last executing test programs: 1m10.653781248s ago: executing program 32 (id=5164): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) process_vm_writev(0x0, &(0x7f0000000500)=[{0x0}, {0xffffffffffffffff}, {0xfffffffffffffffc}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0, 0x0, 0x0) 1m3.27301094s ago: executing program 33 (id=5305): bpf$MAP_CREATE(0x0, &(0x7f0000000cc0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r0}, 0x10) syz_open_dev$sg(&(0x7f0000000080), 0x0, 0xe1002) waitid(0x0, 0x0, 0x0, 0x4, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000040)={0x1}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000100"/28], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00'}, 0x10) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) 58.9976447s ago: executing program 34 (id=5342): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000080)='sched_switch\x00'}, 0x18) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000240)={[{@grpquota}, {@auto_da_alloc}, {@minixdf}]}, 0x1, 0x50c, &(0x7f0000000ac0)="$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") r1 = open(&(0x7f0000000080)='./file1\x00', 0x64842, 0x86) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x140000}], 0x1, 0x7800, 0x0, 0x3) 57.444896942s ago: executing program 35 (id=5361): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r1}, 0x9) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x401, 0x0) 48.307296278s ago: executing program 36 (id=5488): nanosleep(&(0x7f00000001c0)={0x0, 0x989680}, &(0x7f00000002c0)) 47.774234376s ago: executing program 37 (id=5499): openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x8042, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_io_uring_setup(0x239, 0x0, 0x0, &(0x7f00000001c0)) io_uring_enter(r1, 0x2ded, 0x4000, 0x0, 0x0, 0x0) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) close(0xffffffffffffffff) socket(0x2b, 0x1, 0x1) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 41.559045022s ago: executing program 38 (id=5621): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000440)='1', 0x1}], 0x1, 0x0, 0x0, 0x4004c}}], 0x1, 0x4) mknodat$null(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x40, 0x103) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) open_tree(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x800) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r3, 0x0, 0x39000, 0x0) 40.29710816s ago: executing program 39 (id=5647): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000), 0xc) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x6}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a00000001010000ff7f0000cc00cd2f81450000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000400"/28], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0x7}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000080000000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x286ca06bbee933dc, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r3}, 0x18) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="3000000010000108000000010000000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b0000000000a40867043ef554766babe947d2d38f841ea28152c812939cc5541d9791d319c4a6ef562b59fa072cbba317e464ff55fcb3cb0803422fca271aa7c138397fc61818e3ad971c5599eab478d76f0bd7a2d9fdac84b5c6a72109b71dffa7f303740ca38b2b9ef4ae7a9547901a0dd80c35d45271c9e999d13bc73f7800d5"], 0x30}}, 0x0) 40.130273302s ago: executing program 40 (id=5649): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000680)='kfree\x00', r0}, 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a0ef010095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000200)='kmem_cache_free\x00', r3}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000440)='./file0\x00', 0x3810, &(0x7f00000001c0)={[], [{@subj_user={'subj_user', 0x3d, 'numa_mgps\x00'}}]}, 0x2, 0x3d2, &(0x7f0000000980)="$eJzs3M1uG0UcAPD/bhKHpB82EgdUOFgCQRAQ14EARUgUrnxcgAewkrRUuE3VGImWHArixIkD4sahL8CBB6gqhITEK/ACqFKF0hzgFrT2ruMmcRordqymv5802pndcWb/3s1qZr07ATy2qhFxPiImImIhIsr5+jRPcbOTsnr3N9aXNjfWl5LY2vrknySSfF3xt5J8eSIvzKUR6XcRz9zc3e7a9RtfNJrNlWt5uda6fLW2dv3Gq5cuNy6uXFy5Un/zXL2+uPBW/fWhxfrT8y+dm3j//Jmf/yrfWSyVZrL9PZlv641jWKpR7X4nOy0Ou7ExK417BwAAOJA07/tPtvv/5Zho5zrKUVsf684BAAAAQ7H1br4EAAAAjrHE2B8AAACOueI5gPsb60tFGuPjCEfu3nsRUdl+t3mzG/9kPJHXmRrh+63ViLj6QlLOUozoPWQAgF53sv7P2b36f2k83VNvOqLdH5oZcvvVHeXd/Z/07pCbfEDW/3snIjZ39f/SokplIi+dancVp5ILl5orZyPidETMxdR0Vq7v08YH//7ycb9tWfy/J6dOFylrP1tu10jvTk4/+JnlRqtxmJh73fsm4szkXvEn3f5vEhGzh2hj4utbb/fb9vD4R2vrVsSLex7/7Zl7kv3nJ6q1z4dacVbslMR/3/76Ub/2xx1/dvxn94+/kvTO17Q2eBu3P//z2X7besc/g5z/peTTdr4Yl33VaLWu1SNKyYe71y9sf7YoF/Wz+Oee2/v/v7j+JfmcVifza8Cgvv/ht1cOEn+WsvaLseBRyOJfHuj4D5554/Yfn/Vr/+HxZ8e/MwfYXL7mINe/g+7gYb47AAAAeFSk7fsaSTrfzafp/HznfsdTMZs2V9daL19Y/fLKcuf+RyWm0uJOV7nnfmi98zN6t7ywo/xaRDwZET+WZ9rl+aXV5vK4gwcAAIDHxIk+4//M30f2FAIAAAAwcpVx7wAAAAAwcsb/AAAAcKwdZl4/GRmZ45oZ95UJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg0fZ/AAAA//8Nt7Zr") sendmmsg$unix(r2, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000440)='1', 0x1}], 0x1, &(0x7f00000000c0)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18, 0x4004c}}], 0x1, 0x4) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$loop(0x0, 0xf01c, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000002640)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_DELCHAIN={0xffffffffffffff23, 0x5, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_USERDATA={0x0, 0xc, "901086f80a6678ea9389eaa0f7515b0163"}, @NFTA_CHAIN_TABLE={0x0, 0x1, 'syz0\x00'}, @NFTA_CHAIN_POLICY={0x0, 0x5, 0x1, 0x0, 0xfffffffffffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x48}, 0x1, 0x0, 0x0, 0x4008080}, 0x40000) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r6, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="7c000000030601010000000000000000070000020900020073797a310000000005000100070000000500010007000000050001000700000900020073797a30000000000900020073797a300000000005000100070000000900020073797a32000000000900020073797a31000082b959bb6592d7ce14d8f100000900"], 0x7c}, 0x1, 0x0, 0x0, 0x4000001}, 0x60000881) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000900)=[{0x200000000006, 0x0, 0x0, 0x7ffc17fb}]}) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b708000000000e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000020850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x10) splice(r1, 0x0, r4, 0x0, 0x39000, 0x0) 39.709810128s ago: executing program 41 (id=5659): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000202300800000000000000000850000"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) syz_emit_ethernet(0x66, &(0x7f0000000780)={@broadcast, @random="6487a2bed3d6", @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x6c, 0x0, @private}}}}}, 0x0) 33.83191067s ago: executing program 9 (id=5709): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000080000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x100000004}, 0x18) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000840)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f0000000bc0)="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", 0x12d, r2) 33.83145924s ago: executing program 9 (id=5710): socket$isdn_base(0x22, 0x3, 