0c1c4b17cc7765bca1b25e04de5c33847cb9f01c03b05a8a5014d4cbe539d1c26044f8ed2424d83e31d4ca6bcb77bcdc0babb9082937da", &(0x7f00000002c0)="c1fc1dfd2d183553e4360abc3143357fa26c2adf29390fe654a4544345ada67376cd9603e334887b01e32e85b01a8fc1dfe3516dbe0210c6194ae3520a5ad9ba4fcb169bd39367395390ea", 0x3a, r0, 0x4}, 0x38) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) 6.219576142s ago: executing program 6 (id=9385): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000300)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000611930000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r4 = syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file1\x00', 0x50, &(0x7f0000000280)={[{@usrquota}, {}, {@nobh}, {@grpjquota}, {@dioread_nolock}]}, 0x1, 0x3eb, &(0x7f0000000880)="$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") pwrite64(0xffffffffffffffff, &(0x7f0000000140)='2', 0xfdef, 0xe7c) ioctl$F2FS_IOC_DEFRAGMENT(r0, 0xc010f508, &(0x7f0000000000)={0x8, 0x2}) ioctl$FS_IOC_GETFSSYSFSPATH(r4, 0x80811501, &(0x7f0000000580)={0x80}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r5 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000640)=@newqdisc={0x94, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r6, {}, {0xffff, 0xffff}, {0x9}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x64, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x1, [], 0x0, [0x8, 0x4], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0f, 0x0, 0xf365, 0x0, 0x9]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x8, 0x2, 0x0, 0x1, [{0x4}]}]}}]}, 0x94}}, 0x0) 5.960648116s ago: executing program 2 (id=9388): shmget(0x1, 0x2000, 0x8, &(0x7f0000ffb000/0x2000)=nil) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r5}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000002c0)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}]}, 0x40}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00'}) r9 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r9, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000002000000ff00000000000000", @ANYRES32, @ANYBLOB='\x00'/15, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000021000000d3829450000000"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000340)='cachefiles_ondemand_close\x00', 0xffffffffffffffff, 0x0, 0x100000000000000}, 0x59) socket$inet_smc(0x2b, 0x1, 0x0) 4.504187737s ago: executing program 2 (id=9389): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x98590, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x5, 0xa5d4}, 0x4c58, 0x5, 0x0, 0x1, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x10b, &(0x7f0000000580)={0x0, 0xd736, 0x8, 0x0, 0x3d9}, &(0x7f00000003c0)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f00000002c0)=0x9, 0x0, 0x4) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/softnet_stat\x00') preadv(r3, &(0x7f0000000080)=[{&(0x7f0000000b40)=""/119, 0x77}], 0x1, 0x4000ffe, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x7101}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0) close(r5) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) socket$unix(0x1, 0x5, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, r7, {0x7, 0xfff2}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x80, 0x6000}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000800)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r12) socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$SIOCSIFHWADDR(r12, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="630000004ec6"}) io_uring_enter(r0, 0x1c3a, 0xe176, 0x22, 0x0, 0x0) 4.286914699s ago: executing program 2 (id=9393): mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x3c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0, 0x0, 0x9}, 0x18) sendmsg$inet(0xffffffffffffffff, 0x0, 0x20000801) fsopen(0x0, 0x0) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000), 0x80402, 0x0) write$cgroup_int(r1, 0x0, 0x2) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r3 = dup2(r2, r2) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1801000000000087f48238d213032633000000000000000000c50000006d00000195"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) process_madvise(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000000)='8', 0x1}], 0x20, 0x14, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6_tcp(0xa, 0x1, 0x0) r8 = msgget$private(0x0, 0xcb) msgsnd(r8, &(0x7f0000000440)=ANY=[@ANYBLOB="030000000000007f43e68d68391b87cf915b4b0447bb000000000000000000000000000000006723eff30f6df77f6ee24065c741ac691d3dbc017b13eb9d7f0464d8f0fe97fc62ec5870c56074"], 0x26, 0x0) msgrcv(r8, 0x0, 0x0, 0x2, 0x1800) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000000c0)={'xfrm0\x00', &(0x7f0000000080)=@ethtool_pauseparam={0x12, 0x7ff, 0x6}}) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000240)={'\x00', 0x40, 0xa, 0x1, 0x40000000, 0x10}) 4.112275902s ago: executing program 5 (id=9394): r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) sendmmsg(r0, &(0x7f0000001500)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @remote, 0x0, 0x1}, 0x80, 0x0}, 0x5b4}], 0x1, 0x4000000) (fail_nth: 1) 3.869526386s ago: executing program 4 (id=9395): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2000002, 0x42032, 0xffffffffffffffff, 0x80000000) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='mm_page_free\x00', 0xffffffffffffffff, 0x0, 0xfffffffff7fffffe}, 0x18) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_SCAN(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, 0x0, 0x0, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @void}}}, 0x14}}, 0x20044000) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x66, 0x0, 0x0) bind$netlink(r3, &(0x7f0000001cc0)={0x10, 0x0, 0x25dfdbfb, 0x2000000}, 0xc) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000180)={&(0x7f0000000080)="3ed3f7d0f6b645b4216abacae16ba366", &(0x7f0000000580)=""/232, &(0x7f0000000680)="46ee24c670f782451614334fe340d458168bb5e4b96cdd26a3d238b3bcbc28fdbe002af126faffdd5da816dd8da6870aca99a73df23068127b46454e2835fb15e559957141d8214fafc21439226958d9bec8f3f962c4d2c6c0ea7ccc1d805f0094657f3004053b3f301f8cb1b8efeca808dff980ef6b49878489c161fc140747448177e5bcc61838947b338862c5bca07c26ae480345a663f543aacb4090f2fad964ca64b7030ffc990013050812970b92fe0c1c4b17cc7765bca1b25e04de5c33847cb9f01c03b05a8a5014d4cbe539d1c26044f8ed2424d83e31d4ca6bcb77bcdc0babb9082937da", &(0x7f00000002c0)="c1fc1dfd2d183553e4360abc3143357fa26c2adf29390fe654a4544345ada67376cd9603e334887b01e32e85b01a8fc1dfe3516dbe0210c6194ae3520a5ad9ba4fcb169bd39367395390ea", 0x3a, r0, 0x4}, 0x38) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) 3.729414998s ago: executing program 5 (id=9397): syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000800)='./bus\x00', 0x4, &(0x7f0000000980)=ANY=[], 0x2, 0x69c, &(0x7f0000000c00)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kmem_cache_free\x00', r1, 0x0, 0xf7}, 0x18) r2 = memfd_create(&(0x7f0000001d40)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1\x817$\x1f\xdd\x85\xb6\x1a\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\xcc\x9a5rJ\x9c\x99\xf7\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8\a\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\x00\xbdnC\xec', 0x0) write$binfmt_script(r2, &(0x7f0000000300)={'#! ', './file0'}, 0xb) execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 3.720544548s ago: executing program 4 (id=9398): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, 0x0}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2000002, 0x42032, 0xffffffffffffffff, 0x80000000) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) 3.631890139s ago: executing program 5 (id=9399): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000580)='./file0\x00', 0x4, &(0x7f0000000980)=ANY=[], 0x1, 0x120b, &(0x7f0000002300)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x70, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) ustat(0x2, &(0x7f0000000000)) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000021000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="120000000c00000004000000b47c000000000000", @ANYRES32, @ANYRESDEC], 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x48) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000000)={0x9}, 0x10) write(0xffffffffffffffff, &(0x7f00000000c0)="1b0000001e005f0214fffffffffffff80700000001000000000000", 0x1b) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000480)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xa0, 0xa0, 0x4, [@ptr={0x7, 0x0, 0x0, 0x2, 0x1}, @volatile={0x6, 0x0, 0x0, 0x9, 0x4}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x4, 0x9abf}}, @restrict={0x9, 0x0, 0x0, 0xb, 0x4}, @union={0xf, 0x4, 0x0, 0x5, 0x1, 0xfffffffd, [{0x1, 0x0, 0x9}, {0xf, 0x0, 0x1}, {0x0, 0x0, 0x9}, {0x0, 0x5, 0x101}]}, @var={0xc, 0x0, 0x0, 0xe, 0x4}, @func={0x2, 0x0, 0x0, 0xc, 0x4}, @ptr={0xb, 0x0, 0x0, 0x2, 0x3}]}, {0x0, [0x5f, 0x2e]}}, &(0x7f00000005c0)=""/223, 0xbc, 0xdf, 0x1, 0x80000000, 0x0, @void, @value}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) rename(&(0x7f0000000040)='./file1\x00', &(0x7f0000001300)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 3.56234269s ago: executing program 4 (id=9400): shmget(0x1, 0x2000, 0x8, &(0x7f0000ffb000/0x2000)=nil) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r5}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000002c0)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}]}, 0x40}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00'}) r9 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r9, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000002000000ff00000000000000", @ANYRES32, @ANYBLOB='\x00'/15, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000021000000d3829450000000"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000340)='cachefiles_ondemand_close\x00', 0xffffffffffffffff, 0x0, 0x100000000000000}, 0x59) socket$inet_smc(0x2b, 0x1, 0x0) 3.266977354s ago: executing program 6 (id=9401): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a37f2", 0x14, 0x2c, 0x0, @remote, @local, {[], {{0x3b00, 0x5, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r1, &(0x7f0000000000)={0x0, 0xf00, &(0x7f0000000040)=[{&(0x7f00000000c0)="5c00000014006b02c84e21100af32c6e0a0675f8d34460400000000000005c1e6182949a36c23d3b48dfd8cdbf9367b498fa51f60a64c9f4d493803792684b71bdd70000b6c0504bb9183132be471b93c91b5d7870743719b4b53cf2", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f"], 0x48) r3 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000001440), 0x0, 0x0) r4 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) write$selinux_user(r4, &(0x7f00000001c0)={'system_u:object_r:tzdata_exec_t:s0', 0x20, 'system_u\x00'}, 0x2c) readv(r3, &(0x7f0000001180)=[{&(0x7f0000000000)=""/186, 0xba}], 0x1) ioctl$IMADDTIMER(r3, 0x80044940, &(0x7f00000000c0)=0x32) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x1b, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="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", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x38, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_clone(0x200e1400, &(0x7f0000000180)="3bc4dc0a7c16f150d4aec4812f2f6e00a7453831d407002cd13d6302f71c44169280792f45dc8b6fbc061da7c931c18fd4b422ffb5", 0x35, &(0x7f00000001c0), &(0x7f00000002c0), &(0x7f0000000300)="e683d749e576969507eabed5e4826e66f9016fc84841617e0463d21653e7be5fbe7a6ca838070cf2a7bb987a190549415896b2fd9ee111a77f8d237919e3f687e39a06197eae1747faad749e6aea015bbdd7ff6eca6d51373352b2f714d17951c2c669d3255129f77cfd3b7b6c2337751adc7ca130726a087d4930e730681e09c09f7d2c2813282a26") r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00'], 0x4c}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r7 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r7, 0x29, 0xd4, &(0x7f0000000080)=0x6, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r6}, 0x10) recvmsg(r1, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x2000) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) 3.266360504s ago: executing program 2 (id=9402): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000007000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r0}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 2.588750584s ago: executing program 2 (id=9404): pipe2(&(0x7f0000000040), 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x204, 0x2581) fcntl$dupfd(r2, 0x0, r2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000400)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x3c, 0x3c, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x3}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x4, [{0x0, 0x4}]}, @typedef={0x0, 0x0, 0x0, 0x5}, @volatile={0x0, 0x0, 0x0, 0x9, 0x3}]}, {0x0, [0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000210081044e81f782db44b90402000000000000000000000510000c0003", 0x21}], 0x1}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x33fe0) ioctl$USBDEVFS_REAPURBNDELAY(r2, 0x4004550c, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000080)=0x1494) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000380)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x10001}, {0x0, 0x800000000001, 0x1}, 0x1000000}, {{@in, 0x4d4, 0x6c}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0xffffffff}}, 0xe8) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000001ffffeb00000000eb658e0d850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xb}]}) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00', r5}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x3804402, &(0x7f0000000240)={[{@user_xattr}, {@abort}, {@resuid}, {@user_xattr}, {@discard}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7b1}}, {@nolazytime}, {@noinit_itable}, {@nomblk_io_submit}, {@nodelalloc}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40000}}]}, 0x1, 0x55f, &(0x7f0000000c80)="$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") r6 = open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x20) fallocate(r6, 0x0, 0x0, 0x1001f0) copy_file_range(r6, 0x0, r6, &(0x7f00000000c0)=0xc615, 0x101, 0x0) fallocate(0xffffffffffffffff, 0x10, 0x6, 0x10001) 2.539770314s ago: executing program 5 (id=9405): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x3, 0x800000000001}, 0x1180, 0x5dd8, 0x2, 0x8, 0x0, 0x1, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x198) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4080) write$P9_RVERSION(r3, &(0x7f0000000240)=ANY=[@ANYRES64=r1, @ANYRESHEX=r0, @ANYBLOB="20a7fa6b41fbad698902571248d449081a8868ff6cc6d6960b89ac9d4958270617cf86aa8ce234dbb9ba1e2444b30650d8b5dd587e7457", @ANYRESDEC=r1], 0x15) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000080)=@usbdevfs_driver={0x5, 0x0, &(0x7f00000006c0)="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"}) r4 = dup(r3) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, 0x0, 0x0) io_setup(0xd83, &(0x7f00000002c0)=0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) io_submit(r6, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0x1000000, &(0x7f0000001980)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) r8 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r8, 0x0, 0xca, &(0x7f0000001740)={0x0, 0x4, 0x0, 0x0, @vifc_lcl_ifindex, @loopback}, 0x10) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r9, 0x0, 0xfffffffffffffffd}, 0x18) setsockopt$MRT_FLUSH(r8, 0x0, 0xd4, &(0x7f0000000000)=0x9, 0x4) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r11, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001940)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r12, @ANYBLOB="01dfffffff9a26000000210000000c00018008000100", @ANYRES32=r10], 0x20}, 0x1, 0x0, 0x0, 0x4000c00}, 0x0) 2.530356444s ago: executing program 4 (id=9406): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x400000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x18) r2 = socket$inet6(0xa, 0x3, 0xff) r3 = open(&(0x7f00000003c0)='.\x00', 0x100, 0x97) getdents(r3, 0x0, 0x0) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x4e22, @multicast1}, 0x4, 0x4, 0x4, 0x4}}, 0x2e) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$rxrpc(0x21, 0x2, 0xa) connect$rxrpc(r5, &(0x7f0000000100)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x100000, @dev={0xfe, 0x80, '\x00', 0x44}}}, 0x24) sendmsg$inet(r5, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000840)="d80000001c0081064e81f782db44b9044a1d08040e00000000000aa1180002000600142603600e1208000f0000810401a8001605200001400200100803600cfab94dcf5c3b37170461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516275631cd632ac071988284891dd709aa5e8d7ce06bbace8017cb8f91d2ec973b8f70c32bfdec4c2ee5a7cef40900000c1fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c16a4683f5aeb4edbb57a5025ccca9e00360dfd9bfc8a4bd1bbab77eb0034b7010044fad95667e006dc91f308fbffea5e889ad8090100", 0xda}], 0x1, 0x0, 0x0, 0x7400}, 0x40480d4) sendmsg$BATADV_CMD_SET_MESH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r6, 0x601, 0x0, 0x25dfdbfd, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x24}}, 0x0) pwrite64(r4, &(0x7f0000000040)="a161f962c4ddeb3fa405bceb9f992f80a52e669f0cd36341c2575005cafea5344839f27c", 0x24, 0x7) setsockopt$inet6_int(r2, 0x29, 0x16, &(0x7f00000001c0)=0x7f, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8001, @void, @value}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000100)='io_uring_register\x00', r8}, 0x10) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000100)='io_uring_register\x00', r9}, 0x10) r10 = syz_io_uring_setup(0x371d, &(0x7f0000000440)={0x0, 0x0, 0x400, 0xa, 0xffffff}, &(0x7f0000000380), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_PERSONALITY(r10, 0x9, 0x0, 0x0) close(r2) 2.372322706s ago: executing program 4 (id=9407): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003f80)=ANY=[@ANYRES32=0x0, @ANYRESOCT, @ANYRES64=0x0, @ANYBLOB="b022fd84099290ab8ebe39cfc17f80bc2926131e9437a1dea9ca1756900531c14b67f7a9edd0d80c7c73649053153a8d8db6d3c0d3b3fa951f57d14071b61a27d968a0ae7bd580d2d9fd9034451c3ecffae80b234e72fb11e3a60c1208bd5262c5009e3e45582ed4203850292ed682fc5e26f5c2af47718ee5b4f2ed68f0b21b813ec22c4c61d3f22f5a01ebea6c484d8ef4ca90180b4587e0bee2f782fef574aa1e0ebc5d9e42452910d03c12feff7848f72ac5430476b9dc2457a09efdc6f181c408abe7b30cccd2c8fb85389e1cacd4f4b29a3d4a55941bf1bb416203732d6712d5a89470876ae6daec66f3fe1b39982c2781b115e20af7ce0a0c7c77db1073adc6e11597bd9f540f90f60b92dc84a5c764379c0b9426ff4f547182502633aa754dcfc63e46c7cef8e3a0c29bf5184ac150e90d884c59cba3dae7c531fb114534292629d8532c0f67ee37f2c349ea8f28199aff2aa335df5db411287a73adfbfff212cf7b6d277a361c55af160d98b5c3db84da37d80e07269c33f60f111ec3c09d8843e1f5499e71de9b48882b9415d45b20393888ec49f307d535580947b5a5b40b465382aa4a579f317d91792f8ed70e9401863bc0a21d7e15f828ae8f13c673a30cba6f10f89c8a018cc8bbe7072ffe1c5d4ef11f0f82cf967faef8608f8b289245f87607917b0c2578dbbe5186ac78b8cd9a5aff567aebe8a73dd547fdc503885a2df4953f3497688b7b1ede6a2e529b25ecc246a7bcb00077059d7e0100aa20cb4d1dbac6eec0a9f803601c799eddb9b271f0530842291167abffb982fe47a496e884ee3c17850f970cb3ac3342b832b8b984e2eb4836afb7727f7310a347add2a1094cfff7b44516593bbf15f3a9e0e2a788e99bdec6706ae9a39b4f8983ae38d4cdf866d9670de91036ea86646f195ec4b4ce462ea624b8875825262a301f9235496b935506109287bbcf4754e3fa637428a2e39a80cd07ffafd756839abddc721421754fcae705ab432fcdd6f3c004dfad9e6bfa87746dd41649dcd2bf1728a3d6d2ddf27a52957422a27f9e478530873d9f1861b71f2378540648b171bcbd44533723ae1a89e56e2f570c0571eb3c66fac65e3abad003a828f2d21cc990e57b80dd3762fe1204eb320591d6a93f9052b80494b2f52ad89d6374cf33040e2484c3384946450bb65835d65bebb4a91c0f82e598e5aa7ff9ba79f27bbd46240287721d2759fa24cec97658d8f17b3f424293f7253b74dae4b966c8089c546936953d8ce63463c26f1e296f56e17e7f890b6001ed5d9f739036842e989b40c02d3fe5227b1fb08a98f1b1f0c336346698e70171e74e40c5304a356b29c947672f8a0535b7ce3a66b276d09ca3d9fff030e41598649a310875f5b5801c471182c1f617c907f06b5f36a1f9294b0f4a95d0fc98682b1e38f2f94fb08f20c5e5c7afaa9fbbd84734a98dd9b33188f6b79334b09ca8e2de56457242f904b114a2c313b193fe421d7fa97da5ab77f363e83b4698bf903022d13826ded79a905f07f97dc0fc4cc290b969ee37075a4a80a0d86d0696eeea2048ebd1a97f8319b3342e515ae5c9e25ee933d926ae0f31af55aeb07da6508756ac9549ba8bbc0095a17cb647df12f926e595a531d7208ef75cfd6239f65a0584121c75e00f7c77990b90e6350b1a84eba4430979bb726ab02050573af29156bed8e243527593dc0c6de41d0b6775818a96ee97d153826a217e8d7e88c6c44baa781a495afeba3882a06f5b1a87b1e8ee1edf404ac3ade6f5af1f6cd22c01506b5f84befb55c86f79b56e4d5754be8f564f57852f991c2275cbf55937666e022c2b2f0d020156152377859b345f74fe66791421e5571a7900df89c9bef5c3cb19113fae5d524ae2edea5ca91baf096c02e1e860c9b5a97882da598ef1e39fcb61d83f997675a772ac37c0fbe65a9d379b9204a915fdb6a7c7cdbd14c0893cd5e8cfd56f4021756d6c6a25b258a69922a41f3c7bc43b69f46293b381a27ae5a3cfcf2526f8eadcb540ec87d6009d6a2939882140f9a447c5be4328a0681aa3002f6a9dfd836b362fb1d423d7c9571aeb50e2a6acb9ab4e85574baf27b1028db0f6647aa7fe995c1fbf8ab422bb15acf9ae6de73972c9549cb601297bbb1c740e8761af16c4785c4827b5dc5e52f4a82000f6f87670ec19fea4e04e564fc83c0ccf1b7fa2bb9ac3e56addfa7f5f6d1d3d3c92dea