last executing test programs: 7m52.232102641s ago: executing program 4 (id=417): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000005a0000008500000022000000180100002020702500000000002020200100000000000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet6(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r1}, 0x10) sendto$inet6(r0, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x1c, 0x0, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20008090}, 0x24040010) sendmsg$NL80211_CMD_ABORT_SCAN(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x0, 0x200, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4044014}, 0x80) 7m52.064816158s ago: executing program 4 (id=420): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000280)='./mnt\x00', 0x800810, &(0x7f0000000200)={[{@nobh}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4}}], [{@dont_appraise}, {@smackfsdef={'smackfsdef', 0x3d, '}'}}, {@subj_type}, {@dont_hash}]}, 0xff, 0x23f, &(0x7f0000000780)="$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") lsetxattr$trusted_overlay_redirect(0x0, 0x0, 0x0, 0x0, 0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x28}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x0, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000, 0x1}, 0x94) lsetxattr(&(0x7f00000002c0)='./mnt\x00', &(0x7f0000000300)=@random={'btrfs.', '-\x00'}, &(0x7f0000000340)='\'{./){^-{^\xd4*^\x00', 0xe, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f3bbb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68000000000000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465a932b77a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900ff0000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80af740b5b7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48bc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd3170400000085be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890cec55bf404e4e1f74b7eed82571be54c72d978cf906df08f11f1c4042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9f0390a6f01e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5eaff07000000000000b99c9cc0ad1857216f000000009191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a798de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270b939b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf01cfaed9ef0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546bb2e51935ab9067ec3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f626602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df902aeec50e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd6d89f80a4377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f000000000100000000d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fb03b84f63e022fe755f4007a4a899eaf52c4f491f1e97c862e29e4570600000091c691faee1e0c8fe056a07474"], &(0x7f0000000100)='GPL\x00'}, 0x94) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2b, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000001800)=ANY=[@ANYBLOB="020200030f0000002cbd7040fedbdf2503000900800000001cdc0dca1d9f68846960e56de42944af030006000000000002004e22ac1414bb000000000000000002000100000000000000070c00000080030005000000000002004e20ac1414bb0000000000000000020013"], 0x78}, 0x1, 0x7}, 0x8000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r4 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYRES64, @ANYRES16], 0x48) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000ffffffffffffbffe000000850000006d00050018110000", @ANYRESDEC=r5, @ANYRES16=r3], 0x0, 0x8, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x94) syz_clone(0x840000, &(0x7f0000002ec0)="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", 0x108b, &(0x7f0000000400), &(0x7f0000000740), &(0x7f00000006c0)="7b04307c06bcafe6b64e76a916c47329a7426bb36cf2141cd084e039bf87b292f8cc3de94d54a62878da42c58a4aca27450f5c5ffa9e23dcb179e5e5e1dff49c93215af51519482ea43c26") socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x18) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x200000, &(0x7f00000000c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x20}}, {@errors_remount}, {@oldalloc}]}, 0x1, 0x524, &(0x7f0000001200)="$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") syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f00000005c0)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}], [{@audit}, {@pcr={'pcr', 0x3d, 0x7}}, {@obj_type={'obj_type', 0x3d, '\\.\\,&)'}}, {@measure}, {@obj_role}, {@hash}, {@subj_user={'subj_user', 0x3d, 'XX\x7f*\x93^\x87\xff\xda{.\f\xecml\xf2\x05\xc8\xca\bK\xf6i\xa4A\'\xca:\x96\x0e\x1e\xb5\x1c\xbf\x86Q\x1a\xf4\xfa\xfd\x00@\xa2\x95U\xda\xd6SM\xedo\x18\x00'}}, {@smackfsfloor={'smackfsfloor', 0x3d, ')'}}, {@fowner_gt}, {@euid_lt}]}, 0x1, 0x5ea, &(0x7f0000001740)="$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") bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r6, 0x0, 0x80, &(0x7f0000001d80)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000c0], 0x11, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff000000005d029853dae59479d78a69fe31f72300000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff000000000000000000000000001900"/144]}, 0x108) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r7, &(0x7f0000000200)="aa", 0x1, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x3f66400, @dev={0xfe, 0x80, '\x00', 0x6}, 0x9}, 0x1c) 7m50.727716986s ago: executing program 4 (id=432): lsm_set_self_attr(0x66, 0x0, 0x43, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x2, 0x9db, 0x7bc60221) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) ioctl$AUTOFS_IOC_ASKUMOUNT(0xffffffffffffffff, 0x80049370, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = syz_io_uring_setup(0x5c7, &(0x7f00000006c0)={0x0, 0x9456, 0x0, 0x0, 0xa8}, &(0x7f00000001c0)=0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x18, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x40, 0x1}) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000096ca077900"/20, @ANYRES32=0x0, @ANYBLOB="0000000008290400240012800b000100697036746e6c0000140002800600120000000000060012"], 0x44}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000014001280090001007663616e000000000400028008000a"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'syztnl2\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00000018"], 0x50}}, 0x4000000) io_uring_enter(r2, 0x6e2, 0x3900, 0x1, 0x0, 0xe00) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) openat$dir(0xffffffffffffff9c, 0x0, 0x40000, 0x0) 7m49.822030375s ago: executing program 4 (id=445): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x2a, '\x00', 0x0, 0x2}, 0x94) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x408e, &(0x7f00000000c0)={[{@nodelalloc}, {@min_batch_time={'min_batch_time', 0x3d, 0xfff}}, {@nojournal_checksum}, {@stripe={'stripe', 0x3d, 0x12}}, {@i_version}, {@max_batch_time={'max_batch_time', 0x3d, 0x7}}]}, 0x3, 0x43a, &(0x7f0000000340)="$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") r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001080)=ANY=[@ANYBLOB="02000000040000000800000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x778}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='net_dev_xmit\x00', r3}, 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r4, &(0x7f00000010c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbfdb065f649d1136419008100000008004509001400680000096c90780a070101e0000001b4dd05e48fcfc1f7f33a60566df3994a2e5bc932967d81a9ef04324be8e957463de72cbd00cf1499ee461e21e976d11e027901774fb8335f45a2a42654032d03"], 0x2a) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='net_dev_xmit\x00', r2}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"/2566], &(0x7f0000000340)='syzkaller\x00'}, 0x48) creat(&(0x7f00000004c0)='./bus\x00', 0x75) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000a80)='kfree\x00', r8, 0x0, 0xfffffffffffffffd}, 0x18) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) dup2(r9, 0xffffffffffffffff) mount(&(0x7f0000000480)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x801400, 0x0) r10 = open(&(0x7f0000000080)='./bus\x00', 0x147842, 0x0) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000480)='./bus\x00', 0x10, &(0x7f0000000040)={[{@test_dummy_encryption}, {@init_itable}, {@oldalloc}]}, 0x7, 0x479, &(0x7f00000004c0)="$eJzs3M1vG0UbAPBn13H65k0hoZSvlo9AQVQIkqYt0AMHQCBxKBISHOBoJaEqTQtqgkSrIFIO5cQBiTviyL/ACS4IwQWJK9xRpQrlQsvJaL27iZ04TpPYMcW/n2R4Znfsmce7Y8/uxA1gYE1k/0ki9kfEbxExlhdbK0zk/7uxsjRzc2VpJol6/c0/k0a9v1aWZsqq5fNGmwuRxOE27S5cunyuNj8/d7EoTy2e/2Bq4dLlZ86er52ZOzN34fipUydPTD//3PFnu5LnaKRF9No7X7x++vOW/Nfl0SUTnXY+Ua93ubn+uqMpHupjP9ieSnG8qo3xPxaVpqM3Fq9+ulr4pE8dBHqmXq/XRzffvVwH/sOSaC0b8jAoyi/68vq33XXwiz2bffTf9ZfyC6As7xvFI98ztHrHoLru+rabJiLi7eW/v8oe0Zv7EAAALb7L5j9PZ7OdpZls7rE2/0jj3qZ6dxZrQ+MRcVdEHIiIu+NCHIyIeyIade+LiPu32X7TIkljmrlx/pNe23FytyCb/71QrG21zv/K2V+MVxqlS3khqsm7Z+fnjhXvydGo7svK0x3a+P6VX/PKbTTP/7JH1n45Fyz6cW1oX+tzZmuLtd3k3Oz6lYhDQ+3yT1ZXApKIeCAiDrV7gXTrNs4+9c2Dm+3bOv8OurDQVP864sn8+C/HuvxLSef1yan/xfzcsanyrNjop1+uvrFZ+7vKvwuy4///tuf/av7jSfN67cL227j6+2ebXtNMVItg6/O/Um5Zri3WhpO3GvFwse2j2uLixemI4eR03unm7cfXXq0sl/Wz/I8eaT/+D8TaO3E4IrKT+KGIeDgiHimO3aMR8VhEHOmQ/48vP/7e+m0jZf7/guM/u63jvxYMR+uWtE2dLKic++HblkbH18Ii/5udP/9ONqKjxZZb+fzb2Iv2wW7fPwAAALgdpBGxP5J0cjVO08nJ/G/4D+ZL35kPL8zmvxEYj2pa3ukaa7ofOl1c1uflKxGR/2lBuf9EpI37xl9WRhrlyZn352f7mjkwusn4z/xR6XfvgJ7zgy0YXMY/DK6O47+6d/0A9t6G8d9xzO/raV+AvdXm+3+kH/0A9t5wm23+vR8YDOu+/y37wQBx/x8Gl/EPg8v4h4G0MBJb/0i+Y1C+0g6fvlUwFrGDHg5Fl7ux/SCq/Wy990GkvW3i45+jx6dWz4LkNuzzhqBfn0gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADd9U8AAAD//9mqzLs=") preadv2(r10, &(0x7f0000000d80)=[{&(0x7f0000001200)=""/4096, 0x100000}], 0x1, 0x0, 0x0, 0x1b) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r7, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000100)="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", 0x0, 0x8, 0x60000000}, 0x1e) r11 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x80) open_by_handle_at(r11, &(0x7f00000002c0)=ANY=[@ANYBLOB="4b000000020000000b"], 0x36f0516f) socket$inet6(0xa, 0x3, 0x5) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000680)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x6acc437c26c2db7b) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000280)='kfree\x00', r0}, 0x18) 7m49.666853841s ago: executing program 4 (id=446): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000006c0), 0x2000) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f00000000c0)={0x8, 0x2, 'client0\x00', 0x7, "a72e4d63bc515a59", "7f42e1e396067740e0182ac6b9dcfe2f1897f395d794ee4ceb8d7d066a182639", 0x427, 0x80}) openat(0xffffffffffffffff, &(0x7f0000000600)='./file1\x00', 0x113602, 0x20) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x840, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0x6dea6000) bpf$MAP_CREATE(0x0, 0x0, 0xb25fea8196ea28cd) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0xffffffffffffffff}, 0x18) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000680)='./file0\x00', 0x0, &(0x7f0000000b80)={[{@usrquota}, {@resgid}], [{@seclabel}]}, 0x21, 0x4bd, &(0x7f00000006c0)="$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") writev(0xffffffffffffffff, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}, {0x0, 0x900}], 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000640)='sctp_probe\x00'}, 0x18) r3 = msgget$private(0x0, 0x480) msgsnd(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="0200000000000000ff7f1c823e695237825488d5e047d09602c1017642c6ca17e11ecf866b5b33b179d065bdcb1b5e01481dfb6a2c73cc623a60ca094f1a550aba92acd8a69444d52f86e5db83b032f4c6cbfcd0c084237048eefc30d84c82b62811c1ed61c0d1cc88dbb7e55311885b8c03a47e40dc0a477e793c06fe89f41fe664acdf6434e5cf7eca1eed5afb2f9e91e889b97755d343257d850a78e658f2d1f1b4ff08fd506422d93d3b8b9ee5580b0eb7f573bd411b8a27de0a2d011cf5bf2940dfc6dd679d19b42d2caa34c32fa898432365273970a5082329e61912d4eef4f24b9268e601579fc8f0fa2a3c2af89591ffce34b75eebb33b8156902d50adc2bcdb24763d29716bfd0626e59496e492fc385c150cf7e89132f467ebaa62301278af495c0e9bc64c588aa6e815255b85c7d90fe5c01aa73969671fd0e29b206006309aeb4615a4b5b0d066b3fa6bce7be06c51410e3ea7e031e6a8edd63d3c44f5ddd104222c649edb056ece9ce94e7a1d115f79b4f2d26a1d29f3213f0d647cafbbb8ef825c1226ed716bfb0d187df7463bc949b8281cd1e5343f1f2d37f5690a5557262a2053e34484be6267897bcba5f709a52ae5a6255c58ef0f46632e05c2ccfe33e8258daf59413151812ebddc6b4293ca132b3612b1cf78b5f83285393979c5d07c3a01db4aba7bf8bca1705673b1a6f218fc971ebfc5ef5accc6fea12d0c0369d290bd9684eab10b88cad97cb10ea58ffc615c54212574874ee72289b96f8f3f00be319ebf72ddfeb45e36b9055f042dad6a290a01101452c3d0e2dd43ea4779f62bee347f05eb191b877dad4c5bdabfd0210b6a39fc8a93e0c2efab44426a3c9e0dbdc4626f4ffa245992c519d624a29b25ed65151ecc38e67d071e01886d922b2ec23728e8445223882b60e6dc2f8551bcbddc2f3d8bc106c8aa2ad0edcf0d1ee8af02ad69e57114f302f13acbda7b97730f4f141cd041198f9a3cb806b7db72b2c05e0aaf6a786bd367d38402a9087b669ec9b557ca2571689369bbd076789a91f655ff0bcaa853891b0ef2b0cf9914a2b886e6c3a0d3eb8d9225557baff7573bd6d45a4b64d4b3d8d5b596a0c944845cb79ca0b1eccd0048f3195b77ec0d2d16158a80cb5937b6f78066ad1e97c8afa5c654c8a68befd2a253280497c7ea2e0409f1fbfc3b507dbb6574dd111ffed8e2de29b5d696196ac949398971d217e9418c08715fe11e29c454ece4a0577633879ef0b8c95bfa5c556b0a746332333e617146f0bb06e15d4102cef7106e2dadd3682c9e47b827ee43e9319181c7759bf6726dac95f0852dd5448b96222edd4bc6c8e0e85656bcaf5137f8ce0cd0fca7fb12eb5582eb6d2a680ab74e18806ccd441cdd87fed1a981cf4f178e3cf12b658d8d8c3b2153d73eee5fd9a585192fa1b767db8a3f2bf7df48f3"], 0x401, 0x0) msgsnd(r3, &(0x7f0000001e40)=ANY=[], 0x401, 0x0) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r4 = inotify_init() inotify_add_watch(r4, &(0x7f0000000000)='./file1\x00', 0x16000f57) renameat2(0xffffffffffffff9c, &(0x7f0000000580)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file7\x00', 0x5) renameat2(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000540)='./file7\x00', 0x0) 7m49.306573587s ago: executing program 4 (id=453): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x65, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x0, &(0x7f0000000500)={[{@grpquota}, {@nogrpid}, {@quota}], [{@seclabel}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") 7m49.306136387s ago: executing program 32 (id=453): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x65, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x0, &(0x7f0000000500)={[{@grpquota}, {@nogrpid}, {@quota}], [{@seclabel}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") 2m40.081320552s ago: executing program 1 (id=5530): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, &(0x7f0000000040)}) accept$inet6(0xffffffffffffffff, 0x0, 0x0) 2m40.040119633s ago: executing program 1 (id=5531): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdffffff85000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mq_notify(0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="d0000000", @ANYRES16=r2, @ANYBLOB="01002bbd7000fcdbdf2510"], 0xd0}, 0x1, 0x0, 0x0, 0x4001}, 0x4000000) 2m40.039407063s ago: executing program 1 (id=5532): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000fe11b44f6578c344f7", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x18) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x10) finit_module(r3, 0x0, 0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRESDEC=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) unshare(0x22020400) syz_clone(0x26801000, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = io_uring_setup(0x194e, &(0x7f0000000a80)={0x0, 0x30bd, 0x2, 0x3, 0x197}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = socket(0x400000000010, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xaf, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7ffd}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r9}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r10, 0x8982, &(0x7f0000002800)={0x1, 'vlan0\x00'}) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001300)=@newtfilter={0xea4, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r12, {}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_fw={{0x7}, {0xe78, 0x2, [@TCA_FW_ACT={0xe74, 0x4, [@m_pedit={0xe70, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x4, 0x1ff, 0x20000000, 0xc, 0x6}, 0x7f, 0x5}, [{0x2a9, 0x6, 0x810, 0x4, 0x5}, {0x4a7, 0x1fe, 0x4, 0x1, 0x7, 0xdd}, {0x9, 0x0, 0x3ff, 0x7, 0xfffffffd, 0x4}, {0x8, 0x0, 0x6, 0x2, 0x7fff, 0x3}, {0x4f9a, 0x5, 0x1, 0x1, 0x2, 0x8}, {0x0, 0x5, 0x1437, 0xffffffff, 0xee57, 0x9}, {0x77d, 0x8, 0x9, 0x6, 0x8, 0x1}, {0x6, 0x6, 0x0, 0x2, 0x1, 0x7fff}, {0xf26, 0x5, 0x4235da1, 0x9, 0x7ec9, 0x8}, {0x10000, 0x2, 0x1, 0x1, 0x3, 0x9}, {0xd, 0xffff0001, 0x0, 0x6, 0x81, 0x4}, {0xfffffffc, 0x4, 0xffff, 0x8, 0xffffffff, 0xfffffffa}, {0x5, 0xd29, 0x101, 0x3, 0x7, 0xc}, {0x0, 0xfffffff7, 0x1, 0x72b2, 0xc874, 0x3}, {0x3, 0xf, 0x5, 0x1, 0x1ff, 0x6}, {0x9b9b, 0xffff, 0x6, 0xb, 0xb3d, 0x812}, {0x5, 0x7, 0x2, 0x5, 0x5, 0x4}, {0x6, 0x0, 0x9, 0x2, 0x82, 0x2}, {0xfffffff7, 0x6, 0x2, 0x9, 0xff}, {0x4, 0x1, 0x371, 0x8, 0x0, 0xeac}, {0x9, 0x2, 0xd77, 0x8, 0x113, 0x8d3f}, {0x7, 0xffffffff, 0x4, 0x92a4, 0x9, 0x10}, {0x1a4a13f0, 0x9, 0xe, 0x2, 0xad47, 0xf83b}, {0x1ff, 0x5, 0x7, 0xfff, 0x9}, {0x100, 0x4, 0x200, 0x9, 0x1, 0x9df}, {0x9, 0x1, 0x65, 0x9, 0x7}, {0x401, 0x10001, 0xb, 0x200, 0x9, 0x1}, {0x6, 0x10, 0x0, 0x2, 0x6, 0x3}, {0xf23, 0x3ff, 0x0, 0x9, 0xffffffff}, {0x80000000, 0x6, 0x0, 0x6, 0x6, 0xd}, {0x0, 0x10000009, 0xd, 0x8000, 0x3, 0x2}, {0x800, 0x9, 0x6, 0x3, 0x7, 0x8}, {0x7, 0x8, 0x7358, 0x7, 0x8, 0xffffffff}, {0x4d9, 0x45db8bad, 0xb3dd, 0x1, 0xbc, 0x7ff}, {0x7, 0x1, 0x6, 0x3, 0x3, 0x7a}, {0x5a1b, 0x1, 0x1, 0x7ff, 0x3, 0x4}, {0x3, 0x7, 0x80, 0x4, 0x1c716ddc, 0x8}, {0xffffffa5, 0x7, 0x0, 0x10, 0x3, 0x5}, {0x8219, 0x0, 0x2, 0x6, 0x3, 0x2}, {0x62, 0xf4, 0x5, 0x4, 0x4, 0x67}, {0x5, 0x4, 0x53, 0x8, 0xc0000000, 0x7}, {0x2, 0x5, 0x2, 0xffff, 0x2, 0x2}, {0x80000001, 0x94c, 0x6, 0xfffffe00, 0x5, 0x7b27}, {0x2, 0x6, 0x1000, 0x9, 0x9}, {0xa, 0x0, 0x9, 0x4, 0xe, 0x9}, {0xdf, 0x7fff, 0x8000, 0x81, 0xff, 0xfffffff8}, {0x2, 0x10000, 0x9, 0x80000002, 0x2}, {0x2, 0x6, 0x9, 0x1, 0x2, 0x40}, {0xfffffe00, 0x3, 0x74d2, 0x3, 0x80000001, 0x6}, {0xe3f6, 0x8, 0xfffffff7, 0x1, 0x6, 0xa}, {0x8, 0x9, 0x8e, 0x33, 0x10001, 0x22cb}, {0x2, 0x31f5, 0x7, 0x5, 0x7fffffff, 0x1}, {0x9, 0x10001, 0x4, 0x8, 0x7, 0x9}, {0xb, 0x1ff, 0xb, 0x3, 0x5, 0x80000001}, {0x7, 0x7, 0x69b, 0x3, 0x8, 0x339}, {0xee, 0x80000000, 0xfba6, 0x101, 0x5, 0xb}, {0x3, 0x458, 0x6, 0xf, 0x7, 0x1}, {0x9, 0xfffffffa, 0x1000, 0x8, 0xb, 0xce5a}, {0x400, 0xffff, 0x3, 0xbcbb, 0x7, 0xb}, {0x0, 0xe000, 0xb, 0x8, 0x2, 0x1}, {0x1, 0x0, 0x2, 0x9, 0x0, 0x401}, {0xd, 0x1, 0x2, 0xf, 0x81, 0x5}, {0x6, 0xfff, 0x3, 0x5, 0x4, 0x3649}, {0x7, 0x2, 0x80000000, 0x9, 0x1630, 0x9e73}, {0xb, 0x1b6, 0xc4, 0x3, 0x4, 0xca}, {0x4, 0x5, 0x401, 0x4, 0xfffffff8, 0x40}, {0x8, 0x4594, 0x8, 0x4, 0x0, 0xffff}, {0x100, 0xfffffffb, 0x6, 0x0, 0x9, 0x6}, {0x3, 0xf7b, 0x3, 0x8, 0x6, 0x3}, {0x1, 0x5, 0x3, 0xab9, 0x7, 0x9}, {0xffffffff, 0x0, 0xfc, 0x7, 0x6, 0x10}, {0xf, 0x1, 0xa000000, 0x1, 0x101, 0x1f3}, {0x7ff, 0x9, 0xfffff001, 0x8001, 0x2, 0x2}, {0x4, 0x10001, 0x6, 0x1, 0xd, 0xfffffff8}, {0x3, 0x3, 0x7, 0x9, 0x10, 0x1}, {0x5, 0x100, 0xffffffff, 0x963, 0x2, 0xc}, {0x6, 0x50, 0x6, 0xa, 0x0, 0x3}, {0x649, 0x2, 0x80000001, 0x8, 0x0, 0x1}, {0x8, 0xfff, 0x6, 0x80000001, 0x7fffffff, 0x3}, {0xa3, 0x81, 0x9fcb, 0x1, 0x8, 0x7fff}, {0x0, 0x2, 0x750c, 0x0, 0x1, 0xfffffffc}, {0x7ff, 0x7, 0x10000, 0x9, 0x4, 0x88}, {0x5, 0x10001, 0x7fff, 0x81, 0xfffffff4, 0x7}, {0x5, 0x80000001, 0x5, 0x4, 0x1ff}, {0x3, 0x0, 0x3ff, 0x7fffffff, 0x9, 0x7}, {0xdac, 0x0, 0x4, 0x80000001, 0x3, 0x8}, {0x7, 0xffffffff, 0x6, 0x8, 0x80000001, 0xa}, {0x2, 0x4, 0x4, 0x401, 0xe32}, {0x5, 0x7, 0x6, 0x8, 0x2, 0x2}, {0x10001, 0x5, 0x3, 0x4, 0x9, 0xfffffffa}, {0x2, 0x0, 0x3, 0x6, 0x800, 0x3}, {0x0, 0x0, 0x3, 0x8, 0x1, 0x3}, {0x9, 0x3, 0xffffffff, 0x3, 0x800, 0xde}, {0x5, 0x66, 0x41d0, 0x8001, 0x1, 0x3}, {0x6, 0x7, 0xfffffffc, 0x4, 0x3, 0x92c}, {0x4, 0xffff, 0x0, 0x101, 0x4, 0x1}, {0x9, 0xf667, 0x5, 0x3, 0x9, 0x4}, {0x1731, 0xa, 0x9960, 0x9, 0x1, 0x7}, {0xd, 0xfffffffa, 0x1, 0x3, 0x40, 0x2}, {0x1, 0x4, 0x80000000, 0x80000001, 0x2, 0x6}, {0x7, 0x2, 0xffffff3a, 0x4cf, 0x800, 0x6}, {0x8000, 0x26, 0x1, 0x0, 0x100, 0x80000000}, {0x3b, 0x5562334a, 0x2, 0x2, 0x6, 0x81}, {0x4, 0x96, 0x81, 0x0, 0x101, 0x7}, {0x4, 0xff, 0x9, 0x0, 0x81, 0x29}, {0xa, 0x5, 0x0, 0x9, 0xffffffff, 0xfb4}, {0x80000000, 0x2, 0xffff, 0x39b4, 0x1, 0x800}, {0x61, 0x2d, 0x6, 0x1fe4c5d2, 0x1, 0x3}, {0x1, 0xe2, 0x7ff, 0x7ff, 0x7f, 0x29d0}, {0x0, 0x4, 0xc, 0xd594, 0x9, 0x7}, {0x6, 0x0, 0x7, 0x9, 0x7, 0x9}, {0x80e9, 0x7, 0x9, 0x1, 0x1, 0x18000}, {0x400, 0x9, 0x0, 0x6f}, {0x2, 0x1, 0x6, 0x3, 0x2fe, 0xce}, {0x1, 0xff, 0xb, 0x4, 0x800, 0x1}, {0x6, 0x2, 0x8, 0xfff, 0x4, 0x7fff}, {0x0, 0x0, 0x7f, 0x401, 0x7, 0x7fff}, {0x7, 0xb, 0x10000, 0x1, 0x8000, 0xfffff830}, {0x3, 0x4, 0x2, 0x1, 0x6, 0x2b4}, {0x3cd2dbce, 0x929a, 0x9dc, 0x0, 0x8, 0xfffffffc}, {0x6, 0x0, 0xe61, 0xc5c3, 0x3, 0x1}, {0x7, 0x2, 0x197a, 0x7, 0x1, 0x8}, {0xff, 0x2c, 0xfffffc01, 0x1, 0x3, 0x100}, {0x0, 0x6, 0x10001, 0xce7, 0xec, 0x1000}, {0xffffffff, 0x6, 0xffffffff, 0x9, 0x2, 0x6}, {0xfa, 0x9, 0xbf1d, 0x9, 0x80, 0x5}, {0x1c91, 0x5f27, 0x1, 0x0, 0x6, 0xcf}, {0x37, 0x622, 0x2, 0x1, 0x7, 0x2}], [{0x5}, {0xccffbfc290ab3baa}, {}, {0x2}, {0x2}, {0x0, 0x1}, {0x3}, {0x4, 0x1}, {}, {0x1, 0x1}, {0x1}, {0x2}, {0x3}, {0x0, 0x1}, {0x5, 0x1}, {0x2}, {0x3, 0x1}, {0x1}, {0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {}, {0x2, 0x1}, {0x1}, {0x2}, {0x2, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {}, {0x3}, {0x3, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {}, {0x5, 0x1}, {0x3}, {0x2}, {0x4}, {0x5}, {0x5, 0x1}, {0x2}, {0x1, 0x1}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0x2}, {0x4, 0x1}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {}, {0x3, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0xed3229170eca159, 0x1}, {0x2, 0x1}, {0x1}, {0x3}, {0x3, 0x1}, {}, {0x2, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x3}, {0x2}, {0x3, 0x1}, {0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x2}, {0x5, 0x1}, {0x4}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x5}, {0x5}, {0x4, 0x1}, {0x4, 0x1}, {0x4}, {0x5}, {0x54e1b160e6ec45e8, 0x1}, {0x1, 0x1}, {0x2}, {0x3, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x4, 0x1}, {0x4, 0x1}, {0x5}, {0x0, 0x1}, {0x3}, {0x0, 0x1}, {0x5}, {}, {0x2}, {0x5, 0x1}, {0x4}, {0x2}, {0x9baeccaf277094c4, 0x1}, {}, {0x2, 0x1}, {}, {}, {0x8f9fc2e2ef57f2f0}, {0x3, 0x1}, {0x2, 0x1}, {0x2}, {0x3}, {0x3}, {0x2, 0x1}, {0x2, 0x1}, {0x1}, {0x1}], 0x1}}]}, {0x22, 0x6, "43bb434042e23f79a1b857132319e66d45710479befbdde232d9badc3aba"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0xea4}, 0x1, 0x0, 0x0, 0x85}, 0x800) close_range(r6, 0xffffffffffffffff, 0x0) r13 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) r14 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000e8f70000000000ff000044850000000e000000650000005000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kfree\x00', r14}, 0x18) sendmsg$ETHTOOL_MSG_STRSET_GET(r5, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000002c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="0100d0000000fbdbdf25010000001800018014000200766574683100000000000000000000001c000280"], 0x48}, 0x1, 0x0, 0x0, 0x840}, 0x4008800) 2m39.89191279s ago: executing program 1 (id=5533): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000dc0)={&(0x7f0000000d00)=ANY=[@ANYBLOB="9feb0100180000000019000018000000180000000600000006000000010000130200000006000000060000000200000000615f300000"], &(0x7f0000000d40)=""/104, 0x36, 0x68, 0x0, 0x2}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0xc, 0x43, 0x40, 0xc0, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100), &(0x7f00000001c0), 0x10f0, r1}, 0x38) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00'}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000006c59850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000f00)='kfree\x00', r3}, 0x18) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000004c0), &(0x7f0000000640), 0x16c5, r1}, 0x38) syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x4400, &(0x7f0000000240)=ANY=[@ANYBLOB='check=strict,session=0x0000000000000024,iocharset=ascii,overriderockperm,overriderockperm,gid=', @ANYRESOCT=0x0, @ANYRES16=0x0], 0xf6, 0xa15, &(0x7f00000002c0)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000f40)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r5}, 0x18) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000180)='./file0\x00', 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x1, 0x240, &(0x7f0000000a00)="$eJzs2k9rXFUYB+D3xkpqSjoj/qMF8aALdXNpsnbRIC2IQcU2QhSkN+ZGh9zOhNwhMCI2K936EVyLS3eCdOkmGz+BC3fZZNmFeGUy0c6EURSrE+zzbOblnvldzuUcDu/iHL7yxe3trTrfKvoxl2UxdzX2414W7ZiL3+zHyy+uf//sjfV3X19ZXb32dkrXV24uLaeULj733XuffP383f6Fd765+O18HLTfPzxa/ung6YNLh7/c/KhTp06dur1+KtJGr9cvNqoybXbq7Tylt6qyqMvU6dbl7sT4VtXb2Rmkoru5uLCzW9Z1KrqDtF0OUr+X+ruDVHxYdLopz/O0uBD8E2tf3WuaOGoevRVN0zz2ZVy4G4s/Riuyx1P2xNXsqVvZM/vZpaOmac16qvwrrP/D7cb6fEQcH+rnI6rP99b21ka/o/GVrehEFWVciVb8HMNtcmJUX39t9dqVdKwdn1V3TvJ39tYemcwvRSva0/NLo3yazM/Hwnh+OVrx5PT88tT8+XjphbF8Hq344YPoRRWbMczez3+6lNKrb66eyl8+/h8AwP9Nnn43tX/L8z8aH+X/pD+cj8n+8FR/dS4un5vttxNRDz7eLqqq3FUo/l4x3D5nYBqKsSK7/UZ7uC4P4IWzPpn4L9xf9PGnG7ObEAAAAAAAAAAAAH/JqUt/2cnjB3otccafCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnHG/BgAA//819sxU") sendto$inet(0xffffffffffffffff, &(0x7f0000000000)="e6", 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) setsockopt$IP_VS_SO_SET_EDITDEST(r4, 0x0, 0x489, &(0x7f0000000e00)={{0x2f, @multicast1, 0x4e22, 0x2, 'fo\x00', 0x2, 0x7, 0x55}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e23, 0x2, 0x4, 0x80000001}}, 0x44) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000280)='./file1\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x1219, &(0x7f0000001100)="$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") setsockopt$inet_tcp_TCP_QUEUE_SEQ(r4, 0x6, 0x15, &(0x7f0000000100)=0xfff, 0x4) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.swap.current\x00', 0x275a, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/69, 0x328000, 0x1000, 0x800, 0x3}, 0x20) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x7, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x7ffffd, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) syz_clone(0x60002080, 0x0, 0x0, 0x0, 0x0, 0x0) write$binfmt_script(r6, &(0x7f0000000000), 0x208e24b) open_by_handle_at(r4, &(0x7f0000000080)=@shmem={0xc, 0x1, {0x20, 0x20}}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0xfffffffffffffe8b) syz_emit_ethernet(0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="0180c20000000180c200000e86dd6cbdc6f500006cff00000000000000000000000000200000ff020000000000000000000000000001"], 0x0) 2m39.742614516s ago: executing program 1 (id=5534): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ff"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000c80)=ANY=[@ANYBLOB="18000000220000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0xfffffffffffffffc}, 0x18) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x38, 0x1403, 0x1, 0x71bd2c, 0x25dfdbfc, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x44044}, 0x810) (fail_nth: 4) 2m39.742413396s ago: executing program 1 (id=5535): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x1fb0, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000840)=ANY=[@ANYBLOB="61105c000000000095000000000000004e53fa4ef5f74303ad6b65ddb512d04947dccf0ea0ffb2a0175f62514da4705af66e47830656482e7642569518d1d03966d6f50159e8aace7dd311c634ad9043859a97677bbfdafcc729c6dcdc07d781f53d05e937c788d8c430fa7ad66c3601ab15fda3a27bc1abfd4e733c13b51d9c98faa8d3a6fae06b0588fa19b927"], &(0x7f0000000200)='GPL\x00'}, 0x80) 2m39.741201176s ago: executing program 33 (id=5535): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x1fb0, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000840)=ANY=[@ANYBLOB="61105c000000000095000000000000004e53fa4ef5f74303ad6b65ddb512d04947dccf0ea0ffb2a0175f62514da4705af66e47830656482e7642569518d1d03966d6f50159e8aace7dd311c634ad9043859a97677bbfdafcc729c6dcdc07d781f53d05e937c788d8c430fa7ad66c3601ab15fda3a27bc1abfd4e733c13b51d9c98faa8d3a6fae06b0588fa19b927"], &(0x7f0000000200)='GPL\x00'}, 0x80) 1m3.681561589s ago: executing program 2 (id=7459): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r0}, &(0x7f0000000380), &(0x7f00000005c0)=r1}, 0x20) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_buf(r2, 0x29, 0x39, 0x0, 0x0) 1m3.633989302s ago: executing program 2 (id=7462): bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) r2 = add_key$keyring(&(0x7f0000000080), &(0x7f0000000340)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000240)='asymmetric\x00', &(0x7f00000000c0)=@chain) keyctl$restrict_keyring(0x1d, r2, 0x0, 0x0) 1m3.596056953s ago: executing program 2 (id=7465): r0 = fsopen(&(0x7f0000000100)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="e80200000000000000e800000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) prctl$PR_MCE_KILL(0x23, 0x9, 0x7fffffffeffe) r4 = syz_open_dev$usbfs(&(0x7f0000000180), 0x1ff, 0x0) ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f0000000a40)=@urb_type_iso={0x0, {0xe}, 0x8, 0x81, &(0x7f0000000300)="6e604e51740197372e78928df6e041e0e7596cb44c8e246dfd955b884f1f330b516ac540ba12dc8fb16e110650c8e99ee76dbfaff2837b07529cb6a9a6548ea33c154ee6fea4ec1417a258a9", 0x4c, 0x3ff, 0x7fff, 0x1c, 0x5, 0x7, &(0x7f0000000580)="99c6d67125f344b93962435119ea4e7b882e3d7a162cf72609b77c062b84916edc444db4308e08cd9e20800bae8327c31da019efef2937fb9d3e977e7d06b80f355ad009d1d4cc3bf1c315617ea893bbec38530f0a6d621f4f36ef8706cf942a690f09e86473b1290b5d3cc8c62bd97b5677b10b379b3d37f08b15a4e3bfa292dc48", [{0x9, 0x3}, {0x3, 0xde29, 0x5}, {0xb, 0x5, 0x3}, {0x2, 0x1, 0x3}, {0x778, 0x9, 0x7}, {0xb, 0xe762, 0x401}, {0xffff20ba, 0x6, 0x2}, {0x6, 0x4287, 0x4}, {0x2, 0x0, 0x3}, {0x0, 0x6, 0x4a7}, {0xd5, 0x401, 0x5}, {0x7f, 0x7, 0x10000}, {0xff, 0x9, 0x1}, {0x2, 0x10000, 0x4}, {0x7fff, 0x5, 0x2}, {0x26, 0x301, 0x6}, {0x25b70, 0x3, 0x7}, {0xf93, 0x3ff, 0x6}, {0x4fbe, 0x2, 0xc3e5}, {0x9, 0x4, 0xc00}, {0x2, 0x9, 0x2}, {0x3, 0xc, 0x2}, {0x5, 0x3, 0x1}, {0x2, 0x4, 0x6}, {0x5d, 0x5, 0x6}, {0x7ff, 0x5, 0xe7}, {0x5, 0x2, 0x1}, {0x6, 0x40, 0x8}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r3, 0x0, 0xfffffffffffffffd}, 0x18) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000007380), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r2, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r6}, 0x9) socket$rds(0x15, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000004c0)={r5, &(0x7f0000000380)="0abf18090624ca5217f3fdd0b36f0c948eba5de1096ecf556c973b76845d0551ecb5", &(0x7f0000000640)=""/243}, 0x20) 1m3.505889547s ago: executing program 2 (id=7468): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x181097, 0x2000000000000000) 1m3.489582678s ago: executing program 2 (id=7469): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x3, 0x60, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = add_key$keyring(&(0x7f0000000080), &(0x7f0000000340)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000240)='asymmetric\x00', &(0x7f00000000c0)=@chain) keyctl$restrict_keyring(0x1d, r1, 0x0, 0x0) 1m3.21419475s ago: executing program 2 (id=7475): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(r1, 0x25, &(0x7f0000000000)={0x1}) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(r2, 0x7, &(0x7f0000000380)={0x1, 0x4, 0x103ff}) close_range(r0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000002480)="$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") chdir(&(0x7f0000000180)='./file0\x00') r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_test', 0x141a82, 0x4) writev(r3, &(0x7f0000000040)=[{&(0x7f0000000140)="1e583bd1", 0x4}], 0x1) creat(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x9) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x4004081, 0x0, 0x0) creat(&(0x7f0000000d80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) rename(&(0x7f00000002c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$sock_int(r4, 0x1, 0x29, &(0x7f0000000080)=0x200009, 0x4) bind$bt_hci(r4, 0x0, 0x0) recvmmsg(r4, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=""/146, 0x92}, 0x6}], 0x1, 0x40012140, 0x0) statx(r1, &(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x800, 0x80, &(0x7f0000000680)) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002a20702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000280)='kfree\x00', r5}, 0x18) unshare(0x2040400) 1m3.188564261s ago: executing program 34 (id=7475): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(r1, 0x25, &(0x7f0000000000)={0x1}) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(r2, 0x7, &(0x7f0000000380)={0x1, 0x4, 0x103ff}) close_range(r0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000002480)="$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") chdir(&(0x7f0000000180)='./file0\x00') r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_test', 0x141a82, 0x4) writev(r3, &(0x7f0000000040)=[{&(0x7f0000000140)="1e583bd1", 0x4}], 0x1) creat(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x9) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x4004081, 0x0, 0x0) creat(&(0x7f0000000d80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) rename(&(0x7f00000002c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$sock_int(r4, 0x1, 0x29, &(0x7f0000000080)=0x200009, 0x4) bind$bt_hci(r4, 0x0, 0x0) recvmmsg(r4, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=""/146, 0x92}, 0x6}], 0x1, 0x40012140, 0x0) statx(r1, &(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x800, 0x80, &(0x7f0000000680)) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002a20702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000280)='kfree\x00', r5}, 0x18) unshare(0x2040400) 3.810714976s ago: executing program 3 (id=8568): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000010000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000340)='kfree\x00', r1, 0x0, 0x1}, 0x18) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r2) 3.718618669s ago: executing program 3 (id=8569): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000040000000c"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18040000000000000000000000400000850000000800000018110000", @ANYRES32=r0], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='kfree\x00', r1}, 0x18) io_setup(0x239f, &(0x7f0000000380)=0x0) io_submit(r2, 0x2, &(0x7f0000000180)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x6, 0xffffffffffffffff, 0x0, 0x0, 0x800002}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x7, 0x9841, 0xffffffffffffffff, &(0x7f0000000080)="e2", 0x36, 0x5, 0x0, 0x1}]) 3.347851316s ago: executing program 3 (id=8573): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002120207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0x4}, 0x18) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000180)=@req={0x401, 0xfffffffe, 0x0, 0xffffffff}, 0x16) close(r1) 3.268912559s ago: executing program 3 (id=8575): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, 0x0, 0x0) 3.206469871s ago: executing program 3 (id=8577): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x8, 0x8, &(0x7f0000002080)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1088d8b8588d72ec29c48f0af5f2d9f51c4b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68af2ad0810000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465ad32b77a74e802a0dc6bf25cca242bc6099ad2300000480006ef6c1ff0900000000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767042361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b6c7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae645ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48fc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1fb8f72cd317902f19e385be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa7956488bef241875f3b4b6ab7929a57affe760e797724f4fce1093b62d7e8c7123d890decacec55bf404e4e1f74b7eed82571be54c72d978cf906df0042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f870b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777385b10000553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a998de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f154772f514216bdf57d2a40d40b51ab67903ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1594e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270bb29b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214d00000000d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f68df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c471c784ae7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7ef1691a5fe8c47be395656a297e9df0e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec30cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd63bed8d31c31c37a373d4efd89f0000377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f0059161c5e0000000000000000000057d77480e0345effff6413258d1f6eb190aa28cbb4bafe34124172e436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fa03b84f63e022fe755f4007a4a899eaf52c4f491d8e97c862e29e457060000007ac691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104ebc1581848f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c716357d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a604a890a586832316d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c24936615ee68538e8fddd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426ca85e82ccf821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ad6acf5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba1c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63c41cbde2ba66ad81168070c8c6e18a6e452a31bdc4a60d637545ed4c8a1c649c3ce54ad3e16304d06a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c5140200000054d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c7340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a3bc38613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b9e6626f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f14eafe4b28ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1bfeef448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae0040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483f02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e9180100000000000000654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732e74dd690c57bdfdc1f069f9491bca7a8c59363799be70018c25ece5ad7307dc7a95c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2cdfb7fea73ca18874664d60a4b9423f3297bc8eb91b4ee1d73272ab28a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece98c077b358e752b439132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae2676384ff799783f55d7e5a1a092a01b965dc99cb7a9d98440c355927629f2bcf9dc2396eb2f5d25829715b24327642ac48f1201014a95e0e65e12cdf27e19043e3c5d3e798375cead3500a93190a52cdecaaccc35854a1d41ef365303f0e9b4fc969c9dab6df5e8a795b140fcc09e8a7b694d12932917facd8ceaa4e2d0d16bb0b95387fcd5ff136d8abddf94daf442bbff744591931872a36cf921ad69f2127386e8b0f9afee4da8d3fbec809fbb3ca0fded2859cf25d4c6155d396c5b9bd1a928923123f63f4c40688eae69990a9419456247bbaeb7948de84d2ff875414883bb1e503d4bfebc01bc12a53ea06bf38e571157bd642dac25dbee7832c58378374a39483d6721eec96c28911db21c0c006b42afc90000000000000000000000700000000000000000008ce4ea442c1a207108b35511186c5e860278f6463f52f3990ce08b1bfccc3cff4b5ae27b610aa9ba11b47d4f94c439e055cdbb2b12c983885c93ea4ab4ca1e02d831ae162ee104121cb1ac0bf21d80baccf95639c1a9559a71c64be170a195754ba486833c40d8a74133db14d3533c1ef540fa33b531a5bb5540438fc5fc15788ded6da33513c014892114702927cea2cb56c55892b6b2483833643dbee2da37059e576a2249b5119e7a28039af27c2ee0ff9b0b02f727295d2428a0c928c2aed946bf95f9db08418b4ffd1d54a7d51c04e6102f7cf1cea80639e001bf71d9647754c6594a81f6a4003dd9880535a0fe0b3421bfc92f48d71e07f755eb66335c5ad10bad1ebf1f5b4d60065e178d6e849cb37ba21308585ba8d812cf"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback=0x14}, 0x94) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000340)='.\x00', 0xa50003d1) readv(r1, &(0x7f0000000140)=[{&(0x7f0000000040)=""/182, 0xb6}], 0x1) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0xa, 0x0, 0xfffffffc, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x3ff}, 0x1c) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000900)=ANY=[@ANYBLOB]) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000008850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r3}, 0x10) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg(r4, &(0x7f00000002c0)=[{{&(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x1000, @dev={0xfe, 0x80, '\x00', 0x11}, 0xa, 0x1}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000300)='>', 0x1}], 0x1}}], 0x1, 0xc88c4) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') readlinkat(r5, &(0x7f0000000140)='./mnt\x00', &(0x7f0000000180)=""/10, 0xa) bpf$PROG_LOAD(0x5, &(0x7f0000001c00)={0x5, 0xc, &(0x7f0000000640)=ANY=[@ANYRESHEX=r2, @ANYRES32=r0, @ANYBLOB="69e8b1124a8d53aa87bdefbda16153551c06a7d2a194acdf4cef178c9d427e11f9b98480ba5e8bfd99196f2b05c77d268201f396aded134db3bee260d567e276d4e6a48e3a002c3df96d8d7caf12fe3eb9e0ee4ccb4c51b3c58f13"], &(0x7f00000001c0)='GPL\x00', 0x10, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x1a, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000580)=@bpf_lsm={0x4, 0x7, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000050002000000000085000000cc00000085000000000000000500feff0000000095"], &(0x7f00000003c0)='GPL\x00', 0x4}, 0x94) sendmsg$NFT_MSG_GETOBJ(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x17c}, 0x1, 0x0, 0x0, 0x1}, 0x801) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000080), 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000400)=ANY=[@ANYBLOB="30bf050913591b25dcc5703988488ed314b4dabd9ab43f23a3214856239b904531829671b1765a27df18a197b93545811fb7af5424f160927c8376d44a42dffd230808da2836d807cabf1b1f6ccf65a6ccb9c22e0bc68430"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x12, '\x00', 0x0, 0x25, r5}, 0x94) 2.180183096s ago: executing program 3 (id=8585): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1b, 0xc, &(0x7f0000000600)=ANY=[@ANYRES8=r0, @ANYRES16=r0], 0x0, 0x7, 0x0, 0x0, 0x41100, 0x11, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r2, &(0x7f0000000000)={0x1f, @none}, 0x8) setsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, &(0x7f0000000200), 0x4) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) ioctl$sock_FIOSETOWN(r2, 0x8901, &(0x7f0000000000)=r3) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000280)={'wg2\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket(0x2, 0x80805, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) syz_open_pts(0xffffffffffffffff, 0x80) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x15, 0x10, &(0x7f0000000780)=ANY=[@ANYBLOB="27f25e89e9ee0e943f038cd6f7aed1ed0e5ea7247f1c94b69012483016239c59d48dd1e982aec5", @ANYBLOB="4b7ad44f044bb0d6fdae089bba412e359416f42f5013c4649d7d7453569f0b73d82423d3b1d20d5a3c4c6e64908b91f259ce38c8295ebd958a0671c7471d8dbdd63c3631672d5f5e854bb0956afc8064f32d00553a80ad80177b7b26365c2e0af56e77efa4526f956a02ebd4c3bc49af433810517068879c0ac6c4e16212249fa5e0e8fbec1533c368ac7ac27450cdf62fd5d43265d1fa37e65f66e76484484da398b9f2bed59f943d5a8440ea11f492b90ff11afc374a843b05eefb06a3c86c2d53248c9b6f86492baa29", @ANYRES32=r1], &(0x7f0000000180)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x70, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000bc0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='scsi_dispatch_cmd_start\x00', r9}, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x18) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0x10) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r10, 0x0, 0x8000000000000}, 0x9) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)) r11 = syz_open_dev$loop(&(0x7f0000000240), 0x40, 0x1c0862) r12 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000680)='/sys/power/pm_freeze_timeout', 0x82802, 0x16f) ioctl$LOOP_CONFIGURE(r11, 0x4c0a, &(0x7f0000000280)={r11, 0x8000, {0x0, 0x0, 0x0, 0x7, 0x4000000000001001, 0x0, 0x1, 0x17, 0xc, "faf98317e5a1149989fc8dbe53ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a8a0f3500000000000000000e00", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe45cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "675237601a8ca5b07dcc141802c4dae4162e43ac61b7ad3300", [0xfffffffffffffce4, 0x6]}}) sendfile(r11, r12, 0x0, 0x200) 1.774709263s ago: executing program 0 (id=8592): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x18, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffa}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002080)={&(0x7f0000000300)='kfree\x00', r2}, 0x10) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000004c0)={r1, &(0x7f0000000380)="0abf18090624ca5217f3fdd0b36f0c948eba5de1096ecf556c973b76845d0551ecb5", &(0x7f0000000640)=""/243}, 0x20) 1.774504903s ago: executing program 0 (id=8593): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000000c0)='kfree\x00', r1, 0x0, 0xfffffffffffffffd}, 0x18) r2 = socket$inet6(0x10, 0x80002, 0x6) sendto$inet6(r2, &(0x7f00000002c0)="100000001200050f0c1000000049b23e", 0x10, 0x0, 0x0, 0x0) 1.681964677s ago: executing program 0 (id=8595): r0 = socket$netlink(0x10, 0x3, 0x14) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) (async) r2 = socket$xdp(0x2c, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000400)={'gre0\x00', &(0x7f0000000340)={'syztnl2\x00', 0x0, 0x10, 0x7, 0xe, 0x40, {{0x23, 0x4, 0x3, 0x1b, 0x8c, 0x68, 0x0, 0x9, 0x2f, 0x0, @local, @broadcast, {[@ssrr={0x89, 0x7, 0x11, [@private=0xa010102]}, @ssrr={0x89, 0xf, 0xa1, [@multicast1, @empty, @multicast1]}, @noop, @cipso={0x86, 0x3b, 0x0, [{0x5, 0x7, "a1d5c529a3"}, {0x5, 0xf, "4a8cf742932722e5ffd5fd793b"}, {0x2, 0x5, "82802f"}, {0x2, 0x9, "bb41f36f629758"}, {0x0, 0x5, "2cc00b"}, {0x1, 0xc, "4ea5ea22fab810dbd8e1"}]}, @timestamp_addr={0x44, 0xc, 0xf9, 0x1, 0x3, [{@local, 0x8}]}, @ssrr={0x89, 0x7, 0x46, [@remote]}, @lsrr={0x83, 0x13, 0xb9, [@initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010101, @multicast2, @broadcast]}]}}}}}) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)=@newlink={0x48, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x69801}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @gre={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x2c}}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x1}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e20}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) bind$xdp(r2, &(0x7f00000004c0)={0x2c, 0x6, r3, 0x13, r4}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newtaction={0x78, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x64, 0x1, [@m_tunnel_key={0x60, 0x1, 0x0, 0x0, {{0xf}, {0x30, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x4000000, 0x0, 