0x0) syz_io_uring_setup(0x5169, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000000)) syz_io_uring_setup(0xa94, &(0x7f0000000280), &(0x7f0000000040), &(0x7f00000005c0)) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000100)={0x2, &(0x7f0000000040)=[{0x40, 0x5d, 0x2, 0x190b87f9}, {0x6, 0x0, 0x6, 0x1}]}, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x2, @perf_bp={0x0, 0xa}, 0x1000, 0x5dd8, 0x0, 0x5, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x52, &(0x7f0000000080)={0x0, 0x8b48, 0x2, 0x0, 0x3d8}, &(0x7f0000ff0000), 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000140)="24000000010006", 0x7) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000002280)=@generic={0x0, r2}, 0x18) 33.745285031s ago: executing program 9 (id=5712): bpf$PROG_LOAD(0x5, 0x0, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x80000000) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="d609000000000000000000000000000018090000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001700)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) stat(0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="120000000b0000000800000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r2}, &(0x7f0000000180), &(0x7f0000000100)=r1}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000000c0)={r2, 0x0, &(0x7f0000000200)=""/66}, 0x20) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000240)='io_uring_file_get\x00', r3}, 0x18) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) openat$rfkill(0xffffffffffffff9c, &(0x7f0000002840), 0x28000, 0x0) renameat2(0xffffffffffffffff, &(0x7f0000002880)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffffff, &(0x7f00000038c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x3) 33.722675011s ago: executing program 9 (id=5713): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 33.628250443s ago: executing program 9 (id=5714): bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000800)='./file0\x00', 0x2204846, &(0x7f0000000080)=ANY=[@ANYRES64, @ANYRES16, @ANYRES16, @ANYRESHEX], 0xfa, 0x6c1, &(0x7f0000000840)="$eJzs3c9rG+kdx/HPyL8U7xJCW0II+fEk6YJDU0WSNw4mhc10NLKnlTRiRi42FJZ0Yy8hcrZNttD4svWltLCFnnvbSw+99R8o7HnvvRZ6a2Fpb4X2oGV+yVKkkaKNnU123y+TaDTPd+b5zoysr8fWPCMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACDLqZXLFUsNr7W1bfI5tcBvTmjPVnc9ebw+tV/Jiv6pWNS5ZNa57xw1n43+u6oLybMLKkYPRR28cfbMnW/PF7Lljf6eREzIbAYzr+fJ04OH97rd3cfPETt3bGm+FCrkt/1tId3rG27LC32vaW+4xgt9s762Vr65WQ9N3Wu44U7YcZvGCdxCxw/MinPdVNbXV41b2vG3Whs1u+FmM29/v1our5kfLSUHWlIpdDa9RsNrbcQxUXMUc9t8/NMkwLWbxuw96O6uTtuSKKiS11gYCKqODzml7DVWLVerlUq1Wlm7tX7rdrk8PzKjHLHKfRqJsF6nFwG+NJ3JbQFeFYWo/v/DkhoqqqUtbcuM/XJUUyBfzZz2VFb/37rpTux3sP5nVf6c9E7afF5x/b+UPLuUV/9zcjEy8QLjWqyc+bN9LcQZGT3RUx3ooe6pq6529fgY1m1kLiePxeNZ2wl+bchVS55C+fLUlB3PMekco3WtaU1lvatN1RXKqC5PDbkKtaNQHbnxK8pRIFe2OvIVyGhFjq7LqKJ1rWtVRq5K2pGvLbW0oZps/bfX6+3pQbzfVyfkqCyokhOwNBhUnbCmvPr/s4+S12la/8vU/2+q5HWwlDx8NikGeAX00vP/GV0+mWwAAAAAAMBJsOLfvkfn/wu6KKmnutdwy/kLLL7M7AAAAAAAwHGw1FvSBVnR+b+ki7KmnP8DAAAAAIDXjhVfY2dJWo4/1G8dXQn1PL8EmHsJKQIAAAAAgBcUX/l/aVHqxYNWXJY10/k/AAAAAAB4Dfx2YIz9+WyM3V72Z/2CpLC9ZP3130sKFqzD9vZ3rX07arH35wpxyMgnADr181b4h2Sg3ni83kVJ8TPHvWClvaWDYPbHHfx8b9pY/1ZwlMB8v7NxAxdGCZxOl7aintfm02f6WFfeGYq9f1BQ3JL0slz3Gm7J8Rt3KrLt04WOu9355aMHv5KC/nbuPejult77oHs/zuUwmnW4H+XxUZbOXxbTXTecS/zQz+X/vYR0cewWn1I96/J3reayFfdbzg7AnOz9wtExyt3+4T71G11NjtnV5SR2+aA/4n60/cVo+yul+JANbX2wYB1lUXl2y8cdiJwsinEW15KYayvXkocsv2g9Bav4vTmpWho9BkNZVAezmL4vrP+M7ItJWaT7YjXK4tNoRTlZrM6WxcgRAYCvyl486k985V88iPlI3c3KQ/am9qXqTm51l3Q3ru53h3+8+PCPUWVMfryYT/82MbGXoqJ39BUrrkOLit9Y58+PvKNnW2OfLirnHb38AtUt6uvP/XsgZOOAj2Txv16vd6cS9/v7Z6rqJ9ECn+T2GzaS3X7zw/2fxwPgR97ffX/3UbW6ulZ+u1y+VdVCvBl6M36YE7UHADBi+j12pkZYb+tKEnHl/r/eSqaGKt63+h8pKOk9faCu7mshu4XA5fFrXR74GMKN5KxVA2et5uyZO/F92YZjK7qRe1YX19KB2Go/Nr2b3cgZ4FHsahrB4IcAgK+Hq1Pq8Pj6Xxyq/ze0kkSsnB973j1cy9Oz4/4pfV5sZXryd497bwAA8M3gBp9b2d+Z362sr1fszqZrAt/5sQm82oZrvFbHDZxNu7Xhmnbgd3zHb5h2oCWv5oYm3Gq3/aBj6n5g2n7obcd3fjfprd9Dt2m3Op4TthuuHbrG8Vsd2+mYmhc6pr31w4YXbrpBvHDYdh2v7jl2x/NbJvS3AsctGRO67kCgV3NbHa/uRZMt0w68ph3smJ/4ja2ma2pu6AReu+MnK8z68lp1P2jGqy2pN/ONDgEA+Dp68vTg4b1ud/fxsxOnolPzZM6hcmJGJxbHrJAxggAAeMUclesZFir2pz7tnUhWAAAAAAAAAAAAAAAAAAAAAABg0PRL+maYyIaUHWmS+nN+cTqdo1/r6BLDkRVaOs7E8ieWxzYVZl1PdknEwcPPJgSf6s/Jdv9gzOHJbunAxD/flN6I5yg9cOOCi3mLq2hN7+vUhIP7nBNz0Q563uAf7CV7NDcmahzbtNQ/FvPH++2QTTz6UzqRHfWsqdfr9SYvvjS8DxcnbeDwRPS9+HjxBQ7BS3sLAvAV+SIAAP//kY4yJw==") r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r4, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) fcntl$setsig(r5, 0xa, 0x12) r6 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) (fail_nth: 1) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) 33.415642046s ago: executing program 9 (id=5717): setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x30, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100002c34c027000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xa, 0x101, 0x7ffc, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) 33.217000049s ago: executing program 42 (id=5717): setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x30, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100002c34c027000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xa, 0x101, 0x7ffc, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) 31.423466053s ago: executing program 0 (id=5749): r0 = socket$inet(0x10, 0x3, 0x0) r1 = socket(0x5, 0xa, 0x2) prctl$PR_MCE_KILL(0x35, 0x1, 0x8) prctl$PR_MCE_KILL(0x35, 0x1, 0x2) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000000000f6000000006debff00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r2}, 0x10) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r3, 0x0, 0x1, &(0x7f0000000000)=0x6, 0x4) sync() r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_UPDELAY={0x8, 0x4, 0x80000000}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000400)={0x6, &(0x7f0000000380)=[{0x1, 0x3, 0x8, 0x8000}, {0x0, 0x2, 0xa}, {0x7fff, 0x84, 0xd, 0x3}, {0x3, 0x1, 0x81, 0xfffffffd}, {0xb, 0x6c, 0x2, 0x7f}, {0x76, 0x2, 0x7}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r1, @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3ff, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='kfree\x00', r6}, 0x30) r7 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r7, &(0x7f0000001040)=[{{&(0x7f00000003c0)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f0000000700)=[@ip_retopts={{0x10}}], 0x10}}], 0x1, 0x800) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00'}) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', r8}, 0x18) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@typedef={0x2}]}, {0x0, [0x0, 0x61]}}, 0x0, 0x28, 0x0, 0x0, 0x2, 0x0, @void, @value}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0xd, 0x9, &(0x7f0000000580)=@raw=[@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xd}}], &(0x7f0000000040)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x66, '\x00', 0x0, 0xb, r9, 0x8, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x4, &(0x7f00000000c0)=[{0x3, 0x87, 0x8, 0x24}, {0x1bb, 0x1, 0x9, 0x9}, {0x2, 0x2, 0x1, 0x6fca}, {0x0, 0x1, 0x7, 0x9d86}]}) r11 = socket$netlink(0x10, 0x3, 0x1) sendmsg$nl_route_sched(r11, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0xf0b, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x12, r10, {}, {0xffff, 