5de9fa42f1414a769b0cdc40e306fee0ad66573628b83a07fe087fcb3377848e1a7869e592c83bb594284da28a4f5db381059d56e5d4989042dadbbe6000b66184ca8fe9d293f6c70988f3d7b8ee00546a21aaeca498ae06fa7becc5a55914c7a1ab714d955a8b0bd72e8d6bbf4dd451b525fcbc9fb5c10747dee3c755d39be5c2d52345c56185a8d6cee878b72255acabf7dbefafaed94838532fd01ea6244c4ac929de6846084a07d19de7098e62b613775abe326d402f707c4fbb3968b0aac7f1f27537cbdecee19151b310bcbe2c848ef41eea747e85f87d5a160b2cb6b28d137e30c69770c1651e44a66f8e3394bec03c8256b89fd59bec449c6a2bdb351f53d05e463f75b834624b8c7b557dc38a398d726d0846fc2f062b5b32d10af38ce844c6811aaef73ace1d86813bc37433670f6180f9bd112ae00133077fc7a0bd12d7b4b3a53a3c16a9cb0e8112f18691aa3bd2215afdaa1d00c8ea4f4a302ea9ebc94afaad2549f646a8ae66b953fa9cd649a02c4b152cc6c7b55d99ddc3d0fd1fcd84da355eb02581dba9e4d9dd235d2d4c4e094161440e70926221d76ce70c8762485c8b801550cc208e5d1bfd184e622ff0950a912dd47163c838fd562f09ca1690e76da55a471ec67cb83bbb103975bd4683f0393ec8b843f55ba2c0bdc6c90b50031cfe751792bd5d0cb50c8ee93086794e18c4ed66d6bd09b499f8ff2f63a8920701ab0af5b4b75402b1d65b1eb515dc46e181a1699f21e67349c904f02f8358e28faff2ade65703d14dc2774b02acc731eee0941675502d95e0c32a7304f6e9af85ef220daea0de24cf79e35a59412e62835d3032f88d9ed7befd4f708bfd2d236bd188b6f951bbe13e3add84f111e20324a523426611ec15fb376e7306cbec6867f0b945047a4facf78154e68a66a36972d5a18af1403baa9b4b51fddd072ee1f0087add02485b40323bd708b76406e10a927a913d91c5d771d3aeb3cfafb54b1016785c61ed13060d5f1b550676a656b874fd392ae61c5044218df55cbb72b819990ffdb130fb17a14f7cb5a2a8aafedc6526d83762dbf320f15758030eeecf5652dccf04cdc68827400c768a21daff47212b87357ff0bcb36cae4d113a5d9815b07332cb42329321664d93e43e6dcd6115987007fc623088004f8ac943736eb2a045a25b1bbfbbc97571eabf875d924f6b7b0e524b1afa0ff499473aa7976de83b91928e84f8e445728778fe0e5a356a57f09ed254848cec31b7c5c9c7a2fca21befe15ffc9317e96f7ad582684ce625791b99563781bf64983e77be4f1a5893beec4b560fc15e9c21dd0c29bf2879dfaa257ba5ec97957050d5b2c1f25eb4064488c139dbf88f3b7c70850d6fdbf0603cdd4011bf76e0d9ee5c2b128b50dba5689a8f04d4caf62d777eab31aab4b4195da780901352d284885bf417eb05367ee1b5f2f8c5cfe7f0394fb977f3a3f96084375e22ccf6c3ee4659d68d2b1948a4a1783a4db2282c67d39613fa67be4dd144793b76c09dd563ef3d169f34318acbd62d3b2d64f9173d16e9801132918c3390172c6f64d049b4c894d593419e5f4d5a513fc5a64ddcd05b034e6d16fe88ff89a520c464f842ad5a62a6fc46f0e9d56d05d6f5e625d25f537cca62910981dd463255318d8273db13d27fdc6c17c2c54776ba3a246c413957f297b8ecb1adb5c3f1d4d8e4d7705bdb9268f956d2845b68511edd51cdc5d05de5d6d4b3f573592986fed325f1f3c6a9ef7740f9d843e11981d1ca515c7e722ec4d691c5e4d3a146e39bcf407f66418f754bb2508cb4cc843aa9d8eb63850e5b9103682ecc1fc8f972f394be9d31cb9efd0f693d4ec41fe8d0993b45d2f422f9ab604d3371c1bda1daa3206a027c4de5c8f2cf6d1fc7e6d1423a6c71e84f24e0a4dfbf4a331deff2ae649df9681a08846efc9f0001e7ef106f1bfa25ee2799b13f1f076e30e58078d186afb65301497e982478babf143972cc7072f70829b8faee46e56a1451ff7ddd0dd35816bfa29eee361de60fbc3222e89d70f1495be94d0e82072a0e572e3055c905552e6c45d2af3d4f505a99d947667059c1c92ce2d3549077539c4cec4c07337361eeb9f78813bf9e77b0a79f391ae6eb663deb53317f61ef8ddffdbd0ca2d8095c10c106b0968325bc1e88829d92399b809f1b881e9b9f0aeada5c5ee20fd0866070e3d5d41e62f5b6d2d25441babcdf9d3dc8ae3c140a6f352daf00ed38e248b236acd27f24bdebae0f272a5820ef77fb603fe3cc910a9d842129259e61d25dcf546cd770e4cccab470b20fa5f5972a6dd15853483de6e032f9726c166e81e8e0f9db4df397cc4a10b6e58708a31f48d7d2bae4ef92828c37088068b2ae433110dc7c08e6017d8b26e4e0382ca8fa62dc6f53c4cc2f0f78af72335c494f57f2414afe247e2291c395895bb18f701b6f4331feb759110c543dd94a238e782ad552047677558a50e7683d71a9e222fd19a9343e1d64528640a8099dedd19e4c747dda18ff25b15bddf750a54533b6ecfc75ad4a2909485f7fd759d45c74727b2e7300eae71a8784f5dd7f25b4b000ed3254264131cbbae316fb3a3bfbeb309dd2d18104629db354f447791eb882bf0333a520b8dba745b673d071b07e1de3e02fe751a1cf5908435b1a38edbd60483abdb15452c868844ceb96c449ab72999a55c79f9ce7405797142ef7095b4caf99d7bbe51cd4e963e4ffbbd2648761abd3894b5420a0add261ff9c0eff61aafd1ac5195ff15cadb5b0c7ce34d4d2d68146f3dae677e833b8be0f8a876153bb65398def38e4bf539d3a00047b19c483062fc1c2547b7d4f7d99b7035212ccfffeeb21ed7bbd6165ac7fbafbca3cef86fff655305706dd0baa607c50543bb0d66f0f4dbdd9c365fdb7b875dc5e7ee59afccc321ad1e31cc84687afda71231bb2e4dc3ce79ff3ce4bbafed8821a5b71bbf3844f110e2dd9557b596ac792d97506d22c0410bce435e20fa2e2d435361b5b6ac85f44763769723a7b629258f45e10578f70bef2e9c05af8032e357697dfcd30de9b3e953a36d6cb7a03ce69288b663f692793904dd8fb4ab6dc31ddf7f6942ef84c1e68c78bf9974f830ee2fccca84113cee98b47ed41a87fe610c5348dc38d4ada19862772317a70754870347ad87dbbb4c52349b0261aa8e108fcf387b24d4e2a77ba76e8472fd74ab6fa021277a24ef7a48d395b0fd1f9c0cf83bac56b433ffbfe5984a362e337969febf259988162c2b4842bd2fc0b230fee93a085003e615088abfe41889f7b5e0f380ffe55b66c1f7419993c3dd4aac5891494a183ddca2e415e1749489c925715f3c44d94b90d2d735f2b923bdbbbf1646580ab135356a9ee29bc19e73ded9a33798a69d248574e0c9e9f40a1c1ba52bc66a578d08b75f271a9e9f447efede09d6b3b57e0aa6322c18fd6f5e1c9d2753e0a6513cc04124ab89802eb9c504f0e5550868ab597629d7cc7447ed1b01b2ff4cf511aa098710b208b5aa0f595039a2f0e7294c5fe3b0c3e6c40000000000000000000000000000000002588beb10115f4b22f4ac997c86c49201ee9dceb2142ae61555bbbc4ef8cdd468a8ffbe6cbfc8877dd87292c70e10669bc99d8d5710f7719cc2cffc86cd529b6da2511d07aef4a1d9533ab58a76f80ad7fe91a17397d3c83481", @ANYBLOB="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", @ANYRES32=0x0], 0x1, 0x2f4, &(0x7f0000000900)="$eJzs3M9PE1sUwPHTn7QlUBYv7+W95IUb3ehmAtW10hhIjE0kSI0/EpMBptp0bEmnwdQY0ZVb4x/hgrBkR6L8A2zc6caNOzYmLmRhrOn8oKVMKYVKEb6fhMxhzj3tvZ2SnNt02Lrz+nEhZ2k5vSLBmJKAiMi2yIgExRNwj0E7jkqzF3Jx8NvH/2/dvXcjnclMzig1lZ69lFJKDY++e/Is7g5bH5DNkQdbX1NfNv/e/Hfr5+yjvKXyliqWKkpXc6XPFX3ONNRC3ipoSk2bhm4ZKl+0jLKTLzn5nFlaXKwqvbgwlFgsG5al9GJVFYyqqpRUpVxVoYd6vqg0TVNDCUEn2ZWZGT19yOL5Hk8Gv0m5nNZDIhLfk8mu9GVCAACgr1r7/6CoXvb/q+c2KoO314bd/n896tf/X/7kPNau/j8mIr79v/f8vv2/3l3/v7cjOluO1P/jZBiN7jkVaIT1ZDmtJ9y/X9vL+6tjdkD/DwAAAAAAAAAAAAAAAAAAAADAn2C7VkvWarWkd/R+6rmYiDT/3iIkIlePf8bopXbXf6Dz9ccp0LhxLzwsYr5ayi5lnaM7YENETDFkTJLyw34/uOqxd+eRqhuR9+ayW7+8lA3ZmXRO8nb9uCQj0lpfq01dz0yOK8fu+ogkmutTkpS//OtTvvVRuXC+qV6TpHyYl5KYsmDPo1H/fFypazczLfVxexwAAAAAAKeBpnb47t81rV3eqd/ZX7d+PhBq7K/HfPfnYfkv3N+1AwAAAABwVljVpwXdNI3yPkFcOo9xgsgBxrQG4W4GdxF4Kzxolfddhh5P42CB9+S7UjH3ZM9flkAXL0ubICiHqRqtr0YddRXex0btxsj0xPFfQTv4583b7717wCtrsQ4rPXwQ2v8NEHG//gUAAADgFGk0/d6Zif5OCAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAM+g4/jtav9cIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnBS/AgAA//9p2gTn") r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001440)={0xfdb99d11ed387c24, 0xb, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x7f, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000016c0)={0x11, 0xb, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3, 0x0, 0x4}, 0x18) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000160a0103000000000000000002000000540003804000038014000100626f6e645f736c6176655f300000000014000100736974300000000000000000000000001400010073697430000000000000000000000000080002400000000008000140000000000900020073797a31000000000900010073797a30"], 0xa8}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="ac000000", @ANYRES16=r5, @ANYBLOB="01060000000000000000090000002c0004801300010062726f6164636173742d6c696e6b000014000780080006"], 0xac}}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0xffffffff}, 0x1320, 0x0, 0x3, 0x0, 0x0, 0x800001, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r6 = syz_open_dev$usbfs(&(0x7f0000000080), 0x70, 0x101301) ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000180000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000f0850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r7}, 0x10) r8 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$EBT_SO_SET_ENTRIES(r8, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x800000000000, 0x0, 0x0, 0x751, 0x7, 0x200000000080], 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000200000000000000000000000000000000000000000000000000fcffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff00000000"]}, 0x108) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000000000ffdbdf25fe80000000000000000000000000003b0000bb00000000000000000a00603000"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="00000000000000007f00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff0000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000370900000000000000000000000000000100000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="b800000019000100fcffffff00000000ac141423000000000000000000000000fe8000000000000000000000000000aa4e2200004e2400000a00006000000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="00000000000000000104000000000010feffffffffffffff000000400000000000000000000000001a000000000000000100000000000000feffffffffffffff770000000000000003000002000000000000000000000000ff7f00000000000100000000b16b6e000100030000000000"], 0xb8}}, 0x0) sendto$inet6(r10, &(0x7f0000000c00)="339c882cb72e6c380343d266d1c87bf8d745da5b4056105ce95bddfd8283b37e879009bda528454bc046d619b7062244ce58da7a81a5303c75039a662ba4bc453ad7dedce0d410c7e08635dd71ebe182ade2ac22de6ca30e058e554a2f8b3274ce190cde0dd54b2f2cfcea37c0724c414887b9f78ae0e2270522b30c51d80106b7d7dd755023b72e4730a77541aeaafb4d450a063caea797d2c7ac3d5f8339", 0x9f, 0x51, &(0x7f0000000080)={0xa, 0x3, 0x4, @remote, 0x9}, 0x1c) add_key(&(0x7f0000000280)='rxrpc\x00', 0x0, &(0x7f0000000100)="01000000020000000000006bb57ae0fffc5a2a630b00c145", 0x18, 0xffffffffffffffff) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000007c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYRESHEX, @ANYRESHEX=r2], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r12}, 0x10) 2.336140127s ago: executing program 6 (id=9408): bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x1008002, &(0x7f0000000100), 0x1, 0x5d8, &(0x7f00000005c0)="$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") quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x5, 0x9, 0xfffffffffffffffd, 0x6, 0xff, 0xfffffffffffffffd, 0x3f}) sync() r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0xfe, 0x0, 0x7ffc9ffe}]}) rseq(&(0x7f0000000300), 0x20, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x408c34, &(0x7f0000001300)={[], [{@appraise_type}, {@fowner_eq}, {@mask={'mask', 0x3d, '^MAY_READ'}}, {@smackfshat={'smackfshat', 0x3d, 'noinit_itable'}}, {@fowner_eq}, {@obj_type={'obj_type', 0x3d, 'security.capability\x00'}}]}, 0x1, 0x785, &(0x7f0000002400)="$eJzs3c9rHGUfAPDvbJImTfO+yQsvaD0FBA2UbkyNrYKHigcRLBT0bLtstqFmky3ZTWlCwBYRvAgqHgS99OyPevPqj6v+Fx7EUjUtVjxIZDYz7bbZ/GySrebzgck+z8xsnue788zMMzsPswHsW8Ppn0LE4Yh4L4kYzOYnEdHTTHVHnFxZ7/bSYjmdkhiIV39NmuvcWlosR8t7UoeyzKMR8e3bEUcKq8utzy9MlarVymyWH21MXxitzy8cPT9dmqxMVmaOj42PHzvxzInjOxfr7z8sDFx//6Unvzj551uPXHv3uyROxkC2rDWOnTIcw9ln0pN+hPd4cacL67Ck0xVgW9Jds2tlL4/DMRhdzRQA8G/2ZkQsAwD7TOL8DwD7TP49wK2lxXI+dfYbib1144WI6FuJP7+/ubKkO7tn19e8D9p/K7nnzkgSEUM7UP5wRHzy1eufpVPs0n1IgHYuX4mIs0PDq4//yaoxC1v11DrLDmSvw/fNd/yDvfN12v95tl3/r3Cn/xNt+j+9bfbd7dhw/z+4A4Ws40ZfxPMtY9tut8SfGerKcv9p9vl6knPnq5X02PbfiBiJnt40P7ZOGSM3/7q51rLW/t9vH7zxaVp++np3jcLP3b33vmei1Cg9SMytblyJeKx7Vfwtlwd9zb5uu/7v6U2W8fJz73y81rI0/jTefFodf2Sjk3bH8tWIJ9pu/7sj2pJ1xyeONpvDaN4o2vjyx4/61yq/dfunU1p+fi2wF9Lt379+/ENJ63jN+tbL+P7q4DdrLds4/vbt/0DyWjOd9yMulRqN2bGIA8krq+cfu/vePJ+vn8Y/8nj7/T8//rVr/+k14dlNxt99/ZfPtx//7krjn9jC9k9nZA3hTovYKHHt9lTXWuVvbvuPN1Mj2ZzNHP82W8EH+OgAAAAAAAAAAAAAAAAAAAAAAAAAYNMKETEQSaF4J10oFIsrv+H9/+gvVGv1xpFztbmZiWj+VvZQ9BTyR10OtjwPdSx7Hn6eP3Zf/umI+F9EfNh7MMmfozjR4dgBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIHdojd//T/3U2+naAQC7pq/TFQAA9pzzPwDsP87/ALD/9EUklztdCQBgT7n+B4D9x/kfAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAXXb61Kl0Wv5jabGc5icuzs9N1S4enajUp4rTc+ViuTZ7oThZq01WK8VybXqj/1et1S6Mx8zcpdFGpd4Yrc8vnJmuzc00zpyfLk1WzlR69iQqAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANia+vzCVKlarcxKbCOx/HBUo/OJrqw5dbYa/Z0pPXkoNsFOJzp8YAIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4h/g7AAD//7AaJtI=") r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000280)={0x7, &(0x7f0000000240)=[{0x4, 0x7e, 0x3, 0xffff}, {0x1, 0x6, 0x3d, 0x3}, {0x3, 0x8, 0x1, 0x9}, {0xffff, 0x1, 0x80, 0x1a000000}, {0xd, 0x91, 0x5, 0x4}, {0x5, 0xda, 0x3, 0x6}, {0x9, 0x6, 0x7f, 0x4}]}) r3 = socket(0x10, 0x803, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000600)={r6, 0x20, &(0x7f00000005c0)={&(0x7f0000000440)=""/159, 0x9f, 0x0, &(0x7f0000000500)=""/137, 0x89}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xa, 0x13, &(0x7f0000000340)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x1000, &(0x7f0000001400)=""/4096, 0x41100, 0x74, '\x00', 0x0, @fallback=0x5a, r7, 0x8, &(0x7f0000000400)={0x5, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, r7, 0x1, &(0x7f0000000640)=[r7], &(0x7f0000000680)=[{0x3, 0x3, 0x1, 0x9}], 0x10, 0x4, @void, @value}, 0x94) r9 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000e00)=@bpf_lsm={0x1d, 0x4, &(0x7f0000000bc0)=ANY=[@ANYBLOB="180000000100000000000000e59700006441020004000000f164000000000000"], &(0x7f0000000c00)='syzkaller\x00', 0x1, 0x62, &(0x7f0000000c40)=""/98, 0x41100, 0x28, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000cc0)={0x5, 0x1}, 0x8, 0x10, &(0x7f0000000d00)={0x1, 0x6, 0x7, 0xd}, 0x10, 0xffffffffffffffff, 0x0, 0x6, &(0x7f0000000d40)=[r1, r1, r1], &(0x7f0000000d80)=[{0x1, 0x1, 0x8, 0xb}, {0x1, 0x5, 0xd, 0xb}, {0x4, 0x3, 0x0, 0x1}, {0x4, 0x1, 0xe, 0xc}, {0x4, 0x3, 0xc, 0x2}, {0x4, 0x1, 0xd}], 0x10, 0x6, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000f40)={0x14, 0x11, &(0x7f0000001180)=ANY=[@ANYBLOB="1d4b1800040000001844000007000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0096eef0dd6275321e3125c600000000000000b7020000010000008500000086000000186400000900000000000000ff01000018460000ffffffff00000000000000001840000003000000006bc9b9ab0256820bd9fe1b28ee6c6b3511b704a392b16b7ea6a93420562db93f1b7032b30680464ba6e857062e14ac23f8492155a51d6553c9db2113dcd7771a15959580980081d5153dd57b4c45a60ac700519a00849d374ff836e737d612a098e0a78af869682e02737cd9aa63c30200260020dcd839f4c10be19e0accfa2c46ca950ffd41cfca67e0b60b048789931f3ec66b937a4cbedec2c99a295bc2cfecb581cb", @ANYRES32=r1, @ANYBLOB="0000000007000000850000004f0000008510000001000000"], &(0x7f00000002c0)='GPL\x00', 0x9, 0xb5, &(0x7f0000001000)=""/181, 0x40f00, 0x20, '\x00', r5, @fallback=0x27, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0xa, 0x2}, 0x8, 0x10, &(0x7f0000000540)={0x4, 0x2, 0x7, 0x97}, 0x10, r8, r9, 0x4, &(0x7f0000000ec0)=[r1], &(0x7f0000000f00)=[{0x0, 0x3, 0x0, 0xb}, {0x2, 0x4, 0x1, 0x4}, {0x1, 0x5, 0x8, 0xa}, {0x4, 0x2, 0x7, 0x8}], 0x10, 0x3, @void, @value}, 0x94) keyctl$chown(0x4, r2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002bc0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x7, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f0000000980)={[{@jqfmt_vfsv1}, {}, {@barrier_val}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@resuid}, {@nodelalloc}, {@acl}, {@noinit_itable}]}, 0xfc, 0x572, &(0x7f0000003780)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000010c0)=ANY=[@ANYBLOB="5dc8ffff000000796f23eba9c758f317a14a0c7fbc5db7bad8e37aca46230bda36a9"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) 2.303128898s ago: executing program 3 (id=9409): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2000002, 0x42032, 0xffffffffffffffff, 0x80000000) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='mm_page_free\x00', r3, 0x0, 0xfffffffff7fffffe}, 0x18) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_SCAN(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, 0x0, 0x0, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @void}}}, 0x14}}, 0x20044000) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x66, 0x0, 0x0) bind$netlink(r4, &(0x7f0000001cc0)={0x10, 0x0, 0x25dfdbfb, 0x2000000}, 0xc) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000180)={&(0x7f0000000080)="3ed3f7d0f6b645b4216abacae16ba366", &(0x7f0000000580)=""/232, &(0x7f0000000680)="46ee24c670f782451614334fe340d458168bb5e4b96cdd26a3d238b3bcbc28fdbe002af126faffdd5da816dd8da6870aca99a73df23068127b46454e2835fb15e559957141d8214fafc21439226958d9bec8f3f962c4d2c6c0ea7ccc1d805f0094657f3004053b3f301f8cb1b8efeca808dff980ef6b49878489c161fc140747448177e5bcc61838947b338862c5bca07c26ae480345a663f543aacb4090f2fad964ca64b7030ffc990013050812970b92fe0c1c4b17cc7765bca1b25e04de5c33847cb9f01c03b05a8a5014d4cbe539d1c26044f8ed2424d83e31d4ca6bcb77bcdc0babb9082937da", &(0x7f00000002c0)="c1fc1dfd2d183553e4360abc3143357fa26c2adf29390fe654a4544345ada67376cd9603e334887b01e32e85b01a8fc1dfe3516dbe0210c6194ae3520a5ad9ba4fcb169bd39367395390ea", 0x3a, r0, 0x4}, 0x38) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) 2.12823857s ago: executing program 3 (id=9410): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, 0x0}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2000002, 0x42032, 0xffffffffffffffff, 0x80000000) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) 1.850964954s ago: executing program 4 (id=9411): mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x3c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0, 0x0, 0x9}, 0x18) sendmsg$inet(0xffffffffffffffff, 0x0, 0x20000801) fsopen(0x0, 0x0) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000), 0x80402, 0x0) write$cgroup_int(r1, 0x0, 0x2) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r3 = dup2(r2, r2) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1801000000000087f48238d213032633000000000000000000c50000006d00000195"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6_tcp(0xa, 0x1, 0x0) r8 = msgget$private(0x0, 0xcb) msgsnd(r8, &(0x7f0000000440)=ANY=[@ANYBLOB="030000000000007f43e68d68391b87cf915b4b0447bb000000000000000000000000000000006723eff30f6df77f6ee24065c741ac691d3dbc017b13eb9d7f0464d8f0fe97fc62ec5870c56074"], 0x26, 0x0) msgrcv(r8, 0x0, 0x0, 0x2, 0x1800) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000000c0)={'xfrm0\x00', &(0x7f0000000080)=@ethtool_pauseparam={0x12, 0x7ff, 0x6}}) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000240)={'\x00', 0x40, 0xa, 0x1, 0x40000000, 0x10}) 1.623566137s ago: executing program 3 (id=9412): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r2, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00'}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) 1.358468851s ago: executing program 2 (id=9413): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000000)={[{@discard}, {@data_err_ignore}]}, 0xfe, 0x55b, &(0x7f0000000980)="$eJzs3c9vFFUcAPDvbFt+FaUkhKgH04SDGGRLW39g4gGPRokkesdNOzSkW5Z0t4RWEuEgFy+GmBgjifEP8O6R+A/4V5AoCTGk0YOXNbOdhaXdH6UsdGU/n2TgvXmzvHkz8328t283G8DQmsz+KES8GhHfJhGHWspGIy+c3Dhu/cG1uWxLol7/7K8kknxf8/gk/3s8z7wSEb99HXGisLXe6uraYqlcTpfz/FRt6fJUdXXt5MWl0kK6kF6amZ09/c7szPvvvbv1xXt31tY3z/3zw6d3Pjr9zbH173+5d/hWEmfiYF7W2o6ncL01MxmT+TUZizObDpzuQ2WDJNntE2BHRvI4H4usDzgUI3nUAy++ryKiDgypRPzDkGqOA5pz+67z4PqLN8u7/+HGBGhr+5ON90ZiX2NudGA9eWxmlF2JiT7Un9Xx65+3b2Vb9O99CICert+IiFOjo4/1fy9HS/+3c6e2cczmOvR/8PzcycY/b+1tM/4pPBz/RJvxz3ib2N2J3vFfuNeHajrKxn8ftB3/Ply0mhjJcy81xnxjyYWL5TTr27Ju8niM7c3y3dZzTq/frXcqax3/ZVtWf3MsmJ/HvdFN613zpVrpadrc6v6NiNd6jH+TNvc/ux7ntlnH0fT2653Kerf/2ar/HPFG2/v/aK6TdF+fnGo8D1PNp2Krv28e/b1T/bvd/uz+H+je/omkdb22+uR1/LTv37RT2WSSL5o+4fO/J/m8kd6T77taqtWWpyP2JJ9s3T/z6LXNfPP4rP3Hj7WP/27P//6I+GKb7b955GbHQwfh/s8/0f3vkKgnHYvufvzlj53q317/93YjdTzfs53+r8uZPpZ4mmsHAAAAAAAAg6YQEQcjKRQfpguFYnHj8x1H4kChXKnWTlyorFyaj8Z3ZSdirNBc6R5v+TzEdP552GZ+ZlN+NiIOR8R3I/sb+eJcpTy/240HAAAAAAAAAAAAAAAAAACAATHe4fv/mT9GdvvsgGfOT37D8OoZ//34pSdgIPn/H4aX+IfhJf5heIl/GF7iH4aX+IfhJf5heIl/AAAAAAAAAAAAAAAAAAAAAAAAAAAA6KtzZ89mW339wbW5LD9/ZXVlsXLl5HxaXSwurcwV5yrLl4sLlcpCOS3OVZZ6/XvlSuXy9EysXJ2qpUltqrq6dn6psnKpdv7iUmkhPZ+OPZdWAQAAAAAAAAAAAAAAAAAAwP9LdXVtsVQup8sSEjtKjA7GaUj0ObHbPRMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPPJfAAAA//9j0zaD") syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x48a, &(0x7f00000000c0)={[{@jqfmt_vfsold}, {@usrjquota, 0x22}, {@errors_continue}, {@noload}, {@delalloc}, {@usrjquota, 0x22}, {@errors_continue}, {@auto_da_alloc}, {@dax}]}, 0x0, 0x44e, &(0x7f0000000900)="$eJzs3M1vG0UbAPDHdpw0bfMmbykfDS0ECiLiI2nSD3rgUgQSB5CQ4FDEKSRpFeo2qAkSrSIIHMIRVeKOOCLxF3ChXBBwQuIKd4QUoVwonIzW3k3dxE7ixIlL/ftJm8x4xpp5dnfs8azXAXSsoeRPLuJgRPwaEf3V7J0Vhqr/bq0sTP69sjCZi3L5jT9zlXp/rSxMZlWz5x2oZsrlDdpdejtiolSavprmR+cvvzc6d+36czOXJy5OX5y+Mn727KmTx7rPjJ9uSZx9SV8HP5w9euSVt268Nnn+xjs/fp3092BaXhtHqwxV925dT7a6sTbrq0nnutrYEZpSiIjkcBUr478/CtG7WtYfL3/S1s4Bu6pczpd7GhcvloF7WDJRBzpR9kaffP7Ntj2aetwVls/F6jrGrXSrlnRFPq1TTD8j7YahiDi/+M8XyRa7tA4BAFDr5rmIeLbe/C8fD9TU+196bWggIv4fEYci4r6IOBwR90dU6j4YEQ812f7aKyTr5z/l/m0FtkXJ/O+F9NrWnfO/bPYXA4U011eJv5i7MFOaPpHuk+Eo9iT5sQ3a+O6lXz5rVFY7/0u2pP1sLpj244+uNQt0UxPzEzuJudbyxxGDXfXiz63OeZP58ZGIGNxmGzNPf3W0Udnm8W+gBZPy8pcRT1WP/2KsiT+Ta3h9cuz5M+OnR/dFafrEaHZWrPfTz0uvN2p/R/G3wPLNcuyve/6vxj+Q2xcxd+36pcr12rnm21j67dOGn2m2e/53596spLvTxz6YmJ+/OhbRnXt1/ePjt5+b5bP6yfk/fLz++D8Ut/fEwxGRnMTHIuKRiHg07ftjEfF4RBzfIP4fXnzi3ebj32BVvoWS+Kc2O/5Re/ybTxQuff9N8/FnkuN/qpIaTh/ZyuvfVju4k30HAAAA/xX5ynfgc/mR1XQ+PzJS/Q7/4difL83OzT9zYfb9K1PV78oPRDGfrXT116yHjqVrw1l+fE3+ZLpu/Hmht5IfmZwtTbU7eOhwBxqM/8TvhXb3Dth17teCzmX8Q+cy/qFzGf/QuYx/6Fz1xv9HbegHsPc2ef/v3at+AHvP/B86l/EPncv4h47U8N74/I5u+ZdoU+Lb7p39VsPWE5G/S0K+ZxLFqFvUteUfs9hmoqduUbtfmQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFrj3wAAAP//j57jFA==") prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc0004}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, @void, @value}, 