0x0, 0x0, 0x2}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0xe, @initdev={0xac, 0x1e, 0x0, 0x0}}, @TCA_TUNNEL_KEY_NO_CSUM={0x5, 0xa, 0x1}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x78}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x20000000, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x42, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r7}, 0x10) (async) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a2f000000000800410072786500140033007465616d5f736c6176655f30"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x8844) (async) socket$inet6_tcp(0xa, 0x1, 0x0) r8 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0xc40, 0x0) (async) write$cgroup_subtree(r1, 0x0, 0x0) syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0x5867, 0x800, 0xfffffffc, 0x1bd}, &(0x7f0000000040)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f00000002c0)=0xfffffffc, 0x0, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r8}, &(0x7f0000000540), &(0x7f0000000580)=r7}, 0x20) (async) syz_io_uring_submit(r9, r10, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4007, @fd_index=0x4, 0x0, &(0x7f0000000100)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) (async) add_key(&(0x7f0000000240)='encrypted\x00', &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) 1.570067562s ago: executing program 6 (id=8597): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f0000000700)=ANY=[@ANYBLOB="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", @ANYRESHEX=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000300)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) r2 = io_uring_setup(0x1d48, &(0x7f0000000340)={0x0, 0xb140, 0x800, 0x6, 0x196}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x27c}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r3, 0x0, 0xfffffffffffffffd}, 0x18) r4 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r4, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) listen(r4, 0x4) close_range(r2, r4, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYRESDEC=r3, @ANYRES8=r0, @ANYRESDEC=r4, @ANYRES8=r0], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x18) unshare(0xa000200) semget$private(0x0, 0x4000, 0x0) (fail_nth: 1) semtimedop(0x0, &(0x7f0000000040)=[{0x4, 0x6, 0x1000}], 0x1, 0x0) unshare(0x20060400) r7 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r7, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r7, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) 1.000245026s ago: executing program 6 (id=8601): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x420, 0x190, 0x0, 0xffffffff, 0x238, 0x0, 0x3b0, 0x3b0, 0xffffffff, 0x3b0, 0x3b0, 0x5, 0x0, {[{{@uncond, 0x0, 0x158, 0x190, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x5, 0xc, 'bm\x00', "0d01d3e4c6b2bfd892aa7400051624fa86999b13d39b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba", 0x79, 0x2, {0x1}}}, @common=@unspec=@addrtype1={{0x28}, {0x4, 0x400, 0x3}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @rand_addr=0x64010102, @loopback, @gre_key=0x3, @port=0x4e20}}}}, {{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x64}, 0xff, 0xff000000, 'veth1_to_bridge\x00', 'ip6erspan0\x00', {0xff}, {}, 0x11, 0x2, 0x78}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @remote, @local, @port=0x4e20, @gre_key=0x6}}}}, {{@ip={@loopback, @private=0xa010102, 0xff, 0x0, 'veth1_to_hsr\x00', 'batadv_slave_1\x00', {}, {}, 0x6e, 0x0, 0x4}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x2, @loopback, @remote, @icmp_id=0x67, @port=0x4e23}}}}, {{@ip={@multicast1, @broadcast, 0xff000000, 0xff, 'veth1_macvtap\x00', 'bridge0\x00', {}, {0xff}, 0x73, 0x2, 0x20}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @rand_addr, @dev={0xac, 0x14, 0x14, 0x26}, @port=0x4e23, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x480) 978.772667ms ago: executing program 6 (id=8602): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000001480)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0xfffffffe) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x18) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000680)='h', 0x1}], 0x1) r4 = accept4$unix(r0, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000003380)=[{&(0x7f0000000140)=""/120, 0x78}, {&(0x7f0000000040)=""/40, 0x28}, {&(0x7f0000003300)=""/107, 0x6b}], 0x3}}], 0x4000000000000a1, 0x2, 0x0) recvfrom$unix(r4, &(0x7f00000001c0)=""/236, 0x26, 0x10120, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRESHEX, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r5, 0x0, 0x10007ffffffff}, 0x18) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r6, &(0x7f0000000380)={0x2, 0x4e22, @empty}, 0x10) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x210000000013, &(0x7f0000000500)=0x100000001, 0x4) bind$inet(r7, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) connect$inet(r7, &(0x7f00000000c0)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x16}}, 0x10) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x4, 0x0, 0x7fff0006}]}) close_range(r8, 0xffffffffffffffff, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000340)={&(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x124}, 0x1, 0x0, 0x0, 0x800}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000240)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@stripe={'stripe', 0x3d, 0x1}}, {@nogrpid}, {@noauto_da_alloc}, {@user_xattr}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") r10 = socket$unix(0x1, 0x1, 0x0) bind$unix(r10, &(0x7f0000000180)=@file={0x1, './file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) 830.656744ms ago: executing program 6 (id=8603): r0 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000340)={0x1f, 0x0, @none}, &(0x7f00000003c0)=0xe, 0x0) getsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f0000000400)=0x400, &(0x7f0000000440)=0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) syz_emit_ethernet(0x2a, &(0x7f00000001c0)=ANY=[@ANYBLOB="0180c2000002c8f4c50bebf75fb3998ce4334baaaaaaaaf45e8a858d0c5f1d000000020002907800000000000000004e224e2200089078ede13c04a0462ae03551812b13a7f9ca7fc609fac6c8cb303787c1e97ad360174c177220f8c37f5f16b22b4d"], 0x0) 824.236394ms ago: executing program 6 (id=8604): syz_open_dev$sg(0x0, 0x0, 0x8002) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x3e, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x810, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, @perf_bp={0x0, 0x6}, 0x9092, 0x0, 0x43a1bd76, 0x9, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000180)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x2, &(0x7f0000002400)=0x0) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x2b, 0x81}]}, 0x10) io_submit(r4, 0x1, &(0x7f0000000340)=[0x0]) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000380), r5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) accept$unix(r6, &(0x7f0000000580)=@abs, &(0x7f00000004c0)=0x6e) connect$unix(r6, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0x7}, 0x18) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x6) r8 = socket$inet_udp(0x2, 0x2, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x448, 0x190, 0x0, 0xffffffff, 0x238, 0x0, 0x3b0, 0x3b0, 0xffffffff, 0x3b0, 0x3b0, 0x5, 0x0, {[{{@uncond, 0x0, 0x158, 0x190, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x5, 0xc, 'bm\x00', "0d01d3e4c6b2bfd892aa7400051624fa86999b13d39b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba", 0x79, 0x2, {0x1}}}, @common=@unspec=@addrtype1={{0x28}, {0x4, 0x400, 0x3}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @rand_addr=0x64010102, @loopback, @gre_key=0x3, @port=0x4e20}}}}, {{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x64}, 0xff, 0xff000000, 'veth1_to_bridge\x00', 'ip6erspan0\x00', {0xff}, {}, 0x11, 0x2, 0x78}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @remote, @local, @port=0x4e20, @gre_key=0x6}}}}, {{@ip={@loopback, @private=0xa010102, 0xff, 0x0, 'veth1_to_hsr\x00', 'batadv_slave_1\x00', {}, {}, 0x6e, 0x0, 0x4}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x2, @loopback, @remote, @icmp_id=0x67, @port=0x4e23}}}}, {{@ip={@multicast1, @broadcast, 0xff000000, 0xff, 'veth1_macvtap\x00', 'bridge0\x00', {}, {0xff}, 0x73, 0x2, 0x20}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@icmp={{0x28}, {0xc, "1542", 0x1}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @rand_addr, @dev={0xac, 0x14, 0x14, 0x26}, @port=0x4e23, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xffb2) 639.851172ms ago: executing program 7 (id=8605): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000040000000c"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18040000000000000000000000400000850000000800000018110000", @ANYRES32=r0], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='kfree\x00', r1}, 0x18) r2 = eventfd2(0x5, 0x1) io_submit(0x0, 0x2, &(0x7f0000000180)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x6, r2, 0x0, 0x0, 0x800002, 0x0, 0x0, r2}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x7, 0x9841, r2, &(0x7f0000000080)="e2", 0x36, 0x5, 0x0, 0x1, r2}]) 570.636075ms ago: executing program 7 (id=8606): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYRES16=r0], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000180)='kmem_cache_free\x00', r1}, 0x18) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000280)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) getpgid(0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00'}, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000580)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@errors_remount}, {@nombcache}]}, 0x1, 0x437, &(0x7f0000000900)="$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") lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000080)=ANY=[], 0xfe37, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000c40)='./file1\x00', 0x0) 560.248775ms ago: executing program 6 (id=8607): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x16, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8ab8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000006900000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000000)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0xfffffffffffffe61}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000080)='9p_client_res\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b7040000000000008500000043"], 0x0, 0x5, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000080)='9p_client_res\x00', r5}, 0x10) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r6, @ANYBLOB=',wfdno=', @ANYRESHEX=r7]) 398.544063ms ago: executing program 0 (id=8609): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x8, 0x8, &(0x7f0000002080)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback=0x14}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) syz_open_dev$usbfs(0x0, 0x204, 0x2) io_setup(0x5, &(0x7f0000000240)) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000340)='.\x00', 0xa50003d1) readv(r1, &(0x7f0000000140)=[{&(0x7f0000000040)=""/182, 0xb6}], 0x1) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0xa, 0x0, 0xfffffffc, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x3ff}, 0x1c) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000900)=ANY=[]) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000008850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r3}, 0x10) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg(r4, &(0x7f00000002c0)=[{{&(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x1000, @dev={0xfe, 0x80, '\x00', 0x11}, 0xa, 0x1}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000300)='>', 0x1}], 0x1}}], 0x1, 0xc88c4) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') readlinkat(r5, &(0x7f0000000140)='./mnt\x00', &(0x7f0000000180)=""/10, 0xa) bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000001c00)={0x5, 0xc, &(0x7f0000000640)=ANY=[@ANYRESHEX=r2, @ANYRES32=r0, @ANYBLOB="69e8b1124a8d53aa87bdefbda16153551c06a7d2a194acdf4cef178c9d427e11f9b98480ba5e8bfd99196f2b05c77d268201f396aded134db3bee260d567e276d4e6a48e3a002c3df96d8d7caf12fe3eb9e0ee4ccb4c51b3c58f13"], &(0x7f00000001c0)='GPL\x00', 0x10, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x1a, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r6}, 0x18) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000580)=@bpf_lsm={0x4, 0x7, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000050002000000000085000000cc00000085000000000000000500feff0000000095"], &(0x7f00000003c0)='GPL\x00', 0x4}, 0x94) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f0000000080), 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000400)=ANY=[@ANYBLOB="30bf050913591b25dcc5703988488ed314b4dabd9ab43f23a3214856239b904531829671b1765a27df18a197b93545811fb7af5424f160927c8376d44a42dffd230808da2836d807cabf1b1f6ccf65a6ccb9c22e0bc68430"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x12, '\x00', 0x0, 0x25, r5}, 0x94) 378.822283ms ago: executing program 7 (id=8610): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x60, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff9ce}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) r2 = memfd_create(&(0x7f0000000480)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\x03\x00\x00\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10`\xee\xa9\x8b\x06%\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xa96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xd9Jx\xaa\x8f~\xb94a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xcaX\xe3\xd6m\xf7@]iNP\xf1\x1d\xab\x13\xce\x152s\xb8\x85\x98\x84\xbf\x8c\x80{\x16\t\xd6\x17P3\xe9\xebGKL\xd3\x88\xd2\xb1\rLG\x8e\xd6\xa72\xf4\x92\xeb&\xa5\xcc\x14FZN\x98%[p\x989\xf6\xf5\xb6\xedP\xff\xff\xff\xff\xff\xff\xff\xef)\x0f6\x88\x03P\x8ak\xf9\xc9\x82`\xb4Ku\x99\xab\xd4\xb2\xaa1\x99O\x8b\x9b-\xe3\xe6R\xa2T\x1e\n!\xad$\x93c\xd3\"\xd6\xa1\xd6\xfc\v\x81\x9e\xc1\xb3T\n\xd9\xff\x18 \xf8\xc4\xef\xd2\xb0\xf8\x80\xb8\x1e\xb7fo\x1c\a\xc9\x1a!D\xde\xc6\xf1\x13\xc2F\xc44A\x1d\xb7\xe6\xfbB\xee4\xa1\xdf+\xa5\xb1\xc2\xfb\xc0\t\x15\x7fA{\xe0\xc7\xe0\x96\xc9\xe6\x8fk\xe6\x87;\x03\xff\xb0\x10\x10\x1e\x14\x99\xc7\xd5)\x8d\xc7\xf0\xfd\xe9d\xc9\xce\x85\x88\x88\xcd\xf6\xb2\xbf\xf8E\xe4\xd8\xd0\xe00\xbd\xc2M\xe7\x1b\xac\xc0\v\xb0\xfc\"\x12\x8d\xa5\x96\x10\xf3\x82~2\xa3[\xa4w]\n\xb1+\xac\bR&B\xebW0\xe2\xffBO9y\x8e\xb6\x03\x99\r', 0x3) r3 = dup(r2) syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r3, &(0x7f0000000c00)=ANY=[@ANYBLOB="7f454c4606ff78a3050000000000000002003e00cd220000c9030000000000004000000000000000ea02000000000000020001000500380001000600b10600040300000081000000ff000000000000000900000000000000070000000000000009"], 0x178) execveat(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 310.159706ms ago: executing program 7 (id=8611): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000000c0)={0xffffffffffffffff, 0x38, 0x0}, 0x10) 309.799816ms ago: executing program 5 (id=8612): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x60, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff9ce}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) r2 = memfd_create(&(0x7f0000000480)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\x03\x00\x00\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10`\xee\xa9\x8b\x06%\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xa96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xd9Jx\xaa\x8f~\xb94a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xcaX\xe3\xd6m\xf7@]iNP\xf1\x1d\xab\x13\xce\x152s\xb8\x85\x98\x84\xbf\x8c\x80{\x16\t\xd6\x17P3\xe9\xebGKL\xd3\x88\xd2\xb1\rLG\x8e\xd6\xa72\xf4\x92\xeb&\xa5\xcc\x14FZN\x98%[p\x989\xf6\xf5\xb6\xedP\xff\xff\xff\xff\xff\xff\xff\xef)\x0f6\x88\x03P\x8ak\xf9\xc9\x82`\xb4Ku\x99\xab\xd4\xb2\xaa1\x99O\x8b\x9b-\xe3\xe6R\xa2T\x1e\n!\xad$\x93c\xd3\"\xd6\xa1\xd6\xfc\v\x81\x9e\xc1\xb3T\n\xd9\xff\x18 \xf8\xc4\xef\xd2\xb0\xf8\x80\xb8\x1e\xb7fo\x1c\a\xc9\x1a!D\xde\xc6\xf1\x13\xc2F\xc44A\x1d\xb7\xe6\xfbB\xee4\xa1\xdf+\xa5\xb1\xc2\xfb\xc0\t\x15\x7fA{\xe0\xc7\xe0\x96\xc9\xe6\x8fk\xe6\x87;\x03\xff\xb0\x10\x10\x1e\x14\x99\xc7\xd5)\x8d\xc7\xf0\xfd\xe9d\xc9\xce\x85\x88\x88\xcd\xf6\xb2\xbf\xf8E\xe4\xd8\xd0\xe00\xbd\xc2M\xe7\x1b\xac\xc0\v\xb0\xfc\"\x12\x8d\xa5\x96\x10\xf3\x82~2\xa3[\xa4w]\n\xb1+\xac\bR&B\xebW0\xe2\xffBO9y\x8e\xb6\x03\x99\r', 0x3) r3 = dup(r2) syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r3, &(0x7f0000000c00)=ANY=[@ANYBLOB="7f454c4606ff78a3050000000000000002003e00cd220000c9030000000000004000000000000000ea02000000000000020001000500380001000600b10600040300000081000000ff000000000000000900000000000000070000000000000009"], 0x178) execveat(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 243.477809ms ago: executing program 7 (id=8613): r0 = syz_io_uring_setup(0x4b5, &(0x7f0000010400)={0x0, 0x86e1, 0x1, 0x3}, &(0x7f0000010080), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_PROBE(r0, 0x8, 0xfffffffffffffffe, 0x0) 242.916159ms ago: executing program 5 (id=8614): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r0}, &(0x7f00000002c0), &(0x7f0000000300)=r1}, 0x20) getrusage(0x0, &(0x7f0000000500)) 170.573903ms ago: executing program 5 (id=8615): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010100000000000000000a0000000900010073797a300000000048000000030a010200000000000000000a0000000900010073797a3000000000090003007379"], 0x190}}, 0x0) 169.049203ms ago: executing program 0 (id=8616): r0 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000340)={0x1f, 0x0, @none}, &(0x7f00000003c0)=0xe, 0x0) getsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f0000000400)=0x400, &(0x7f0000000440)=0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 159.671603ms ago: executing program 7 (id=8617): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0xb}]}) setsockopt$bt_hci_HCI_TIME_STAMP(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000200), 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x9, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00'}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000003"], 0x48) close(r0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={0xffffffffffffffff, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc92b18236457ee3c8", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEAUTHENTICATE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB="24000000a0ced25667f56912370981a09e88d080cb352d7d46a1142726cc60", @ANYRES16=r3, @ANYBLOB="c50f00000000000000001100000008000300", @ANYRES32=0x0, @ANYBLOB="08002a0084210000"], 0x24}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) kexec_load(0x3e00, 0x1, &(0x7f00000002c0)=[{0x0, 0x0, 0xff600000, 0x1000000}], 0x0) 120.787514ms ago: executing program 0 (id=8618): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x8, 0x8, &(0x7f0000002080)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback=0x14}, 0x94) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000340)='.\x00', 0xa50003d1) readv(r1, &(0x7f0000000140)=[{&(0x7f0000000040)=""/182, 0xb6}], 0x1) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0xa, 0x0, 0xfffffffc, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x3ff}, 0x1c) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000900)=ANY=[@ANYBLOB]) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000008850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r3}, 0x10) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg(r4, &(0x7f00000002c0)=[{{&(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x1000, @dev={0xfe, 0x80, '\x00', 0x11}, 0xa, 0x1}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000300)='>', 0x1}], 0x1}}], 0x1, 0xc88c4) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') readlinkat(r5, &(0x7f0000000140)='./mnt\x00', &(0x7f0000000180)=""/10, 0xa) bpf$PROG_LOAD(0x5, &(0x7f0000001c00)={0x5, 0xc, &(0x7f0000000640)=ANY=[@ANYRESHEX=r2, @ANYRES32=r0, @ANYBLOB="69e8b1124a8d53aa87bdefbda16153551c06a7d2a194acdf4cef178c9d427e11f9b98480ba5e8bfd99196f2b05c77d268201f396aded134db3bee260d567e276d4e6a48e3a002c3df96d8d7caf12fe3eb9e0ee4ccb4c51b3c58f13"], &(0x7f00000001c0)='GPL\x00', 0x10, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x1a, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000580)=@bpf_lsm={0x4, 0x7, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000050002000000000085000000cc00000085000000000000000500feff0000000095"], &(0x7f00000003c0)='GPL\x00', 0x4}, 0x94) sendmsg$NFT_MSG_GETOBJ(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x17c}, 0x1, 0x0, 0x0, 0x1}, 0x801) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000080), 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000400)=ANY=[@ANYBLOB="30bf050913591b25dcc5703988488ed314b4dabd9ab43f23a3214856239b904531829671b1765a27df18a197b93545811fb7af5424f160927c8376d44a42dffd230808da2836d807cabf1b1f6ccf65a6ccb9c22e0bc68430"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x12, '\x00', 0x0, 0x25, r5}, 0x94) 120.256664ms ago: executing program 5 (id=8619): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="0500000000000000791090000000000063000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0x29bc, &(0x7f0000001180)=""/195, 0x0, 0x5, '\x00', 0x0, @fallback=0x2}, 0x48) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1, 0x0, 0x1}, 0x18) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$pppoe(0x18, 0x1, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r4}, &(0x7f0000000040), &(0x7f0000000280)}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10) sendmsg$TIPC_CMD_SHOW_PORTS(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x1c, r2, 0x1, 0x70bd29, 0x25dfdbfe}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x50) 64.537577ms ago: executing program 5 (id=8620): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x18, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffa}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002080)={&(0x7f0000000300)='kfree\x00', r2}, 0x10) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000004c0)={r1, &(0x7f0000000380)="0abf18090624ca5217f3fdd0b36f0c948eba5de1096ecf556c973b76845d0551ecb5", &(0x7f0000000640)=""/243}, 0x20) 0s ago: executing program 5 (id=8621): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x60, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff9ce}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) r2 = memfd_create(&(0x7f0000000480)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\x03\x00\x00\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10`\xee\xa9\x8b\x06%\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xa96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xd9Jx\xaa\x8f~\xb94a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xcaX\xe3\xd6m\xf7@]iNP\xf1\x1d\xab\x13\xce\x152s\xb8\x85\x98\x84\xbf\x8c\x80{\x16\t\xd6\x17P3\xe9\xebGKL\xd3\x88\xd2\xb1\rLG\x8e\xd6\xa72\xf4\x92\xeb&\xa5\xcc\x14FZN\x98%[p\x989\xf6\xf5\xb6\xedP\xff\xff\xff\xff\xff\xff\xff\xef)\x0f6\x88\x03P\x8ak\xf9\xc9\x82`\xb4Ku\x99\xab\xd4\xb2\xaa1\x99O\x8b\x9b-\xe3\xe6R\xa2T\x1e\n!