0xffff}, {0x2}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}]}, 0x2c}}, 0x0) socket$netlink(0x10, 0x3, 0x0) 30.112314171s ago: executing program 0 (id=5756): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0x1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) bpf$BPF_MAP_FREEZE(0x16, &(0x7f00000000c0)=r0, 0x4) r1 = syz_clone(0x8080, &(0x7f0000000100)="8d0a75b369e165c7c343bcaa687f5639709c8ddea2c46b1d13e67d55635a0bb5597f", 0x22, &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)="6835de781bfd9b6e7581c8eef6fc7f9362e6cde3ac73a56314b3a6adf6a5a2dde70000d3fde8b26aa4cab6df117223cd8bf391dc00782d869c2d848f7cc7fa14aeff3f4691501c5dbafe4621281e631abbf7ddd019319c1a6c7c0d9512561faf99bc55937f4a8e40c3f220e770282e2cbcee26e8f9d65d630a21014604bfee44b3ab674a") ioprio_set$pid(0x2, r1, 0x6000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmmsg(r2, &(0x7f0000004ac0)=[{{&(0x7f0000000280)=@alg, 0x80, &(0x7f0000000400)=[{&(0x7f0000000300)=""/204, 0xcc}], 0x1, &(0x7f0000000440)=""/131, 0x83}, 0xf22b}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000500)=""/90, 0x5a}, {&(0x7f0000000580)=""/110, 0x6e}, {&(0x7f0000000600)=""/233, 0xe9}], 0x3, &(0x7f0000000740)=""/4096, 0x1000}, 0x6ec}, {{&(0x7f0000001740)=@ethernet={0x0, @random}, 0x80, &(0x7f00000018c0)=[{&(0x7f00000017c0)=""/18, 0x12}, {&(0x7f0000001800)=""/182, 0xb6}], 0x2, &(0x7f0000001900)=""/201, 0xc9}, 0x96}, {{&(0x7f0000001a00)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x80, &(0x7f0000001c00)=[{&(0x7f0000001a80)=""/45, 0x2d}, {&(0x7f0000001ac0)=""/205, 0xcd}, {&(0x7f0000001bc0)=""/29, 0x1d}], 0x3}, 0x9}, {{0x0, 0x0, &(0x7f0000001f40)=[{&(0x7f0000001c40)=""/253, 0xfd}, {&(0x7f0000001d40)=""/31, 0x1f}, {&(0x7f0000001d80)=""/140, 0x8c}, {&(0x7f0000001e40)=""/243, 0xf3}], 0x4, &(0x7f0000001f80)=""/169, 0xa9}, 0x80000000}, {{&(0x7f0000002040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000003400)=[{&(0x7f00000020c0)=""/198, 0xc6}, {&(0x7f00000021c0)=""/171, 0xab}, {&(0x7f0000002280)=""/190, 0xbe}, {&(0x7f0000002340)=""/4096, 0x1000}, {&(0x7f0000003340)=""/7, 0x7}, {&(0x7f0000003380)=""/83, 0x53}], 0x6, &(0x7f0000003480)=""/154, 0x9a}, 0x4}, {{&(0x7f0000003540)=@xdp={0x2c, 0x0, 0x0}, 0x80, &(0x7f00000038c0)=[{&(0x7f00000035c0)=""/37, 0x25}, {&(0x7f0000003600)=""/51, 0x33}, {&(0x7f0000003640)=""/21, 0x15}, {&(0x7f0000003680)=""/186, 0xba}, {&(0x7f0000003740)=""/114, 0x72}, {&(0x7f00000037c0)=""/111, 0x6f}, {&(0x7f0000003840)=""/2, 0x2}, {&(0x7f0000003880)=""/3, 0x3}], 0x8, &(0x7f0000003940)=""/73, 0x49}, 0xb5f}, {{0x0, 0x0, &(0x7f0000004a80)=[{&(0x7f00000039c0)=""/103, 0x67}, {&(0x7f0000003a40)=""/4096, 0x1000}, {&(0x7f0000004a40)=""/17, 0x11}], 0x3}, 0x5}], 0x8, 0x100, &(0x7f0000004cc0)) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = openat$vsock(0xffffffffffffff9c, &(0x7f0000004d00), 0x2, 0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r6, 0xa, 0x0, r7) close(r5) symlink(&(0x7f0000004d40)='./file0\x00', &(0x7f0000004d80)='./file0\x00') eventfd2(0x400, 0x2) bind$inet(0xffffffffffffffff, &(0x7f0000004dc0)={0x2, 0x4e21, @multicast1}, 0x10) sync_file_range(r0, 0xbc, 0x1, 0x6) ioctl$sock_qrtr_SIOCGIFADDR(r3, 0x8915, &(0x7f0000004e00)={'pim6reg\x00'}) r8 = openat$selinux_create(0xffffffffffffff9c, &(0x7f0000004e40), 0x2, 0x0) write$selinux_create(r8, &(0x7f0000004e80)=@access={'system_u:object_r:tmpreaper_exec_t:s0', 0x20, 'system_u:system_r:kernel_t:s0'}, 0x59) connect$phonet_pipe(r6, &(0x7f0000004f00)={0x23, 0xf, 0x1, 0xf}, 0x10) chdir(&(0x7f0000004f40)='./file0\x00') io_setup(0x5, &(0x7f0000004f80)) prlimit64(r1, 0xe, &(0x7f0000004fc0)={0x10, 0xd}, &(0x7f0000005000)) ioctl$BTRFS_IOC_QUOTA_CTL(r2, 0xc0109428, &(0x7f0000005040)={0x1, 0x2}) ioctl$IOC_PR_RESERVE(r6, 0x401070c9, &(0x7f0000005080)={0x10, 0x0, 0x1}) mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x4000, 0x2, &(0x7f0000ffa000/0x4000)=nil) sendmsg$rds(r3, &(0x7f0000005300)={0x0, 0x0, &(0x7f0000005100)=[{&(0x7f00000050c0)=""/24, 0x18}], 0x1, &(0x7f0000005240)=[@mask_cswp={0x58, 0x114, 0x9, {{0x9, 0x5}, &(0x7f0000005140), &(0x7f0000005180)=0x8, 0x0, 0x6, 0x52d605d3, 0x8687, 0x4762692a0ce43a2, 0x80}}, @mask_fadd={0x58, 0x114, 0x8, {{0x7fffffff, 0x96}, &(0x7f00000051c0)=0x7f, &(0x7f0000005200)=0x16, 0x1, 0x1, 0x9, 0x4, 0x10, 0x4}}], 0xb0, 0x4c049}, 0x20004000) bpf$MAP_CREATE(0x0, &(0x7f0000005340)=@bloom_filter={0x1e, 0x6, 0xfffffff9, 0x8, 0x8010, 0xffffffffffffffff, 0x7, '\x00', r4, r6, 0x5, 0x5, 0x0, 0x6, @value=r6, @void, @void, @value}, 0x50) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_opts(r6, 0x0, 0x9, &(0x7f00000053c0), 0x0) socket$nl_route(0x10, 0x3, 0x0) 29.5478015s ago: executing program 0 (id=5766): r0 = openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f0000000300)) r1 = socket$inet(0x2, 0x4, 0x2000000) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000e00)={0x11, 0xb, &(0x7f00000005c0)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r2}, 0x10) r3 = socket(0x10, 0x803, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000008c0)=@newtfilter={0x98, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0xf}, {0x0, 0xfff8}, {0x4, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x6c, 0x2, [@TCA_U32_POLICE={0x68, 0x6, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x3}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x400}, @TCA_POLICE_TBF={0x3c, 0x1, {0x7f, 0x8, 0xd, 0xd, 0x8, {0x24, 0x1, 0x3ff, 0x5, 0x1ff, 0x4}, {0x2, 0x2, 0x7, 0x2, 0x1, 0xacd}, 0x1, 0x23, 0xb2e}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x82}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x8}]}]}}]}, 0x98}}, 0x24040084) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x7, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESHEX=r7, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f00000004c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000002c0)='afs_make_fs_calli\x00', r8}, 0x18) timerfd_create(0x0, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0xa) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x7, 0x3, 0x1, 0xe2}]}, 0x10) mlock(&(0x7f0000186000/0x4000)=nil, 0x4000) mremap(&(0x7f00006bd000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000721000/0x4000)=nil) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r9, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x400000, @void, @value}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r10}, 0x10) setxattr$security_selinux(&(0x7f0000000000)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000080), &(0x7f0000000040)='system_u:object_r:etc_aliases_t:s0\x00', 0x23, 0x2) syz_io_uring_setup(0x2fcf, &(0x7f0000000340)={0x0, 0x83a8, 0x8000, 0x3, 0x8005, 0x0, r0}, &(0x7f00000003c0), &(0x7f0000000240)) socket(0xa, 0x2, 0x0) 28.78713017s ago: executing program 0 (id=5775): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x101091, 0x0) umount2(&(0x7f0000000480)='./file0\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000001e00010000000000000000000a000000", @ANYRES32=0x0, @ANYBLOB="08bf054df4703b6c7834aff8d65681950008000800", @ANYRES32=0x0, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000040) 28.640232042s ago: executing program 0 (id=5778): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$netlink(0x10, 0x3, 