0x94) r0 = socket(0x2, 0x5, 0x0) sendmmsg$inet_sctp(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xc, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="30000000000000008400000001000000000000000c00"], 0x30}], 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x2, 0xbbdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r1, 0x0, &(0x7f0000000040)='./file0\x00', 0x64, 0x183000, 0x23456}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) io_uring_enter(r1, 0x47f6, 0x0, 0x2, 0x0, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32=0x0, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000190d00"/27], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kfree\x00', r5}, 0x10) setrlimit(0x9, &(0x7f0000000000)) io_setup(0x2004, &(0x7f0000000680)) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r6, 0x560f, &(0x7f00000002c0)={0xb, 0x0, 0xfdfd}) 1.358188281s ago: executing program 3 (id=9414): r0 = socket$kcm(0xa, 0x5, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) sendmsg$kcm(r0, &(0x7f0000000600)={&(0x7f0000000380)=@in6={0xa, 0x0, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x100000}, 0x80, &(0x7f0000000240)=[{0x0}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="18000000000000008400000000000000620000000000010020000000000000008400000008"], 0x38}, 0x0) 1.231342293s ago: executing program 6 (id=9415): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000580)='./file0\x00', 0x4, &(0x7f0000000980)=ANY=[], 0x1, 0x120b, &(0x7f0000002300)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x70, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) ustat(0x2, &(0x7f0000000000)) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000021000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="120000000c00000004000000b47c000000000000", @ANYRES32, @ANYRESDEC], 0x50) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000000)={0x9}, 0x10) write(r4, &(0x7f00000000c0)="1b0000001e005f0214fffffffffffff80700000001000000000000", 0x1b) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000480)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xa0, 0xa0, 0x4, [@ptr={0x7, 0x0, 0x0, 0x2, 0x1}, @volatile={0x6, 0x0, 0x0, 0x9, 0x4}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x4, 0x9abf}}, @restrict={0x9, 0x0, 0x0, 0xb, 0x4}, @union={0xf, 0x4, 0x0, 0x5, 0x1, 0xfffffffd, [{0x1, 0x0, 0x9}, {0xf, 0x0, 0x1}, {0x0, 0x0, 0x9}, {0x0, 0x5, 0x101}]}, @var={0xc, 0x0, 0x0, 0xe, 0x4}, @func={0x2, 0x0, 0x0, 0xc, 0x4}, @ptr={0xb, 0x0, 0x0, 0x2, 0x3}]}, {0x0, [0x5f, 0x2e]}}, &(0x7f00000005c0)=""/223, 0xbc, 0xdf, 0x1, 0x80000000, 0x0, @void, @value}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) rename(&(0x7f0000000040)='./file1\x00', &(0x7f0000001300)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 1.189720903s ago: executing program 3 (id=9416): shmget(0x1, 0x2000, 0x8, &(0x7f0000ffb000/0x2000)=nil) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r5}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000002c0)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}]}, 0x40}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00'}) r9 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r9, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000002000000ff00000000000000", @ANYRES32, @ANYBLOB='\x00'/18, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000021000000d3829450000000"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000340)='cachefiles_ondemand_close\x00', 0xffffffffffffffff, 0x0, 0x100000000000000}, 0x59) socket$inet_smc(0x2b, 0x1, 0x0) 186.567127ms ago: executing program 3 (id=9417): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000d00000000080000000850000006d00000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f00000000c0)='netlink_extack\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x3c, r2, 0xd0b, 0x70bd2b, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x801}, 0x44000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bf"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x18, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x203, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3, 0x0, 0xffffffffffffffff}, 0x13) sendmsg$NL80211_CMD_DEL_STATION(r1, &(0x7f0000001540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000780)={&(0x7f00000014c0)={0x44, 0x0, 0x8, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8, 0x60}}}}, [@NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0xd36}, @NL80211_ATTR_STA_VLAN={0x8}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x44}, 0x1, 0x0, 0x0, 0x8085}, 0x8000) syz_emit_ethernet(0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaa0000c00000000800450004000000000000069078ac1414bbac1414aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5400000090780000"], 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x759, &(0x7f00000004c0)={[{@noload}, {@noblock_validity}, {@discard}, {@errors_remount}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2}, 0x0}, {@nouid32}, {@noload}, {@journal_checksum}, {@mblk_io_submit}, {@minixdf}, {@usrjquota}, {@nolazytime}, {@journal_dev={'journal_dev', 0x3d, 0x765}}, {@norecovery}, {@nobarrier}, {@data_writeback}, {@resgid}], [{@audit}, {@uid_lt={'uid<', 0xee01}}], 0x2c}, 0xa, 0x516, &(0x7f0000000f80)="$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") r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000b80)=ANY=[@ANYBLOB="4c000000100039042abd70000000000000000000", @ANYRES32=r5, @ANYBLOB="01180200031100002c0012800e00010069703665727370616e000000180002800400120008000100a0"], 0x4c}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9, 0x0, 0x0, 0x4000000}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000dd0000000000003b810000850000006d000000a50000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000006c0)='f2fs_writepages\x00', r3, 0x0, 0x409c}, 0x18) r7 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r7, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e20, @remote}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) sendmsg$kcm(r7, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0xffff, 0x2, 0x10, {0x2, 0x4e21, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x20000000) sendmsg$kcm(r7, &(0x7f0000000100)={&(0x7f00000002c0)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x15}}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="1800000000000099a593e1000100000051d833483cc75d51900000000000000004000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319e2e66d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000140), 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x13f, 0x3}}, 0x20) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0xa00008, &(0x7f0000000040), 0x1, 0x7ba, &(0x7f00000007c0)="$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") symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 106.506569ms ago: executing program 5 (id=9418): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f00000000c0), r2, 0x0, 0x2, 0x4}}, 0x20) 0s ago: executing program 5 (id=9419): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000d00000000080000000850000006d00"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f00000000c0)='netlink_extack\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x3c, r2, 0xd0b, 0x70bd2b, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x801}, 0x44000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x18, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0xfffffd35, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x203, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3, 0x0, 0xffffffffffffffff}, 0x13) sendmsg$NL80211_CMD_DEL_STATION(r1, &(0x7f0000001540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000780)={&(0x7f00000014c0)={0x44, 0x0, 0x8, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8, 0x60}}}}, [@NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0xd36}, @NL80211_ATTR_STA_VLAN={0x8}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x44}, 0x1, 0x0, 0x0, 0x8085}, 0x8000) syz_emit_ethernet(0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaa0000c00000000800450004000000000000069078ac1414bbac1414aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5400000090780000"], 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x759, &(0x7f00000004c0)={[{@noload}, {@noblock_validity}, {@discard}, {@errors_remount}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2}, 0x0}, {@nouid32}, {@noload}, {@journal_checksum}, {@mblk_io_submit}, {@minixdf}, {@usrjquota}, {@nolazytime}, {@journal_dev={'journal_dev', 0x3d, 0x765}}, {@norecovery}, {@nobarrier}, {@data_writeback}, {@resgid}], [{@audit}, {@uid_lt={'uid<', 0xee01}}], 0x2c}, 0xa, 0x516, &(0x7f0000000f80)="$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") socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9, 0x0, 0x0, 0x4000000}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000dd0000000000003b810000850000006d000000a50000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r5, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e20, @remote}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x13f, 0x3}}, 0x20) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0xa00008, &(0x7f0000000040), 0x1, 0x7ba, &(0x7f00000007c0)="$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") symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') kernel console output (not intermixed with test programs): Enslaving as an active interface with an up link [ 949.577742][ T7429] hsr_slave_0: left promiscuous mode [ 949.588783][ T7429] hsr_slave_1: left promiscuous mode [ 949.603102][ T7429] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 949.610811][ T7429] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 949.621250][ T7429] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 949.628963][ T7429] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 949.644361][ T7429] veth1_vlan: left promiscuous mode [ 949.649750][ T7429] veth0_vlan: left promiscuous mode [ 949.659364][T21452] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 949.690688][T32142] netlink: 24 bytes leftover after parsing attributes in process `syz.5.8884'. [ 949.747286][ T7429] team0 (unregistering): Port device team_slave_1 removed [ 949.757960][ T7429] team0 (unregistering): Port device team_slave_0 removed [ 949.803338][T32052] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 949.844871][T32151] netlink: 'syz.4.8891': attribute type 12 has an invalid length. [ 949.852894][T32151] netlink: 172 bytes leftover after parsing attributes in process `syz.4.8891'. [ 949.855220][T24506] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 949.882215][T32155] loop6: detected capacity change from 0 to 1024 [ 949.897709][T32052] team0: Port device team_slave_0 added [ 949.903928][T32157] SELinux: syz.5.8892 (32157) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 949.904727][T32052] team0: Port device team_slave_1 added [ 949.929954][T32155] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 949.945686][T32052] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 949.952783][T32052] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 949.979333][T32052] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 950.011259][T32052] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 950.018300][T32052] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 950.045129][T32052] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 950.058481][T32163] loop4: detected capacity change from 0 to 1024 [ 950.081396][T32164] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 950.100713][T32163] EXT4-fs: Ignoring removed nomblk_io_submit option [ 950.111440][T32155] netlink: 16 bytes leftover after parsing attributes in process `syz.6.8894'. [ 950.130788][T32163] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 950.148217][T32052] hsr_slave_0: entered promiscuous mode [ 950.159959][T27106] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 950.177960][T32052] hsr_slave_1: entered promiscuous mode [ 950.188618][T32052] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 950.204782][T32168] loop6: detected capacity change from 0 to 1024 [ 950.211551][T32052] Cannot create hsr debugfs directory [ 950.250574][T32168] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 950.274447][T32168] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.8895: bg 0: block 88: padding at end of block bitmap is not set [ 950.341216][T27106] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 950.431766][T32173] syzkaller0: entered promiscuous mode [ 950.437677][T32173] syzkaller0: entered allmulticast mode [ 950.466984][T32173] tipc: Started in network mode [ 950.471985][T32173] tipc: Node identity , cluster identity 4711 [ 950.478132][T32173] tipc: Failed to obtain node identity [ 950.483838][T32173] tipc: Enabling of bearer rejected, failed to enable media [ 950.581386][T32177] loop2: detected capacity change from 0 to 164 [ 950.598835][T32177] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 950.616539][T32177] syz.2.8898: attempt to access beyond end of device [ 950.616539][T32177] loop2: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 950.632763][T32177] syz.2.8898: attempt to access beyond end of device [ 950.632763][T32177] loop2: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 950.680016][T32052] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 950.690986][T21452] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 950.702228][T32052] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 950.744063][T32052] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 950.778951][T32052] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 950.985830][T32198] netlink: 36 bytes leftover after parsing attributes in process `syz.2.8904'. [ 951.099112][T32199] loop6: detected capacity change from 0 to 1024 [ 951.118270][T32201] loop4: detected capacity change from 0 to 512 [ 951.157009][T32201] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 951.171838][T32199] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 951.201845][T32201] ext4 filesystem being mounted at /593/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 951.223821][T32199] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.8906: bg 0: block 88: padding at end of block bitmap is not set [ 951.294279][T32201] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8908'. [ 951.351629][T32052] 8021q: adding VLAN 0 to HW filter on device bond0 [ 951.371242][T27106] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 951.387271][T32052] 8021q: adding VLAN 0 to HW filter on device team0 [ 951.397651][ T2918] bridge0: port 1(bridge_slave_0) entered blocking state [ 951.405040][ T2918] bridge0: port 1(bridge_slave_0) entered forwarding state [ 951.406778][T32210] netlink: 'syz.5.8910': attribute type 12 has an invalid length. [ 951.420416][T32210] netlink: 172 bytes leftover after parsing attributes in process `syz.5.8910'. [ 951.432503][ T2918] bridge0: port 2(bridge_slave_1) entered blocking state [ 951.439740][ T2918] bridge0: port 2(bridge_slave_1) entered forwarding state [ 951.450208][T21452] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 951.450624][T32212] SELinux: syz.6.8911 (32212) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 951.519927][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 951.520004][ T29] audit: type=1326 audit(1748699546.033:21694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32209 comm="syz.5.8910" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f941fe1e969 code=0x0 [ 951.570075][T32052] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 951.605148][T32227] xt_TCPMSS: Only works on TCP SYN packets [ 951.667262][T32228] loop5: detected capacity change from 0 to 1024 [ 951.674325][T32228] EXT4-fs: Ignoring removed nomblk_io_submit option [ 951.755866][T32228] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 951.802415][T32227] lo speed is unknown, defaulting to 1000 [ 951.955157][T32052] veth0_vlan: entered promiscuous mode [ 951.966858][T32246] netlink: 'syz.4.8919': attribute type 12 has an invalid length. [ 951.975023][T32246] netlink: 172 bytes leftover after parsing attributes in process `syz.4.8919'. [ 951.997860][T32052] veth1_vlan: entered promiscuous mode [ 952.030901][T32052] veth0_macvtap: entered promiscuous mode [ 952.038952][T32052] veth1_macvtap: entered promiscuous mode [ 952.055892][T32052] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 952.091955][T32251] loop2: detected capacity change from 0 to 1024 [ 952.108050][T32052] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 952.120170][T32052] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 952.129702][T32052] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 952.138769][T32052] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 952.147734][T32052] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 952.164791][T32254] loop4: detected capacity change from 0 to 1024 [ 952.172070][T32254] EXT4-fs: Ignoring removed nomblk_io_submit option [ 952.267882][T24506] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 952.290482][ T29] audit: type=1326 audit(1748699546.593:21695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32245 comm="syz.4.8919" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe3f35be969 code=0x0 [ 952.291937][T32251] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 952.348690][T32254] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 952.375676][T32251] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.8921: bg 0: block 88: padding at end of block bitmap is not set [ 952.396605][T32267] loop3: detected capacity change from 0 to 512 [ 952.405388][T32265] loop5: detected capacity change from 0 to 512 [ 952.430952][T32265] ext4 filesystem being mounted at /490/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 952.516569][T32273] xt_TCPMSS: Only works on TCP SYN packets [ 952.667156][T32273] lo speed is unknown, defaulting to 1000 [ 952.759567][T32285] netlink: 'syz.3.8931': attribute type 1 has an invalid length. [ 952.790682][T32287] loop6: detected capacity change from 0 to 512 [ 952.807678][T32287] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 952.841549][T32289] loop2: detected capacity change from 0 to 1024 [ 952.853141][T32295] SELinux: syz.4.8934 (32295) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 952.884962][T32289] EXT4-fs: Ignoring removed orlov option [ 952.932909][T32287] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e12c, mo2=0002] [ 952.941917][T32287] EXT4-fs (loop6): orphan cleanup on readonly fs [ 952.953877][T32287] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.8932: bg 0: block 361: padding at end of block bitmap is not set [ 952.977142][T32287] EXT4-fs (loop6): Remounting filesystem read-only [ 952.984776][T32287] EXT4-fs (loop6): 1 truncate cleaned up [ 953.060015][ T29] audit: type=1326 audit(1748699547.563:21696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32290 comm="syz.3.8935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffad89ae969 code=0x7ffc0000 [ 953.084218][ T29] audit: type=1326 audit(1748699547.563:21697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32290 comm="syz.3.8935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffad89ae969 code=0x7ffc0000 [ 953.108080][ T29] audit: type=1326 audit(1748699547.563:21698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32290 comm="syz.3.8935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=440 compat=0 ip=0x7ffad89ae969 code=0x7ffc0000 [ 953.131882][ T29] audit: type=1326 audit(1748699547.563:21699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32290 comm="syz.3.8935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffad89ae969 code=0x7ffc0000 [ 953.155652][ T29] audit: type=1326 audit(1748699547.563:21700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32290 comm="syz.3.8935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffad89ae969 code=0x7ffc0000 [ 953.179605][ T29] audit: type=1326 audit(1748699547.563:21701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32290 comm="syz.3.8935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7ffad89ae969 code=0x7ffc0000 [ 953.203503][ T29] audit: type=1326 audit(1748699547.563:21702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32290 comm="syz.3.8935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffad89ae969 code=0x7ffc0000 [ 953.227512][ T29] audit: type=1326 audit(1748699547.563:21703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32290 comm="syz.3.8935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ffad89ae969 code=0x7ffc0000 [ 