\xad$\x93c\xd3\"\xd6\xa1\xd6\xfc\v\x81\x9e\xc1\xb3T\n\xd9\xff\x18 \xf8\xc4\xef\xd2\xb0\xf8\x80\xb8\x1e\xb7fo\x1c\a\xc9\x1a!D\xde\xc6\xf1\x13\xc2F\xc44A\x1d\xb7\xe6\xfbB\xee4\xa1\xdf+\xa5\xb1\xc2\xfb\xc0\t\x15\x7fA{\xe0\xc7\xe0\x96\xc9\xe6\x8fk\xe6\x87;\x03\xff\xb0\x10\x10\x1e\x14\x99\xc7\xd5)\x8d\xc7\xf0\xfd\xe9d\xc9\xce\x85\x88\x88\xcd\xf6\xb2\xbf\xf8E\xe4\xd8\xd0\xe00\xbd\xc2M\xe7\x1b\xac\xc0\v\xb0\xfc\"\x12\x8d\xa5\x96\x10\xf3\x82~2\xa3[\xa4w]\n\xb1+\xac\bR&B\xebW0\xe2\xffBO9y\x8e\xb6\x03\x99\r', 0x3) r3 = dup(r2) syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r3, &(0x7f0000000c00)=ANY=[@ANYBLOB="7f454c4606ff78a3050000000000000002003e00cd220000c9030000000000004000000000000000ea02000000000000020001000500380001000600b10600040300000081000000ff000000000000000900000000000000070000000000000009"], 0x178) execveat(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) kernel console output (not intermixed with test programs): 43] loop3: detected capacity change from 0 to 128 [ 490.023802][T26541] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 490.053200][T26545] loop5: detected capacity change from 0 to 128 [ 490.065541][T26545] bio_check_eod: 116 callbacks suppressed [ 490.065556][T26545] syz.5.7931: attempt to access beyond end of device [ 490.065556][T26545] loop5: rw=2049, sector=154, nr_sectors = 6 limit=128 [ 490.087299][T26545] syz.5.7931: attempt to access beyond end of device [ 490.087299][T26545] loop5: rw=2049, sector=158, nr_sectors = 2 limit=128 [ 490.100885][T26545] buffer_io_error: 74 callbacks suppressed [ 490.100898][T26545] Buffer I/O error on dev loop5, logical block 79, lost async page write [ 490.115829][T26545] syz.5.7931: attempt to access beyond end of device [ 490.115829][T26545] loop5: rw=2049, sector=160, nr_sectors = 2 limit=128 [ 490.129291][T26545] Buffer I/O error on dev loop5, logical block 80, lost async page write [ 490.142851][T26541] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 490.156042][T26545] syz.5.7931: attempt to access beyond end of device [ 490.156042][T26545] loop5: rw=2049, sector=162, nr_sectors = 6 limit=128 [ 490.184917][T26545] syz.5.7931: attempt to access beyond end of device [ 490.184917][T26545] loop5: rw=2049, sector=166, nr_sectors = 2 limit=128 [ 490.198417][T26545] Buffer I/O error on dev loop5, logical block 83, lost async page write [ 490.211240][ T3416] Process accounting resumed [ 490.217964][T26545] syz.5.7931: attempt to access beyond end of device [ 490.217964][T26545] loop5: rw=2049, sector=168, nr_sectors = 2 limit=128 [ 490.231455][T26545] Buffer I/O error on dev loop5, logical block 84, lost async page write [ 490.241510][T26545] syz.5.7931: attempt to access beyond end of device [ 490.241510][T26545] loop5: rw=2049, sector=186, nr_sectors = 6 limit=128 [ 490.303346][T26545] syz.5.7931: attempt to access beyond end of device [ 490.303346][T26545] loop5: rw=2049, sector=190, nr_sectors = 2 limit=128 [ 490.316796][T26545] Buffer I/O error on dev loop5, logical block 95, lost async page write [ 490.325280][T26545] syz.5.7931: attempt to access beyond end of device [ 490.325280][T26545] loop5: rw=2049, sector=192, nr_sectors = 2 limit=128 [ 490.326242][T26541] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 490.338743][T26545] Buffer I/O error on dev loop5, logical block 96, lost async page write [ 490.361195][T26545] syz.5.7931: attempt to access beyond end of device [ 490.361195][T26545] loop5: rw=2049, sector=194, nr_sectors = 6 limit=128 [ 490.375026][T26545] Buffer I/O error on dev loop5, logical block 99, lost async page write [ 490.393240][T26545] Buffer I/O error on dev loop5, logical block 100, lost async page write [ 490.402460][T26545] Buffer I/O error on dev loop5, logical block 111, lost async page write [ 490.428114][T26559] loop6: detected capacity change from 0 to 512 [ 490.437042][T26545] Buffer I/O error on dev loop5, logical block 112, lost async page write [ 490.444571][T26562] loop3: detected capacity change from 0 to 128 [ 490.446601][T26559] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 490.476109][T26559] EXT4-fs warning (device loop6): ext4_expand_extra_isize_ea:2853: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 490.477330][T26541] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 490.489468][T26559] EXT4-fs (loop6): 1 truncate cleaned up [ 490.505685][T26559] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 490.545211][T20281] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 490.584839][T26567] loop6: detected capacity change from 0 to 1764 [ 490.597753][ T4630] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 490.621538][ T4631] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 490.642767][ T4631] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 490.653425][ T4631] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 490.700446][ T29] kauditd_printk_skb: 2153 callbacks suppressed [ 490.700501][ T29] audit: type=1400 audit(749.670:102536): avc: denied { prog_run } for pid=26571 comm="syz.3.7940" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 490.725408][ T29] audit: type=1326 audit(749.670:102537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26571 comm="syz.3.7940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22a62af749 code=0x7ffc0000 [ 490.748477][ T29] audit: type=1326 audit(749.670:102538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26571 comm="syz.3.7940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22a62af749 code=0x7ffc0000 [ 490.771565][ T29] audit: type=1326 audit(749.680:102539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26571 comm="syz.3.7940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f22a62af749 code=0x7ffc0000 [ 490.794597][ T29] audit: type=1400 audit(749.680:102540): avc: denied { allowed } for pid=26571 comm="syz.3.7940" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 490.796140][T26574] loop3: detected capacity change from 0 to 1024 [ 490.813700][ T29] audit: type=1326 audit(749.680:102541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26571 comm="syz.3.7940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22a62af749 code=0x7ffc0000 [ 490.843069][ T29] audit: type=1326 audit(749.680:102542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26571 comm="syz.3.7940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22a62af749 code=0x7ffc0000 [ 490.866866][T26574] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 490.877844][T26574] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (14919!=20869) [ 490.916745][ T29] audit: type=1326 audit(749.680:102543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26570 comm="syz.6.7939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75e2bbf749 code=0x7ffc0000 [ 490.939951][ T29] audit: type=1326 audit(749.680:102544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26570 comm="syz.6.7939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75e2bbf749 code=0x7ffc0000 [ 490.963005][ T29] audit: type=1326 audit(749.680:102545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26570 comm="syz.6.7939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f75e2bbf749 code=0x7ffc0000 [ 490.986424][T26574] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 490.997239][T26574] EXT4-fs (loop3): invalid journal inode [ 491.003071][T26574] EXT4-fs (loop3): can't get journal size [ 491.010077][T26574] EXT4-fs error (device loop3): ext4_protect_reserved_inode:182: inode #3: comm syz.3.7940: blocks 2-2 from inode overlap system zone [ 491.024173][T26574] EXT4-fs (loop3): failed to initialize system zone (-117) [ 491.031436][T26574] EXT4-fs (loop3): mount failed [ 491.039931][T26579] loop7: detected capacity change from 0 to 128 [ 491.332761][T26594] loop6: detected capacity change from 0 to 8192 [ 491.436660][T26602] loop6: detected capacity change from 0 to 1764 [ 491.438331][T26603] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 491.527241][T26608] loop6: detected capacity change from 0 to 1764 [ 491.550586][T26606] loop5: detected capacity change from 0 to 8192 [ 491.574317][T26612] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 491.582880][T26612] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 492.088886][T26645] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 492.114225][T26646] xt_hashlimit: max too large, truncated to 1048576 [ 492.294762][T26652] loop6: detected capacity change from 0 to 512 [ 492.310806][T26652] EXT4-fs (loop6): orphan cleanup on readonly fs [ 492.331286][T26652] EXT4-fs error (device loop6): ext4_xattr_inode_iget:441: inode #11: comm syz.6.7971: ea_inode with extended attributes [ 492.366848][T26652] EXT4-fs error (device loop6): ext4_xattr_inode_iget:446: comm syz.6.7971: error while reading EA inode 11 err=-117 [ 492.387558][T26652] EXT4-fs warning (device loop6): ext4_expand_extra_isize_ea:2853: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 492.404019][T26652] EXT4-fs error (device loop6): ext4_xattr_inode_iget:441: inode #11: comm syz.6.7971: ea_inode with extended attributes [ 492.417173][T26652] EXT4-fs error (device loop6): ext4_xattr_inode_iget:446: comm syz.6.7971: error while reading EA inode 11 err=-117 [ 492.431155][T26652] EXT4-fs (loop6): 1 orphan inode deleted [ 492.437384][T26652] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 492.481506][T20281] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 492.523744][T26660] loop5: detected capacity change from 0 to 1764 [ 492.601147][T26659] loop6: detected capacity change from 0 to 8192 [ 492.890667][T26679] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 493.017893][T26688] lo speed is unknown, defaulting to 1000 [ 493.183062][T26702] loop3: detected capacity change from 0 to 1764 [ 493.371355][ T4631] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 493.381213][ T4631] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 493.400714][T26692] lo speed is unknown, defaulting to 1000 [ 493.465788][T26718] xt_hashlimit: max too large, truncated to 1048576 [ 493.491611][ T4631] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 493.501487][ T4631] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 493.582604][T26720] __nla_validate_parse: 6 callbacks suppressed [ 493.582619][T26720] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7995'. [ 493.597778][T26720] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7995'. [ 493.608060][ T4631] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 493.617822][ T4631] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 493.660078][T26692] chnl_net:caif_netlink_parms(): no params data found [ 493.705962][ T4631] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 493.715824][ T4631] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 493.731669][T26720] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7995'. [ 493.740761][T26720] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7995'. [ 493.799233][T26692] bridge0: port 1(bridge_slave_0) entered blocking state [ 493.806383][T26692] bridge0: port 1(bridge_slave_0) entered disabled state [ 493.820094][T26720] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7995'. [ 493.829156][T26720] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7995'. [ 493.838310][T26692] bridge_slave_0: entered allmulticast mode [ 493.844929][T26692] bridge_slave_0: entered promiscuous mode [ 493.852753][T26692] bridge0: port 2(bridge_slave_1) entered blocking state [ 493.859877][T26692] bridge0: port 2(bridge_slave_1) entered disabled state [ 493.867069][T26692] bridge_slave_1: entered allmulticast mode [ 493.868192][T26730] loop7: detected capacity change from 0 to 1024 [ 493.880085][T26732] loop5: detected capacity change from 0 to 1024 [ 493.880404][T26692] bridge_slave_1: entered promiscuous mode [ 493.888995][T26732] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 493.903082][T26732] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (14919!=20869) [ 493.908903][T26730] EXT4-fs (loop7): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 493.912768][T26732] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 493.923496][T26730] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (14919!=20869) [ 493.934368][T26732] EXT4-fs (loop5): invalid journal inode [ 493.947619][T26730] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 493.949297][T26732] EXT4-fs (loop5): can't get journal size [ 493.965271][T26730] EXT4-fs (loop7): invalid journal inode [ 493.971185][T26732] EXT4-fs error (device loop5): ext4_protect_reserved_inode:182: inode #3: comm syz.5.7997: blocks 2-2 from inode overlap system zone [ 493.971476][ T4631] bridge_slave_1: left allmulticast mode [ 493.986035][T26730] EXT4-fs (loop7): can't get journal size [ 493.990583][ T4631] bridge_slave_1: left promiscuous mode [ 493.990669][ T4631] bridge0: port 2(bridge_slave_1) entered disabled state [ 493.996567][T26732] EXT4-fs (loop5): failed to initialize system zone (-117) [ 494.016300][T26730] EXT4-fs error (device loop7): ext4_protect_reserved_inode:182: inode #3: comm syz.7.7996: blocks 2-2 from inode overlap system zone [ 494.019640][T26732] EXT4-fs (loop5): mount failed [ 494.035784][T26730] EXT4-fs (loop7): failed to initialize system zone (-117) [ 494.039204][ T4631] bridge_slave_0: left allmulticast mode [ 494.047996][T26730] EXT4-fs (loop7): mount failed [ 494.048679][ T4631] bridge_slave_0: left promiscuous mode [ 494.059188][ T4631] bridge0: port 1(bridge_slave_0) entered disabled state [ 494.431024][T26755] xt_hashlimit: max too large, truncated to 1048576 [ 494.521907][ T4631] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 494.534248][ T4631] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 494.544761][ T4631] bond0 (unregistering): Released all slaves [ 494.660771][ T4631] tipc: Disabling bearer [ 494.666116][ T4631] tipc: Left network mode [ 494.714364][ T4631] hsr_slave_0: left promiscuous mode [ 494.720415][ T4631] hsr_slave_1: left promiscuous mode [ 494.726401][ T4631] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 494.733939][ T4631] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 494.741986][ T4631] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 494.749493][ T4631] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 494.764506][ T4631] veth1_macvtap: left promiscuous mode [ 494.770158][ T4631] veth0_macvtap: left promiscuous mode [ 494.883191][ T4631] team0 (unregistering): Port device team_slave_1 removed [ 494.901849][ T4631] team0 (unregistering): Port device team_slave_0 removed [ 495.159613][T26692] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 495.182039][T26739] lo speed is unknown, defaulting to 1000 [ 495.189859][T26692] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 495.264893][T26692] team0: Port device team_slave_0 added [ 495.289078][T26692] team0: Port device team_slave_1 added [ 495.331741][T26692] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 495.338721][T26692] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 495.364642][T26692] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 495.401180][T26772] lo speed is unknown, defaulting to 1000 [ 495.403450][T26775] loop7: detected capacity change from 0 to 1024 [ 495.418918][T26775] EXT4-fs (loop7): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 495.429792][T26775] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (14919!=20869) [ 495.438813][T26692] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 495.444580][T26775] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 495.446332][T26692] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 495.456957][T26775] EXT4-fs (loop7): invalid journal inode [ 495.482319][T26692] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 495.510442][T26775] EXT4-fs (loop7): can't get journal size [ 495.517242][T26775] EXT4-fs error (device loop7): ext4_protect_reserved_inode:182: inode #3: comm syz.7.8010: blocks 2-2 from inode overlap system zone [ 495.532789][T26775] EXT4-fs (loop7): failed to initialize system zone (-117) [ 495.540086][T26775] EXT4-fs (loop7): mount failed [ 495.599902][T26692] hsr_slave_0: entered promiscuous mode [ 495.605998][T26692] hsr_slave_1: entered promiscuous mode [ 495.616879][T26692] debugfs: 'hsr0' already exists in 'hsr' [ 495.622649][T26692] Cannot create hsr debugfs directory [ 495.709279][ T29] kauditd_printk_skb: 1452 callbacks suppressed [ 495.709369][ T29] audit: type=1400 audit(754.690:103998): avc: denied { ioctl } for pid=25342 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=107 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 495.764642][ T29] audit: type=1400 audit(754.700:103999): avc: denied { read write } for pid=20281 comm="syz-executor" name="loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 495.788549][ T29] audit: type=1400 audit(754.700:104000): avc: denied { open } for pid=20281 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 495.812345][ T29] audit: type=1400 audit(754.700:104001): avc: denied { ioctl } for pid=20281 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=106 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 495.837594][ T29] audit: type=1400 audit(754.730:104002): avc: denied { map_create } for pid=26788 comm="syz.6.8015" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 495.856419][ T29] audit: type=1400 audit(754.730:104003): avc: denied { bpf } for pid=26788 comm="syz.6.8015" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 495.876706][ T29] audit: type=1400 audit(754.730:104004): avc: denied { map_read map_write } for pid=26788 comm="syz.6.8015" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 495.896302][ T29] audit: type=1400 audit(754.740:104005): avc: denied { relabelfrom } for pid=26786 comm="syz.5.8013" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 495.915790][ T29] audit: type=1400 audit(754.740:104006): avc: denied { relabelto } for pid=26786 comm="syz.5.8013" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 495.935106][ T29] audit: type=1400 audit(754.740:104007): avc: denied { prog_load } for pid=26788 comm="syz.6.8015" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 495.956800][T26791] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 496.056809][T26795] loop7: detected capacity change from 0 to 1024 [ 496.065510][T26795] EXT4-fs (loop7): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 496.076502][T26795] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (14919!=20869) [ 496.088863][T26795] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 496.100307][T26795] EXT4-fs (loop7): invalid journal inode [ 496.113239][T26799] netdevsim netdevsim6: loading /lib/firmware/. failed with error -22 [ 496.121517][T26799] netdevsim netdevsim6: Direct firmware load for . failed with error -22 [ 496.139643][T26795] EXT4-fs (loop7): can't get journal size [ 496.157587][T26795] EXT4-fs error (device loop7): ext4_protect_reserved_inode:182: inode #3: comm syz.7.8016: blocks 2-2 from inode overlap system zone [ 496.195685][T26795] EXT4-fs (loop7): failed to initialize system zone (-117) [ 496.200382][T26807] loop6: detected capacity change from 0 to 1764 [ 496.212631][T26795] EXT4-fs (loop7): mount failed [ 496.220582][T26808] loop3: detected capacity change from 0 to 512 [ 496.228152][T26808] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 496.270713][T26808] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2853: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 496.304983][T26808] EXT4-fs (loop3): 1 truncate cleaned up [ 496.314446][T26808] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 496.360202][T20576] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 496.367145][T26692] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 496.379690][T26692] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 496.397542][T26692] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 496.422383][T26817] lo speed is unknown, defaulting to 1000 [ 496.429184][T26692] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 496.443751][T26822] loop5: detected capacity change from 0 to 512 [ 496.453626][T26822] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 496.459745][T26819] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 496.485497][T26822] EXT4-fs (loop5): 1 truncate cleaned up [ 496.498806][T26822] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 496.566870][T20403] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 496.597664][T26834] loop7: detected capacity change from 0 to 1024 [ 496.606712][T26834] EXT4-fs (loop7): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 496.617604][T26834] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (14919!=20869) [ 496.638919][T26834] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 496.652535][T26692] 8021q: adding VLAN 0 to HW filter on device bond0 [ 496.662604][T26692] 8021q: adding VLAN 0 to HW filter on device team0 [ 496.678585][T26692] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 496.688954][T26692] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 496.735011][ T4588] bridge0: port 1(bridge_slave_0) entered blocking state [ 496.742130][ T4588] bridge0: port 1(bridge_slave_0) entered forwarding state [ 496.750828][T26834] EXT4-fs (loop7): invalid journal inode [ 496.751045][ T4588] bridge0: port 2(bridge_slave_1) entered blocking state [ 496.763512][ T4588] bridge0: port 2(bridge_slave_1) entered forwarding state [ 496.771927][T26834] EXT4-fs (loop7): can't get journal size [ 496.783767][T26834] EXT4-fs error (device loop7): ext4_protect_reserved_inode:182: inode #3: comm syz.7.8027: blocks 2-2 from inode overlap system zone [ 496.859003][T26846] xt_hashlimit: max too large, truncated to 1048576 [ 496.945411][T26834] EXT4-fs (loop7): failed to initialize system zone (-117) [ 496.971139][T26834] EXT4-fs (loop7): mount failed [ 497.328990][T26853] xt_hashlimit: max too large, truncated to 1048576 [ 498.124020][T26859] xt_hashlimit: max too large, truncated to 1048576 [ 498.161648][T26692] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 498.366435][T26864] loop6: detected capacity change from 0 to 1024 [ 498.392685][T26864] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 498.403648][T26864] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (14919!