0x9) socket$netlink(0x10, 0x3, 0x5) sendmsg$NFT_BATCH(r2, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000540)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400000070000100000000000000000007000000", @ANYRES32=r3, @ANYBLOB="0c0002"], 0x24}}, 0x0) 28.433992355s ago: executing program 0 (id=5781): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, 0x0, 0x1800) 28.421661505s ago: executing program 43 (id=5781): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, 0x0, 0x1800) 22.057177523s ago: executing program 4 (id=5870): r0 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x68, 0x0, 0x0, 0x0, 0x0, 0x8, 0x8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}, 0x2804, 0x0, 0x0, 0x0, 0x400, 0x10001, 0x1, 0x0, 0x0, 0x0, 0x1c0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) socketpair$nbd(0x1, 0x1, 0x0, 0x0) bind$packet(r2, &(0x7f0000000300)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) (fail_nth: 3) 21.715929878s ago: executing program 4 (id=5875): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f000000000000000002000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x4005}, 0x0) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x8040, 0x0) syz_open_pts(r2, 0x141601) gettid() bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000060000008500000097100000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @void, @value}, 0x94) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000001280)="$eJzs3E+LHEUYB+B315iNG/ePGqMJiIVe9NJk9+BFL4tsQDKgJFkhEYSO26vDtDPD9LAwIkZPXv0cIojgTRBvetmL30DwthePEcSWndEko5PDSEiH5Xku80LVb6jqphuq6erD1774sLNXZXv5MBYXFmKxH5FupUixGP/4NF5+9cefnrty7fqlrVZr+3JKF7eubrySUlp9/vt3Pv7qhR+Gp9/+dvW7pThYf/fwt81fD84enDv88+oH7Sq1q9TtDVOebvR6w/xGWaTddtXJUnqrLPKqSO1uVQym2vfKXr8/Snl3d2W5PyiqKuXdUeoUozTspeFglPL383Y3ZVmWVpaD+Z24Xe18eauu64i6fjRORl3X9WOxHKfj8ViJ1ViL9Xginoyn4kw8HWfjmXg2vvnl69FRAgAAAAAAAAAAAAAAAAAAALh/5t3/f27cq+lRAwAAAAAAAAAAAAAAAAAAwPFy5dr1S1ut1vbllE5FlJ/v7+zvTH4n7Vt70Y4yirgQa/FHjHf/T0zqi2+0ti+ksfX4rLz5d/7m/s4j0/mN8ecEZuY3Jvk0nV+K5bvzm7EWZ2bnN2fmT8VLL96Vz2Itfn4velHGbhxl7+Q/2Ujp9Tdb/8qfH/cDAACA4yBLt81cv2fZvdon+TmeD0ytr4+y5080OnUiohp91MnLshgoHvriZLPD+L2u6+YPQkPFva+UpYj43/+8EBEPxwT/UzR9Z+JBuHPSmx4JAAAAAAAAAAAA83gQrxM2PUcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD+YgeOBQAAAACE+Vun0bEBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHwVAAD//+pd0x0=") mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x1, 0x3032, 0xffffffffffffffff, 0x1000) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$VFAT_IOCTL_READDIR_BOTH(r5, 0x82307201, 0x0) syz_genetlink_get_family_id$nfc(0x0, r4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$ENABLE_STATS(0x20, &(0x7f0000000000), 0x4) write$nci(r3, &(0x7f0000000140)=ANY=[], 0x4) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000100000000000000040000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r6}, 0x10) statfs(&(0x7f0000000080)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r1, 0x80047210, &(0x7f0000000080)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x18) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSSOFTCAR(r7, 0x5453, 0x0) 21.533658241s ago: executing program 4 (id=5879): socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10, 0x0}, 0x300440f1) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1800403, &(0x7f0000000940), 0x2, 0x5ad, &(0x7f0000000180)="$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") r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x22004002, &(0x7f0000000080)={[{@jqfmt_vfsold}, {@stripe={'stripe', 0x3d, 0xffff}}, {@sysvgroups}, {@jqfmt_vfsold}, {@nouid32}, {@grpjquota, 0x2e}]}, 0x84, 0x46c, &(0x7f00000004c0)="$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") open_by_handle_at(r1, &(0x7f0000000980)=ANY=[@ANYBLOB="1c000000050000000400000001000000c4bc46ce280af90000000004"], 0x40000) preadv2(0xffffffffffffffff, &(0x7f0000000e00)=[{&(0x7f00000003c0)=""/218, 0xda}, {&(0x7f0000000840)=""/77, 0x4d}, {0x0}, {0x0}], 0x4, 0xffff, 0x9a17, 0x10) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000500), 0x8c02) r3 = dup(r2) ioperm(0x401, 0x1fd, 0x2) prctl$PR_SCHED_CORE(0x4d, 0x2, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB="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"]) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000060000000000000000008500000007000000850000000e00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000012c0)={&(0x7f0000000a00)='ext4_writepages_result\x00', r5, 0x0, 0x4}, 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) timer_create(0x0, &(0x7f0000000180)={0x0, 0x13, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)=0x0) timer_settime(r6, 0x0, &(0x7f0000000340)={{0x77359400}, {0x0, 0x989680}}, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000100000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r7}, 0x18) unshare(0x2040400) r8 = fsopen(&(0x7f0000000440)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) unshare(0x2000400) 21.331716963s ago: executing program 4 (id=5887): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x101091, 0x0) umount2(&(0x7f0000000480)='./file0\x00', 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000240)=ANY=[@ANYBLOB="e80000006c00010029bd7000fcdbdf2500000000", @ANYRES32, @ANYBLOB="001000008000000008000f002000000014003500726f7365300000000000000000000000a40034801400350070696d367265673000000020000000001400350076657468305f6d614176746170000000140035006d61637674617030020000000000000014003500677265300000000000000000000000001400350076657468305f746f5f626174616476001400350001657468315f6d6163767461700000001400350067726530000000000000000000000000140035006261746164765f736c6176655f31000008000f"], 0xe8}}, 0x0) 21.117114646s ago: executing program 4 (id=5889): r0 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc04c5349, 0x0) ftruncate(r0, 0x2007ffb) sendfile(r0, r0, 0x0, 0x1000000201005) bpf$TOKEN_CREATE(0x24, &(0x7f0000000200)={0x0, r0}, 0x8) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000027b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000e00)='kfree\x00', r2, 0x0, 0x4ab}, 0x18) pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x80a, &(0x7f00000002c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB="2c756e616d653dd0"]) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r5 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0) fstatfs(r5, &(0x7f00000000c0)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb01001800000000000000248000002400000002000000000000000000000b00000000ee7fb64b6eec000000000000090300"/67], 0x0, 0x3e, 0x0, 0xa, 0x0, 0x0, @void, @value}, 0x28) bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x3f}}}, 0x24) getresuid(&(0x7f0000000100)=0x0, &(0x7f0000000180), &(0x7f00000001c0)) ioprio_set$uid(0x0, r6, 0x4004) 20.82767491s ago: executing program 4 (id=5893): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x3c1, 0x3, 0x420, 0x0, 0x2b8, 0x25c, 0x0, 0x7, 0x350, 0x3a8, 0x3a8, 0x350, 0x3a8, 0x7fffffe, 0x0, {[{{@ipv6={@private1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'macvlan1\x00', 'dvmrp0\x00'}, 0x16c, 0x218, 0x260, 0xa010000, {}, [@common=@unspec=@quota={{0x38}}, @common=@rt={{0x138}, {0x0, [], 0x0, 0x0, 