953.269820][T32305] syzkaller0: entered promiscuous mode [ 953.275638][T32305] syzkaller0: entered allmulticast mode [ 953.380650][T32305] tipc: Enabled bearer , priority 0 [ 953.450789][T32287] EXT4-fs warning (device loop6): dx_probe:861: inode #2: comm syz.6.8932: dx entry: limit 0 != root limit 125 [ 953.462667][T32287] EXT4-fs warning (device loop6): dx_probe:934: inode #2: comm syz.6.8932: Corrupt directory, running e2fsck is recommended [ 953.497074][T32304] tipc: Resetting bearer [ 953.529432][T32319] loop2: detected capacity change from 0 to 1024 [ 953.555635][T32304] tipc: Disabling bearer [ 953.580664][T32323] xt_TCPMSS: Only works on TCP SYN packets [ 953.590524][T32319] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.8939: bg 0: block 88: padding at end of block bitmap is not set [ 953.744295][T32326] netlink: 'syz.5.8941': attribute type 12 has an invalid length. [ 953.859846][T32330] lo speed is unknown, defaulting to 1000 [ 954.501087][T32348] loop5: detected capacity change from 0 to 1024 [ 954.528201][T32348] EXT4-fs: Ignoring removed nomblk_io_submit option [ 954.714531][T32362] loop6: detected capacity change from 0 to 164 [ 954.727641][T32359] loop2: detected capacity change from 0 to 1024 [ 954.754630][T32340] lo speed is unknown, defaulting to 1000 [ 954.787508][T32359] __nla_validate_parse: 5 callbacks suppressed [ 954.787526][T32359] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8949'. [ 954.861065][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 954.880010][T32368] netlink: 'syz.6.8952': attribute type 12 has an invalid length. [ 954.888378][T32368] netlink: 172 bytes leftover after parsing attributes in process `syz.6.8952'. [ 954.939240][T32369] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 954.992591][T32370] syzkaller0: entered promiscuous mode [ 954.998165][T32370] syzkaller0: entered allmulticast mode [ 955.032846][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 955.058109][T32366] tipc: Enabled bearer , priority 0 [ 955.066802][T32365] tipc: Resetting bearer [ 955.146894][T32365] tipc: Disabling bearer [ 955.190088][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 955.211802][T32377] loop3: detected capacity change from 0 to 8192 [ 955.221961][T32377] vfat: Unknown parameter '' [ 955.265991][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 955.296267][T32340] chnl_net:caif_netlink_parms(): no params data found [ 955.586225][T32340] bridge0: port 1(bridge_slave_0) entered blocking state [ 955.593561][T32340] bridge0: port 1(bridge_slave_0) entered disabled state [ 955.619794][T32340] bridge_slave_0: entered allmulticast mode [ 955.648919][T32392] loop6: detected capacity change from 0 to 1024 [ 955.653202][T32340] bridge_slave_0: entered promiscuous mode [ 955.663774][T32340] bridge0: port 2(bridge_slave_1) entered blocking state [ 955.670990][T32340] bridge0: port 2(bridge_slave_1) entered disabled state [ 955.677308][T32392] EXT4-fs: Ignoring removed nomblk_io_submit option [ 955.678477][T32340] bridge_slave_1: entered allmulticast mode [ 955.691453][T32340] bridge_slave_1: entered promiscuous mode [ 955.719883][ T12] bridge_slave_1: left allmulticast mode [ 955.725722][ T12] bridge_slave_1: left promiscuous mode [ 955.731589][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 955.740017][ T12] bridge_slave_0: left allmulticast mode [ 955.745977][ T12] bridge_slave_0: left promiscuous mode [ 955.752018][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 955.847294][ T12] bond3 (unregistering): (slave gretap1): Releasing active interface [ 955.918898][T32403] netlink: 'syz.2.8962': attribute type 1 has an invalid length. [ 955.939360][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 955.952970][T32406] loop6: detected capacity change from 0 to 512 [ 955.961269][T32406] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 955.974703][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 955.984070][T32406] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e12c, mo2=0002] [ 955.992132][T32406] EXT4-fs (loop6): orphan cleanup on readonly fs [ 956.001862][ T12] bond0 (unregistering): Released all slaves [ 956.013438][ T12] bond1 (unregistering): Released all slaves [ 956.020980][T32406] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.8960: bg 0: block 361: padding at end of block bitmap is not set [ 956.023274][ T12] bond2 (unregistering): Released all slaves [ 956.045299][ T12] bond3 (unregistering): Released all slaves [ 956.055266][ T12] bond4 (unregistering): Released all slaves [ 956.064864][ T12] bond5 (unregistering): Released all slaves [ 956.074505][ T12] bond6 (unregistering): Released all slaves [ 956.084255][ T12] bond7 (unregistering): Released all slaves [ 956.094406][ T12] bond8 (unregistering): Released all slaves [ 956.104616][ T12] bond9 (unregistering): Released all slaves [ 956.116240][ T12] bond10 (unregistering): Released all slaves [ 956.126113][ T12] bond11 (unregistering): Released all slaves [ 956.136519][ T12] bond12 (unregistering): Released all slaves [ 956.151918][T32406] EXT4-fs (loop6): Remounting filesystem read-only [ 956.156712][ T12] bond13 (unregistering): Released all slaves [ 956.173958][ T12] bond14 (unregistering): Released all slaves [ 956.175748][T32406] EXT4-fs (loop6): 1 truncate cleaned up [ 956.183712][ T12] bond15 (unregistering): Released all slaves [ 956.196763][ T12] bond16 (unregistering): (slave bond17): Releasing backup interface [ 956.208267][ T12] bond16 (unregistering): Released all slaves [ 956.208616][T32406] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8960'. [ 956.247770][ T12] bond17 (unregistering): Released all slaves [ 956.365725][T32340] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 956.399315][T32414] tipc: Started in network mode [ 956.404415][T32414] tipc: Node identity , cluster identity 4711 [ 956.410622][T32414] tipc: Failed to obtain node identity [ 956.416145][T32414] tipc: Enabling of bearer rejected, failed to enable media [ 956.438486][T32406] EXT4-fs warning (device loop6): dx_probe:861: inode #2: comm syz.6.8960: dx entry: limit 0 != root limit 125 [ 956.451494][T32406] EXT4-fs warning (device loop6): dx_probe:934: inode #2: comm syz.6.8960: Corrupt directory, running e2fsck is recommended [ 956.468918][T32340] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 956.626442][T32340] team0: Port device team_slave_0 added [ 956.678218][T32340] team0: Port device team_slave_1 added [ 956.792208][T32340] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 956.799437][T32340] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 956.826491][T32340] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 956.874694][T32438] SELinux: syz.2.8970 (32438) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 956.878083][ T12] tipc: Left network mode [ 956.896408][T32340] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 956.903683][T32340] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 956.929927][T32340] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 956.956194][ T12] hsr_slave_0: left promiscuous mode [ 956.961900][ T12] hsr_slave_1: left promiscuous mode [ 956.968751][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 956.976466][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 956.990487][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 956.998134][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 957.017388][ T12] veth1_vlan: left promiscuous mode [ 957.028059][ T12] veth0_vlan: left promiscuous mode [ 957.153864][T32446] loop5: detected capacity change from 0 to 164 [ 957.194787][ T12] team0 (unregistering): Port device team_slave_1 removed [ 957.212537][ T12] team0 (unregistering): Port device team_slave_0 removed [ 957.283280][T32340] hsr_slave_0: entered promiscuous mode [ 957.302494][T32340] hsr_slave_1: entered promiscuous mode [ 957.332215][T32340] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 957.341652][T32340] Cannot create hsr debugfs directory [ 957.458282][T32453] loop6: detected capacity change from 0 to 8192 [ 957.485261][ T29] kauditd_printk_skb: 122 callbacks suppressed [ 957.485354][ T29] audit: type=1326 audit(1748699552.003:21826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32452 comm="syz.6.8974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a8b4ae969 code=0x7ffc0000 [ 957.533866][ T29] audit: type=1326 audit(1748699552.003:21827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32452 comm="syz.6.8974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=136 compat=0 ip=0x7f4a8b4ae969 code=0x7ffc0000 [ 957.557686][ T29] audit: type=1326 audit(1748699552.003:21828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32452 comm="syz.6.8974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a8b4ae969 code=0x7ffc0000 [ 957.581372][ T29] audit: type=1326 audit(1748699552.003:21829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32452 comm="syz.6.8974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4a8b4ae969 code=0x7ffc0000 [ 957.605143][ T29] audit: type=1326 audit(1748699552.003:21830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32452 comm="syz.6.8974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a8b4ae969 code=0x7ffc0000 [ 957.628945][ T29] audit: type=1326 audit(1748699552.003:21831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32452 comm="syz.6.8974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4a8b4ae969 code=0x7ffc0000 [ 957.653479][ T29] audit: type=1326 audit(1748699552.003:21832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32452 comm="syz.6.8974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a8b4ae969 code=0x7ffc0000 [ 957.680224][ T29] audit: type=1326 audit(1748699552.003:21833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32452 comm="syz.6.8974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4a8b4ae969 code=0x7ffc0000 [ 957.705275][ T29] audit: type=1326 audit(1748699552.033:21834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32452 comm="syz.6.8974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a8b4ae969 code=0x7ffc0000 [ 957.728942][ T29] audit: type=1326 audit(1748699552.033:21835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32452 comm="syz.6.8974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a8b4ae969 code=0x7ffc0000 [ 957.907024][T32464] loop5: detected capacity change from 0 to 8192 [ 957.923482][T32464] vfat: Unknown parameter '' [ 957.943330][T32476] netlink: 'syz.3.8982': attribute type 1 has an invalid length. [ 958.120327][T32492] loop5: detected capacity change from 0 to 1024 [ 958.139142][T32492] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.8987: bg 0: block 88: padding at end of block bitmap is not set [ 958.236736][T32500] netlink: 'syz.2.8990': attribute type 12 has an invalid length. [ 958.244684][T32500] netlink: 172 bytes leftover after parsing attributes in process `syz.2.8990'. [ 958.725955][T32469] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 958.735744][T32340] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 958.749051][T32340] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 958.771657][T24506] EXT4-fs unmount: 19 callbacks suppressed [ 958.771679][T24506] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 958.774277][T32340] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 958.796683][T32340] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 958.808753][T32506] loop5: detected capacity change from 0 to 164 [ 958.829091][T32506] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 958.849172][T32506] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 958.857566][T32340] 8021q: adding VLAN 0 to HW filter on device bond0 [ 958.875938][T32507] loop2: detected capacity change from 0 to 1024 [ 958.876677][T32506] syz.5.8992: attempt to access beyond end of device [ 958.876677][T32506] loop5: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 958.883454][T32507] EXT4-fs: Ignoring removed nomblk_io_submit option [ 958.901614][T32340] 8021q: adding VLAN 0 to HW filter on device team0 [ 958.916731][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 958.922389][T32506] syz.5.8992: attempt to access beyond end of device [ 958.922389][T32506] loop5: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 958.924331][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 958.963294][ T7440] bridge0: port 2(bridge_slave_1) entered blocking state [ 958.970633][ T7440] bridge0: port 2(bridge_slave_1) entered forwarding state [ 958.997733][T32511] loop3: detected capacity change from 0 to 164 [ 959.038491][T32507] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 959.057867][T32514] loop3: detected capacity change from 0 to 512 [ 959.124003][T32517] syzkaller0: entered promiscuous mode [ 959.129643][T32517] syzkaller0: entered allmulticast mode [ 959.179275][T32517] tipc: Started in network mode [ 959.184418][T32517] tipc: Node identity , cluster identity 4711 [ 959.191017][T32517] tipc: Failed to obtain node identity [ 959.196695][T32517] tipc: Enabling of bearer rejected, failed to enable media [ 959.220179][T32340] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 959.263317][T31856] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 959.367176][T32544] xt_TCPMSS: Only works on TCP SYN packets [ 959.458688][T32340] veth0_vlan: entered promiscuous mode [ 959.480204][T32340] veth1_vlan: entered promiscuous mode [ 959.502424][T32340] veth0_macvtap: entered promiscuous mode [ 959.509907][T32340] veth1_macvtap: entered promiscuous mode [ 959.521279][T32340] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 959.533572][T32340] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 959.550591][T32340] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 959.559528][T32340] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 959.568404][T32340] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 959.577247][T32340] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 959.610075][T32564] lo speed is unknown, defaulting to 1000 [ 959.816671][T32571] loop4: detected capacity change from 0 to 164 [ 959.850803][T32571] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 959.872103][T32571] syz.4.8944: attempt to access beyond end of device [ 959.872103][T32571] loop4: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 959.888863][T32571] syz.4.8944: attempt to access beyond end of device [ 959.888863][T32571] loop4: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 959.987061][T32573] loop4: detected capacity change from 0 to 8192 [ 960.090869][T32577] loop4: detected capacity change from 0 to 512 [ 960.098701][T32531] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 960.116248][T32577] EXT4-fs (loop4): 1 orphan inode deleted [ 960.128225][T32577] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 960.141612][ T12] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:0: Failed to release dquot type 1 [ 960.142470][T32577] ext4 filesystem being mounted at /2/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 960.185185][T32587] loop3: detected capacity change from 0 to 164 [ 960.270825][T32340] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 960.327901][T32594] SELinux: syz.3.9016 (32594) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 960.572220][T32606] 8021q: adding VLAN 0 to HW filter on device bond8 [ 960.600780][T32601] loop4: detected capacity change from 0 to 1024 [ 961.425046][T32601] EXT4-fs: Ignoring removed orlov option [ 961.467566][T32601] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 961.673897][T32617] netlink: 'syz.6.9021': attribute type 12 has an invalid length. [ 961.681880][T32617] netlink: 172 bytes leftover after parsing attributes in process `syz.6.9021'. [ 961.759308][T32620] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9018'. [ 961.770937][T32620] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9018'. [ 961.800299][T32628] xt_TCPMSS: Only works on TCP SYN packets [ 962.748834][T32633] lo speed is unknown, defaulting to 1000 [ 962.833067][T32634] loop6: detected capacity change from 0 to 1024 [ 962.974919][T32634] EXT4-fs: Ignoring removed nomblk_io_submit option [ 963.003095][T32634] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 963.022164][T32340] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 963.028895][T32641] loop3: detected capacity change from 0 to 512 [ 963.266629][T32652] loop2: detected capacity change from 0 to 1024 [ 963.298219][T27106] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 963.328821][T32652] EXT4-fs: Ignoring removed orlov option [ 963.386207][T32650] loop4: detected capacity change from 0 to 8192 [ 963.455132][ T29] kauditd_printk_skb: 100 callbacks suppressed [ 963.455148][ T29] audit: type=1326 audit(1748699557.973:21935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32649 comm="syz.4.9027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f962a0de969 code=0x7ffc0000 [ 963.485861][ T29] audit: type=1326 audit(1748699557.973:21936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32649 comm="syz.4.9027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=136 compat=0 ip=0x7f962a0de969 code=0x7ffc0000 [ 963.509978][ T29] audit: type=1326 audit(1748699557.973:21937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32649 comm="syz.4.9027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f962a0de969 code=0x7ffc0000 [ 963.534311][ T29] audit: type=1326 audit(1748699557.973:21938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32649 comm="syz.4.9027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f962a0de969 code=0x7ffc0000 [ 963.553852][T32657] blktrace: Concurrent blktraces are not allowed on loop10 [ 963.558370][ T29] audit: type=1326 audit(1748699557.973:21939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32649 comm="syz.4.9027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f962a0de969 code=0x7ffc0000 [ 963.577951][T32652] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 963.589218][ T29] audit: type=1326 audit(1748699557.973:21940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32649 comm="syz.4.9027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f962a0de969 code=0x7ffc0000 [ 963.625992][ T29] audit: type=1326 audit(1748699557.973:21941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32649 comm="syz.4.9027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f962a0de969 code=0x7ffc0000 [ 964.099790][T32662] 8021q: adding VLAN 0 to HW filter on device bond9 [ 964.122286][ T29] audit: type=1326 audit(1748699558.053:21942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32653 comm="syz.5.9032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f941fe1e969 code=0x7ffc0000 [ 964.146218][ T29] audit: type=1326 audit(1748699558.053:21943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32653 comm="syz.5.9032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f941fe1e969 code=0x7ffc0000 [ 964.170991][ T29] audit: type=1326 audit(1748699558.053:21944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32653 comm="syz.5.9032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=440 compat=0 ip=0x7f941fe1e969 code=0x7ffc0000 [ 964.816444][T32673] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9030'. [ 964.931981][T32677] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9030'. [ 965.476534][T32680] loop6: detected capacity change from 0 to 512 [ 965.517663][T32684] loop5: detected capacity change from 0 to 164 [ 965.556783][T32680] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 965.574904][T31856] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 965.607001][T32680] ext4 filesystem being mounted at /336/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 965.617908][T32683] loop4: detected capacity change from 0 to 8192 [ 965.619804][T32684] syz.5.9038: attempt to access beyond end of device [ 965.619804][T32684] loop5: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 965.625076][T32683] vfat: Unknown parameter '' [ 965.685948][T32684] syz.5.9038: attempt to access beyond end of device [ 965.685948][T32684] loop5: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 965.705460][T32691] loop2: detected capacity change from 0 to 512 [ 965.722253][T32691] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 965.734003][T32693] netlink: 'syz.4.9041': attribute type 12 has an invalid length. [ 965.741888][T32693] netlink: 172 bytes leftover after parsing attributes in process `syz.4.9041'. [ 965.751646][T32691] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e12c, mo2=0002] [ 965.762670][T32691] EXT4-fs (loop2): orphan cleanup on readonly fs [ 965.770068][T32680] netlink: 24 bytes leftover after parsing attributes in process `syz.6.9037'. [ 965.781567][T32691] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.9039: bg 0: block 361: padding at end of block bitmap is not set [ 965.808515][T32698] xt_TCPMSS: Only works