=20869) [ 498.416487][T26864] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 498.427996][T26864] EXT4-fs (loop6): invalid journal inode [ 498.431063][T26692] veth0_vlan: entered promiscuous mode [ 498.440221][T26864] EXT4-fs (loop6): can't get journal size [ 498.447175][T26692] veth1_vlan: entered promiscuous mode [ 498.453369][T26864] EXT4-fs error (device loop6): ext4_protect_reserved_inode:182: inode #3: comm syz.6.8033: blocks 2-2 from inode overlap system zone [ 498.459886][T26878] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 498.486719][T26864] EXT4-fs (loop6): failed to initialize system zone (-117) [ 498.506574][T26692] veth0_macvtap: entered promiscuous mode [ 498.512480][T26864] EXT4-fs (loop6): mount failed [ 498.520122][T26692] veth1_macvtap: entered promiscuous mode [ 498.531739][T26882] lo speed is unknown, defaulting to 1000 [ 498.534220][T26692] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 498.585299][T26692] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 498.617588][ T4623] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 498.634424][ T4623] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 498.647579][ T4623] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 498.662894][ T4623] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 499.145998][T26900] syz_tun: entered allmulticast mode [ 499.176537][T26900] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7985'. [ 499.187569][T26900] syz_tun (unregistering): left allmulticast mode [ 499.197088][T26903] netlink: 16399 bytes leftover after parsing attributes in process `syz.6.8044'. [ 499.216572][T26903] netlink: 24 bytes leftover after parsing attributes in process `syz.6.8044'. [ 499.284122][T26906] loop3: detected capacity change from 0 to 128 [ 499.294873][T26906] bio_check_eod: 74 callbacks suppressed [ 499.294886][T26906] syz.3.8045: attempt to access beyond end of device [ 499.294886][T26906] loop3: rw=2049, sector=154, nr_sectors = 6 limit=128 [ 499.315173][T26906] syz.3.8045: attempt to access beyond end of device [ 499.315173][T26906] loop3: rw=2049, sector=158, nr_sectors = 2 limit=128 [ 499.328680][T26906] buffer_io_error: 46 callbacks suppressed [ 499.328694][T26906] Buffer I/O error on dev loop3, logical block 79, lost async page write [ 499.361961][T26910] loop5: detected capacity change from 0 to 128 [ 499.363690][T26906] syz.3.8045: attempt to access beyond end of device [ 499.363690][T26906] loop3: rw=2049, sector=160, nr_sectors = 2 limit=128 [ 499.369305][T26910] vfat: Unknown parameter 'shortnae' [ 499.381643][T26906] Buffer I/O error on dev loop3, logical block 80, lost async page write [ 499.422306][T26906] syz.3.8045: attempt to access beyond end of device [ 499.422306][T26906] loop3: rw=2049, sector=162, nr_sectors = 6 limit=128 [ 499.436587][T26906] syz.3.8045: attempt to access beyond end of device [ 499.436587][T26906] loop3: rw=2049, sector=166, nr_sectors = 2 limit=128 [ 499.450005][T26906] Buffer I/O error on dev loop3, logical block 83, lost async page write [ 499.458609][T26906] syz.3.8045: attempt to access beyond end of device [ 499.458609][T26906] loop3: rw=2049, sector=168, nr_sectors = 2 limit=128 [ 499.472322][T26906] Buffer I/O error on dev loop3, logical block 84, lost async page write [ 499.486826][T26914] xt_hashlimit: max too large, truncated to 1048576 [ 499.496723][T26906] syz.3.8045: attempt to access beyond end of device [ 499.496723][T26906] loop3: rw=2049, sector=186, nr_sectors = 6 limit=128 [ 499.513148][T26906] syz.3.8045: attempt to access beyond end of device [ 499.513148][T26906] loop3: rw=2049, sector=190, nr_sectors = 2 limit=128 [ 499.526619][T26906] Buffer I/O error on dev loop3, logical block 95, lost async page write [ 499.535713][T26906] syz.3.8045: attempt to access beyond end of device [ 499.535713][T26906] loop3: rw=2049, sector=192, nr_sectors = 2 limit=128 [ 499.549261][T26906] Buffer I/O error on dev loop3, logical block 96, lost async page write [ 499.559018][T26906] syz.3.8045: attempt to access beyond end of device [ 499.559018][T26906] loop3: rw=2049, sector=194, nr_sectors = 6 limit=128 [ 499.573438][T26906] Buffer I/O error on dev loop3, logical block 99, lost async page write [ 499.582155][T26906] Buffer I/O error on dev loop3, logical block 100, lost async page write [ 499.591886][T26906] Buffer I/O error on dev loop3, logical block 111, lost async page write [ 499.600664][T26906] Buffer I/O error on dev loop3, logical block 112, lost async page write [ 499.671036][T26916] loop5: detected capacity change from 0 to 1764 [ 499.773894][T26922] loop3: detected capacity change from 0 to 164 [ 499.781294][T26922] iso9660: Bad value for 'uid' [ 499.786109][T26922] iso9660: Bad value for 'uid' [ 499.827677][T26918] netlink: 'syz.5.8049': attribute type 5 has an invalid length. [ 499.866220][T26918] batman_adv: batadv0: Adding interface: vxlan0 [ 499.872642][T26918] batman_adv: batadv0: The MTU of interface vxlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 499.911212][T26926] loop3: detected capacity change from 0 to 1024 [ 499.918613][T18364] IPVS: starting estimator thread 0... [ 499.925889][T26918] batman_adv: batadv0: Interface activated: vxlan0 [ 499.929630][T26926] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 499.943415][T26926] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (14919!=20869) [ 499.953280][ T4606] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 499.967496][ T4606] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 499.978790][T26926] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 499.979491][ T4606] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 499.989567][T26926] EXT4-fs (loop3): invalid journal inode [ 500.003627][T26926] EXT4-fs (loop3): can't get journal size [ 500.011360][T26926] EXT4-fs error (device loop3): ext4_protect_reserved_inode:182: inode #3: comm syz.3.8052: blocks 2-2 from inode overlap system zone [ 500.018818][T26927] IPVS: using max 2640 ests per chain, 132000 per kthread [ 500.025427][T26926] EXT4-fs (loop3): failed to initialize system zone (-117) [ 500.039033][ T4606] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 500.040597][T26926] EXT4-fs (loop3): mount failed [ 500.087809][T26933] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 500.209300][T26937] loop6: detected capacity change from 0 to 512 [ 500.219251][T26937] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 500.239246][T26937] EXT4-fs (loop6): 1 truncate cleaned up [ 500.255570][T26937] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 500.382597][T20281] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 500.415962][T26944] loop3: detected capacity change from 0 to 128 [ 500.430962][T26944] vfat: Unknown parameter 'shortnae' [ 500.473817][T26946] loop6: detected capacity change from 0 to 1764 [ 500.570570][T26955] loop6: detected capacity change from 0 to 512 [ 500.578607][T26955] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 500.591649][T26955] EXT4-fs (loop6): 1 truncate cleaned up [ 500.597683][T26955] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 500.644432][T20281] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 500.719828][ T29] kauditd_printk_skb: 1600 callbacks suppressed [ 500.719842][ T29] audit: type=1400 audit(759.700:105608): avc: denied { read write } for pid=20403 comm="syz-executor" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 500.754146][T26971] loop3: detected capacity change from 0 to 1024 [ 500.774260][T26974] netlink: 16399 bytes leftover after parsing attributes in process `syz.5.8069'. [ 500.783692][T26971] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 500.794641][T26971] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (14919!=20869) [ 500.814930][ T29] audit: type=1400 audit(759.700:105609): avc: denied { open } for pid=20403 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 500.815182][T26971] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 500.838735][ T29] audit: type=1400 audit(759.700:105610): avc: denied { ioctl } for pid=20403 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=105 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 500.838762][ T29] audit: type=1326 audit(759.700:105611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26970 comm="syz.3.8068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f22a62af749 code=0x7ffc0000 [ 500.897264][ T29] audit: type=1400 audit(759.700:105612): avc: denied { map_create } for pid=26970 comm="syz.3.8068" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 500.910584][T26971] EXT4-fs (loop3): invalid journal inode [ 500.916135][ T29] audit: type=1326 audit(759.700:105613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26970 comm="syz.3.8068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22a62af749 code=0x7ffc0000 [ 500.921974][T26971] EXT4-fs (loop3): can't get journal size [ 500.944671][ T29] audit: type=1326 audit(759.700:105614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26970 comm="syz.3.8068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22a62af749 code=0x7ffc0000 [ 500.973537][ T29] audit: type=1326 audit(759.700:105615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26970 comm="syz.3.8068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f22a62af749 code=0x7ffc0000 [ 500.975901][T26971] EXT4-fs error (device loop3): ext4_protect_reserved_inode:182: inode #3: comm syz.3.8068: blocks 2-2 from inode overlap system zone [ 500.996682][ T29] audit: type=1326 audit(759.700:105616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26970 comm="syz.3.8068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22a62af749 code=0x7ffc0000 [ 501.011059][T26971] EXT4-fs (loop3): failed to initialize system zone (-117) [ 501.033497][ T29] audit: type=1326 audit(759.700:105617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26970 comm="syz.3.8068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22a62af749 code=0x7ffc0000 [ 501.040683][T26971] EXT4-fs (loop3): mount failed [ 501.271714][T27000] loop5: detected capacity change from 0 to 512 [ 501.282490][T27000] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 501.294205][T27000] EXT4-fs (loop5): 1 truncate cleaned up [ 501.300533][T27000] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 501.317044][T27004] loop6: detected capacity change from 0 to 512 [ 501.328533][T27004] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 501.340381][T20403] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 501.341665][T27004] EXT4-fs (loop6): 1 truncate cleaned up [ 501.355609][T27004] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 501.432718][T20281] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 501.443667][T27014] netlink: 16399 bytes leftover after parsing attributes in process `syz.3.8083'. [ 501.701500][T27037] loop6: detected capacity change from 0 to 1024 [ 501.709740][T27037] EXT4-fs: Ignoring removed orlov option [ 501.721817][T27037] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 501.804212][T27037] random: crng reseeded on system resumption [ 501.827822][T20281] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 501.866586][T27048] loop6: detected capacity change from 0 to 512 [ 501.874970][T27048] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 501.886809][T27048] EXT4-fs (loop6): 1 truncate cleaned up [ 501.892854][T27048] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 501.922879][T20281] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 501.994577][T27054] loop6: detected capacity change from 0 to 512 [ 502.006545][T27054] EXT4-fs (loop6): orphan cleanup on readonly fs [ 502.014015][T27054] EXT4-fs error (device loop6): ext4_xattr_inode_iget:441: inode #11: comm syz.6.8098: ea_inode with extended attributes [ 502.027057][T27054] EXT4-fs error (device loop6): ext4_xattr_inode_iget:446: comm syz.6.8098: error while reading EA inode 11 err=-117 [ 502.043285][T27054] EXT4-fs warning (device loop6): ext4_expand_extra_isize_ea:2853: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 502.058181][T27054] EXT4-fs error (device loop6): ext4_xattr_inode_iget:441: inode #11: comm syz.6.8098: ea_inode with extended attributes [ 502.087829][T27054] EXT4-fs error (device loop6): ext4_xattr_inode_iget:446: comm syz.6.8098: error while reading EA inode 11 err=-117 [ 502.098944][T27061] loop7: detected capacity change from 0 to 1764 [ 502.107872][T27054] EXT4-fs (loop6): 1 orphan inode deleted [ 502.121693][T27054] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 502.164994][T27067] loop7: detected capacity change from 0 to 1764 [ 502.181185][T27054] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 502.338849][T27076] netlink: 20 bytes leftover after parsing attributes in process `syz.6.8108'. [ 502.347826][T27076] netlink: 20 bytes leftover after parsing attributes in process `syz.6.8108'. [ 502.376204][T27076] netlink: 20 bytes leftover after parsing attributes in process `syz.6.8108'. [ 502.385207][T27076] netlink: 20 bytes leftover after parsing attributes in process `syz.6.8108'. [ 502.502966][T27076] netlink: 20 bytes leftover after parsing attributes in process `syz.6.8108'. [ 502.610313][T27101] loop7: detected capacity change from 0 to 1764 [ 502.751090][T27095] loop3: detected capacity change from 0 to 512 [ 502.786994][T27095] EXT4-fs (loop3): orphan cleanup on readonly fs [ 502.794403][T27095] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #11: comm syz.3.8116: ea_inode with extended attributes [ 502.809084][T27095] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.8116: error while reading EA inode 11 err=-117 [ 502.826426][T27095] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #11: comm syz.3.8116: ea_inode with extended attributes [ 502.843155][T27095] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.8116: error while reading EA inode 11 err=-117 [ 502.858304][T27095] EXT4-fs (loop3): 1 orphan inode deleted [ 502.867111][T27095] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 502.940344][T27095] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 502.984206][T27134] loop3: detected capacity change from 0 to 512 [ 502.991058][T27133] loop5: detected capacity change from 0 to 1764 [ 502.993006][T27134] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 503.010372][T27134] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2853: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 503.023718][T27134] EXT4-fs (loop3): 1 truncate cleaned up [ 503.029831][T27134] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 503.071287][T20576] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 503.094418][T27140] loop5: detected capacity change from 0 to 1764 [ 503.130341][T27124] wireguard0: entered promiscuous mode [ 503.135892][T27124] wireguard0: entered allmulticast mode [ 503.456257][T27159] loop3: detected capacity change from 0 to 128 [ 503.564259][T27163] loop5: detected capacity change from 0 to 512 [ 503.572135][T27163] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 503.584114][T27163] EXT4-fs (loop5): 1 truncate cleaned up [ 503.590217][T27163] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 503.619679][T20403] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 503.683504][T27172] loop5: detected capacity change from 0 to 1024 [ 503.709356][T27172] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 503.720265][T27172] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (14919!=20869) [ 503.759475][T27172] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 503.793152][T27172] EXT4-fs (loop5): invalid journal inode [ 503.802386][T27183] FAULT_INJECTION: forcing a failure. [ 503.802386][T27183] name failslab, interval 1, probability 0, space 0, times 0 [ 503.815051][T27183] CPU: 1 UID: 0 PID: 27183 Comm: syz.6.8148 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 503.815101][T27183] Tainted: [W]=WARN [ 503.815107][T27183] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 503.815118][T27183] Call Trace: [ 503.815178][T27183] [ 503.815185][T27183] __dump_stack+0x1d/0x30 [ 503.815234][T27183] dump_stack_lvl+0xe8/0x140 [ 503.815251][T27183] dump_stack+0x15/0x1b [ 503.815269][T27183] should_fail_ex+0x265/0x280 [ 503.815289][T27183] ? getname_flags+0x208/0x3b0 [ 503.815316][T27183] should_failslab+0x8c/0xb0 [ 503.815376][T27183] __kmalloc_cache_noprof+0x4c/0x4a0 [ 503.815444][T27183] getname_flags+0x208/0x3b0 [ 503.815552][T27183] __x64_sys_unlink+0x21/0x40 [ 503.815575][T27183] x64_sys_call+0x2dcf/0x3000 [ 503.815597][T27183] do_syscall_64+0xd2/0x200 [ 503.815674][T27183] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 503.815716][T27183] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 503.815747][T27183] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 503.815769][T27183] RIP: 0033:0x7f75e2bbf749 [ 503.815785][T27183] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 503.815838][T27183] RSP: 002b:00007f75e161f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000057 [ 503.815857][T27183] RAX: ffffffffffffffda RBX: 00007f75e2e15fa0 RCX: 00007f75e2bbf749 [ 503.815870][T27183] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000000 [ 503.815883][T27183] RBP: 00007f75e161f090 R08: 0000000000000000 R09: 0000000000000000 [ 503.815896][T27183] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 503.815909][T27183] R13: 00007f75e2e16038 R14: 00007f75e2e15fa0 R15: 00007ffe45d6d178 [ 503.815970][T27183] [ 503.816072][T27172] EXT4-fs (loop5): can't get journal size [ 504.001848][T27172] EXT4-fs error (device loop5): ext4_protect_reserved_inode:182: inode #3: comm syz.5.8143: blocks 2-2 from inode overlap system zone [ 504.015180][T27179] FAULT_INJECTION: forcing a failure. [ 504.015180][T27179] name failslab, interval 1, probability 0, space 0, times 0 [ 504.017490][T27172] EXT4-fs (loop5): failed to initialize system zone (-117) [ 504.028320][T27179] CPU: 0 UID: 0 PID: 27179 Comm: GPL Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 504.028349][T27179] Tainted: [W]=WARN [ 504.028356][T27179] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 504.028367][T27179] Call Trace: [ 504.028374][T27179] [ 504.028437][T27179] __dump_stack+0x1d/0x30 [ 504.028460][T27179] dump_stack_lvl+0xe8/0x140 [ 504.028479][T27179] dump_stack+0x15/0x1b [ 504.028496][T27179] should_fail_ex+0x265/0x280 [ 504.028514][T27179] ? __io_uring_add_tctx_node+0xbf/0x2d0 [ 504.028571][T27179] should_failslab+0x8c/0xb0 [ 504.028596][T27179] __kmalloc_cache_noprof+0x4c/0x4a0 [ 504.028628][T27179] __io_uring_add_tctx_node+0xbf/0x2d0 [ 504.028659][T27179] __io_uring_add_tctx_node_from_submit+0x69/0xc0 [ 504.028696][T27179] __se_sys_io_uring_enter+0x1955/0x1b70 [ 504.028724][T27179] ? 0xffffffff81000000 [ 504.028737][T27179] ? __rcu_read_unlock+0x4f/0x70 [ 504.028760][T27179] ? get_pid_task+0x96/0xd0 [ 504.028861][T27179] ? proc_fail_nth_write+0x13b/0x160 [ 504.028909][T27179] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 504.028985][T27179] ? vfs_write+0x7e8/0x960 [ 504.029006][T27179] ? __rcu_read_unlock+0x4f/0x70 [ 504.029077][T27179] ? __fget_files+0x184/0x1c0 [ 504.029110][T27179] ? fput+0x8f/0xc0 [ 504.029132][T27179] __x64_sys_io_uring_enter+0x78/0x90 [ 504.029161][T27179] x64_sys_call+0x2df0/0x3000 [ 504.029227][T27179] do_syscall_64+0xd2/0x200 [ 504.029247][T27179] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 504.029271][T27179] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 504.029351][T27179] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 504.029371][T27179] RIP: 0033:0x7f5b1c2ff749 [ 504.029458][T27179] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 504.029474][T27179] RSP: 002b:00007f5b1ad67038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 504.029493][T27179] RAX: ffffffffffffffda RBX: 00007f5b1c555fa0 RCX: 00007f5b1c2ff749 [ 504.029505][T27179] RDX: 000000000000d480 RSI: 00000000000029ab RDI: 0000000000000003 [ 504.029518][T27179] RBP: 00007f5b1ad67090 R08: 0000000000000000 R09: 0000000000000000 [ 504.029609][T27179] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 504.029621][T27179] R13: 00007f5b1c556038 R14: 00007f5b1c555fa0 R15: 00007ffe880f52a8 [ 504.029639][T27179] [ 504.319971][T27172] EXT4-fs (loop5): mount failed [ 504.354362][T27195] loop7: detected capacity change from 0 to 512 [ 504.354405][T27197] loop3: detected capacity change from 0 to 128 [ 504.370870][T27195] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 504.393287][T27197] bio_check_eod: 74 callbacks suppressed [ 504.393299][T27197] syz.3.8153: attempt to access beyond end of device [ 504.393299][T27197] loop3: rw=2049, sector=154, nr_sectors = 6 limit=128 [ 504.413878][T27195] EXT4-fs (loop7): 1 truncate cleaned up [ 504.423009][T27195] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 504.447841][T27197] syz.3.8153: attempt to access beyond end of device [ 504.447841][T27197] loop3: rw=2049, sector=158, nr_sectors = 2 limit=128 [ 504.461437][T27197] buffer_io_error: 46 callbacks suppressed [ 504.461450][T27197] Buffer I/O error on dev loop3, logical block 79, lost async page write [ 504.495260][T27197] syz.3.8153: attempt to access beyond end of device [ 504.495260][T27197] loop3: rw=2049, sector=160, nr_sectors = 2 limit=128 [ 504.508765][T27197] Buffer I/O error on dev loop3, logical block 80, lost async page write [ 504.517740][T27197] syz.3.8153: attempt to access beyond end of device [ 504.517740][T27197] loop3: rw=2049, sector=162, nr_sectors = 6 limit=128 [ 504.531678][T27197] syz.3.8153: attempt to access beyond end of device [ 504.531678][T27197] loop3: rw=2049, sector=166, nr_sectors = 2 limit=128 [ 504.545195][T27197] Buffer I/O error on dev loop3, logical block 83, lost async page write [ 504.554072][T27197] syz.3.8153: attempt to access beyond end of device [ 504.554072][T27197] loop3: rw=2049, sector=168, nr_sectors = 2 limit=128 [ 504.567534][T27197] Buffer I/O error on dev loop3, logical block 84, lost async page write [ 504.576560][T27197] syz.3.8153: attempt to access beyond end of device [ 504.576560][T27197] loop3: rw=2049, sector=186, nr_sectors = 6 limit=128 [ 504.592416][T27197] syz.3.8153: attempt to access beyond end of device [ 504.592416][T27197] loop3: rw=2049, sector=190, nr_sectors = 2 limit=128 [ 504.605884][T27197] Buffer I/O error on dev loop3, logical block 95, lost async page write [ 504.614875][T27197] syz.3.8153: attempt to access beyond end of device [ 504.614875][T27197] loop3: rw=2049, sector=192, nr_sectors = 2 limit=128 [ 504.628290][T27197] Buffer I/O error on dev loop3, logical block 96, lost async page write [ 504.637146][T27197] syz.3.8153: attempt to access beyond end of device [ 504.637146][T27197] loop3: rw=2049, sector=194, nr_sectors = 6 limit=128 [ 504.651098][T27197] Buffer I/O error on dev loop3, logical block 99, lost async page write [ 504.711726][T27197] Buffer I/O error on dev loop3, logical block 100, lost async page write [ 504.729789][T25342] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 504.771974][T27204] xt_hashlimit: max too large, truncated to 1048576 [ 505.165704][T27197] Buffer I/O error on dev loop3, logical block 111, lost async page write [ 505.174379][T27197] Buffer I/O error on dev loop3, logical block 112, lost async page write [ 505.196199][T27208] loop7: detected capacity change from 0 to 512 [ 505.208193][T27208] EXT4-fs: Mount option(s) incompatible with ext2 [ 505.503975][T27224] loop5: detected capacity change from 0 to 512 [ 505.514663][T27224] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -2 [ 505.522800][T27224] EXT4-fs error (device loop5): ext4_orphan_get:1392: inode #13: comm syz.5.8163: iget: bad i_size value: 12154757448730 [ 505.536188][T27224] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.8163: couldn't read orphan inode 13 (err -117) [ 505.548922][T27224] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 505.581056][T27219] EXT4-fs warning (device loop5): ext4_lookup:1799: Inconsistent encryption contexts: 2/12 [ 505.727927][T27219] lo speed is unknown, defaulting to 1000 [ 505.738739][ T29] kauditd_printk_skb: 1834 callbacks suppressed [ 505.738754][ T29] audit: type=1400 audit(764.720:107443): avc: denied { prog_load } for pid=27227 comm="syz.3.8166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 505.763837][ T29] audit: type=1400 audit(764.720:107444): avc: denied { bpf } for pid=27227 comm="syz.3.8166" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 505.784083][ T29] audit: type=1400 audit(764.720:107445): avc: denied { perfmon } for pid=27227 comm="syz.3.8166" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 505.910153][ T29] audit: type=1400 audit(764.790:107446): avc: denied { prog_run } for pid=27227 comm="syz.3.8166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 505.928806][ T29] audit: type=1400 audit(764.790:107447): avc: denied { read } for pid=27216 comm="syz.5.8163" dev="nsfs" ino=4026532516 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 505.949702][ T29] audit: type=1400 audit(764.790:107448): avc: denied { open } for pid=27216 comm="syz.5.8163" path="net:[4026532516]" dev="nsfs" ino=4026532516 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 505.972616][ T29] audit: type=1400 audit(764.790:107449): avc: denied { create } for pid=27216 comm="syz.5.8163" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 505.992335][ T29] audit: type=1400 audit(764.790:107450): avc: denied { map_create } for pid=27216 comm="syz.5.8163" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 506.011123][ T29] audit: type=1400 audit(764.810:107451): avc: denied { execmem } for pid=27227 comm="syz.3.8166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 506.030070][ T29] audit: type=1400 audit(764.890:107452): avc: denied { prog_load } for pid=27228 comm="syz.7.8165" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 506.233464][T20403] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 506.292067][T27242] loop5: detected capacity change from 0 to 128 [ 506.300784][T27238] loop3: detected capacity change from 0 to 1024 [ 506.319318][T27238] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 506.330285][T27238] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (14919!