0xc, [@dev, @dev, @empty, @remote, @dev, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, @rand_addr=' \x01\x00', @private1, @remote, @loopback, @empty, @private2, @dev, @mcast1, @rand_addr=' \x01\x00']}}]}, @unspec=@CT0={0x48}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x480) (fail_nth: 1) 20.827524981s ago: executing program 44 (id=5893): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x3c1, 0x3, 0x420, 0x0, 0x2b8, 0x25c, 0x0, 0x7, 0x350, 0x3a8, 0x3a8, 0x350, 0x3a8, 0x7fffffe, 0x0, {[{{@ipv6={@private1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'macvlan1\x00', 'dvmrp0\x00'}, 0x16c, 0x218, 0x260, 0xa010000, {}, [@common=@unspec=@quota={{0x38}}, @common=@rt={{0x138}, {0x0, [], 0x0, 0x0, 0xc, [@dev, @dev, @empty, @remote, @dev, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, @rand_addr=' \x01\x00', @private1, @remote, @loopback, @empty, @private2, @dev, @mcast1, @rand_addr=' \x01\x00']}}]}, @unspec=@CT0={0x48}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x480) (fail_nth: 1) 15.956348848s ago: executing program 3 (id=5945): bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r0 = socket$caif_stream(0x25, 0x1, 0x3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x40, r3, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'bond0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}]}, 0x40}}, 0xc800) sendmsg$SMC_PNETID_DEL(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x14, r3, 0xe27, 0x0, 0x0, {0x4, 0x7, 0x2}}, 0x14}, 0x1, 0x40030000000000}, 0x0) setsockopt$sock_int(r0, 0x1, 0x3, &(0x7f0000000000)=0xfff, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r5}, 0x10) sendmmsg$inet(r0, &(0x7f00000011c0)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000300)="02ca7f095e", 0x5}], 0x1}}], 0x1, 0x4004) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 15.82034256s ago: executing program 3 (id=5948): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000007"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000004080)={{r0}, &(0x7f0000004000), &(0x7f0000004040)}, 0x20) link(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)='./file0\x00') 15.79588128s ago: executing program 3 (id=5949): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000), 0x220002, 0x0) openat(r0, &(0x7f00000000c0)='./file0\x00', 0x82080, 0x80) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000200)={'gretap0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000003c0)={'syztnl1\x00', &(0x7f0000000240)={'syztnl1\x00', 0x0, 0x10, 0x1, 0x7, 0x9, {{0x1d, 0x4, 0x3, 0x27, 0x74, 0x64, 0x0, 0x7, 0x2f, 0x0, @multicast1, @multicast1, {[@cipso={0x86, 0x29, 0x2, [{0x6, 0xe, "07cf9e985a716b46a7c37fec"}, {0x7, 0x11, "f985122c2e1d6c509cca5235d962bc"}, {0x1, 0x4, "e685"}]}, @cipso={0x86, 0xe, 0x3, [{0x6, 0x8, "027d508bcd24"}]}, @ssrr={0x89, 0x17, 0x8b, [@loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, @dev={0xac, 0x14, 0x14, 0x37}, @dev={0xac, 0x14, 0x14, 0x2b}]}, @timestamp={0x44, 0x10, 0x98, 0x0, 0x8, [0x9, 0x2, 0x8000]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000480)={'syztnl1\x00', &(0x7f0000000400)={'syztnl2\x00', 0x0, 0x2f, 0x40, 0xf9, 0x3, 0x4c, @empty, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8, 0x7800, 0x2, 0x7}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000500)={'gretap0\x00', &(0x7f00000004c0)={'syztnl1\x00', 0x0, 0x8000, 0x1, 0x1000, 0x3, {{0x6, 0x4, 0x2, 0x2c, 0x18, 0x65, 0x0, 0x2, 0x29, 0x0, @local, @local, {[@end, @noop]}}}}}) sendmsg$ETHTOOL_MSG_DEBUG_GET(r1, &(0x7f0000000fc0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000e80)={0xec, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x8080}, 0x8000) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="050000000400"], 0x48) syz_read_part_table(0x60f, &(0x7f0000000740)="$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") creat(&(0x7f0000000000)='./bus\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff010000850000000e000000850000005000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) 15.665287502s ago: executing program 3 (id=5953): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x101091, 0x0) umount2(&(0x7f0000000480)='./file0\x00', 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000240)=ANY=[@ANYBLOB="e80000006c00010029bd7000fcdbdf2500000000", @ANYRES32, @ANYBLOB="001000008000000008000f002000000014003500726f7365300000000000000000000000a40034801400350070696d367265673000000020000000001400350076657468305f6d614176746170000000140035006d61637674617030020000000000000014003500677265300000000000000000000000001400350076657468305f746f5f626174616476001400350001657468315f6d6163767461700000001400350067726530000000000000000000000000140035006261746164765f736c6176655f31000008000f"], 0xe8}}, 0x0) 15.517939264s ago: executing program 3 (id=5954): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r2}, &(0x7f0000000000), &(0x7f00000005c0)}, 0x20) 13.515150682s ago: executing program 3 (id=5999): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) sendto(r0, &(0x7f00000004c0)="de47962f6f8427732a02c459c4e49ffe419011012ea0b6cf49456b17e50a65c423c0bcbe7cbab9c0de5a742e4654b8f171c7de66edd333857377d2fc35c8c275fb9b7887c8ab077efd1a99783b046ca6c3391ffe30371b7d365aed7b2c5a4741336fb44b353b34e8df3a009550751613d19965d799f5c253b773a106f935724241d60615c64bd4afb123f342341c7696f01712e6a6d034776ca8e38d664c8f718b790d909fb5b49d4397a4138d888c875e29bbc3b898217b37cf2c20741ce639dbe19b46116f71898ef33e919108ec114e2ac8b836817143c909b3d24595f044", 0xe0, 0x68081, &(0x7f0000000680)=@caif=@util={0x25, "fac6ef227aaed2f8236b4cc9c9629e81"}, 0x80) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r2 = socket$nl_route(0x10, 0x3, 0x0) fremovexattr(r2, &(0x7f0000000000)=@known='user.incfs.size\x00') r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48284b70043dc6124d877142a48448b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68af2ad0810000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d4023f210fa34b63a715a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900000000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b6c7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48fc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f01000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb796ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab04000000ffe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890decace0200f404e4e1f74b7eed82571be54c72d978cf906df0042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef29cd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9fdc75aaaf0100483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a998de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270bb29b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214d00000000d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ce21d69993e9960ff5f76015e6c354463d7d0917fc80e5009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab4000000000000000028df75cf43f8ecc8d37b126602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd63bed8d31c31c37a373d4efd89fa516dab183ee65744fb8fc4f9ce2242e0f00000000010000000000000000000057d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fa03b84f63e022fe755f4007a4a899eaf52c4f49198e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c716357d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c24936615ee68538e8fddd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba1c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63c41cbde2ba66ad81168070c8c6e18a6e452a31bde54ad3e16304d06a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c7340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b9e6626f19eecb87e39175e85eff010000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f14eafe4b28ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1bfeef448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1099e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f9491bca7a8c59363799be70018c25ece5ad7307dc7a95c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2cdfb7fea73ca18874664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677ec97c5c568a89d6e36b165c391339878b699644c96bd6ea589765ed2a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae2676384ff799783f55d7e5a1a092a01b965dc99cb7a9d98440c355927629f2bcf9dc2396eb2f5d25829715b24327642ac4741201014a95e0e65e12cdf27e19043e3c5d3e798375cead35b9a93190a52cdecaaccc854a1d41ef365303f0e9b4fc969c9dab6d00000000000000000000008f6555f3b7d5021dfc8eb504f1e4fef716d60f0d50b03fc014fd3dff46f56750f0ba4f1b9f7de5c17e7d1f18522897edab8e9e76b667ec6b01908400f55e16f0cfbf026be5f5acc681053f697d62b3545aec4606e190216c22c1d8807b6c43f0f0a4b53619fe5c9412821c3816194a5e29cf12cc7a197b5bdafb096d2d7f6be483814c92ef29c3a21c169794c7de3b4c706f4de5f4b93c831944c7b66fa49f317aa22dbc211e19f031c4f8bee14ecd5eb061a052044adc4dd1b63a1500a9c0e09dbba23f2726a55975efb4519d864d984dcb3a1dcafa1124a6b004029a706478df3be2438d2e35e6ca674dc190143a0b6f7db3408c0c08011e5d8f54711a0bd410ab53a15b1596cb77d2b58df2d8d8"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r3}, 0x18) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r4 = socket(0x10, 0x2, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r4) write(r4, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r4, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xfffffbf4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000000)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, @void, @value}, 0x94) read(r3, &(0x7f0000001600)=""/244, 0xf4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f00000001c0)='kfree\x00', r6, 0x0, 0x4}, 0x18) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000b0ffffffb70200000800000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b704000008000000850000009500000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6e, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r8}, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_WIPHY(r9, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)={0x14, 0x0, 0x301, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x12}, @val={0x8}, @val={0xc, 0x99, {0x2, 0x3}}}}}, 0x30}}, 0x40) 13.492693852s ago: executing program 45 (id=5999): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) sendto(r0, &(0x7f00000004c0)="de47962f6f8427732a02c459c4e49ffe419011012ea0b6cf49456b17e50a65c423c0bcbe7cbab9c0de5a742e4654b8f171c7de66edd333857377d2fc35c8c275fb9b7887c8ab077efd1a99783b046ca6c3391ffe30371b7d365aed7b2c5a4741336fb44b353b34e8df3a009550751613d19965d799f5c253b773a106f935724241d60615c64bd4afb123f342341c7696f01712e6a6d034776ca8e38d664c8f718b790d909fb5b49d4397a4138d888c875e29bbc3b898217b37cf2c20741ce639dbe19b46116f71898ef33e919108ec114e2ac8b836817143c909b3d24595f044", 0xe0, 0x68081, &(0x7f0000000680)=@caif=@util={0x25, "fac6ef227aaed2f8236b4cc9c9629e81"}, 0x80) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r2 = socket$nl_route(0x10, 0x3, 0x0) fremovexattr(r2, &(0x7f0000000000)=@known='user.incfs.size\x00') r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r3}, 0x18) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r4 = socket(0x10, 0x2, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r4) write(r4, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r4, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xfffffbf4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000000)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, @void, @value}, 0x94) read(r3, &(0x7f0000001600)=""/244, 0xf4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f00000001c0)='kfree\x00', r6, 0x0, 0x4}, 0x18) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000b0ffffffb70200000800000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b704000008000000850000009500000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6e, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r8}, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_WIPHY(r9, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)={0x14, 0x0, 0x301, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x12}, @val={0x8}, @val={0xc, 0x99, {0x2, 0x3}}}}}, 0x30}}, 0x40) 5.551563713s ago: executing program 1 (id=6116): socket$xdp(0x2c, 0x3, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) write$cgroup_int(r0, &(0x7f00000004c0)=0xfffe, 0x12) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x409}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod$loop(0x0, 0x100000000000600d, 0x1) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) recvfrom(r1, 0x0, 0x0, 0x40002062, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) ioctl$BLKGETSIZE64(r0, 0x80081272, &(0x7f0000000300)) stat(&(0x7f00000002c0)='./file0\x00', &(0x7f00000001c0)) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRESHEX=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x36e084fcb6392193, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) lsm_get_self_attr(0x69, &(0x7f0000000000)={0x0, 0x0, 0x26, 0x6, ""/6}, &(0x7f00000000c0)=0x26, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x22000, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) r4 = syz_open_pts(r3, 0x0) dup(r4) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) lsetxattr$security_evm(&(0x7f0000000680)='./bus\x00', &(0x7f0000000800), &(0x7f0000000880)=ANY=[], 0xd, 0x3) 5.517151633s ago: executing program 1 (id=6117): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000), 0x220002, 0x0) openat(r0, &(0x7f00000000c0)='./file0\x00', 0x82080, 0x80) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000200)={'gretap0\x00', &(0x7f00000001c0)={'syztnl1\x00', 0x0, 0x700, 0x40, 0xa32a, 0x3, {{0x7, 0x4, 0x3, 0x6, 0x1c, 0x66, 0x0, 0x7, 0x4, 0x0, @private=0xa010101, @loopback, {[@ssrr={0x89, 0x7, 0x10, [@rand_addr=0x64010100]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000003c0)={'syztnl1\x00', &(0x7f0000000240)={'syztnl1\x00', 0x0, 0x10, 0x1, 0x7, 0x9, {{0x5, 0x4, 0x3, 0x27, 0x14, 0x64, 0x0, 0x7, 0x2f, 0x0, @multicast1, @multicast1}}}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000480)={'syztnl1\x00', &(0x7f0000000400)={'syztnl2\x00', 0x0, 0x2f, 0x40, 0xf9, 0x3, 0x4c, @empty, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8, 0x7800, 0x2, 0x7}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000500)={'gretap0\x00', &(0x7f00000004c0)={'syztnl1\x00', 0x0, 0x8000, 0x1, 0x1000, 0x3, {{0x6, 0x4, 0x2, 0x2c, 0x18, 0x65, 0x0, 0x2, 0x29, 0x0, @local, @local, {[@end, @noop]}}}}}) sendmsg$ETHTOOL_MSG_DEBUG_GET(r1, &(0x7f0000000fc0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000e80)={0xec, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x8080}, 0x8000) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="050000000400"], 