on TCP SYN packets [ 965.911142][T32691] EXT4-fs (loop2): Remounting filesystem read-only [ 965.921210][T32691] EXT4-fs (loop2): 1 truncate cleaned up [ 965.927747][T32691] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 965.949711][T32691] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9039'. [ 965.976605][T32701] loop3: detected capacity change from 0 to 1024 [ 965.976622][T32691] EXT4-fs warning (device loop2): dx_probe:861: inode #2: comm syz.2.9039: dx entry: limit 0 != root limit 125 [ 965.976653][T32691] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.9039: Corrupt directory, running e2fsck is recommended [ 965.986394][T27106] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 966.027376][T32704] loop4: detected capacity change from 0 to 1024 [ 966.046699][T32704] EXT4-fs: Ignoring removed nomblk_io_submit option [ 966.047063][T31856] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 966.076266][T32704] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 966.076794][T32705] lo speed is unknown, defaulting to 1000 [ 966.286645][T32713] loop3: detected capacity change from 0 to 8192 [ 967.114678][T32719] 8021q: adding VLAN 0 to HW filter on device bond10 [ 967.166940][T32340] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 967.255616][T32725] loop2: detected capacity change from 0 to 512 [ 967.416162][T32725] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 967.448864][T32725] ext4 filesystem being mounted at /41/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 967.495184][T32725] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9049'. [ 967.697663][T31856] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 968.332433][T32747] loop5: detected capacity change from 0 to 512 [ 968.356612][T32738] syzkaller0: entered promiscuous mode [ 968.362894][T32738] syzkaller0: entered allmulticast mode [ 968.363020][T32747] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 968.398290][T32738] tipc: Started in network mode [ 968.403535][T32738] tipc: Node identity , cluster identity 4711 [ 968.409889][T32738] tipc: Failed to obtain node identity [ 968.415421][T32738] tipc: Enabling of bearer rejected, failed to enable media [ 968.439750][T32743] loop3: detected capacity change from 0 to 8192 [ 968.454680][T32747] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e12c, mo2=0002] [ 968.463307][ T29] kauditd_printk_skb: 173 callbacks suppressed [ 968.463323][ T29] audit: type=1326 audit(1748699562.963:22118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32742 comm="syz.3.9054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7ffad89ad5ca code=0x7ffc0000 [ 968.480810][T32747] EXT4-fs (loop5): orphan cleanup on readonly fs [ 968.508387][T32743] vfat: Unknown parameter '' [ 968.514489][T32747] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.9056: bg 0: block 361: padding at end of block bitmap is not set [ 968.533143][ T29] audit: type=1326 audit(1748699563.023:22119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32742 comm="syz.3.9054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7ffad89ad5ca code=0x7ffc0000 [ 968.533769][T32747] EXT4-fs (loop5): Remounting filesystem read-only [ 968.561032][ T29] audit: type=1326 audit(1748699563.023:22120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32742 comm="syz.3.9054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7ffad89ad1d7 code=0x7ffc0000 [ 968.561074][ T29] audit: type=1326 audit(1748699563.023:22121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32742 comm="syz.3.9054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7ffad89b010a code=0x7ffc0000 [ 968.563460][ T29] audit: type=1326 audit(1748699563.083:22122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32742 comm="syz.3.9054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ffad89ad2d0 code=0x7ffc0000 [ 968.645306][ T29] audit: type=1326 audit(1748699563.083:22123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32742 comm="syz.3.9054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ffad89ae56b code=0x7ffc0000 [ 968.669427][ T29] audit: type=1326 audit(1748699563.083:22124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32742 comm="syz.3.9054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7ffad89ad5ca code=0x7ffc0000 [ 968.695741][ T29] audit: type=1326 audit(1748699563.113:22125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32742 comm="syz.3.9054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffad89ae969 code=0x7ffc0000 [ 968.721092][ T29] audit: type=1326 audit(1748699563.113:22126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32742 comm="syz.3.9054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffad89ae969 code=0x7ffc0000 [ 968.747380][ T29] audit: type=1326 audit(1748699563.113:22127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32742 comm="syz.3.9054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7ffad89ae969 code=0x7ffc0000 [ 968.782772][T32747] EXT4-fs (loop5): 1 truncate cleaned up [ 968.789284][T32747] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 968.801181][T32757] syzkaller0: entered promiscuous mode [ 968.808531][T32757] syzkaller0: entered allmulticast mode [ 968.827203][T32747] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9056'. [ 968.885127][T32747] EXT4-fs warning (device loop5): dx_probe:861: inode #2: comm syz.5.9056: dx entry: limit 0 != root limit 125 [ 968.897724][T32747] EXT4-fs warning (device loop5): dx_probe:934: inode #2: comm syz.5.9056: Corrupt directory, running e2fsck is recommended [ 968.924780][T24506] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 969.021101][T32761] loop4: detected capacity change from 0 to 8192 [ 969.057494][T32766] loop2: detected capacity change from 0 to 1024 [ 969.077535][T32766] EXT4-fs: Ignoring removed nomblk_io_submit option [ 969.093387][T32763] loop6: detected capacity change from 0 to 8192 [ 969.124971][T32766] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 969.145576][ T302] loop3: detected capacity change from 0 to 512 [ 969.205919][ T305] blktrace: Concurrent blktraces are not allowed on loop10 [ 970.263230][T31856] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 970.420256][ T331] loop4: detected capacity change from 0 to 512 [ 970.441960][ T331] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 970.454095][ T333] netlink: 'syz.2.9073': attribute type 12 has an invalid length. [ 970.462140][ T333] netlink: 172 bytes leftover after parsing attributes in process `syz.2.9073'. [ 970.465531][ T321] loop3: detected capacity change from 0 to 8192 [ 970.478286][ T335] loop5: detected capacity change from 0 to 512 [ 970.485261][ T331] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e12c, mo2=0002] [ 970.485936][ T321] vfat: Unknown parameter '' [ 970.521527][ T331] EXT4-fs (loop4): orphan cleanup on readonly fs [ 970.528852][ T331] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.9071: bg 0: block 361: padding at end of block bitmap is not set [ 970.546973][ T331] EXT4-fs (loop4): Remounting filesystem read-only [ 970.560554][ T331] EXT4-fs (loop4): 1 truncate cleaned up [ 970.572048][ T331] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 970.594127][ T335] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 970.610092][ T331] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9071'. [ 970.624873][ T335] ext4 filesystem being mounted at /531/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 970.650850][ T339] loop2: detected capacity change from 0 to 1024 [ 970.658559][ T339] EXT4-fs: Ignoring removed nomblk_io_submit option [ 970.674057][ T331] EXT4-fs warning (device loop4): dx_probe:861: inode #2: comm syz.4.9071: dx entry: limit 0 != root limit 125 [ 970.686194][ T331] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.9071: Corrupt directory, running e2fsck is recommended [ 970.727734][ T339] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 970.787301][ T335] netlink: 24 bytes leftover after parsing attributes in process `syz.5.9074'. [ 970.808387][ T354] 8021q: adding VLAN 0 to HW filter on device bond11 [ 970.894194][T32340] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 970.972422][T24506] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 971.087316][ T361] loop4: detected capacity change from 0 to 512 [ 971.098104][ T361] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 971.112468][ T361] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e12c, mo2=0002] [ 971.122213][ T361] EXT4-fs (loop4): orphan cleanup on readonly fs [ 971.134391][ T361] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.9077: bg 0: block 361: padding at end of block bitmap is not set [ 971.153858][ T361] EXT4-fs (loop4): Remounting filesystem read-only [ 971.161696][ T361] EXT4-fs (loop4): 1 truncate cleaned up [ 971.170202][ T361] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 971.190561][ T361] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9077'. [ 971.231069][ T361] EXT4-fs warning (device loop4): dx_probe:861: inode #2: comm syz.4.9077: dx entry: limit 0 != root limit 125 [ 971.243511][ T361] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.9077: Corrupt directory, running e2fsck is recommended [ 971.270328][T31856] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 971.288137][ T368] loop5: detected capacity change from 0 to 512 [ 971.300471][ T368] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 971.312102][ T368] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e12c, mo2=0002] [ 971.323899][ T368] EXT4-fs (loop5): orphan cleanup on readonly fs [ 971.331037][ T368] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.9079: bg 0: block 361: padding at end of block bitmap is not set [ 971.350144][ T368] EXT4-fs (loop5): Remounting filesystem read-only [ 971.384890][ T368] EXT4-fs (loop5): 1 truncate cleaned up [ 971.391843][ T368] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 971.420551][ T368] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9079'. [ 971.453675][ T368] EXT4-fs warning (device loop5): dx_probe:861: inode #2: comm syz.5.9079: dx entry: limit 0 != root limit 125 [ 971.469383][ T368] EXT4-fs warning (device loop5): dx_probe:934: inode #2: comm syz.5.9079: Corrupt directory, running e2fsck is recommended [ 972.054494][T32340] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 972.069722][T24506] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 972.125668][ T384] netlink: 'syz.5.9084': attribute type 12 has an invalid length. [ 972.134310][ T384] netlink: 172 bytes leftover after parsing attributes in process `syz.5.9084'. [ 972.264990][ T395] loop3: detected capacity change from 0 to 1024 [ 972.282737][ T395] EXT4-fs: Ignoring removed orlov option [ 972.314591][ T394] syzkaller0: entered promiscuous mode [ 972.320237][ T394] syzkaller0: entered allmulticast mode [ 972.333983][ T394] tipc: Enabled bearer , priority 0 [ 972.347650][ T393] tipc: Resetting bearer [ 972.370452][ T393] tipc: Disabling bearer [ 972.421696][ T395] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9087'. [ 972.432525][ T395] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9087'. [ 972.743675][ T411] 8021q: adding VLAN 0 to HW filter on device bond1 [ 973.059863][ T414] blktrace: Concurrent blktraces are not allowed on loop6 [ 973.313962][ T417] loop2: detected capacity change from 0 to 1024 [ 973.330574][ T418] loop4: detected capacity change from 0 to 512 [ 973.371378][ T418] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 973.398068][ T424] loop3: detected capacity change from 0 to 164 [ 973.404885][ T417] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 973.407207][ T418] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e12c, mo2=0002] [ 973.429548][ T418] EXT4-fs (loop4): orphan cleanup on readonly fs [ 973.445560][ T418] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.9094: bg 0: block 361: padding at end of block bitmap is not set [ 973.485907][ T417] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.9095: bg 0: block 88: padding at end of block bitmap is not set [ 973.507532][ T424] syz.3.9097: attempt to access beyond end of device [ 973.507532][ T424] loop3: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 973.528786][ T418] EXT4-fs (loop4): Remounting filesystem read-only [ 973.530383][ T424] syz.3.9097: attempt to access beyond end of device [ 973.530383][ T424] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 973.554540][ T418] EXT4-fs (loop4): 1 truncate cleaned up [ 973.578044][ T418] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 973.602907][T31856] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 973.707471][ T418] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9094'. [ 973.750470][ T418] EXT4-fs warning (device loop4): dx_probe:861: inode #2: comm syz.4.9094: dx entry: limit 0 != root limit 125 [ 973.763870][ T418] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.9094: Corrupt directory, running e2fsck is recommended [ 973.785568][ T435] netlink: 'syz.2.9099': attribute type 12 has an invalid length. [ 973.794649][ T435] netlink: 172 bytes leftover after parsing attributes in process `syz.2.9099'. [ 973.831131][ T437] blktrace: Concurrent blktraces are not allowed on loop10 [ 973.937642][ T29] kauditd_printk_skb: 224 callbacks suppressed [ 973.937664][ T29] audit: type=1326 audit(1748699568.343:22352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=428 comm="syz.5.9098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f941fe1e969 code=0x7ffc0000 [ 973.969872][ T29] audit: type=1326 audit(1748699568.343:22353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=428 comm="syz.5.9098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f941fe1e969 code=0x7ffc0000 [ 973.996375][ T29] audit: type=1326 audit(1748699568.343:22354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=428 comm="syz.5.9098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=440 compat=0 ip=0x7f941fe1e969 code=0x7ffc0000 [ 974.021552][ T29] audit: type=1326 audit(1748699568.343:22355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=428 comm="syz.5.9098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f941fe1e969 code=0x7ffc0000 [ 974.049234][ T29] audit: type=1326 audit(1748699568.343:22356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=428 comm="syz.5.9098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f941fe1e969 code=0x7ffc0000 [ 974.079434][ T29] audit: type=1326 audit(1748699568.343:22357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=428 comm="syz.5.9098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f941fe1e969 code=0x7ffc0000 [ 974.106628][ T29] audit: type=1326 audit(1748699568.343:22358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=428 comm="syz.5.9098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f941fe1e969 code=0x7ffc0000 [ 974.132725][ T29] audit: type=1326 audit(1748699568.343:22359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=428 comm="syz.5.9098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f941fe1e969 code=0x7ffc0000 [ 974.159138][ T29] audit: type=1326 audit(1748699568.343:22360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=428 comm="syz.5.9098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f941fe1e969 code=0x7ffc0000 [ 974.185161][ T29] audit: type=1326 audit(1748699568.343:22361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=428 comm="syz.5.9098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=70 compat=0 ip=0x7f941fe1e969 code=0x7ffc0000 [ 974.244271][ T440] loop2: detected capacity change from 0 to 1024 [ 974.252837][ T440] EXT4-fs: Ignoring removed orlov option [ 974.261050][T32340] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 974.279104][ T440] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 974.334934][ T442] netlink: 'syz.3.9103': attribute type 12 has an invalid length. [ 974.344536][ T442] netlink: 172 bytes leftover after parsing attributes in process `syz.3.9103'. [ 974.345029][ T448] loop4: detected capacity change from 0 to 512 [ 974.438929][ T448] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 974.456239][ T448] ext4 filesystem being mounted at /19/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 974.479755][ T448] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9104'. [ 974.513262][ T455] netlink: 'syz.6.9106': attribute type 12 has an invalid length. [ 974.521755][ T455] netlink: 172 bytes leftover after parsing attributes in process `syz.6.9106'. [ 974.585971][ T456] loop3: detected capacity change from 0 to 1024 [ 974.586006][T32340] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 974.594188][ T456] EXT4-fs: Ignoring removed nomblk_io_submit option [ 974.928823][ T460] 8021q: adding VLAN 0 to HW filter on device bond12 [ 975.346843][ T465] loop6: detected capacity change from 0 to 1024 [ 975.375506][ T465] EXT4-fs: Ignoring removed nomblk_io_submit option [ 975.577590][T31856] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 975.601104][ T465] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 975.670341][ T479] blktrace: Concurrent blktraces are not allowed on loop10 [ 975.754853][ T476] loop4: detected capacity change from 0 to 1024 [ 975.827953][ T476] EXT4-fs: Ignoring removed orlov option [ 975.916599][ T476] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 975.962225][T27106] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 976.177280][ T486] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9111'. [ 976.223288][ T489] loop6: detected capacity change from 0 to 512 [ 976.306865][ T489] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 976.350885][ T489] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e12c, mo2=0002] [ 976.365405][ T489] EXT4-fs (loop6): orphan cleanup on readonly fs [ 976.409428][ T489] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.9113: bg 0: block 361: padding at end of block bitmap is not set [ 976.444148][ T489] EXT4-fs (loop6): Remounting filesystem read-only [ 976.514487][ T489] EXT4-fs (loop6): 1 truncate cleaned up [ 976.521438][ T489] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 976.550772][ T501] loop5: detected capacity change from 0 to 1024 [ 976.578355][ T501] EXT4-fs: Ignoring removed orlov option [ 976.589150][ T501] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 976.599458][ T489] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9113'. [ 976.730074][ T510] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9116'. [ 976.789939][T32340] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 976.988425][ T489] EXT4-fs warning (device loop6): dx_probe:861: inode #2: comm syz.6.9113: dx entry: limit 0 != root limit 125 [ 977.004824][ T489] EXT4-fs warning (device loop6): dx_probe:934: inode #2: comm syz.6.9113: Corrupt directory, running e2fsck is recommended [ 977.297015][ T510] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9116'. [ 977.343504][T27106] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 977.495322][ T522] loop6: detected capacity change from 0 to 164 [ 977.568992][ T524] netlink: 'syz.3.9121': attribute type 12 has an invalid length. [ 977.580033][ T524] netlink: 172 bytes leftover after parsing attributes in process `syz.3.9121'. [ 977.650531][T24506] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 977.661712][ T528] xt_TCPMSS: Only works on TCP SYN packets [ 977.800183][ T534] loop6: detected capacity change from 0 to 1024 [ 977.808429][ T534] EXT4-fs: Ignoring removed orlov option [ 977.824622][ T534] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 977.911561][ T538] lo speed is unknown, defaulting to 1000 [ 978.297482][ T543] loop3: detected capacity change from 0 to 1024 [ 978.331923][ T543] EXT4-fs: Ignoring removed nomblk_io_submit option [ 978.380718][ T545] netlink: 'syz.5.9127': attribute type 12 has an invalid length. [ 978.498130][ T548] loop5: detected capacity change from 0 to 1024 [ 978.507251][ T548] EXT4-fs: Ignoring removed nomblk_io_submit option [ 978.541807][ T550] netlink: 'syz.4.9130': attribute type 12 has an invalid length. [ 978.578902][ T548] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 978.600901][ T552] loop3: detected capacity change from 0 to 512 [ 978.619403][ T552] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 978.661444][T27106] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 978.674993][ T552] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e12c, mo2=0002] [ 978.684098][ T552] EXT4-fs (loop3): write access unavailable, skipping orphan cleanup [ 978.693939][ T552] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 978.729632][ T552] EXT4-fs warning (device loop3): dx_probe:861: inode #2: comm syz.3.9129: dx entry: limit 0 != root limit 125 [ 978.745918][ T552] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.9129: Corrupt directory, running e2fsck is recommended [ 978.768997][ T559] loop4: detected capacity