=20869) [ 506.342047][T27238] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 506.360680][T27238] EXT4-fs (loop3): invalid journal inode [ 506.376600][T27238] EXT4-fs (loop3): can't get journal size [ 506.385277][T27238] EXT4-fs error (device loop3): ext4_protect_reserved_inode:182: inode #3: comm syz.3.8169: blocks 2-2 from inode overlap system zone [ 506.418826][T27238] EXT4-fs (loop3): failed to initialize system zone (-117) [ 506.428767][T27238] EXT4-fs (loop3): mount failed [ 507.131032][T27268] __nla_validate_parse: 10 callbacks suppressed [ 507.131047][T27268] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8180'. [ 507.146275][T27268] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8180'. [ 507.192369][T27271] xt_hashlimit: max too large, truncated to 1048576 [ 507.394719][T27268] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8180'. [ 507.403745][T27268] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8180'. [ 507.593065][T27268] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8180'. [ 507.602089][T27268] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8180'. [ 507.737140][T27282] loop6: detected capacity change from 0 to 512 [ 507.753490][T27282] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 507.766788][T27282] EXT4-fs (loop6): 1 truncate cleaned up [ 507.773005][T27282] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 508.268994][T20281] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 508.335308][T27297] loop5: detected capacity change from 0 to 1024 [ 508.343427][T27297] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 508.354418][T27297] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (14919!=20869) [ 508.364251][T27297] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 508.374988][T27297] EXT4-fs (loop5): invalid journal inode [ 508.380698][T27297] EXT4-fs (loop5): can't get journal size [ 508.387538][T27297] EXT4-fs error (device loop5): ext4_protect_reserved_inode:182: inode #3: comm syz.5.8189: blocks 2-2 from inode overlap system zone [ 508.401659][T27297] EXT4-fs (loop5): failed to initialize system zone (-117) [ 508.408994][T27297] EXT4-fs (loop5): mount failed [ 508.529602][T27306] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 508.717892][T27327] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8200'. [ 508.730132][T27327] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8200'. [ 508.979861][T27340] loop5: detected capacity change from 0 to 1024 [ 508.982049][T27342] lo speed is unknown, defaulting to 1000 [ 508.988085][T27340] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 509.002812][T27340] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (14919!=20869) [ 509.012530][T27340] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 509.024766][T27340] EXT4-fs (loop5): invalid journal inode [ 509.034342][T27340] EXT4-fs (loop5): can't get journal size [ 509.046510][T27340] EXT4-fs error (device loop5): ext4_protect_reserved_inode:182: inode #3: comm syz.5.8205: blocks 2-2 from inode overlap system zone [ 509.060561][T27340] EXT4-fs (loop5): failed to initialize system zone (-117) [ 509.069858][T27340] EXT4-fs (loop5): mount failed [ 509.286788][T27358] loop5: detected capacity change from 0 to 128 [ 509.345920][T27360] veth0: entered promiscuous mode [ 509.353020][T27359] veth0: left promiscuous mode [ 509.381737][T27362] loop6: detected capacity change from 0 to 128 [ 509.488052][T27371] loop5: detected capacity change from 0 to 1764 [ 509.568033][T27376] loop3: detected capacity change from 0 to 1024 [ 509.582876][T27375] loop6: detected capacity change from 0 to 1024 [ 509.590678][T27376] EXT4-fs: Ignoring removed orlov option [ 509.596361][T27376] EXT4-fs: Ignoring removed nomblk_io_submit option [ 509.607526][T27375] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 509.618521][T27375] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (14919!=20869) [ 509.628408][T27375] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 509.640846][T27375] EXT4-fs (loop6): invalid journal inode [ 509.646861][T27375] EXT4-fs (loop6): can't get journal size [ 509.660240][T27381] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 509.670961][T27375] EXT4-fs error (device loop6): ext4_protect_reserved_inode:182: inode #3: comm syz.6.8219: blocks 2-2 from inode overlap system zone [ 509.679700][T27376] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 509.698324][T27375] EXT4-fs (loop6): failed to initialize system zone (-117) [ 509.705605][T27375] EXT4-fs (loop6): mount failed [ 509.775692][T20576] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 510.003348][T27405] netlink: 96 bytes leftover after parsing attributes in process `syz.0.8230'. [ 510.230043][T27419] FAULT_INJECTION: forcing a failure. [ 510.230043][T27419] name failslab, interval 1, probability 0, space 0, times 0 [ 510.242789][T27419] CPU: 1 UID: 0 PID: 27419 Comm: syz.0.8235 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 510.242816][T27419] Tainted: [W]=WARN [ 510.242822][T27419] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 510.242833][T27419] Call Trace: [ 510.242839][T27419] [ 510.242847][T27419] __dump_stack+0x1d/0x30 [ 510.242870][T27419] dump_stack_lvl+0xe8/0x140 [ 510.242888][T27419] dump_stack+0x15/0x1b [ 510.242938][T27419] should_fail_ex+0x265/0x280 [ 510.242954][T27419] ? cma_alloc_port+0x3d/0x2f0 [ 510.242974][T27419] should_failslab+0x8c/0xb0 [ 510.242996][T27419] __kmalloc_cache_noprof+0x4c/0x4a0 [ 510.243075][T27419] cma_alloc_port+0x3d/0x2f0 [ 510.243095][T27419] rdma_bind_addr_dst+0x19fb/0x1cf0 [ 510.243113][T27419] ? mntput_no_expire+0x6f/0x440 [ 510.243133][T27419] ? mntput+0x4b/0x80 [ 510.243182][T27419] ? terminate_walk+0x27f/0x2a0 [ 510.243205][T27419] rdma_resolve_addr+0x424/0x1340 [ 510.243222][T27419] ? _parse_integer_limit+0x170/0x190 [ 510.243257][T27419] ucma_resolve_ip+0x212/0x2e0 [ 510.243442][T27419] ucma_write+0x1b3/0x250 [ 510.243461][T27419] ? __pfx_ucma_write+0x10/0x10 [ 510.243537][T27419] vfs_write+0x269/0x960 [ 510.243612][T27419] ? __rcu_read_unlock+0x4f/0x70 [ 510.243634][T27419] ? __fget_files+0x184/0x1c0 [ 510.243660][T27419] ksys_write+0xda/0x1a0 [ 510.243679][T27419] __x64_sys_write+0x40/0x50 [ 510.243697][T27419] x64_sys_call+0x2802/0x3000 [ 510.243786][T27419] do_syscall_64+0xd2/0x200 [ 510.243809][T27419] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 510.243890][T27419] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 510.243908][T27419] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 510.243919][T27419] RIP: 0033:0x7ffb2316f749 [ 510.243929][T27419] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 510.243939][T27419] RSP: 002b:00007ffb21bcf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 510.243965][T27419] RAX: ffffffffffffffda RBX: 00007ffb233c5fa0 RCX: 00007ffb2316f749 [ 510.243972][T27419] RDX: 0000000000000048 RSI: 0000200000000340 RDI: 0000000000000003 [ 510.243979][T27419] RBP: 00007ffb21bcf090 R08: 0000000000000000 R09: 0000000000000000 [ 510.243986][T27419] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 510.243993][T27419] R13: 00007ffb233c6038 R14: 00007ffb233c5fa0 R15: 00007ffd4f327ea8 [ 510.244047][T27419] [ 510.602274][T27425] loop5: detected capacity change from 0 to 512 [ 510.604803][T27427] netlink: 'syz.0.8239': attribute type 1 has an invalid length. [ 510.610423][T27425] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 510.628197][T27425] EXT4-fs (loop5): 1 truncate cleaned up [ 510.634530][T27425] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 510.668958][ T6012] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 510.693593][T20403] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 510.752584][ T29] kauditd_printk_skb: 1680 callbacks suppressed [ 510.752599][ T29] audit: type=1400 audit(769.730:109133): avc: denied { mount } for pid=27438 comm="syz.0.8244" name="/" dev="autofs" ino=106678 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 510.781925][T27437] loop7: detected capacity change from 0 to 2048 [ 510.785269][ T29] audit: type=1400 audit(769.730:109134): avc: denied { map_create } for pid=27438 comm="syz.0.8244" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 510.807070][ T29] audit: type=1400 audit(769.730:109135): avc: denied { map_read map_write } for pid=27438 comm="syz.0.8244" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 510.826613][ T29] audit: type=1400 audit(769.730:109136): avc: denied { prog_load } for pid=27438 comm="syz.0.8244" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 510.845415][ T29] audit: type=1400 audit(769.730:109137): avc: denied { bpf } for pid=27438 comm="syz.0.8244" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 510.865840][ T29] audit: type=1400 audit(769.730:109138): avc: denied { perfmon } for pid=27438 comm="syz.0.8244" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 510.886567][ T29] audit: type=1400 audit(769.730:109139): avc: denied { prog_run } for pid=27438 comm="syz.0.8244" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 510.905261][ T29] audit: type=1400 audit(769.770:109140): avc: denied { ioctl } for pid=27432 comm="syz.7.8243" path="/dev/loop7" dev="devtmpfs" ino=107 ioctlcmd=0x4c00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 510.961854][T27436] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=27436 comm=syz.7.8243 [ 510.985353][ T29] audit: type=1400 audit(769.770:109141): avc: denied { read write } for pid=20281 comm="syz-executor" name="loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 511.009512][ T29] audit: type=1400 audit(769.770:109142): avc: denied { open } for pid=20281 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 511.010638][T27437] syzkaller0: entered promiscuous mode [ 511.044980][T27436] syzkaller0 (unregistering): left promiscuous mode [ 511.150269][T27460] FAULT_INJECTION: forcing a failure. [ 511.150269][T27460] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 511.163435][T27460] CPU: 1 UID: 0 PID: 27460 Comm: syz.6.8251 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 511.163472][T27460] Tainted: [W]=WARN [ 511.163479][T27460] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 511.163549][T27460] Call Trace: [ 511.163556][T27460] [ 511.163563][T27460] __dump_stack+0x1d/0x30 [ 511.163581][T27460] dump_stack_lvl+0xe8/0x140 [ 511.163600][T27460] dump_stack+0x15/0x1b [ 511.163614][T27460] should_fail_ex+0x265/0x280 [ 511.163689][T27460] should_fail+0xb/0x20 [ 511.163702][T27460] should_fail_usercopy+0x1a/0x20 [ 511.163719][T27460] _copy_from_user+0x1c/0xb0 [ 511.163798][T27460] ___sys_sendmsg+0xc1/0x1d0 [ 511.163826][T27460] __x64_sys_sendmsg+0xd4/0x160 [ 511.163846][T27460] x64_sys_call+0x191e/0x3000 [ 511.163870][T27460] do_syscall_64+0xd2/0x200 [ 511.163907][T27460] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 511.163932][T27460] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 511.163958][T27460] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 511.163994][T27460] RIP: 0033:0x7f75e2bbf749 [ 511.164006][T27460] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 511.164024][T27460] RSP: 002b:00007f75e161f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 511.164041][T27460] RAX: ffffffffffffffda RBX: 00007f75e2e15fa0 RCX: 00007f75e2bbf749 [ 511.164052][T27460] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 511.164143][T27460] RBP: 00007f75e161f090 R08: 0000000000000000 R09: 0000000000000000 [ 511.164156][T27460] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 511.164170][T27460] R13: 00007f75e2e16038 R14: 00007f75e2e15fa0 R15: 00007ffe45d6d178 [ 511.164187][T27460] [ 511.188816][T27465] loop7: detected capacity change from 0 to 512 [ 511.265675][T27470] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 511.330301][T27465] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 511.374850][T27465] EXT4-fs (loop7): 1 truncate cleaned up [ 511.389170][T27465] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 511.427677][T27477] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8258'. [ 511.438986][T25342] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 511.509371][T27481] syzkaller0: entered promiscuous mode [ 511.514894][T27481] syzkaller0: entered allmulticast mode [ 511.529308][T27483] loop6: detected capacity change from 0 to 1024 [ 511.549325][T27483] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 511.560254][T27483] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (14919!=20869) [ 511.576678][T27483] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 511.616064][T27483] EXT4-fs (loop6): invalid journal inode [ 511.621810][T27483] EXT4-fs (loop6): can't get journal size [ 511.632372][T27483] EXT4-fs error (device loop6): ext4_protect_reserved_inode:182: inode #3: comm syz.6.8260: blocks 2-2 from inode overlap system zone [ 511.647970][T27483] EXT4-fs (loop6): failed to initialize system zone (-117) [ 511.655620][T27483] EXT4-fs (loop6): mount failed [ 511.754466][T27506] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 511.780715][T27508] loop7: detected capacity change from 0 to 512 [ 511.796091][T27508] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 511.835554][T27508] EXT4-fs (loop7): 1 truncate cleaned up [ 511.848758][T27508] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 511.950344][T25342] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 511.976053][T27526] loop6: detected capacity change from 0 to 1764 [ 511.984551][T27521] xt_hashlimit: max too large, truncated to 1048576 [ 512.074298][T27539] loop7: detected capacity change from 0 to 512 [ 512.091958][T27539] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 512.107192][T27539] EXT4-fs (loop7): 1 truncate cleaned up [ 512.113184][T27539] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 512.154591][T25342] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 512.203825][T27552] __nla_validate_parse: 5 callbacks suppressed [ 512.203876][T27552] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8286'. [ 512.219134][T27552] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8286'. [ 512.248869][T27552] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8286'. [ 512.257856][T27552] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8286'. [ 512.314580][T27552] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8286'. [ 512.323604][T27552] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8286'. [ 512.334342][T27563] FAULT_INJECTION: forcing a failure. [ 512.334342][T27563] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 512.347527][T27563] CPU: 0 UID: 0 PID: 27563 Comm: syz.5.8289 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 512.347561][T27563] Tainted: [W]=WARN [ 512.347610][T27563] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 512.347622][T27563] Call Trace: [ 512.347630][T27563] [ 512.347638][T27563] __dump_stack+0x1d/0x30 [ 512.347656][T27563] dump_stack_lvl+0xe8/0x140 [ 512.347705][T27563] dump_stack+0x15/0x1b [ 512.347719][T27563] should_fail_ex+0x265/0x280 [ 512.347735][T27563] should_fail+0xb/0x20 [ 512.347786][T27563] should_fail_usercopy+0x1a/0x20 [ 512.347803][T27563] _copy_to_user+0x20/0xa0 [ 512.347823][T27563] simple_read_from_buffer+0xb5/0x130 [ 512.347854][T27563] proc_fail_nth_read+0x10e/0x150 [ 512.347937][T27563] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 512.347961][T27563] vfs_read+0x1a8/0x770 [ 512.348013][T27563] ? __rcu_read_unlock+0x4f/0x70 [ 512.348074][T27563] ? __fget_files+0x184/0x1c0 [ 512.348100][T27563] ksys_read+0xda/0x1a0 [ 512.348121][T27563] __x64_sys_read+0x40/0x50 [ 512.348198][T27563] x64_sys_call+0x27c0/0x3000 [ 512.348217][T27563] do_syscall_64+0xd2/0x200 [ 512.348239][T27563] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 512.348265][T27563] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 512.348378][T27563] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 512.348400][T27563] RIP: 0033:0x7f01a6e4e15c [ 512.348415][T27563] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 512.348430][T27563] RSP: 002b:00007f01a58af030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 512.348449][T27563] RAX: ffffffffffffffda RBX: 00007f01a70a5fa0 RCX: 00007f01a6e4e15c [ 512.348462][T27563] RDX: 000000000000000f RSI: 00007f01a58af0a0 RDI: 0000000000000006 [ 512.348526][T27563] RBP: 00007f01a58af090 R08: 0000000000000000 R09: 0000000000000000 [ 512.348537][T27563] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 512.348547][T27563] R13: 00007f01a70a6038 R14: 00007f01a70a5fa0 R15: 00007ffe23676b98 [ 512.348565][T27563] [ 512.682131][T27572] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8293'. [ 512.696606][T27572] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8293'. [ 512.713941][T27577] FAULT_INJECTION: forcing a failure. [ 512.713941][T27577] name failslab, interval 1, probability 0, space 0, times 0 [ 512.726636][T27577] CPU: 1 UID: 0 PID: 27577 Comm: syz.5.8295 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 512.726733][T27577] Tainted: [W]=WARN [ 512.726740][T27577] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 512.726752][T27577] Call Trace: [ 512.726759][T27577] [ 512.726767][T27577] __dump_stack+0x1d/0x30 [ 512.726788][T27577] dump_stack_lvl+0xe8/0x140 [ 512.726807][T27577] dump_stack+0x15/0x1b [ 512.726845][T27577] should_fail_ex+0x265/0x280 [ 512.726865][T27577] should_failslab+0x8c/0xb0 [ 512.726950][T27577] kmem_cache_alloc_node_noprof+0x57/0x4a0 [ 512.726978][T27577] ? __alloc_skb+0x101/0x320 [ 512.727003][T27577] __alloc_skb+0x101/0x320 [ 512.727090][T27577] ? should_fail_ex+0x30/0x280 [ 512.727163][T27577] sock_omalloc+0x81/0xf0 [ 512.727174][T27577] msg_zerocopy_realloc+0x84/0x420 [ 512.727186][T27577] __ip_append_data+0x676/0x2440 [ 512.727203][T27577] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 512.727217][T27577] ? __rcu_read_unlock+0x4f/0x70 [ 512.727293][T27577] ? plist_check_list+0x1e4/0x210 [ 512.727311][T27577] ? xfd_validate_state+0x45/0xf0 [ 512.727323][T27577] ? save_fpregs_to_fpstate+0x100/0x160 [ 512.727397][T27577] ip_append_data+0xd6/0x130 [ 512.727459][T27577] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 512.727473][T27577] udp_sendmsg+0x36e/0x13c0 [ 512.727488][T27577] ? mntput+0x4b/0x80 [ 512.727498][T27577] ? __rcu_read_unlock+0x4f/0x70 [ 512.727705][T27577] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 512.727764][T27577] ? avc_has_perm+0xf7/0x180 [ 512.727778][T27577] ? __pfx_udp_sendmsg+0x10/0x10 [ 512.727853][T27577] inet_sendmsg+0xac/0xd0 [ 512.727865][T27577] __sock_sendmsg+0x102/0x180 [ 512.727879][T27577] __sys_sendto+0x268/0x330 [ 512.727899][T27577] __x64_sys_sendto+0x76/0x90 [ 512.727950][T27577] x64_sys_call+0x2d14/0x3000 [ 512.727962][T27577] do_syscall_64+0xd2/0x200 [ 512.727974][T27577] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 512.727989][T27577] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 512.728031][T27577] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 512.728043][T27577] RIP: 0033:0x7f01a6e4f749 [ 512.728053][T27577] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 512.728062][T27577] RSP: 002b:00007f01a58af038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 512.728074][T27577] RAX: ffffffffffffffda RBX: 00007f01a70a5fa0 RCX: 00007f01a6e4f749 [ 512.728160][T27577] RDX: 000000000000fdbe RSI: 0000200000000100 RDI: 0000000000000003 [ 512.728205][T27577] RBP: 00007f01a58af090 R08: 0000000000000000 R09: 0000000011000a00 [ 512.728212][T27577] R10: 0000000004004084 R11: 0000000000000246 R12: 0000000000000001 [ 512.728219][T27577] R13: 00007f01a70a6038 R14: 00007f01a70a5fa0 R15: 00007ffe23676b98 [ 512.728229][T27577] [ 512.738539][T27578] netlink: 'syz.3.8294': attribute type 1 has an invalid length. [ 513.081041][T27596] loop7: detected capacity change from 0 to 1024 [ 513.091871][T27596] EXT4-fs (loop7): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 513.102879][T27596] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (14919!=20869) [ 513.113672][T27596] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 513.127493][T27596] EXT4-fs (loop7): invalid journal inode [ 513.136816][T27596] EXT4-fs (loop7): can't get journal size [ 513.145737][T27596] EXT4-fs error (device loop7): ext4_protect_reserved_inode:182: inode #3: comm syz.7.8300: blocks 2-2 from inode overlap system zone [ 513.162811][T27596] EXT4-fs (loop7): failed to initialize system zone (-117) [ 513.170200][T27596] EXT4-fs (loop7): mount failed [ 513.285048][T27607] netlink: 'syz.3.8301': attribute type 8 has an invalid length. [ 513.323269][T27613] loop5: detected capacity change from 0 to 1024 [ 513.332819][T27613] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 513.343753][T27613] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (14919!=20869) [ 513.353369][T27613] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 513.364155][T27613] EXT4-fs (loop5): invalid journal inode [ 513.364690][T27609] xt_hashlimit: max too large, truncated to 1048576 [ 513.369874][T27613] EXT4-fs (loop5): can't get journal size [ 513.384084][T27613] EXT4-fs error (device loop5): ext4_protect_reserved_inode:182: inode #3: comm syz.5.8306: blocks 2-2 from inode overlap system zone [ 513.398194][T27613] EXT4-fs (loop5): failed to initialize system zone (-117) [ 513.405528][T27613] EXT4-fs (loop5): mount failed [ 513.511842][T27622] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 513.719566][T27627] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 513.853129][T27629] lo speed is unknown, defaulting to 1000 [ 513.970979][T27638] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 514.158744][T27654] netlink: 24 bytes leftover after parsing attributes in process `syz.5.8320'. [ 514.168702][T27654] netlink: 24 bytes leftover after parsing attributes in process `syz.5.8320'. [ 514.236968][T27660] loop7: detected capacity change from 0 to 512 [ 514.258554][T27660] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 514.289556][T27660] EXT4-fs (loop7): 1 truncate cleaned up [ 514.301798][T27660] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 514.382955][T25342] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 514.455502][T27679] xt_hashlimit: max too large, truncated to 1048576 [ 514.491044][T27687] loop5: detected capacity change from 0 to 1764 [ 514.566500][T27690] loop7: detected capacity change from 0 to 1024 [ 514.581936][T27690] EXT4-fs (loop7): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 514.592887][T27690] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (14919!