0x48) syz_read_part_table(0x60f, &(0x7f0000000740)="$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") creat(&(0x7f0000000000)='./bus\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff010000850000000e000000850000005000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) 5.480588594s ago: executing program 1 (id=6118): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) sendto(r0, &(0x7f00000004c0)="de47962f6f8427732a02c459c4e49ffe419011012ea0b6cf49456b17e50a65c423c0bcbe7cbab9c0de5a742e4654b8f171c7de66edd333857377d2fc35c8c275fb9b7887c8ab077efd1a99783b046ca6c3391ffe30371b7d365aed7b2c5a4741336fb44b353b34e8df3a009550751613d19965d799f5c253b773a106f935724241d60615c64bd4afb123f342341c7696f01712e6a6d034776ca8e38d664c8f718b790d909fb5b49d4397a4138d888c875e29bbc3b898217b37cf2c20741ce639dbe19b46116f71898ef33e919108ec114e2ac8b836817143c909b3d24595f044", 0xe0, 0x68081, &(0x7f0000000680)=@caif=@util={0x25, "fac6ef227aaed2f8236b4cc9c9629e81"}, 0x80) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r2 = socket$nl_route(0x10, 0x3, 0x0) fremovexattr(r2, &(0x7f0000000000)=@known='user.incfs.size\x00') r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r3}, 0x18) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r4 = socket(0x10, 0x2, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r4) write(r4, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r4, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xfffffbf4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000000)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, @void, @value}, 0x94) read(r3, &(0x7f0000001600)=""/244, 0xf4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f00000001c0)='kfree\x00', r6, 0x0, 0x4}, 0x18) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000b0ffffffb70200000800000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b704000008000000850000009500000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) unlink(0x0) 5.188421858s ago: executing program 1 (id=6121): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x101091, 0x0) umount2(&(0x7f0000000480)='./file0\x00', 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000240)=ANY=[@ANYBLOB="e80000006c00010029bd7000fcdbdf2500000000", @ANYRES32, @ANYBLOB="001000008000000008000f002000000014003500726f7365300000000000000000000000a40034801400350070696d367265673000000020000000001400350076657468305f6d614176746170000000140035006d61637674617030020000000000000014003500677265300000000000000000000000001400350076657468305f746f5f626174616476001400350001657468315f6d6163767461700000001400350067726530000000000000000000000000140035006261746164765f736c6176655f31000008000f"], 0xe8}}, 0x0) 5.162402958s ago: executing program 1 (id=6123): socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) r1 = syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x2008002, &(0x7f0000000240)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1000}}, {@stripe={'stripe', 0x3d, 0x5}}, {@barrier}]}, 0x21, 0x56b, &(0x7f0000000c00)="$eJzs3c9vHFcdAPDvjH82SesEeoAKSIBCQFHW8aaNql5aLiBUVUJUHBCH1Ngby2SdDdl1qU2kun8DSCBxgj+BAxIHpJ44cOOIxAEQ5YBUIAIlSBwGzezY2Ti7ySRe7ybez0eazI83M9/3ZjPz3r5d7wtgYp2JiJ2ImI2ItyNiodyelFO83p3y/W7furly59bNlSSy7K1/JkV6vi16jskdL885HxHf/FrEd5P747a3tq8uN5uNG+X6Ymfj+mJ7a/v8+sbyWmOtca1ev7R06cIrF1+uD62spzd++dFX19/41m9+/ekPf7/z5R/m2TpRpvWWY5i6RZ/Zi5Objog3DiPYGEyV89kx54PHk0bExyLic8X9vxBTxf9OAOAoy7KFyBZ61ytIq+4IADyJ0qIPLElrEZGmZSOg1u3Dez6Opc1Wu3PuSmvz2mq3r+xkzKRX1puNC6fm/vj9YueZJF9fKtKK9GK9vm/9YkSciogfzz1TrNdWWs3V8TR5AGDiHe+t/yPiP3NpWqtVOrTPp3oAwFNjftwZAABGTv0PAJNH/Q8Ak6dC/V9+2L9z6HkBAEbD+38AmDzqfwCYPOp/AJgo33jzzXzK7pS/f736ztbm1dY751cb7au1jc2V2krrxvXaWqu1Vvxmz8bDztdsta4vvRSb7y52Gu3OYntr+/JGa/Na53Lxu96XGzMjKRUA8CCnTn/whyQidl59ppiiZywHdTUcbekQ9wKeLlMHOVgDAZ5qRvuCyVWpCi8aCb879LwA49H3x7zn+y7e66ePEMT3jOCJcvaTFfv/vVGAI0fPPkyux+v/f23o+QBG77Gb9X8ebj6A0cuyZP9Q/rN7SQDAkXSAr/Bl7w2rEQKM1cMG8x7K5/8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwxJyIiO9FktaKscDT/N+0Vot4NiJOxkxyZb3ZuBARz8XpiJiZy9eXxp1pAOCA0r8n5fhfZxdePLE/dTb571wxj4gf/Oytn7y73OncWMq3/2tv+9zu8GH1u8cdYFxBAKC6v1bZqai/6+W854387Vs3V3anQ8zjfT76yt7goyt3bt0spm7KdGRZlkXMF22JY/9OYro8Zj4iXoiIqSHE33k/Ij7Rr/xJ0Tdyshz5tDd+lLGfHWn89J74aZHWneeX7+NDyAtMmg/y58/r/e6/NM4U8/73/3zxhDq44vk3H7H77LvTE3+6jDTVJ35+z5+pGuOl3379vo3ZQjft/YgXpvvFT/biJwPiv1gx/p8+9ZkfvTYgLft5xNnoH7831mJn4/pie2v7/PrG8lpjrXGtXr+0dOnCKxdfri8WfdSLuz3V9/vHq+eeG5S3vPzHBsTvvvLH95V/du/YL1Qs/y/+9/Z3Pnt3dW5//C99vv/r/3wx73/98zrxixXjLx/71cDhu/P4qwPK/7DX/1zF+B/+bXu14q4AwAi0t7avLjebjRsHWsjfhQ7eZzaKhbQM+ShnzvevtvNuc7G7Jet671GL85duVu9eliSSOPj1uXdhvuJFmHngVX2SF6b32orDPfO38zOOuDjp0EvxOAtxsly4Paqg43keAaNz96Yfd04AAAAAAAAAAAAAAIBBRvE3TOMuIwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEfX/wMAAP//Wbi9ng==") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r2 = signalfd(r1, &(0x7f0000000540)={[0x7fff]}, 0x8) write$cgroup_int(r2, &(0x7f00000008c0), 0x12) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000004000000850000002300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) nanosleep(&(0x7f0000000280), 0x0) r4 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002100)={r3, 0x0, 0x0, 0x63, 0x0, &(0x7f0000000a00)=""/99, 0xde, 0x0, 0xca, 0x2, &(0x7f0000000a80)="e618049364cfdc05cabb1c44a17acd71204695bc00e23d99174609010fc5531e4302a0bac54053b17b76fe06f0c021728d2e3abcfeb1336890c7821736d8b40baee24d776f1fd00de48e0585aa848e7ab653c68997a75bee0a231720c545b5d71ea30f2a3f897308209644f8539b6482b34d3c89520b4c179aba10ab4b31ccf873a83ad02354c14f9670f75204a1763a80a701b294ea1b6ccf3b47b66f1c329bae4c0bd4f8288621cf55df060a4332cbc67d7a3f7bb8a2ecb0c9da83f1fba4ffe4cbb24a6833b2bfba1b", &(0x7f0000000b80)='9:', 0x1, 0x0, 0xffff7fff}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000440)='kmem_cache_free\x00', r5}, 0x10) move_mount(0xffffffffffffffff, &(0x7f0000000400)='./file0/../file0\x00', 0xffffffffffffffff, &(0x7f0000000480)='./file0/../file0\x00', 0x110) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r6, 0x6, 0x1, &(0x7f00000000c0)=@gcm_256={{0x7}, '\x00', "5171bb672965593497418688ac68cb126474cd3660dab9e2086e246728d7a040", '\x00\x00=*', "1202000000040030"}, 0x58) setsockopt$inet6_tcp_int(r6, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) msgrcv(0x0, 0x0, 0x0, 0x0, 0x1000) 4.917640081s ago: executing program 1 (id=6126): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) socket$packet(0x11, 0x0, 0x300) timerfd_create(0x1, 0x80800) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000000800000003"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES16=r0, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000001c80)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x60, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r3, 0x0, 0x2}, 0x18) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) pread64(r5, &(0x7f0000000280)=""/148, 0x94, 0xd) 4.893187922s ago: executing program 46 (id=6126): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) socket$packet(0x11, 0x0, 0x300) timerfd_create(0x1, 0x80800) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000000800000003"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES16=r0, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000001c80)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x60, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r3, 