change from 0 to 1024 [ 978.778132][T32052] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 978.790915][ T559] EXT4-fs: Ignoring removed nomblk_io_submit option [ 978.809403][ T558] loop6: detected capacity change from 0 to 512 [ 978.829431][ T559] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 978.961396][ T558] /dev/loop6: Can't open blockdev [ 978.968740][ T558] __nla_validate_parse: 5 callbacks suppressed [ 978.968759][ T558] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9131'. [ 978.970465][ T568] loop2: detected capacity change from 0 to 1024 [ 979.004742][ T568] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 979.075137][ T573] blktrace: Concurrent blktraces are not allowed on loop6 [ 979.089803][ T29] kauditd_printk_skb: 61 callbacks suppressed [ 979.089827][ T29] audit: type=1326 audit(1748699573.593:22423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=562 comm="syz.3.9132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffad89ae969 code=0x7ffc0000 [ 979.123670][ T29] audit: type=1326 audit(1748699573.593:22424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=562 comm="syz.3.9132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffad89ae969 code=0x7ffc0000 [ 979.149456][ T29] audit: type=1326 audit(1748699573.593:22425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=562 comm="syz.3.9132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=440 compat=0 ip=0x7ffad89ae969 code=0x7ffc0000 [ 979.181320][ T29] audit: type=1326 audit(1748699573.593:22426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=562 comm="syz.3.9132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffad89ae969 code=0x7ffc0000 [ 979.210824][ T29] audit: type=1326 audit(1748699573.593:22427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=562 comm="syz.3.9132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffad89ae969 code=0x7ffc0000 [ 979.237231][ T29] audit: type=1326 audit(1748699573.593:22428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=562 comm="syz.3.9132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=70 compat=0 ip=0x7ffad89ae969 code=0x7ffc0000 [ 979.265648][ T29] audit: type=1326 audit(1748699573.593:22429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=562 comm="syz.3.9132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffad89ae969 code=0x7ffc0000 [ 979.294811][ T29] audit: type=1326 audit(1748699573.593:22430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=562 comm="syz.3.9132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffad89ae969 code=0x7ffc0000 [ 979.321484][ T29] audit: type=1326 audit(1748699573.593:22431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=562 comm="syz.3.9132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ffad89ae969 code=0x7ffc0000 [ 979.348836][ T29] audit: type=1326 audit(1748699573.593:22432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=562 comm="syz.3.9132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffad89ae969 code=0x7ffc0000 [ 979.433018][ T568] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.9134: bg 0: block 88: padding at end of block bitmap is not set [ 979.625076][T24506] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 979.747754][T32340] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 979.775572][T31856] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 979.880506][ T581] syzkaller0: entered promiscuous mode [ 979.886592][ T581] syzkaller0: entered allmulticast mode [ 980.017133][ T599] xt_TCPMSS: Only works on TCP SYN packets [ 980.288280][ T606] blktrace: Concurrent blktraces are not allowed on loop4 [ 980.476179][ T610] loop3: detected capacity change from 0 to 164 [ 980.652195][ T610] syz.3.9148: attempt to access beyond end of device [ 980.652195][ T610] loop3: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 980.748095][ T610] syz.3.9148: attempt to access beyond end of device [ 980.748095][ T610] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 980.810361][ T612] syzkaller0: entered promiscuous mode [ 980.818186][ T612] syzkaller0: entered allmulticast mode [ 981.090426][ T621] blktrace: Concurrent blktraces are not allowed on loop6 [ 981.125122][ T620] lo speed is unknown, defaulting to 1000 [ 981.389388][ T627] loop5: detected capacity change from 0 to 1024 [ 981.517274][ T627] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 981.551796][ T623] loop2: detected capacity change from 0 to 8192 [ 981.559874][ T623] vfat: Unknown parameter '' [ 981.580948][ T627] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.9154: bg 0: block 88: padding at end of block bitmap is not set [ 981.647055][T24506] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 981.739070][ T632] syzkaller0: entered promiscuous mode [ 981.746687][ T632] syzkaller0: entered allmulticast mode [ 981.763899][ T634] FAULT_INJECTION: forcing a failure. [ 981.763899][ T634] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 981.779022][ T634] CPU: 0 UID: 0 PID: 634 Comm: syz.3.9157 Not tainted 6.15.0-syzkaller-09161-g0f70f5b08a47 #0 PREEMPT(voluntary) [ 981.779103][ T634] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 981.779132][ T634] Call Trace: [ 981.779142][ T634] [ 981.779150][ T634] __dump_stack+0x1d/0x30 [ 981.779174][ T634] dump_stack_lvl+0xe8/0x140 [ 981.779260][ T634] dump_stack+0x15/0x1b [ 981.779282][ T634] should_fail_ex+0x265/0x280 [ 981.779396][ T634] should_fail+0xb/0x20 [ 981.779468][ T634] should_fail_usercopy+0x1a/0x20 [ 981.779489][ T634] _copy_to_user+0x20/0xa0 [ 981.779587][ T634] simple_read_from_buffer+0xb5/0x130 [ 981.779629][ T634] proc_fail_nth_read+0x100/0x140 [ 981.779652][ T634] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 981.779673][ T634] vfs_read+0x1a0/0x6f0 [ 981.779778][ T634] ? __rcu_read_unlock+0x4f/0x70 [ 981.779803][ T634] ? __fget_files+0x184/0x1c0 [ 981.779827][ T634] ksys_read+0xda/0x1a0 [ 981.779847][ T634] __x64_sys_read+0x40/0x50 [ 981.779914][ T634] x64_sys_call+0x2d77/0x2fb0 [ 981.779941][ T634] do_syscall_64+0xd2/0x200 [ 981.779976][ T634] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 981.780012][ T634] ? clear_bhb_loop+0x40/0x90 [ 981.780069][ T634] ? clear_bhb_loop+0x40/0x90 [ 981.780100][ T634] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 981.780136][ T634] RIP: 0033:0x7ffad89ad37c [ 981.780153][ T634] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 981.780208][ T634] RSP: 002b:00007ffad7017030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 981.780231][ T634] RAX: ffffffffffffffda RBX: 00007ffad8bd5fa0 RCX: 00007ffad89ad37c [ 981.780244][ T634] RDX: 000000000000000f RSI: 00007ffad70170a0 RDI: 0000000000000003 [ 981.780257][ T634] RBP: 00007ffad7017090 R08: 0000000000000000 R09: 0000000000000000 [ 981.780296][ T634] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 981.780312][ T634] R13: 0000000000000000 R14: 00007ffad8bd5fa0 R15: 00007fff1e6883c8 [ 981.780337][ T634] [ 982.071480][ T638] loop3: detected capacity change from 0 to 512 [ 982.099113][ T638] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9158'. [ 982.297926][ T653] loop2: detected capacity change from 0 to 512 [ 982.314845][ T653] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 982.335632][ T653] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e12c, mo2=0002] [ 982.340785][ T648] loop5: detected capacity change from 0 to 8192 [ 982.356337][ T653] EXT4-fs (loop2): orphan cleanup on readonly fs [ 982.382519][ T653] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.9165: bg 0: block 361: padding at end of block bitmap is not set [ 982.464778][ T653] EXT4-fs (loop2): Remounting filesystem read-only [ 982.485548][ T653] EXT4-fs (loop2): 1 truncate cleaned up [ 982.517973][ T658] loop6: detected capacity change from 0 to 1024 [ 982.525627][ T653] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 982.552725][ T658] EXT4-fs: Ignoring removed orlov option [ 982.561026][ T656] loop3: detected capacity change from 0 to 8192 [ 982.570620][ T656] vfat: Unknown parameter '' [ 982.600747][ T653] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9165'. [ 982.666921][ T653] EXT4-fs warning (device loop2): dx_probe:861: inode #2: comm syz.2.9165: dx entry: limit 0 != root limit 125 [ 982.667687][ T658] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 982.680789][ T653] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.9165: Corrupt directory, running e2fsck is recommended [ 982.759167][ T667] blktrace: Concurrent blktraces are not allowed on loop10 [ 982.992748][T31856] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 983.055510][ T674] loop3: detected capacity change from 0 to 1024 [ 983.119481][ T674] EXT4-fs: Ignoring removed nomblk_io_submit option [ 983.262777][ T673] syzkaller0: entered promiscuous mode [ 983.268887][ T673] syzkaller0: entered allmulticast mode [ 983.473683][ T693] xt_TCPMSS: Only works on TCP SYN packets [ 983.517505][ T695] loop6: detected capacity change from 0 to 512 [ 983.541544][ T688] syzkaller0: entered promiscuous mode [ 983.548196][ T688] syzkaller0: entered allmulticast mode [ 983.595130][ T690] loop2: detected capacity change from 0 to 8192 [ 983.626457][ T695] ext4 filesystem being mounted at /359/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 983.658520][ T695] netlink: 24 bytes leftover after parsing attributes in process `syz.6.9180'. [ 983.795398][ T708] loop4: detected capacity change from 0 to 1024 [ 983.810683][ T705] loop2: detected capacity change from 0 to 4096 [ 983.819592][ T706] lo speed is unknown, defaulting to 1000 [ 983.840438][ T708] EXT4-fs: Ignoring removed orlov option [ 984.059177][ T724] FAULT_INJECTION: forcing a failure. [ 984.059177][ T724] name failslab, interval 1, probability 0, space 0, times 0 [ 984.073411][ T724] CPU: 1 UID: 0 PID: 724 Comm: syz.4.9188 Not tainted 6.15.0-syzkaller-09161-g0f70f5b08a47 #0 PREEMPT(voluntary) [ 984.073461][ T724] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 984.073480][ T724] Call Trace: [ 984.073489][ T724] [ 984.073498][ T724] __dump_stack+0x1d/0x30 [ 984.073521][ T724] dump_stack_lvl+0xe8/0x140 [ 984.073544][ T724] dump_stack+0x15/0x1b [ 984.073674][ T724] should_fail_ex+0x265/0x280 [ 984.073720][ T724] should_failslab+0x8c/0xb0 [ 984.073751][ T724] kmem_cache_alloc_node_noprof+0x57/0x320 [ 984.073798][ T724] ? __alloc_skb+0x101/0x320 [ 984.073824][ T724] __alloc_skb+0x101/0x320 [ 984.073853][ T724] netlink_alloc_large_skb+0xba/0xf0 [ 984.073885][ T724] netlink_sendmsg+0x3cf/0x6b0 [ 984.073926][ T724] ? __pfx_netlink_sendmsg+0x10/0x10 [ 984.074007][ T724] __sock_sendmsg+0x142/0x180 [ 984.074044][ T724] ____sys_sendmsg+0x31e/0x4e0 [ 984.074138][ T724] ___sys_sendmsg+0x17b/0x1d0 [ 984.074184][ T724] __x64_sys_sendmsg+0xd4/0x160 [ 984.074227][ T724] x64_sys_call+0x2999/0x2fb0 [ 984.074257][ T724] do_syscall_64+0xd2/0x200 [ 984.074284][ T724] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 984.074311][ T724] ? clear_bhb_loop+0x40/0x90 [ 984.074415][ T724] ? clear_bhb_loop+0x40/0x90 [ 984.074439][ T724] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 984.074462][ T724] RIP: 0033:0x7f962a0de969 [ 984.074545][ T724] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 984.074620][ T724] RSP: 002b:00007f9628747038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 984.074645][ T724] RAX: ffffffffffffffda RBX: 00007f962a305fa0 RCX: 00007f962a0de969 [ 984.074659][ T724] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000003 [ 984.074672][ T724] RBP: 00007f9628747090 R08: 0000000000000000 R09: 0000000000000000 [ 984.074685][ T724] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 984.074697][ T724] R13: 0000000000000000 R14: 00007f962a305fa0 R15: 00007ffc2f848ce8 [ 984.074765][ T724] [ 984.076556][ T720] loop6: detected capacity change from 0 to 8192 [ 984.505645][ T29] kauditd_printk_skb: 221 callbacks suppressed [ 984.505667][ T29] audit: type=1326 audit(1748699578.993:22654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=718 comm="syz.6.9186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a8b4ae969 code=0x7ffc0000 [ 984.539603][ T29] audit: type=1326 audit(1748699578.993:22655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=718 comm="syz.6.9186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a8b4ae969 code=0x7ffc0000 [ 984.566418][ T29] audit: type=1326 audit(1748699578.993:22656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=718 comm="syz.6.9186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=136 compat=0 ip=0x7f4a8b4ae969 code=0x7ffc0000 [ 984.594867][ T29] audit: type=1326 audit(1748699578.993:22657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=718 comm="syz.6.9186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a8b4ae969 code=0x7ffc0000 [ 984.620517][ T29] audit: type=1326 audit(1748699578.993:22658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=718 comm="syz.6.9186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4a8b4ae969 code=0x7ffc0000 [ 984.647465][ T29] audit: type=1326 audit(1748699578.993:22659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=718 comm="syz.6.9186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a8b4ae969 code=0x7ffc0000 [ 984.672232][ T29] audit: type=1326 audit(1748699578.993:22660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=718 comm="syz.6.9186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4a8b4ae969 code=0x7ffc0000 [ 984.698469][ T29] audit: type=1326 audit(1748699578.993:22661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=718 comm="syz.6.9186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a8b4ae969 code=0x7ffc0000 [ 984.724041][ T29] audit: type=1326 audit(1748699578.993:22662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=718 comm="syz.6.9186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a8b4ae969 code=0x7ffc0000 [ 984.755572][ T29] audit: type=1326 audit(1748699578.993:22663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=718 comm="syz.6.9186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4a8b4ae969 code=0x7ffc0000 [ 984.954435][ T739] loop3: detected capacity change from 0 to 164 [ 984.982639][ T739] syz.3.9195: attempt to access beyond end of device [ 984.982639][ T739] loop3: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 984.999514][ T739] syz.3.9195: attempt to access beyond end of device [ 984.999514][ T739] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 985.030773][ T737] loop4: detected capacity change from 0 to 8192 [ 985.102068][ T741] syzkaller0: entered promiscuous mode [ 985.108490][ T741] syzkaller0: entered allmulticast mode [ 985.125313][ T741] tipc: Started in network mode [ 985.131512][ T741] tipc: Node identity , cluster identity 4711 [ 985.136627][ T751] loop2: detected capacity change from 0 to 1024 [ 985.138477][ T741] tipc: Failed to obtain node identity [ 985.152403][ T741] tipc: Enabling of bearer rejected, failed to enable media [ 985.158376][ T751] EXT4-fs: Ignoring removed nomblk_io_submit option [ 985.254037][ T748] loop3: detected capacity change from 0 to 8192 [ 985.309849][ T763] loop6: detected capacity change from 0 to 1024 [ 985.322647][ T763] EXT4-fs: Ignoring removed orlov option [ 986.055491][ T754] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 986.108767][ T778] xt_TCPMSS: Only works on TCP SYN packets [ 986.141581][ T782] loop4: detected capacity change from 0 to 1024 [ 986.149155][ T782] EXT4-fs: Ignoring removed orlov option [ 986.345970][ T787] lo speed is unknown, defaulting to 1000 [ 986.458525][ T789] loop3: detected capacity change from 0 to 164 [ 986.517246][ T789] syz.3.9207: attempt to access beyond end of device [ 986.517246][ T789] loop3: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 986.670747][ T789] syz.3.9207: attempt to access beyond end of device [ 986.670747][ T789] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 986.727508][ T786] loop4: detected capacity change from 0 to 8192 [ 986.766777][ T791] loop5: detected capacity change from 0 to 8192 [ 986.873825][ T805] loop6: detected capacity change from 0 to 512 [ 986.909339][ T805] ext4 filesystem being mounted at /363/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 986.918816][ T800] syzkaller0: entered promiscuous mode [ 986.926596][ T800] syzkaller0: entered allmulticast mode [ 986.933487][ T805] netlink: 24 bytes leftover after parsing attributes in process `syz.6.9213'. [ 987.068506][ T819] loop6: detected capacity change from 0 to 1024 [ 987.077639][ T819] EXT4-fs: Ignoring removed orlov option [ 987.090709][ T821] loop2: detected capacity change from 0 to 1024 [ 987.112183][ T815] syzkaller0: entered promiscuous mode [ 987.118302][ T815] syzkaller0: entered allmulticast mode [ 987.131710][ T821] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.9219: bg 0: block 88: padding at end of block bitmap is not set [ 987.198109][ T835] netlink: 'syz.2.9222': attribute type 1 has an invalid length. [ 987.213273][ T835] 8021q: adding VLAN 0 to HW filter on device bond2 [ 987.354875][ T842] 8021q: adding VLAN 0 to HW filter on device bond2 [ 987.366028][ T842] bond2: (slave vti0): The slave device specified does not support setting the MAC address [ 987.380633][ T842] bond2: (slave vti0): Error -95 calling set_mac_address [ 987.512028][ T844] loop2: detected capacity change from 0 to 8192 [ 987.553970][ T793] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 987.595811][ T846] xt_TCPMSS: Only works on TCP SYN packets [ 987.767255][ T856] loop2: detected capacity change from 0 to 1024 [ 987.801919][ T856] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.9228: bg 0: block 88: padding at end of block bitmap is not set [ 987.873103][ T863] lo speed is unknown, defaulting to 1000 [ 988.176563][ T868] loop4: detected capacity change from 0 to 512 [ 988.279231][ T868] ext4 filesystem being mounted at /44/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 988.307760][ T868] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9233'. [ 988.334400][ T875] loop2: detected capacity change from 0 to 1024 [ 988.351362][ T875] EXT4-fs: Ignoring removed orlov option [ 988.407149][ T881] syzkaller0: entered promiscuous mode [ 988.413323][ T881] syzkaller0: entered allmulticast mode [ 988.472452][ T885] syzkaller0: entered promiscuous mode [ 988.478688][ T885] syzkaller0: entered allmulticast mode [ 988.507744][ T885] tipc: Started in network mode [ 988.513860][ T885] tipc: Node identity , cluster identity 4711 [ 988.520453][ T885] tipc: Failed to obtain node identity [ 988.526152][ T885] tipc: Enabling of bearer rejected, failed to enable media [ 988.581139][ T880] syzkaller0: entered promiscuous mode [ 988.586932][ T880] syzkaller0: entered allmulticast mode [ 988.597483][ T881] tipc: Started in network mode [ 988.600490][ T883] loop4: detected capacity change from 0 to 1024 [ 988.603420][ T881] tipc: Node identity aadee597709, cluster identity 4711 [ 988.618110][ T881] tipc: Enabled bearer , priority 0 [ 988.631728][ T883] EXT4-fs: Ignoring removed nomblk_io_submit option [ 988.653003][ T897] loop3: detected capacity change from 0 to 1024 [ 988.661116][ T897] EXT4-fs: Ignoring removed orlov option [ 988.724625][ T880] tipc: Enabled bearer , priority 0 [ 988.786620][ T911] loop3: detected capacity change from 0 to 1024 [ 988.798880][ T880] syzkaller0: MTU too low for tipc bearer [ 988.805142][ T880] tipc: Disabling bearer [ 988.816279][ T911] EXT4-fs: Ignoring removed orlov option [ 988.957131][ T917] syzkaller0: entered promiscuous mode [ 988.963454][ T917] syzkaller0: entered allmulticast mode [ 989.068851][ T921] 8021q: adding VLAN 0 to HW filter on device bond1 [ 989.364462][ T925] loop2: detected capacity change from 0 to 8192 [ 989.496197][ T937] loop6: detected capacity change from 0 to 764 [ 989.526728][ T929] syzkaller0: entered promiscuous mode [ 989.532403][ T929] syzkaller0: entered allmulticast mode [ 989.630739][T31738] tipc: Node number set to 3662603671 [ 989.688008][ T942] netlink: 'syz.4.9253': attribute type 12 has an invalid length. [ 989.696530][ T942] netlink: 172 bytes leftover after parsing attributes in process `syz.4.9253'. [ 989.784871][ T29] kauditd_printk_skb: 180 callbacks suppressed [ 989.784892][ T29] audit: type=1326 audit(1748699584.293:22844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=941 comm="syz.4.9253" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f962a0de969 code=0x0 [ 989.826875][ T953] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9257'. [ 989.884895][ T951] syzkaller0: entered promiscuous mode [ 989.891087][ T951] syzkaller0: entered allmulticast mode [ 989.909281][ T951] tipc: Started in network mode [ 989.914745][ T951] tipc: Node identity , cluster identity 4711 [ 989.921328][ T951] tipc: Failed to obtain node identity [ 989.927333][ T951] tipc: Enabling of bearer rejected, failed to enable media [ 989.938488][ T29] audit: type=1326 audit(1748699584.453:22845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=956 comm="syz.2.9259" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd3142fe969 code=0x0 [ 990.023018][ T962] SELinux: syz.5.9260 (962) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 990.043756][ T963] loop2: detected capacity change from 0 to 1024 [ 990.051573][ T963] EXT4-fs: Ignoring removed nomblk_io_submit option [ 990.066549][ T963] EXT4-fs mount: 27 callbacks suppressed [ 990.066570][ T963] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 990.215883][ T971] xt_TCPMSS: Only works on TCP SYN packets [ 990.398058][ T978] loop4: detected capacity change from 0 to 1024 [ 990.432119][ T978] EXT4-fs: Ignoring removed nomblk_io_submit option [ 990.480684][ T982] netlink: 'syz.3.9266': attribute type 12 has an invalid length. [ 990.489351][ T982] netlink: 172 bytes leftover after parsing attributes in process `syz.3.9266'. [ 990.605032][ T984] lo speed is unknown, defaulting to 1000 [ 990.711923][ T986] loop3: detected capacity change from 0 to 8192 [ 990.733092][T31856] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 990.801110][ T986] FAULT_INJECTION: forcing a failure. [ 990.801110][ T986] name failslab, interval 1, probability 0, space 0, times 0 [ 990.815996][ T986] CPU: 0 UID: 0 PID: 986 Comm: syz.3.9267 Not tainted 6.15.0-syzkaller-09161-g0f70f5b08a47 #0 PREEMPT(voluntary) [ 990.816036][ T986] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 990.816053][ T986] Call Trace: [ 990.816062][ T986] [ 990.816073][ T986] __dump_stack+0x1d/0x30 [ 990.816112][ T986] dump_stack_lvl+0xe8/0x140 [ 990.816138][ T986] dump_stack+0x15/0x1b [ 990.816175][ T986] should_fail_ex+0x265/0x280 [ 990.816217][ T986] should_failslab+0x8c/0xb0 [ 990.816245][ T986] kmem_cache_alloc_node_noprof+0x57/0x320 [ 990.816360][ T986] ? __alloc_skb+0x101/0x320 [ 990.816385][ T986] __alloc_skb+0x101/0x320 [ 990.816411][ T986] netlink_alloc_large_skb+0xba/0xf0 [ 990.816439][ T986] netlink_sendmsg+0x3cf/0x6b0 [ 990.816470][ T986] ? __pfx_netlink_sendmsg+0x10/0x10 [ 990.816542][ T986] __sock_sendmsg+0x142/0x180 [ 990.816642][ T986] ____sys_sendmsg+0x31e/0x4e0 [ 990.816682][ T986] ___sys_sendmsg+0x17b/0x1d0 [ 990.816729][ T986] __x64_sys_sendmsg+0xd4/0x160 [ 990.816813][ T986] x64_sys_call+0x2999/0x2fb0 [ 990.816840][ T986] do_syscall_64+0xd2/0x200 [ 990.816875][ T986] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 990.816909][ T986] ? clear_bhb_loop+0x40/0x90 [ 990.816939][ T986] ? clear_bhb_loop+0x40/0x90 [ 990.816964][ T986] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 990.817006][ T986] RIP: 0033:0x7ffad89ae969 [ 990.817028][ T986] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 990.817053][ T986] RSP: 002b:00007ffad7017038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 990.817073][ T986] RAX: ffffffffffffffda RBX: 00007ffad8bd5fa0 RCX: 00007ffad89ae969 [ 990.817086][ T986] RDX: 00000000040c0080 RSI: 00002000000002c0 RDI: 0000000000000007 [ 990.817100][ T986] RBP: 00007ffad7017090 R08: 0000000000000000 R09: 0000000000000000 [ 990.817113][ T986] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 990.817132][ T986] R13: 0000000000000000 R14: 00007ffad8bd5fa0 R15: 00007fff1e6883c8 [ 990.817247][ T986] [ 991.063597][ T978] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 991.192428][ T29] audit: type=1326 audit(1748699585.703:22846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=991 comm="syz.3.9269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffad89ae969 code=0x7ffc0000 [ 991.218763][ T29] audit: type=1326 audit(1748699585.703:22847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=991 comm="syz.3.9269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffad89ae969 code=0x7ffc0000 [ 991.244377][ T29] audit: type=1326 audit(1748699585.703:22848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=991 comm="syz.3.9269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffad89ae969 code=0x7ffc0000 [ 991.270618][ T29] audit: type=1326 audit(1748699585.703:22849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=991 comm="syz.3.9269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffad89ae969 code=0x7ffc0000 [ 991.297529][ T29] audit: type=1326 audit(1748699585.703:22850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=991 comm="syz.3.9269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffad89ae969 code=0x7ffc0000 [ 991.324582][ T29] audit: type=1326 audit(1748699585.703:22851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=991 comm="syz.3.9269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ffad89ae969 code=0x7ffc0000 [ 991.350909][ T29] audit: type=1326 audit(1748699585.703:22852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=991 comm="syz.3.9269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffad89ae969 code=0x7ffc0000 [ 991.376834][ T29] audit: type=1326 audit(1748699585.703:22853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=991 comm="syz.3.9269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffad89ae969 code=0x7ffc0000 [ 991.498998][T32340] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 991.538980][ T997] syzkaller0: entered promiscuous mode [ 991.545418][ T997] syzkaller0: entered allmulticast mode [ 991.585972][ T997] tipc: Started in network mode [ 991.591438][ T997] tipc: Node identity , cluster identity 4711 [ 991.598503][ T997] tipc: Failed to obtain node identity [ 991.604478][ T997] tipc: Enabling of bearer rejected, failed to enable media [ 991.829790][ T1008] loop2: detected capacity change from 0 to 1024 [ 991.839156][ T1008] EXT4-fs: Ignoring removed orlov option [ 991.968113][ T1008] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 991.986173][ T1012] loop6: detected capacity change from 0 to 8192 [ 992.015175][ T1012] vfat: Unknown parameter '' [ 992.090222][T31856] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 992.167921][ T1017] 9pnet: p9_errstr2errno: server reported unknown error 184467440 [ 992.183765][ T1020] netlink: 'syz.3.9279': attribute type 1 has an invalid length. [ 992.192047][ T1020] netlink: 224 bytes leftover after parsing attributes in process `syz.3.9279'. [ 992.214113][ T1021] netlink: 'syz.2.9277': attribute type 12 has an invalid length. [ 992.223005][ T1021] netlink: 172 bytes leftover after parsing attributes in process `syz.2.9277'. [ 992.314340][ T1023] loop6: detected capacity change from 0 to 8192 [ 992.336204][ T1030] loop2: detected capacity change from 0 to 512 [ 992.365635][ T1030] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 992.398876][ T1030] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e12c, mo2=0002] [ 992.424737][ T1030] EXT4-fs (loop2): orphan cleanup on readonly fs [ 992.443239][ T1030] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.9281: bg 0: block 361: padding at end of block bitmap is not set [ 992.474749][ T1033] netlink: 'syz.5.9282': attribute type 12 has an invalid length. [ 992.484787][ T1033] netlink: 172 bytes leftover after parsing attributes in process `syz.5.9282'. [ 992.534171][ T1030] EXT4-fs (loop2): Remounting filesystem read-only [ 992.555434][ T1030] EXT4-fs (loop2): 1 truncate cleaned up [ 992.556246][ T1030] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 992.576449][ T1030] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9281'. [ 992.635599][ T1030] EXT4-fs warning (device loop2): dx_probe:861: inode #2: comm syz.2.9281: dx entry: limit 0 != root limit 125 [ 992.635637][ T1030] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.9281: Corrupt directory, running e2fsck is recommended [ 992.673802][T31856] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 992.778903][ T1046] xt_TCPMSS: Only works on TCP SYN packets [ 992.943488][ T1044] syzkaller0: entered promiscuous mode [ 992.944679][ T1051] loop4: detected capacity change from 0 to 512 [ 992.950351][ T1044] syzkaller0: entered allmulticast mode [ 992.957678][ T1051] EXT4-fs: Ignoring removed orlov option [ 992.985340][ T1051] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 992.989659][ T1054] tipc: Started in network mode [ 993.003850][ T1054] tipc: Node identity , cluster identity 4711 [ 993.004412][ T1051] EXT4-fs (loop4): orphan cleanup on readonly fs [ 993.010224][ T1054] tipc: Failed to obtain node identity [ 993.010239][ T1054] tipc: Enabling of bearer rejected, failed to enable media [ 993.041940][ T1051] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.9289: bg 0: block 248: padding at end of block bitmap is not set [ 993.072523][ T1051] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.9289: Failed to acquire dquot type 1 [ 993.155007][ T1051] EXT4-fs (loop4): 1 truncate cleaned up [ 993.183664][ T1059] loop5: detected capacity change from 0 to 1024 [ 993.188767][ T1051] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 993.191011][ T1059] EXT4-fs: Ignoring removed nomblk_io_submit option [ 993.213988][ T1057] lo speed is unknown, defaulting to 1000 [ 993.235804][ T1059] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 993.252229][ T1051] netlink: 20 bytes leftover after parsing attributes in process `syz.4.9289'. [ 993.500105][T24506] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 993.826800][T32340] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 993.873421][ T1079] FAULT_INJECTION: forcing a failure. [ 993.873421][ T1079] name failslab, interval 1, probability 0, space 0, times 0 [ 993.886096][ T1078] loop3: detected capacity change from 0 to 2048 [ 993.887619][ T1079] CPU: 1 UID: 0 PID: 1079 Comm: syz.4.9293 Not tainted 6.15.0-syzkaller-09161-g0f70f5b08a47 #0 PREEMPT(voluntary) [ 993.887739][ T1079] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 993.887758][ T1079] Call Trace: [ 993.887771][ T1079] [ 993.887783][ T1079] __dump_stack+0x1d/0x30 [ 993.887815][ T1079] dump_stack_lvl+0xe8/0x140 [ 993.887844][ T1079] dump_stack+0x15/0x1b [ 993.887870][ T1079] should_fail_ex+0x265/0x280 [ 993.887957][ T1079] should_failslab+0x8c/0xb0 [ 993.887991][ T1079] kmem_cache_alloc_node_noprof+0x57/0x320 [ 993.888034][ T1079] ? __alloc_skb+0x101/0x320 [ 993.888128][ T1079] __alloc_skb+0x101/0x320 [ 993.888163][ T1079] netlink_alloc_large_skb+0xba/0xf0 [ 993.888200][ T1079] netlink_sendmsg+0x3cf/0x6b0 [ 993.888243][ T1079] ? __pfx_netlink_sendmsg+0x10/0x10 [ 993.888296][ T1079] __sock_sendmsg+0x142/0x180 [ 993.888342][ T1079] ____sys_sendmsg+0x31e/0x4e0 [ 993.888374][ T1079] ___sys_sendmsg+0x17b/0x1d0 [ 993.888480][ T1079] __x64_sys_sendmsg+0xd4/0x160 [ 993.888531][ T1079] x64_sys_call+0x2999/0x2fb0 [ 993.888582][ T1079] do_syscall_64+0xd2/0x200 [ 993.888620][ T1079] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 993.888733][ T1079] ? clear_bhb_loop+0x40/0x90 [ 993.888836][ T1079] ? clear_bhb_loop+0x40/0x90 [ 993.888869][ T1079] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 993.888900][ T1079] RIP: 0033:0x7f962a0de969 [ 993.888924][ T1079] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 993.888950][ T1079] RSP: 002b:00007f9628747038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 993.888979][ T1079] RAX: ffffffffffffffda RBX: 00007f962a305fa0 RCX: 00007f962a0de969 [ 993.889038][ T1079] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000004 [ 993.889056][ T1079] RBP: 00007f9628747090 R08: 0000000000000000 R09: 0000000000000000 [ 993.889081][ T1079] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 993.889099][ T1079] R13: 0000000000000000 R14: 00007f962a305fa0 R15: 00007ffc2f848ce8 [ 993.889125][ T1079] [ 994.372425][ T1089] lo speed is unknown, defaulting to 1000 [ 994.576008][ T1090] loop4: detected capacity change from 0 to 128 [ 994.749182][ T1094] loop2: detected capacity change from 0 to 1024 [ 994.777226][ T1093] loop3: detected capacity change from 0 to 1024 [ 994.809981][ T1094] EXT4-fs: Ignoring removed nomblk_io_submit option [ 994.828507][ T1093] EXT4-fs: Ignoring removed nomblk_io_submit option [ 994.867032][ T29] kauditd_printk_skb: 131 callbacks suppressed [ 994.867073][ T29] audit: type=1326 audit(1748699589.383:22983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1095 comm="syz.5.9299" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f941fe1e969 code=0x0 [ 994.937275][ T1094] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 995.175875][ T1106] loop3: detected capacity change from 0 to 1024 [ 995.191374][T31856] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 995.382021][ T1114] loop3: detected capacity change from 0 to 512 [ 995.409615][ T1114] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 995.452946][ T1114] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e12c, mo2=0002] [ 995.477020][ T1118] loop5: detected capacity change from 0 to 1024 [ 995.484511][ T1118] EXT4-fs: Ignoring removed nomblk_io_submit option [ 995.484831][ T1114] EXT4-fs (loop3): write access unavailable, skipping orphan cleanup [ 995.529466][ T1118] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 995.555701][ T1122] loop6: detected capacity change from 0 to 1024 [ 995.571221][ T1114] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 995.605589][ T1122] EXT4-fs: Ignoring removed orlov option [ 995.637405][ T1122] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 995.661771][ T1114] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9305'. [ 995.772009][T24506] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 995.799062][ T1114] EXT4-fs warning (device loop3): dx_probe:861: inode #2: comm syz.3.9305: dx entry: limit 0 != root limit 125 [ 995.813355][ T1114] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.9305: Corrupt directory, running e2fsck is recommended [ 995.979150][ T1128] xt_TCPMSS: Only works on TCP SYN packets [ 996.068606][T32052] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 996.244394][ T1137] lo speed is unknown, defaulting to 1000 [ 996.509341][ T1141] loop2: detected capacity change from 0 to 164 [ 996.536417][ T1140] netlink: 'syz.3.9313': attribute type 12 has an invalid length. [ 996.545842][ T1140] netlink: 172 bytes leftover after parsing attributes in process `syz.3.9313'. [ 996.604620][ T1141] syz.2.9314: attempt to access beyond end of device [ 996.604620][ T1141] loop2: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 996.621202][ T1141] syz.2.9314: attempt to access beyond end of device [ 996.621202][ T1141] loop2: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 996.638187][T27106] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 996.658158][ T1143] loop3: detected capacity change from 0 to 512 [ 996.666792][ T1143] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 996.683489][ T1143] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e12c, mo2=0002] [ 996.695103][ T1143] EXT4-fs (loop3): write access unavailable, skipping orphan cleanup [ 996.704706][ T1143] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 996.723199][ T1143] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9316'. [ 996.759750][ T1143] EXT4-fs warning (device loop3): dx_probe:861: inode #2: comm syz.3.9316: dx entry: limit 0 != root limit 125 [ 996.772596][ T1143] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.9316: Corrupt directory, running e2fsck is recommended [ 996.838473][T32052] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 996.884151][ T1156] loop3: detected capacity change from 0 to 164 [ 996.898701][ T1151] tipc: Enabling of bearer rejected, already enabled [ 996.976297][ T1156] syz.3.9320: attempt to access beyond end of device [ 996.976297][ T1156] loop3: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 996.994708][ T1151] syzkaller0: MTU too low for tipc bearer [ 997.001181][ T1151] tipc: Disabling bearer [ 997.001711][ T1156] syz.3.9320: attempt to access beyond end of device [ 997.001711][ T1156] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 997.100335][ T1164] xt_TCPMSS: Only works on TCP SYN packets [ 997.273696][ T1174] netlink: 'syz.6.9326': attribute type 12 has an invalid length. [ 997.282385][ T1174] netlink: 172 bytes leftover after parsing attributes in process `syz.6.9326'. [ 997.416190][ T1168] syzkaller0: entered promiscuous mode [ 997.422267][ T1168] syzkaller0: entered allmulticast mode [ 997.582968][ T1177] lo speed is unknown, defaulting to 1000 [ 997.696091][ T1168] tipc: Started in network mode [ 997.701250][ T1168] tipc: Node identity , cluster identity 4711 [ 997.707834][ T1168] tipc: Failed to obtain node identity [ 997.713767][ T1168] tipc: Enabling of bearer rejected, failed to enable media [ 997.717092][ T1181] loop6: detected capacity change from 0 to 1024 [ 997.735996][ T1181] EXT4-fs: Ignoring removed orlov option [ 997.792840][ T1181] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 998.247887][T27106] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 998.274936][ T1192] loop2: detected capacity change from 0 to 512 [ 998.315476][ T1192] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 998.337382][ T1198] loop3: detected capacity change from 0 to 512 [ 998.344520][ T1192] ext4 filesystem being mounted at /106/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 998.363134][ T1198] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 998.386639][ T1192] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9330'. [ 998.397967][ T1198] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e12c, mo2=0002] [ 998.419178][ T1198] EXT4-fs (loop3): write access unavailable, skipping orphan cleanup [ 998.430150][ T1198] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 998.453359][ T1198] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9333'. [ 998.469426][T31856] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 998.535678][ T1198] EXT4-fs warning (device loop3): dx_probe:861: inode #2: comm syz.3.9333: dx entry: limit 0 != root limit 125 [ 998.547871][ T1198] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.9333: Corrupt directory, running e2fsck is recommended [ 998.562477][ T1204] loop2: detected capacity change from 0 to 164 [ 998.590592][ T1204] syz.2.9334: attempt to access beyond end of device [ 998.590592][ T1204] loop2: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 998.612710][ T1204] syz.2.9334: attempt to access beyond end of device [ 998.612710][ T1204] loop2: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 998.653938][T32052] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 998.697447][ T29] audit: type=1400 audit(1748699593.213:22984): avc: denied { write } for pid=1213 comm="syz.5.9339" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 998.727321][ T1212] SELinux: syz.3.9338 (1212) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 998.759682][ T29] audit: type=1326 audit(1748699593.273:22985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1213 comm="syz.5.9339" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f941fe1e969 code=0x0 [ 998.807952][ T1221] loop4: detected capacity change from 0 to 1024 [ 998.824986][ T1221] EXT4-fs: Ignoring removed orlov option [ 998.847295][ T1221] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 998.979151][T32340] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 999.009894][ T1233] loop3: detected capacity change from 0 to 512 [ 999.038278][ T1233] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9345'. [ 999.050313][ T1235] netlink: 'syz.4.9346': attribute type 12 has an invalid length. [ 999.059233][ T1235] netlink: 172 bytes leftover after parsing attributes in process `syz.4.9346'. [ 999.143885][ T29] audit: type=1326 audit(1748699593.663:22986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1234 comm="syz.4.9346" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f962a0de969 code=0x0 [ 999.189110][ T1242] loop2: detected capacity change from 0 to 512 [ 999.240589][ T1242] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 999.256148][ T1242] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e12c, mo2=0002] [ 999.266899][ T1242] EXT4-fs (loop2): orphan cleanup on readonly fs [ 999.275896][ T1242] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.9348: bg 0: block 361: padding at end of block bitmap is not set [ 999.350075][ T1250] netlink: 'syz.6.9352': attribute type 12 has an invalid length. [ 999.358990][ T1250] netlink: 172 bytes leftover after parsing attributes in process `syz.6.9352'. [ 999.380576][ T1242] EXT4-fs (loop2): Remounting filesystem read-only [ 999.393971][ T1242] EXT4-fs (loop2): 1 truncate cleaned up [ 999.400792][ T1242] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 999.419328][ T1242] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9348'. [ 999.449502][ T1252] loop3: detected capacity change from 0 to 512 [ 999.466225][ T1242] EXT4-fs warning (device loop2): dx_probe:861: inode #2: comm syz.2.9348: dx entry: limit 0 != root limit 125 [ 999.480833][ T1242] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.9348: Corrupt directory, running e2fsck is recommended [ 999.501917][ T1252] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9353'. [ 