=20869) [ 514.602655][T27690] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 514.614641][T27690] EXT4-fs (loop7): invalid journal inode [ 514.622919][T27690] EXT4-fs (loop7): can't get journal size [ 514.634236][T27690] EXT4-fs error (device loop7): ext4_protect_reserved_inode:182: inode #3: comm syz.7.8336: blocks 2-2 from inode overlap system zone [ 514.650328][T27690] EXT4-fs (loop7): failed to initialize system zone (-117) [ 514.658537][T27690] EXT4-fs (loop7): mount failed [ 514.801264][T27709] loop7: detected capacity change from 0 to 512 [ 514.815124][T27709] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 514.836580][T27709] EXT4-fs (loop7): 1 truncate cleaned up [ 514.843532][T27709] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 514.883567][T25342] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 514.928944][ T3416] usb usb2-port1: attempt power cycle [ 514.940157][T27719] FAULT_INJECTION: forcing a failure. [ 514.940157][T27719] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 514.953213][T27719] CPU: 0 UID: 0 PID: 27719 Comm: syz.0.8347 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 514.953274][T27719] Tainted: [W]=WARN [ 514.953280][T27719] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 514.953290][T27719] Call Trace: [ 514.953296][T27719] [ 514.953303][T27719] __dump_stack+0x1d/0x30 [ 514.953325][T27719] dump_stack_lvl+0xe8/0x140 [ 514.953413][T27719] dump_stack+0x15/0x1b [ 514.953428][T27719] should_fail_ex+0x265/0x280 [ 514.953448][T27719] should_fail+0xb/0x20 [ 514.953465][T27719] should_fail_usercopy+0x1a/0x20 [ 514.953485][T27719] _copy_to_user+0x20/0xa0 [ 514.953537][T27719] simple_read_from_buffer+0xb5/0x130 [ 514.953562][T27719] proc_fail_nth_read+0x10e/0x150 [ 514.953591][T27719] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 514.953650][T27719] vfs_read+0x1a8/0x770 [ 514.953670][T27719] ? __rcu_read_unlock+0x4f/0x70 [ 514.953719][T27719] ? __fget_files+0x184/0x1c0 [ 514.953784][T27722] FAULT_INJECTION: forcing a failure. [ 514.953784][T27722] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 514.953794][T27719] ksys_read+0xda/0x1a0 [ 514.953817][T27719] __x64_sys_read+0x40/0x50 [ 514.953907][T27719] x64_sys_call+0x27c0/0x3000 [ 514.953929][T27719] do_syscall_64+0xd2/0x200 [ 514.954024][T27719] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 514.954050][T27719] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 514.954143][T27719] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 514.954164][T27719] RIP: 0033:0x7ffb2316e15c [ 514.954178][T27719] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 514.954195][T27719] RSP: 002b:00007ffb21bcf030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 514.954259][T27719] RAX: ffffffffffffffda RBX: 00007ffb233c5fa0 RCX: 00007ffb2316e15c [ 514.954272][T27719] RDX: 000000000000000f RSI: 00007ffb21bcf0a0 RDI: 0000000000000005 [ 514.954285][T27719] RBP: 00007ffb21bcf090 R08: 0000000000000000 R09: 0000000000000000 [ 514.954297][T27719] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 514.954309][T27719] R13: 00007ffb233c6038 R14: 00007ffb233c5fa0 R15: 00007ffd4f327ea8 [ 514.954327][T27719] [ 515.170100][T27722] CPU: 1 UID: 0 PID: 27722 Comm: syz.5.8348 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 515.170194][T27722] Tainted: [W]=WARN [ 515.170198][T27722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 515.170205][T27722] Call Trace: [ 515.170210][T27722] [ 515.170215][T27722] __dump_stack+0x1d/0x30 [ 515.170326][T27722] dump_stack_lvl+0xe8/0x140 [ 515.170338][T27722] dump_stack+0x15/0x1b [ 515.170347][T27722] should_fail_ex+0x265/0x280 [ 515.170362][T27722] should_fail+0xb/0x20 [ 515.170387][T27722] should_fail_usercopy+0x1a/0x20 [ 515.170399][T27722] _copy_from_iter+0xd2/0xe80 [ 515.170411][T27722] ? mntput_no_expire+0x6f/0x440 [ 515.170423][T27722] ? mntput+0x4b/0x80 [ 515.170433][T27722] tun_get_user+0x3d0/0x26e0 [ 515.170522][T27722] ? _parse_integer_limit+0x170/0x190 [ 515.170541][T27722] ? ref_tracker_alloc+0x1f2/0x2f0 [ 515.170623][T27722] ? selinux_file_permission+0x1e4/0x320 [ 515.170660][T27722] tun_chr_write_iter+0x15e/0x210 [ 515.170687][T27722] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 515.170701][T27722] vfs_write+0x52a/0x960 [ 515.170717][T27722] ksys_write+0xda/0x1a0 [ 515.170731][T27722] __x64_sys_write+0x40/0x50 [ 515.170813][T27722] x64_sys_call+0x2802/0x3000 [ 515.170827][T27722] do_syscall_64+0xd2/0x200 [ 515.170838][T27722] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 515.170854][T27722] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 515.170926][T27722] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 515.170938][T27722] RIP: 0033:0x7f01a6e4f749 [ 515.170947][T27722] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 515.171002][T27722] RSP: 002b:00007f01a58af038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 515.171013][T27722] RAX: ffffffffffffffda RBX: 00007f01a70a5fa0 RCX: 00007f01a6e4f749 [ 515.171020][T27722] RDX: 000000000000ffdd RSI: 0000200000000280 RDI: 0000000000000005 [ 515.171027][T27722] RBP: 00007f01a58af090 R08: 0000000000000000 R09: 0000000000000000 [ 515.171034][T27722] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 515.171041][T27722] R13: 00007f01a70a6038 R14: 00007f01a70a5fa0 R15: 00007ffe23676b98 [ 515.171052][T27722] [ 515.397591][T27726] loop7: detected capacity change from 0 to 1024 [ 515.407601][T27726] EXT4-fs (loop7): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 515.418484][T27726] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (14919!=20869) [ 515.428683][T27726] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 515.442402][T27726] EXT4-fs (loop7): invalid journal inode [ 515.448236][T27726] EXT4-fs (loop7): can't get journal size [ 515.460915][T27726] EXT4-fs error (device loop7): ext4_protect_reserved_inode:182: inode #3: comm syz.7.8349: blocks 2-2 from inode overlap system zone [ 515.488983][T27726] EXT4-fs (loop7): failed to initialize system zone (-117) [ 515.501241][T27726] EXT4-fs (loop7): mount failed [ 515.598793][T27737] loop5: detected capacity change from 0 to 512 [ 515.613099][T27737] EXT4-fs: dax option not supported [ 515.692829][T27742] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 515.763700][ T29] kauditd_printk_skb: 2621 callbacks suppressed [ 515.763714][ T29] audit: type=1400 audit(774.740:111764): avc: denied { map_create } for pid=27749 comm="syz.0.8361" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 515.834359][ T29] audit: type=1400 audit(774.740:111765): avc: denied { bpf } for pid=27749 comm="syz.0.8361" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 515.854616][ T29] audit: type=1400 audit(774.740:111766): avc: denied { map_read map_write } for pid=27749 comm="syz.0.8361" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 515.874226][ T29] audit: type=1400 audit(774.760:111767): avc: denied { prog_load } for pid=27751 comm="syz.0.8362" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 515.892990][ T29] audit: type=1400 audit(774.760:111768): avc: denied { bpf } for pid=27751 comm="syz.0.8362" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 515.913162][ T29] audit: type=1400 audit(774.760:111769): avc: denied { perfmon } for pid=27751 comm="syz.0.8362" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 515.933762][ T29] audit: type=1400 audit(774.760:111770): avc: denied { prog_run } for pid=27751 comm="syz.0.8362" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 515.938401][ T4630] netdevsim netdevsim7 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 515.952356][ T29] audit: type=1400 audit(774.770:111771): avc: denied { create } for pid=27751 comm="syz.0.8362" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 515.979702][ T29] audit: type=1400 audit(774.770:111772): avc: denied { write } for pid=27751 comm="syz.0.8362" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 515.998747][ T29] audit: type=1400 audit(774.770:111773): avc: denied { module_request } for pid=27751 comm="syz.0.8362" kmod="crypto-seqiv(authenc(hmac(md5),rfc3686(ctr(aes))))" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 516.025347][ T4631] netdevsim netdevsim7 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 516.033610][ T4631] netdevsim netdevsim7 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 516.045566][ T4631] netdevsim netdevsim7 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 516.085450][T27769] loop7: detected capacity change from 0 to 1024 [ 516.093324][T27769] EXT4-fs (loop7): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 516.104229][T27769] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (14919!=20869) [ 516.113844][T27769] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 516.124492][T27769] EXT4-fs (loop7): invalid journal inode [ 516.130176][T27769] EXT4-fs (loop7): can't get journal size [ 516.137438][T27769] EXT4-fs error (device loop7): ext4_protect_reserved_inode:182: inode #3: comm syz.7.8366: blocks 2-2 from inode overlap system zone [ 516.151679][T27769] EXT4-fs (loop7): failed to initialize system zone (-117) [ 516.158991][T27769] EXT4-fs (loop7): mount failed [ 516.286184][T27782] loop7: detected capacity change from 0 to 512 [ 516.294542][T27782] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 516.312800][T27782] EXT4-fs (loop7): 1 truncate cleaned up [ 516.319073][T27782] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 516.368316][T25342] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 516.803487][T27818] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 516.846067][T27824] ’’’’’’: renamed from vlan1 (while UP) [ 516.889205][T27818] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 516.910735][T27831] FAULT_INJECTION: forcing a failure. [ 516.910735][T27831] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 516.923856][T27831] CPU: 1 UID: 0 PID: 27831 Comm: syz.5.8388 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 516.923889][T27831] Tainted: [W]=WARN [ 516.923897][T27831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 516.923958][T27831] Call Trace: [ 516.923965][T27831] [ 516.923974][T27831] __dump_stack+0x1d/0x30 [ 516.924002][T27831] dump_stack_lvl+0xe8/0x140 [ 516.924023][T27831] dump_stack+0x15/0x1b [ 516.924041][T27831] should_fail_ex+0x265/0x280 [ 516.924141][T27831] should_fail+0xb/0x20 [ 516.924158][T27831] should_fail_usercopy+0x1a/0x20 [ 516.924176][T27831] _copy_from_user+0x1c/0xb0 [ 516.924243][T27831] __sys_connect+0xd0/0x2b0 [ 516.924276][T27831] __x64_sys_connect+0x3f/0x50 [ 516.924379][T27831] x64_sys_call+0x2c0c/0x3000 [ 516.924410][T27831] do_syscall_64+0xd2/0x200 [ 516.924431][T27831] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 516.924458][T27831] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 516.924489][T27831] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 516.924596][T27831] RIP: 0033:0x7f01a6e4f749 [ 516.924610][T27831] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 516.924624][T27831] RSP: 002b:00007f01a58af038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 516.924640][T27831] RAX: ffffffffffffffda RBX: 00007f01a70a5fa0 RCX: 00007f01a6e4f749 [ 516.924651][T27831] RDX: 0000000000000010 RSI: 0000200000000080 RDI: 0000000000000003 [ 516.924714][T27831] RBP: 00007f01a58af090 R08: 0000000000000000 R09: 0000000000000000 [ 516.924724][T27831] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 516.924735][T27831] R13: 00007f01a70a6038 R14: 00007f01a70a5fa0 R15: 00007ffe23676b98 [ 516.924753][T27831] [ 517.151446][T27818] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 517.222263][T27843] xt_hashlimit: max too large, truncated to 1048576 [ 517.316800][T27818] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 517.610233][ T4628] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 517.628675][ T4628] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 517.642509][ T4630] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 517.657155][ T4628] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 517.809506][ T3416] usb usb2-port1: unable to enumerate USB device [ 517.863379][T27860] loop7: detected capacity change from 0 to 1024 [ 517.894371][T27860] EXT4-fs (loop7): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 517.905371][T27860] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (14919!=20869) [ 517.917769][T27868] lo speed is unknown, defaulting to 1000 [ 517.944924][T27860] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 517.976764][T27860] EXT4-fs (loop7): invalid journal inode [ 517.998817][T27860] EXT4-fs (loop7): can't get journal size [ 518.007612][T27877] __nla_validate_parse: 4 callbacks suppressed [ 518.007626][T27877] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8409'. [ 518.023034][T27877] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8409'. [ 518.033891][T27860] EXT4-fs error (device loop7): ext4_protect_reserved_inode:182: inode #3: comm syz.7.8401: blocks 2-2 from inode overlap system zone [ 518.071654][T27860] EXT4-fs (loop7): failed to initialize system zone (-117) [ 518.071696][T27860] EXT4-fs (loop7): mount failed [ 518.110697][T27877] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8409'. [ 518.119785][T27877] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8409'. [ 518.240511][T27877] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8409'. [ 518.249605][T27877] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8409'. [ 518.374247][T27897] xt_hashlimit: max too large, truncated to 1048576 [ 518.687720][T27909] loop7: detected capacity change from 0 to 512 [ 518.696326][T27909] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 518.710344][T27909] EXT4-fs (loop7): 1 truncate cleaned up [ 518.716479][T27909] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 518.763434][T27915] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 518.772559][T25342] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 518.851471][T27922] loop7: detected capacity change from 0 to 1024 [ 518.860334][T27922] EXT4-fs (loop7): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 518.871247][T27922] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (14919!=20869) [ 518.883317][T27922] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 518.895496][T27922] EXT4-fs (loop7): invalid journal inode [ 518.901300][T27922] EXT4-fs (loop7): can't get journal size [ 518.909108][T27922] EXT4-fs error (device loop7): ext4_protect_reserved_inode:182: inode #3: comm syz.7.8420: blocks 2-2 from inode overlap system zone [ 518.926406][T27927] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 518.938809][T27922] EXT4-fs (loop7): failed to initialize system zone (-117) [ 518.946095][T27922] EXT4-fs (loop7): mount failed [ 519.208674][T27939] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 519.267904][T27944] loop5: detected capacity change from 0 to 512 [ 519.292035][T27944] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 519.324619][T27944] EXT4-fs (loop5): 1 truncate cleaned up [ 519.341626][T27952] loop6: detected capacity change from 0 to 512 [ 519.343243][T27944] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 519.374331][T27952] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 519.457819][T27952] EXT4-fs (loop6): 1 truncate cleaned up [ 519.464118][T27952] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 519.517579][T20403] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 519.550353][T27963] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 519.560494][T20281] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 519.624963][T27966] xt_hashlimit: max too large, truncated to 1048576 [ 519.804763][T27972] net_ratelimit: 9 callbacks suppressed [ 519.804823][T27972] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 520.649074][T28012] xt_hashlimit: max too large, truncated to 1048576 [ 520.749146][ T4606] Bluetooth: hci0: Frame reassembly failed (-84) [ 520.769020][ T29] kauditd_printk_skb: 2033 callbacks suppressed [ 520.769033][ T29] audit: type=1400 audit(779.740:113807): avc: denied { prog_load } for pid=28026 comm="syz.7.8461" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 520.784145][T28031] loop6: detected capacity change from 0 to 512 [ 520.793980][ T29] audit: type=1400 audit(779.740:113808): avc: denied { bpf } for pid=28026 comm="syz.7.8461" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 520.801916][T28031] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 520.823480][ T29] audit: type=1400 audit(779.750:113809): avc: denied { map_create } for pid=28027 comm="syz.6.8460" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 520.849297][ T29] audit: type=1400 audit(779.750:113810): avc: denied { perfmon } for pid=28027 comm="syz.6.8460" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 520.869978][ T29] audit: type=1400 audit(779.750:113811): avc: denied { map_read map_write } for pid=28027 comm="syz.6.8460" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 520.889558][ T29] audit: type=1400 audit(779.750:113812): avc: denied { prog_load } for pid=28027 comm="syz.6.8460" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 520.894895][T28029] audit: audit_backlog=65 > audit_backlog_limit=64 [ 520.908253][ T29] audit: type=1400 audit(779.750:113813): avc: denied { bpf } for pid=28027 comm="syz.6.8460" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 520.908276][ T29] audit: type=1326 audit(779.750:113814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28027 comm="syz.6.8460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75e2bbf749 code=0x7ffc0000 [ 520.914843][T28029] audit: audit_lost=39 audit_rate_limit=0 audit_backlog_limit=64 [ 520.969039][T28031] EXT4-fs (loop6): 1 truncate cleaned up [ 520.975067][T28031] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 521.024784][T20281] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 521.045344][T28035] lo speed is unknown, defaulting to 1000 [ 521.471176][T28054] lo speed is unknown, defaulting to 1000 [ 521.480749][T28058] xt_hashlimit: max too large, truncated to 1048576 [ 521.698161][T28066] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 521.845809][T28070] loop7: detected capacity change from 0 to 1024 [ 521.854163][T28070] EXT4-fs (loop7): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 521.865081][T28070] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (14919!=20869) [ 521.874869][T28070] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 521.886586][T28070] EXT4-fs (loop7): invalid journal inode [ 521.893183][T28070] EXT4-fs (loop7): can't get journal size [ 521.900169][T28070] EXT4-fs error (device loop7): ext4_protect_reserved_inode:182: inode #3: comm syz.7.8476: blocks 2-2 from inode overlap system zone [ 521.926458][T28070] EXT4-fs (loop7): failed to initialize system zone (-117) [ 521.941296][T28070] EXT4-fs (loop7): mount failed [ 522.388369][T28083] xt_hashlimit: max too large, truncated to 1048576 [ 522.791354][T28093] lo speed is unknown, defaulting to 1000 [ 522.828775][ T6012] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 522.929522][T28101] netlink: 20 bytes leftover after parsing attributes in process `syz.6.8487'. [ 522.938512][T28101] netlink: 20 bytes leftover after parsing attributes in process `syz.6.8487'. [ 522.962053][T28101] netlink: 20 bytes leftover after parsing attributes in process `syz.6.8487'. [ 522.971101][T28101] netlink: 20 bytes leftover after parsing attributes in process `syz.6.8487'. [ 523.149943][T28112] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 523.205717][T28121] loop6: detected capacity change from 0 to 512 [ 523.213976][T28121] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 523.229788][T28121] EXT4-fs (loop6): 1 truncate cleaned up [ 523.235925][T28121] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 523.272218][T20281] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 523.368600][T28137] loop6: detected capacity change from 0 to 1024 [ 523.376760][T28137] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 523.387780][T28137] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (14919!=20869) [ 523.397547][T28137] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 523.429556][T28137] EXT4-fs (loop6): invalid journal inode [ 523.435215][T28137] EXT4-fs (loop6): can't get journal size [ 523.442150][T28137] EXT4-fs error (device loop6): ext4_protect_reserved_inode:182: inode #3: comm syz.6.8500: blocks 2-2 from inode overlap system zone [ 523.456165][T28137] EXT4-fs (loop6): failed to initialize system zone (-117) [ 523.463494][T28137] EXT4-fs (loop6): mount failed [ 523.588394][T28146] xt_hashlimit: max too large, truncated to 1048576 [ 524.108720][ T44] Bluetooth: hci1: command 0x1003 tx timeout [ 524.114805][ T3529] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 524.162519][T28163] loop6: detected capacity change from 0 to 512 [ 524.172414][T28163] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 524.184734][T28170] netdevsim netdevsim7 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 524.193796][T28163] EXT4-fs (loop6): 1 truncate cleaned up [ 524.194686][T28170] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 524.200578][T28163] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 524.240299][T28170] netdevsim netdevsim7 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 524.250078][T28170] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 524.311824][T20281] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 524.323368][T28170] netdevsim netdevsim7 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 524.333198][T28170] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 524.400739][T28170] netdevsim netdevsim7 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 524.410585][T28170] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 524.420883][T28185] __nla_validate_parse: 2 callbacks suppressed [ 524.420897][T28185] netlink: 20 bytes leftover after parsing attributes in process `syz.6.8516'. [ 524.436173][T28185] netlink: 20 bytes leftover after parsing attributes in process `syz.6.8516'. [ 524.464098][T28185] netlink: 20 bytes leftover after parsing attributes in process `syz.6.8516'. [ 524.473205][T28185] netlink: 20 bytes leftover after parsing attributes in process `syz.6.8516'. [ 524.497114][ T4630] netdevsim netdevsim7 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 524.505484][ T4630] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 524.534070][ T4630] netdevsim netdevsim7 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 524.542377][ T4630] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 524.563852][ T4630] netdevsim netdevsim7 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 524.572134][ T4630] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 524.572250][T28185] netlink: 20 bytes leftover after parsing attributes in process `syz.6.8516'. [ 524.589368][T28185] netlink: 20 bytes leftover after parsing attributes in process `syz.6.8516'. [ 524.603689][ T4630] netdevsim netdevsim7 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 524.611983][ T4630] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 524.635529][T28197] loop7: detected capacity change from 0 to 512 [ 524.645199][T28197] EXT4-fs error (device loop7): ext4_iget_extra_inode:5075: inode #15: comm syz.7.8519: corrupted in-inode xattr: invalid ea_ino [ 524.658906][T28197] EXT4-fs error (device loop7): ext4_orphan_get:1397: comm syz.7.8519: couldn't read orphan inode 15 (err -117) [ 524.662158][T28201] loop6: detected capacity change from 0 to 256 [ 524.679034][T28197] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 524.679382][T28201] msdos: Unknown parameter 'Ļu' [ 524.712272][T28197] EXT4-fs error (device loop7): ext4_map_blocks:778: inode #2: block 3: comm syz.7.8519: lblock 0 mapped to illegal pblock 3 (length 1) [ 524.731071][T28197] EXT4-fs warning (device loop7): dx_probe:791: inode #2: lblock 0: comm syz.7.8519: error -117 reading directory block [ 524.775187][T25342] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 525.010729][T28231] netlink: 20 bytes leftover after parsing attributes in process `syz.6.8532'. [ 525.019738][T28231] netlink: 20 bytes leftover after parsing attributes in process `syz.6.8532'. [ 525.061997][T28231] netlink: 20 bytes leftover after parsing attributes in process `syz.6.8532'. [ 525.071404][T28231] netlink: 20 bytes leftover after parsing attributes in process `syz.6.8532'. [ 525.254927][T28250] loop3: detected capacity change from 0 to 512 [ 525.270097][T28250] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 525.283968][T28250] EXT4-fs (loop3): 1 truncate cleaned up [ 525.289954][T28250] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 525.319753][T28256] FAULT_INJECTION: forcing a failure. [ 525.319753][T28256] name failslab, interval 1, probability 0, space 0, times 0 [ 525.332494][T28256] CPU: 0 UID: 0 PID: 28256 Comm: syz.0.8542 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 525.332599][T28256] Tainted: [W]=WARN [ 525.332606][T28256] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 525.332631][T28256] Call Trace: [ 525.332639][T28256] [ 525.332645][T28256] __dump_stack+0x1d/0x30 [ 525.332671][T28256] dump_stack_lvl+0xe8/0x140 [ 525.332717][T28256] dump_stack+0x15/0x1b [ 525.332733][T28256] should_fail_ex+0x265/0x280 [ 525.332753][T28256] ? __se_sys_memfd_create+0x1cc/0x590 [ 525.332808][T28256] should_failslab+0x8c/0xb0 [ 525.332833][T28256] __kmalloc_cache_noprof+0x4c/0x4a0 [ 525.332860][T28256] ? fput+0x8f/0xc0 [ 525.332879][T28256] __se_sys_memfd_create+0x1cc/0x590 [ 525.332925][T28256] __x64_sys_memfd_create+0x31/0x40 [ 525.332947][T28256] x64_sys_call+0x2ac2/0x3000 [ 525.333077][T28256] do_syscall_64+0xd2/0x200 [ 525.333170][T28256] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 525.333195][T28256] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 525.333226][T28256] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 525.333247][T28256] RIP: 0033:0x7ffb2316f749 [ 525.333308][T28256] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 525.333326][T28256] RSP: 002b:00007ffb21bced68 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 525.333343][T28256] RAX: ffffffffffffffda RBX: 00000000000005a6 RCX: 00007ffb2316f749 [ 525.333357][T28256] RDX: 00007ffb21bcedec RSI: 0000000000000000 RDI: 00007ffb231f4960 [ 525.333370][T28256] RBP: 0000200000000b40 R08: 00007ffb21bceb07 R09: 0000000000000000 [ 525.333383][T28256] R10: 000000000000000a R11: 0000000000000202 R12: 0000000000000001 [ 525.333397][T28256] R13: 00007ffb21bcedec R14: 00007ffb21bcedf0 R15: 00007ffd4f327ea8 [ 525.333416][T28256] [ 525.544561][T20576] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 525.578083][T28259] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 525.648327][T28265] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 525.792763][ T29] kauditd_printk_skb: 1748 callbacks suppressed [ 525.792780][ T29] audit: type=1400 audit(784.770:115544): avc: denied { read write } for pid=20576 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 525.823081][ T29] audit: type=1400 audit(784.770:115545): avc: denied { open } for pid=20576 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 525.847024][ T29] audit: type=1400 audit(784.770:115546): avc: denied { ioctl } for pid=20576 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=103 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 525.920371][ T29] audit: type=1400 audit(784.810:115547): avc: denied { prog_load } for pid=28276 comm="syz.6.8551" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 525.939149][ T29] audit: type=1400 audit(784.810:115548): avc: denied { bpf } for pid=28276 comm="syz.6.8551" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 525.959640][ T29] audit: type=1400 audit(784.810:115549): avc: denied { perfmon } for pid=28276 comm="syz.6.8551" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 525.980310][ T29] audit: type=1400 audit(784.850:115550): avc: denied { map_create } for pid=28276 comm="syz.6.8551" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 525.999219][ T29] audit: type=1400 audit(784.860:115551): avc: denied { map_create } for pid=28282 comm="syz.3.8552" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 526.018171][ T29] audit: type=1400 audit(784.860:115552): avc: denied { map_read map_write } for pid=28282 comm="syz.3.8552" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 526.037913][ T29] audit: type=1400 audit(784.860:115553): avc: denied { prog_load } for pid=28282 comm="syz.3.8552" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 526.059410][T28291] loop7: detected capacity change from 0 to 128 [ 526.222056][T28292] 9pnet_fd: Insufficient options for proto=fd [ 526.250053][T28298] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 526.655085][T28324] xt_hashlimit: max too large, truncated to 1048576 [ 526.746355][T28325] loop7: detected capacity change from 0 to 1024 [ 526.778232][T28325] EXT4-fs (loop7): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 526.789228][T28325] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (14919!=20869) [ 526.855878][T28325] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 526.894625][T28325] EXT4-fs (loop7): invalid journal inode [ 526.992192][T28325] EXT4-fs (loop7): can't get journal size [ 527.000569][T28325] EXT4-fs error (device loop7): ext4_protect_reserved_inode:182: inode #3: comm syz.7.8567: blocks 2-2 from inode overlap system zone [ 527.014553][T28325] EXT4-fs (loop7): failed to initialize system zone (-117) [ 527.021893][T28325] EXT4-fs (loop7): mount failed [ 527.147486][T28332] FAULT_INJECTION: forcing a failure. [ 527.147486][T28332] name failslab, interval 1, probability 0, space 0, times 0 [ 527.160148][T28332] CPU: 0 UID: 0 PID: 28332 Comm: syz.7.8570 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 527.160177][T28332] Tainted: [W]=WARN [ 527.160183][T28332] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 527.160194][T28332] Call Trace: [ 527.160201][T28332] [ 527.160208][T28332] __dump_stack+0x1d/0x30 [ 527.160230][T28332] dump_stack_lvl+0xe8/0x140 [ 527.160295][T28332] dump_stack+0x15/0x1b [ 527.160309][T28332] should_fail_ex+0x265/0x280 [ 527.160326][T28332] should_failslab+0x8c/0xb0 [ 527.160429][T28332] kmem_cache_alloc_node_noprof+0x57/0x4a0 [ 527.160455][T28332] ? __alloc_skb+0x101/0x320 [ 527.160523][T28332] __alloc_skb+0x101/0x320 [ 527.160574][T28332] rtmsg_ifinfo_build_skb+0x5f/0x1b0 [ 527.160671][T28332] rtmsg_ifinfo+0x6d/0x110 [ 527.160691][T28332] __dev_notify_flags+0x76/0x1a0 [ 527.160720][T28332] netif_change_flags+0xac/0xd0 [ 527.160745][T28332] dev_change_flags+0xce/0x180 [ 527.160774][T28332] dev_ifsioc+0x44b/0xaa0 [ 527.160790][T28332] ? __rcu_read_unlock+0x4f/0x70 [ 527.160862][T28332] dev_ioctl+0x70a/0x960 [ 527.160880][T28332] sock_do_ioctl+0x197/0x220 [ 527.160921][T28332] sock_ioctl+0x41b/0x610 [ 527.160939][T28332] ? __pfx_sock_ioctl+0x10/0x10 [ 527.161019][T28332] __se_sys_ioctl+0xce/0x140 [ 527.161099][T28332] __x64_sys_ioctl+0x43/0x50 [ 527.161115][T28332] x64_sys_call+0x1816/0x3000 [ 527.161133][T28332] do_syscall_64+0xd2/0x200 [ 527.161210][T28332] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 527.161236][T28332] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 527.161268][T28332] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 527.161288][T28332] RIP: 0033:0x7f5b1c2ff749 [ 527.161373][T28332] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 527.161389][T28332] RSP: 002b:00007f5b1ad67038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 527.161414][T28332] RAX: ffffffffffffffda RBX: 00007f5b1c555fa0 RCX: 00007f5b1c2ff749 [ 527.161425][T28332] RDX: 0000200000000280 RSI: 0000000000008914 RDI: 0000000000000006 [ 527.161436][T28332] RBP: 00007f5b1ad67090 R08: 0000000000000000 R09: 0000000000000000 [ 527.161447][T28332] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 527.161460][T28332] R13: 00007f5b1c556038 R14: 00007f5b1c555fa0 R15: 00007ffe880f52a8 [ 527.161483][T28332] [ 527.445527][T28332] wg2: entered promiscuous mode [ 527.450440][T28332] wg2: entered allmulticast mode [ 527.537875][T28336] wg2: entered promiscuous mode [ 527.542837][T28336] wg2: entered allmulticast mode [ 527.557453][T28340] sch_fq: defrate 4294967295 ignored. [ 527.624054][T28348] FAULT_INJECTION: forcing a failure. [ 527.624054][T28348] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 527.637345][T28348] CPU: 0 UID: 0 PID: 28348 Comm: syz.6.8576 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 527.637428][T28348] Tainted: [W]=WARN [ 527.637435][T28348] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 527.637447][T28348] Call Trace: [ 527.637453][T28348] [ 527.637461][T28348] __dump_stack+0x1d/0x30 [ 527.637530][T28348] dump_stack_lvl+0xe8/0x140 [ 527.637568][T28348] dump_stack+0x15/0x1b [ 527.637582][T28348] should_fail_ex+0x265/0x280 [ 527.637599][T28348] should_fail+0xb/0x20 [ 527.637755][T28348] should_fail_usercopy+0x1a/0x20 [ 527.637776][T28348] _copy_from_user+0x1c/0xb0 [ 527.637800][T28348] __sys_connect+0xd0/0x2b0 [ 527.637901][T28348] __x64_sys_connect+0x3f/0x50 [ 527.637989][T28348] x64_sys_call+0x2c0c/0x3000 [ 527.638047][T28348] do_syscall_64+0xd2/0x200 [ 527.638068][T28348] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 527.638102][T28348] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 527.638129][T28348] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 527.638198][T28348] RIP: 0033:0x7f75e2bbf749 [ 527.638213][T28348] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 527.638229][T28348] RSP: 002b:00007f75e161f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 527.638245][T28348] RAX: ffffffffffffffda RBX: 00007f75e2e15fa0 RCX: 00007f75e2bbf749 [ 527.638280][T28348] RDX: 0000000000000010 RSI: 0000200000000080 RDI: 0000000000000003 [ 527.638293][T28348] RBP: 00007f75e161f090 R08: 0000000000000000 R09: 0000000000000000 [ 527.638303][T28348] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 527.638357][T28348] R13: 00007f75e2e16038 R14: 00007f75e2e15fa0 R15: 00007ffe45d6d178 [ 527.638444][T28348] [ 528.074007][T28367] xt_hashlimit: max too large, truncated to 1048576 [ 528.617621][T28366] lo speed is unknown, defaulting to 1000 [ 528.706572][T28377] loop5: detected capacity change from 0 to 1024 [ 528.767824][T28377] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 528.778821][T28377] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (14919!=20869) [ 528.788951][T28377] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 528.832510][T28377] EXT4-fs (loop5): invalid journal inode [ 528.864984][T28377] EXT4-fs (loop5): can't get journal size [ 528.885133][T28377] EXT4-fs error (device loop5): ext4_protect_reserved_inode:182: inode #3: comm syz.5.8586: blocks 2-2 from inode overlap system zone [ 528.948091][T28377] EXT4-fs (loop5): failed to initialize system zone (-117) [ 528.958898][T28377] EXT4-fs (loop5): mount failed [ 529.033331][T28387] loop6: detected capacity change from 0 to 512 [ 529.069428][T28387] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 529.119121][T28387] EXT4-fs (loop6): 1 truncate cleaned up [ 529.125214][T28387] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 529.229919][T20281] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 529.296334][T28385] lo speed is unknown, defaulting to 1000 [ 529.440450][T28408] infiniband syz!: set active [ 529.445225][T28408] infiniband syz!: added team_slave_0 [ 529.451689][T28408] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 529.452595][T28408] infiniband syz!: Couldn't open port 1 [ 529.475438][ T4630] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 529.506040][T28428] xt_hashlimit: max too large, truncated to 1048576 [ 529.519321][T28408] RDS/IB: syz!: added [ 529.523432][T28408] smc: adding ib device syz! with port count 1 [ 529.537269][T28408] smc: ib device syz! port 1 has no pnetid [ 529.567344][ T4630] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 529.642166][ T4630] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 529.702386][ T4630] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 529.825821][T28385] chnl_net:caif_netlink_parms(): no params data found [ 529.838526][ T4630] bridge_slave_1: left allmulticast mode [ 529.844323][ T4630] bridge_slave_1: left promiscuous mode [ 529.850015][ T4630] bridge0: port 2(bridge_slave_1) entered disabled state [ 529.864350][ T4630] bridge_slave_0: left allmulticast mode [ 529.864884][T28432] loop6: detected capacity change from 0 to 1024 [ 529.870094][ T4630] bridge_slave_0: left promiscuous mode [ 529.882006][ T4630] bridge0: port 1(bridge_slave_0) entered disabled state [ 529.891499][T28432] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 529.926993][T20281] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 529.990497][T28438] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 530.170843][ T4630] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 530.180819][ T4630] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 530.193454][ T4630] bond0 (unregistering): Released all slaves [ 530.202854][T28442] loop7: detected capacity change from 0 to 512 [ 530.224203][T28442] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 530.247715][T28442] EXT4-fs (loop7): 1 truncate cleaned up [ 530.261205][T28442] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 530.297663][ T4630] tipc: Disabling bearer [ 530.302984][ T4630] tipc: Left network mode [ 530.317545][T28385] bridge0: port 1(bridge_slave_0) entered blocking state [ 530.324713][T28385] bridge0: port 1(bridge_slave_0) entered disabled state [ 530.379878][T28385] bridge_slave_0: entered allmulticast mode [ 530.406903][T25342] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 530.417223][T28385] bridge_slave_0: entered promiscuous mode [ 530.449142][T28385] bridge0: port 2(bridge_slave_1) entered blocking state [ 530.456327][T28385] bridge0: port 2(bridge_slave_1) entered disabled state [ 530.489286][T28385] bridge_slave_1: entered allmulticast mode [ 530.499465][T28385] bridge_slave_1: entered promiscuous mode [ 530.577380][ T4630] hsr_slave_0: left promiscuous mode [ 530.588769][ T4630] hsr_slave_1: left promiscuous mode [ 530.604580][ T4630] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 530.612112][ T4630] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 530.617995][T28468] __nla_validate_parse: 22 callbacks suppressed [ 530.618008][T28468] netlink: 28 bytes leftover after parsing attributes in process `syz.5.8615'. [ 530.657080][ T4630] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 530.664495][ T4630] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 530.681778][ T4630] veth1_macvtap: left promiscuous mode [ 530.690126][ T4630] veth0_macvtap: left promiscuous mode [ 530.697762][ T4630] veth1_vlan: left promiscuous mode [ 530.703557][ T4630] veth0_vlan: left promiscuous mode [ 530.807015][ T29] kauditd_printk_skb: 1217 callbacks suppressed [ 530.807032][ T29] audit: type=1326 audit(789.780:116771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28473 comm="syz.0.8618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb2316f749 code=0x7ffc0000 [ 530.836476][ T29] audit: type=1326 audit(789.780:116772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28473 comm="syz.0.8618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb2316f749 code=0x7ffc0000 [ 530.862312][ T29] audit: type=1326 audit(789.780:116773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28473 comm="syz.0.8618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ffb2316df90 code=0x7ffc0000 [ 530.885372][ T29] audit: type=1326 audit(789.780:116774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28473 comm="syz.0.8618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ffb2316df90 code=0x7ffc0000 [ 530.908491][ T29] audit: type=1326 audit(789.780:116775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28473 comm="syz.0.8618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb2316f749 code=0x7ffc0000 [ 530.931570][ T29] audit: type=1326 audit(789.780:116776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28473 comm="syz.0.8618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=267 compat=0 ip=0x7ffb2316f749 code=0x7ffc0000 [ 530.954588][ T29] audit: type=1326 audit(789.780:116777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28473 comm="syz.0.8618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb2316f749 code=0x7ffc0000 [ 530.977719][ T29] audit: type=1326 audit(789.780:116778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28473 comm="syz.0.8618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffb2316f749 code=0x7ffc0000 [ 531.000757][ T29] audit: type=1400 audit(789.780:116779): avc: denied { prog_load } for pid=28473 comm="syz.0.8618" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 531.019505][ T29] audit: type=1400 audit(789.780:116780): avc: denied { bpf } for pid=28473 comm="syz.0.8618" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 531.019589][T28482] ================================================================== [ 531.047697][T28482] BUG: KCSAN: data-race in _prb_read_valid / prb_reserve [ 531.054717][T28482] [ 531.057021][T28482] write to 0xffffffff868feb38 of 88 bytes by task 29 on cpu 1: [ 531.064544][T28482] prb_reserve+0x695/0xaf0 [ 531.068951][T28482] vprintk_store+0x56d/0x860 [ 531.073527][T28482] vprintk_emit+0x10d/0x580 [ 531.078012][T28482] vprintk_default+0x26/0x30 [ 531.082584][T28482] vprintk+0x1d/0x30 [ 531.086467][T28482] _printk+0x79/0xa0 [ 531.090350][T28482] kauditd_hold_skb+0x1b1/0x1c0 [ 531.095185][T28482] kauditd_send_queue+0x273/0x2c0 [ 531.100192][T28482] kauditd_thread+0x421/0x630 [ 531.104850][T28482] kthread+0x489/0x510 [ 531.108911][T28482] ret_from_fork+0x122/0x1b0 [ 531.113484][T28482] ret_from_fork_asm+0x1a/0x30 [ 531.118230][T28482] [ 531.120533][T28482] read to 0xffffffff868feb38 of 8 bytes by task 28482 on cpu 0: [ 531.128140][T28482] _prb_read_valid+0x1c4/0x920 [ 531.132882][T28482] prb_read_valid+0x3c/0x60 [ 531.137365][T28482] console_unlock+0x164/0x2e0 [ 531.142025][T28482] con_install+0x26b/0x2a0 [ 531.146864][T28482] tty_init_dev+0x7c/0x330 [ 531.151260][T28482] tty_open+0x6c7/0xaf0 [ 531.155400][T28482] chrdev_open+0x2eb/0x3a0 [ 531.159803][T28482] do_dentry_open+0x649/0xa20 [ 531.164457][T28482] vfs_open+0x37/0x1e0 [ 531.168504][T28482] path_openat+0x1c5e/0x2170 [ 531.173079][T28482] do_filp_open+0x109/0x230 [ 531.177562][T28482] do_sys_openat2+0xa6/0x110 [ 531.182135][T28482] __x64_sys_openat+0xf2/0x120 [ 531.186878][T28482] x64_sys_call+0x2eab/0x3000 [ 531.191536][T28482] do_syscall_64+0xd2/0x200 [ 531.196022][T28482] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 531.201899][T28482] [ 531.204200][T28482] value changed: 0x00000000000032a3 -> 0x00000000000052a3 [ 531.211282][T28482] [ 531.213582][T28482] Reported by Kernel Concurrency Sanitizer on: [ 531.219711][T28482] CPU: 0 UID: 0 PID: 28482 Comm: syz.5.8621 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 531.231065][T28482] Tainted: [W]=WARN [ 531.234848][T28482] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 531.244889][T28482] ================================================================== [ 531.270888][ T4630] team0 (unregistering): Port device team_slave_1 removed [ 531.281501][ T4630] team0 (unregistering): Port device team_slave_0 removed [ 531.310002][T28385] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 531.322487][T28385] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 531.340337][T28385] team0: Port device team_slave_0 added [ 531.346562][T28385] team0: Port device team_slave_1 added [ 531.362574][T28385] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 531.369539][T28385] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 531.395481][T28385] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 531.406627][T28385] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 531.413579][T28385] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 531.439484][T28385] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 531.462595][T28385] hsr_slave_0: entered promiscuous mode [ 531.468446][T28385] hsr_slave_1: entered promiscuous mode [ 531.474521][T28385] debugfs: 'hsr0' already exists in 'hsr' [ 531.480271][T28385] Cannot create hsr debugfs directory [ 531.842592][T28385] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 531.851071][T28385] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 531.859555][T28385] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 531.867797][T28385] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 531.896853][T28385] 8021q: adding VLAN 0 to HW filter on device bond0 [ 531.907953][T28385] 8021q: adding VLAN 0 to HW filter on device team0 [ 531.916930][ T4630] bridge0: port 1(bridge_slave_0) entered blocking state [ 531.923984][ T4630] bridge0: port 1(bridge_slave_0) entered forwarding state [ 531.934464][ T4588] bridge0: port 2(bridge_slave_1) entered blocking state [ 531.941521][ T4588] bridge0: port 2(bridge_slave_1) entered forwarding state [ 532.014934][T28385] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 532.102287][T28385] veth0_vlan: entered promiscuous mode [ 532.110234][T28385] veth1_vlan: entered promiscuous mode [ 532.124827][T28385] veth0_macvtap: entered promiscuous mode [ 532.132064][T28385] veth1_macvtap: entered promiscuous mode [ 532.142551][T28385] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 532.152677][T28385] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 532.163111][ T4631] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 532.173682][ T4631] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 532.184013][ T4630] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 532.192963][ T4630] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0