999.522118][ T29] audit: type=1326 audit(1748699594.013:22987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1249 comm="syz.6.9352" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4a8b4ae969 code=0x0 [ 999.578484][ T1255] loop6: detected capacity change from 0 to 1024 [ 999.615546][ T1255] EXT4-fs: Ignoring removed nomblk_io_submit option [ 999.650596][T31856] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 999.662354][ T1255] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 999.702898][ T1263] loop5: detected capacity change from 0 to 512 [ 999.721366][ T29] audit: type=1326 audit(1748699594.233:22988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1269 comm="syz.3.9358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffad89ae969 code=0x7ffc0000 [ 999.750804][ T29] audit: type=1326 audit(1748699594.233:22989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1269 comm="syz.3.9358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffad89ae969 code=0x7ffc0000 [ 999.763603][ T1265] syzkaller0: MTU too low for tipc bearer [ 999.777606][ T29] audit: type=1326 audit(1748699594.233:22990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1269 comm="syz.3.9358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffad89ae969 code=0x7ffc0000 [ 999.784271][ T1265] tipc: Enabling of bearer rejected, failed to enable media [ 999.809137][ T29] audit: type=1326 audit(1748699594.233:22991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1269 comm="syz.3.9358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ffad89ae969 code=0x7ffc0000 [ 999.845263][ T29] audit: type=1326 audit(1748699594.233:22992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1269 comm="syz.3.9358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffad89ae969 code=0x7ffc0000 [ 999.880248][ T1273] loop4: detected capacity change from 0 to 1024 [ 999.888605][ T1273] EXT4-fs: Ignoring removed nomblk_io_submit option [ 999.897746][ T1263] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 999.911783][ T29] kauditd_printk_skb: 7 callbacks suppressed [ 999.911804][ T29] audit: type=1326 audit(1748699594.433:23000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1269 comm="syz.3.9358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffad89ae969 code=0x7ffc0000 [ 999.918367][ T1263] ext4 filesystem being mounted at /581/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 999.947978][ T29] audit: type=1326 audit(1748699594.433:23001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1269 comm="syz.3.9358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffad89ae969 code=0x7ffc0000 [ 1000.008640][ T1273] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1000.044818][ T29] audit: type=1400 audit(1748699594.553:23002): avc: denied { setopt } for pid=1286 comm="syz.2.9359" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1000.084738][ T1263] netlink: 24 bytes leftover after parsing attributes in process `syz.5.9357'. [ 1000.100783][ T1291] loop3: detected capacity change from 0 to 1024 [ 1000.169051][T24506] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1000.208853][T27106] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1000.239166][ T1297] loop5: detected capacity change from 0 to 1024 [ 1000.274881][T32340] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1000.312731][ T29] audit: type=1326 audit(1748699594.833:23003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1306 comm="syz.6.9367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a8b4ae969 code=0x7ffc0000 [ 1000.347091][ T1297] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1000.385617][ T29] audit: type=1326 audit(1748699594.863:23004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1306 comm="syz.6.9367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f4a8b4ae969 code=0x7ffc0000 [ 1000.415829][ T29] audit: type=1326 audit(1748699594.863:23005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1306 comm="syz.6.9367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a8b4ae969 code=0x7ffc0000 [ 1000.418435][ T1297] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.9363: bg 0: block 88: padding at end of block bitmap is not set [ 1000.441382][ T29] audit: type=1326 audit(1748699594.863:23006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1306 comm="syz.6.9367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a8b4ae969 code=0x7ffc0000 [ 1000.441424][ T29] audit: type=1326 audit(1748699594.863:23007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1306 comm="syz.6.9367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4a8b4ae969 code=0x7ffc0000 [ 1000.441516][ T29] audit: type=1326 audit(1748699594.863:23008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1306 comm="syz.6.9367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a8b4ae969 code=0x7ffc0000 [ 1000.441553][ T29] audit: type=1326 audit(1748699594.863:23009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1306 comm="syz.6.9367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a8b4ae969 code=0x7ffc0000 [ 1000.510691][ T1308] loop6: detected capacity change from 0 to 8192 [ 1000.589050][ T1308] vfat: Unknown parameter '' [ 1000.646210][T24506] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1000.675739][ T1320] syzkaller0: entered promiscuous mode [ 1000.682645][ T1320] syzkaller0: entered allmulticast mode [ 1000.728813][ T1320] tipc: Started in network mode [ 1000.734543][ T1320] tipc: Node identity , cluster identity 4711 [ 1000.741204][ T1320] tipc: Failed to obtain node identity [ 1000.747315][ T1320] tipc: Enabling of bearer rejected, failed to enable media [ 1000.759000][ T1329] loop4: detected capacity change from 0 to 1024 [ 1000.766114][ T1329] EXT4-fs: Ignoring removed orlov option [ 1000.776236][ T1329] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1000.840082][T32340] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1000.859084][ T1333] loop6: detected capacity change from 0 to 1024 [ 1000.895720][ T1333] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1000.915105][ T1333] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.9375: bg 0: block 88: padding at end of block bitmap is not set [ 1000.934105][ T1335] netlink: 'syz.4.9376': attribute type 12 has an invalid length. [ 1000.935353][ T1339] loop5: detected capacity change from 0 to 512 [ 1000.943647][ T1335] netlink: 172 bytes leftover after parsing attributes in process `syz.4.9376'. [ 1000.974942][ T1339] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1000.982643][ T1341] netlink: 'syz.3.9378': attribute type 2 has an invalid length. [ 1000.992684][T27106] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1001.000109][ T1339] ext4 filesystem being mounted at /584/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1001.136222][T24506] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1001.224192][ T1358] loop2: detected capacity change from 0 to 512 [ 1001.232193][ T1358] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 1001.253068][ T1358] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e12c, mo2=0002] [ 1001.261994][ T1358] EXT4-fs (loop2): orphan cleanup on readonly fs [ 1001.280856][ T1358] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.9386: bg 0: block 361: padding at end of block bitmap is not set [ 1001.304557][ T1358] EXT4-fs (loop2): Remounting filesystem read-only [ 1001.312741][ T1358] EXT4-fs (loop2): 1 truncate cleaned up [ 1001.320782][ T1358] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 1001.398791][ T1358] EXT4-fs warning (device loop2): dx_probe:861: inode #2: comm syz.2.9386: dx entry: limit 0 != root limit 125 [ 1001.411825][ T1358] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.9386: Corrupt directory, running e2fsck is recommended [ 1001.437286][ T1360] loop3: detected capacity change from 0 to 512 [ 1001.444567][ T1360] EXT4-fs: Ignoring removed nobh option [ 1001.460660][T31856] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 1001.612954][ T1369] loop6: detected capacity change from 0 to 512 [ 1001.621701][ T1369] EXT4-fs: Ignoring removed nobh option [ 1001.666152][ T1369] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1002.435754][ T1371] loop4: detected capacity change from 0 to 1024 [ 1002.458194][ T1371] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1002.664056][ T1371] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1002.963765][ T1377] syzkaller0: MTU too low for tipc bearer [ 1002.970824][ T1377] tipc: Enabling of bearer rejected, failed to enable media [ 1002.982646][ T1379] __nla_validate_parse: 2 callbacks suppressed [ 1002.982668][ T1379] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9390'. [ 1003.068070][T32340] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1003.085782][ T1379] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9390'. [ 1003.141054][ T1379] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9390'. [ 1003.340712][ T1387] blktrace: Concurrent blktraces are not allowed on loop4 [ 1003.355462][ T1392] FAULT_INJECTION: forcing a failure. [ 1003.355462][ T1392] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1003.370807][ T1392] CPU: 0 UID: 0 PID: 1392 Comm: syz.5.9394 Not tainted 6.15.0-syzkaller-09161-g0f70f5b08a47 #0 PREEMPT(voluntary) [ 1003.370851][ T1392] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1003.370866][ T1392] Call Trace: [ 1003.370877][ T1392] [ 1003.370888][ T1392] __dump_stack+0x1d/0x30 [ 1003.370918][ T1392] dump_stack_lvl+0xe8/0x140 [ 1003.370946][ T1392] dump_stack+0x15/0x1b [ 1003.371044][ T1392] should_fail_ex+0x265/0x280 [ 1003.371091][ T1392] should_fail+0xb/0x20 [ 1003.371131][ T1392] should_fail_usercopy+0x1a/0x20 [ 1003.371151][ T1392] _copy_from_user+0x1c/0xb0 [ 1003.371212][ T1392] ___sys_sendmsg+0xc1/0x1d0 [ 1003.371299][ T1392] __sys_sendmmsg+0x178/0x300 [ 1003.371406][ T1392] __x64_sys_sendmmsg+0x57/0x70 [ 1003.371435][ T1392] x64_sys_call+0x2f2f/0x2fb0 [ 1003.371458][ T1392] do_syscall_64+0xd2/0x200 [ 1003.371531][ T1392] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 1003.371559][ T1392] ? clear_bhb_loop+0x40/0x90 [ 1003.371588][ T1392] ? clear_bhb_loop+0x40/0x90 [ 1003.371687][ T1392] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1003.371715][ T1392] RIP: 0033:0x7f941fe1e969 [ 1003.371737][ T1392] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1003.371801][ T1392] RSP: 002b:00007f941e487038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1003.371861][ T1392] RAX: ffffffffffffffda RBX: 00007f9420045fa0 RCX: 00007f941fe1e969 [ 1003.371877][ T1392] RDX: 0000000000000001 RSI: 0000200000001500 RDI: 0000000000000003 [ 1003.371892][ T1392] RBP: 00007f941e487090 R08: 0000000000000000 R09: 0000000000000000 [ 1003.371909][ T1392] R10: 0000000004000000 R11: 0000000000000246 R12: 0000000000000001 [ 1003.371977][ T1392] R13: 0000000000000000 R14: 00007f9420045fa0 R15: 00007ffc8201ec98 [ 1003.372032][ T1392] [ 1003.729856][ T1396] loop5: detected capacity change from 0 to 164 [ 1003.745193][ T1396] syz.5.9397: attempt to access beyond end of device [ 1003.745193][ T1396] loop5: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 1003.745244][ T1396] syz.5.9397: attempt to access beyond end of device [ 1003.745244][ T1396] loop5: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 1004.212121][T27106] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1004.270502][ T1401] loop5: detected capacity change from 0 to 8192 [ 1004.686903][ T1411] SELinux: syz.6.9401 (1411) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 1004.797022][ T1409] syzkaller0: entered promiscuous mode [ 1004.802919][ T1409] syzkaller0: entered allmulticast mode [ 1004.842453][ T1416] tipc: Started in network mode [ 1004.848172][ T1416] tipc: Node identity , cluster identity 4711 [ 1004.854826][ T1416] tipc: Failed to obtain node identity [ 1004.860443][ T1416] tipc: Enabling of bearer rejected, failed to enable media [ 1004.913800][ T1422] netlink: 'syz.2.9404': attribute type 12 has an invalid length. [ 1004.923813][ T1422] netlink: 172 bytes leftover after parsing attributes in process `syz.2.9404'. [ 1004.965196][ T29] kauditd_printk_skb: 190 callbacks suppressed [ 1004.965216][ T29] audit: type=1400 audit(1748699599.483:23200): avc: denied { bind } for pid=1427 comm="syz.5.9405" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1005.067412][ T1431] loop4: detected capacity change from 0 to 128 [ 1005.074829][ T1432] 9pnet_fd: Insufficient options for proto=fd [ 1005.075025][ T29] audit: type=1326 audit(1748699599.543:23201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1421 comm="syz.2.9404" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd3142fe969 code=0x0 [ 1005.088566][ T1432] pimreg: entered allmulticast mode [ 1005.134386][ T1431] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9407'. [ 1005.144115][ T1431] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9407'. [ 1005.159204][ T1433] loop2: detected capacity change from 0 to 1024 [ 1005.205349][ T1433] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1005.233920][ T1431] hub 2-0:1.0: USB hub found [ 1005.251870][ T1431] hub 2-0:1.0: 8 ports detected [ 1005.269846][ T1438] loop6: detected capacity change from 0 to 1024 [ 1005.272367][ T29] audit: type=1326 audit(1748699599.783:23202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1437 comm="syz.6.9408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a8b4ae969 code=0x7ffc0000 [ 1005.302846][ T1431] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=1431 comm=syz.4.9407 [ 1005.317200][ T29] audit: type=1326 audit(1748699599.783:23203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1437 comm="syz.6.9408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a8b4ae969 code=0x7ffc0000 [ 1005.343574][ T29] audit: type=1326 audit(1748699599.783:23204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1437 comm="syz.6.9408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f4a8b4ae969 code=0x7ffc0000 [ 1005.369933][ T29] audit: type=1326 audit(1748699599.783:23205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1437 comm="syz.6.9408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f4a8b4ae9a3 code=0x7ffc0000 [ 1005.395877][ T29] audit: type=1326 audit(1748699599.783:23206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1437 comm="syz.6.9408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f4a8b4ad41f code=0x7ffc0000 [ 1005.422096][ T29] audit: type=1326 audit(1748699599.783:23207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1437 comm="syz.6.9408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f4a8b4ae9f7 code=0x7ffc0000 [ 1005.447787][ T29] audit: type=1326 audit(1748699599.783:23208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1437 comm="syz.6.9408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4a8b4ad2d0 code=0x7ffc0000 [ 1005.473703][ T29] audit: type=1326 audit(1748699599.783:23209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1437 comm="syz.6.9408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4a8b4ae56b code=0x7ffc0000 [ 1005.531007][ T1432] pimreg: left allmulticast mode [ 1005.556543][ T1438] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1005.583114][ T1433] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1006.074619][T31856] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1006.147814][T27106] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1006.392145][ T1466] loop2: detected capacity change from 0 to 1024 [ 1006.435410][ T1466] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1007.209126][ T1463] loop6: detected capacity change from 0 to 8192 [ 1007.270242][ T1428] syz.5.9405 (1428) used greatest stack depth: 6904 bytes left [ 1007.304657][ T1473] loop3: detected capacity change from 0 to 512 [ 1007.326182][ T1473] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 1007.351747][ T1473] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e12c, mo2=0002] [ 1007.382785][ T1473] EXT4-fs (loop3): write access unavailable, skipping orphan cleanup [ 1007.398242][ T1478] loop5: detected capacity change from 0 to 512 [ 1007.410607][ T1478] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 1007.422871][ T1473] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 1007.425268][ T1478] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e12c, mo2=0002] [ 1007.460761][ T1473] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9417'. [ 1007.535070][ T1478] EXT4-fs (loop5): orphan cleanup on readonly fs [ 1007.563727][ T1473] EXT4-fs warning (device loop3): dx_probe:861: inode #2: comm syz.3.9417: dx entry: limit 0 != root limit 125 [ 1007.577886][ T1473] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.9417: Corrupt directory, running e2fsck is recommended [ 1007.578008][ T1478] ================================================================== [ 1007.578051][ T1478] BUG: KCSAN: data-race in _prb_read_valid / prb_reserve [ 1007.578109][ T1478] [ 1007.578115][ T1478] write to 0xffffffff868dc1b8 of 88 bytes by task 1473 on cpu 1: [ 1007.578132][ T1478] prb_reserve+0x696/0xaf0 [ 1007.578167][ T1478] vprintk_store+0x56d/0x860 [ 1007.578189][ T1478] vprintk_emit+0x178/0x650 [ 1007.578209][ T1478] vprintk_default+0x26/0x30 [ 1007.578227][ T1478] vprintk+0x1d/0x30 [ 1007.578251][ T1478] _printk+0x79/0xa0 [ 1007.578284][ T1478] __ext4_warning_inode+0x17b/0x190 [ 1007.578315][ T1478] dx_probe+0x924/0x990 [ 1007.578347][ T1478] __ext4_find_entry+0x320/0xf40 [ 1007.578391][ T1478] ext4_lookup+0xbb/0x390 [ 1007.578420][ T1478] lookup_one_qstr_excl_raw+0xc7/0x1b0 [ 1007.578456][ T1478] filename_create+0x14a/0x290 [ 1007.578496][ T1478] do_symlinkat+0x65/0x3c0 [ 1007.578519][ T1478] __x64_sys_symlink+0x50/0x60 [ 1007.578540][ T1478] x64_sys_call+0x2d8d/0x2fb0 [ 1007.578562][ T1478] do_syscall_64+0xd2/0x200 [ 1007.578595][ T1478] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1007.578619][ T1478] [ 1007.578626][ T1478] read to 0xffffffff868dc1b8 of 8 bytes by task 1478 on cpu 0: [ 1007.578645][ T1478] _prb_read_valid+0x1c4/0x920 [ 1007.578681][ T1478] prb_read_valid+0x3c/0x60 [ 1007.578716][ T1478] printk_get_next_message+0xc8/0x510 [ 1007.578742][ T1478] console_flush_all+0x290/0x730 [ 1007.578769][ T1478] console_unlock+0xa1/0x330 [ 1007.578790][ T1478] vprintk_emit+0x388/0x650 [ 1007.578807][ T1478] vprintk_default+0x26/0x30 [ 1007.578824][ T1478] vprintk+0x1d/0x30 [ 1007.578854][ T1478] _printk+0x79/0xa0 [ 1007.578891][ T1478] __ext4_msg+0x18f/0x1a0 [ 1007.578917][ T1478] ext4_process_orphan+0xd7/0x1c0 [ 1007.578948][ T1478] ext4_orphan_cleanup+0x6a8/0xa00 [ 1007.578975][ T1478] ext4_fill_super+0x3171/0x34e0 [ 1007.579000][ T1478] get_tree_bdev_flags+0x291/0x300 [ 1007.579023][ T1478] get_tree_bdev+0x1f/0x30 [ 1007.579044][ T1478] ext4_get_tree+0x1c/0x30 [ 1007.579066][ T1478] vfs_get_tree+0x54/0x1d0 [ 1007.579082][ T1478] do_new_mount+0x207/0x680 [ 1007.579118][ T1478] path_mount+0x4a4/0xb20 [ 1007.579149][ T1478] __se_sys_mount+0x28f/0x2e0 [ 1007.579166][ T1478] __x64_sys_mount+0x67/0x80 [ 1007.579206][ T1478] x64_sys_call+0xd36/0x2fb0 [ 1007.579236][ T1478] do_syscall_64+0xd2/0x200 [ 1007.579269][ T1478] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1007.579292][ T1478] [ 1007.579296][ T1478] value changed: 0x0000000000002c25 -> 0x0000000000004c25 [ 1007.579311][ T1478] [ 1007.579314][ T1478] Reported by Kernel Concurrency Sanitizer on: [ 1007.579326][ T1478] CPU: 0 UID: 0 PID: 1478 Comm: syz.5.9419 Not tainted 6.15.0-syzkaller-09161-g0f70f5b08a47 #0 PREEMPT(voluntary) [ 1007.579354][ T1478] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1007.579377][ T1478] ================================================================== [ 1007.928912][ T1478] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.9419: bg 0: block 361: padding at end of block bitmap is not set [ 1007.947979][ T1478] EXT4-fs (loop5): Remounting filesystem read-only [ 1007.953127][T32052] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 1007.967869][T31856] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1007.978936][ T1478] EXT4-fs (loop5): 1 truncate cleaned up [ 1007.990238][ T1478] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 1008.026870][ T1478] EXT4-fs warning (device loop5): dx_probe:861: inode #2: comm syz.5.9419: dx entry: limit 0 != root limit 125 [ 1008.040079][ T1478] EXT4-fs warning (device loop5): dx_probe:934: inode #2: comm syz.5.9419: Corrupt directory, running e2fsck is recommended [ 1008.062739][ T1482] syzkaller0: entered promiscuous mode [ 1008.069475][ T1482] syzkaller0: entered allmulticast mode [ 1008.077121][T24506] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 1008.098092][ T1482] tipc: Started in network mode [ 1008.103805][ T1482] tipc: Node identity , cluster identity 4711 [ 1008.110740][ T1482] tipc: Failed to obtain node identity [ 1008.117494][ T1482] tipc: Enabling of bearer rejected, failed to enable media