0x0, 0x2}, 0x18) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) pread64(r5, &(0x7f0000000280)=""/148, 0x94, 0xd) 1.704649616s ago: executing program 6 (id=6163): ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000640)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffff0001}}, './file0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000006000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r0, 0x0, 0x178}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x3}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='net\x00') r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(r2, &(0x7f0000000600)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x804900}, 0xc, &(0x7f0000000580)={&(0x7f0000000380)={0x6c, r3, 0x8, 0x70bd28, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xfffffff7}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x7}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x30, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010102}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xb}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000000}, 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000680)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@func={0x1}]}, {0x0, [0x2e, 0x2e]}}, &(0x7f0000000440)=""/192, 0x28, 0xc0, 0x1, 0x0, 0x0, @void, @value}, 0x28) 1.566860468s ago: executing program 7 (id=6164): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) syz_io_uring_setup(0x1458, &(0x7f00000004c0)={0x0, 0x3, 0x10180, 0x2000, 0x3ae}, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000001afc180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000090000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000600), 0xce901, 0x0) write$binfmt_aout(r2, &(0x7f0000000140)=ANY=[], 0xff2e) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000dc0)={0x0, 0x4000001, 0x0, 0x5, 0x0, "0062092b95000004fdf5eb2bda00"}) r3 = syz_open_pts(r2, 0x0) dup3(r3, r2, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000001100)=0x12) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000040)='sys_enter\x00', r4}, 0x10) mbind(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, &(0x7f0000000500)=0x1, 0x9, 0x0) 1.566346638s ago: executing program 6 (id=6165): r0 = socket$inet6(0xa, 0x6, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e24, 0x8, @remote, 0x3}, 0x1c) r1 = syz_io_uring_setup(0x7d9b, &(0x7f00000008c0)={0x0, 0x92b2, 0x10100, 0xfffffffe, 0x21a}, &(0x7f0000000980), &(0x7f00000001c0)) io_uring_enter(r1, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = syz_open_procfs(0x0, &(0x7f0000000440)='projid_map\x00') pread64(r4, 0x0, 0x0, 0x5) pread64(r4, 0x0, 0x0, 0x6) faccessat(r4, 0x0, 0x2) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f00000001c0)='kfree\x00', r5}, 0x10) setsockopt$packet_tx_ring(r2, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x808000, 0x4, 0x20300, 0xfc}, 0x1c) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000100)=@req3={0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x861}, 0x1c) 1.535424818s ago: executing program 7 (id=6167): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x590, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xa5d4}, 0x4c58, 0x0, 0x0, 0x1, 0x8, 0x2, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$igmp(0x2, 0x3, 0x2) (async) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) setsockopt$MRT_ADD_MFC_PROXY(r1, 0x0, 0xd2, &(0x7f00000000c0)={@multicast1=0x1c, @empty=0xe000031f, 0x0, "8a79348df081496d0420922f45a71c1daa8b610468cd140526c41efcd3a4a422", 0x3, 0x1, 0x85}, 0x3c) (async) setsockopt$MRT_ADD_MFC_PROXY(r1, 0x0, 0xd2, &(0x7f00000000c0)={@multicast1=0x1c, @empty=0xe000031f, 0x0, "8a79348df081496d0420922f45a71c1daa8b610468cd140526c41efcd3a4a422", 0x3, 0x1, 0x85}, 0x3c) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x20, 0xa, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x40) (async) sendmsg$NFT_MSG_GETSET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x20, 0xa, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x40) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = socket(0x22, 0x2, 0x3) recvmmsg(r4, &(0x7f0000000680)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x163, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000740)='scsi_dispatch_cmd_start\x00', r3}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000740)='scsi_dispatch_cmd_start\x00', r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='scsi_dispatch_cmd_start\x00'}, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 1.42453355s ago: executing program 2 (id=6170): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f00000012c0)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e24}, 0x1c) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000280)=@req={0xed8a, 0x7, 0x4, 0x9}, 0x10) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r2 = fcntl$dupfd(r1, 0x0, r1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800860900000000000000000000000085000000600000009500000000000000"], &(0x7f0000000640)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="0500000004000000080000000b"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xb, 0x14, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0xffff, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x476e, @void, @value}, 0x94) request_key(&(0x7f00000001c0)='asymmetric\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000003c0)='\x00', 0xfffffffffffffffd) sendmsg$IPVS_CMD_GET_CONFIG(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[], 0x14}}, 0x0) r3 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r3, 0x10d, 0xad, &(0x7f0000000200), &(0x7f0000000100)=0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000100)=@ccm_128={{0x303}, "27c6ffe2057b6525", "e1315727ee1c2c5d189aa83c29a48200", "9c24c403", "1f7400000000000e"}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x400, &(0x7f0000000000)={[{@grpjquota}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x1, 0x4a6, &(0x7f0000000a40)="$eJzs3c9rXNUeAPDvzDRpkua9/niPR9sHr4U+6HtKM/mBNFEXulIXBbHgRqHGZBprJpmQmdQmdJHqrgsXoiiIC/f+BW7syiKIa92LC6lojaCCMHLvzKT5NXXQNAO5nw/czrn33M73nAzfw51z750bQGadTv7JRQxGxBcRcbixunmH042XtbvXp5IlF/X6xe9z6X7JemvX1v87FBGrEdEXEc89FfFybnvc6vLK7GS5XFpsrhdrcwvF6vLKuStzkzOlmdL8yPj5iYnx4bHRiV3r6803X7154eNnej/6+Y07t9/69JOkWYPNuo392E2NrvfE0Q3bDkTE4w8iWBcUmv3p73ZD+FOSz+8fEXEmzf/DUUg/TSAL6vV6/bf6wXbVq3Vg38qnx8C5/FBENMr5/NBQ4xj+nzGQL1eqtYcvV5bmpxvHykeiJ3/5Srk03PyucCR6csn6SFq+tz66ZX0sIj0GfrvQn64PTVXK03s71AFbHNqS/z8VGvkPZISv/JBd8h+yS/5Ddsl/yC75D9kl/yG75D9kl/yH7JL/kF3yH7JL/kMmPXvhQrLUW/e/T19dXpqtXD03XarODs0tTQ1NVRYXhmYqlZn0np25P3q/cqWyMPJILF0r1krVWrG6vHJprrI0X7uU3td/qdSzJ70COnH01K2vchGx+mh/uiR6m3VyFfa3ej0X3b4HGeiOQrcHIKBrTP1BdvmOD+zwE72b9LWrWNj9tgB7I9/tBgBdc/aE83+QVeb/IbvM/0N2OcYHzP9D9pj/h+wabPP8r79teHbXcET8PSK+LPQcbD3rC9gP8t/mmsf/Zw//d3BrbW/ul/QUQW9EvPb+xXevTdZqiyPJ9h/Wt9fea24f7Ub7gU618rSVxwBAdq3dvT7VWvYy7ndPNi5C2B7/QHNusi89Rzmwltt0rUJul65dWL0REcd3ip9rPu+8ceZjYK2wLf6x5muu8RZpew+kz03fm/gnNsT/z4b4J//yXwWy4VYy/gzvlH/5NKdjPf82jz+Du3TtRPvxL78+/hXajH+nOozxygevf9M2/o2IkzvGb8XrS2NtjZ+07WyH8e+8+Py/2tXVP2y8z07xW5JSsTa3UKwur5xLf0dupjQ/Mn5+YmJ8eGx0opjOURdbM9XbPXb889v36/9Am/jt+v9Es03/77D/v/77sxdO3yf+/87s/PkfaxM/0R8RD3UY/8fRr19qV5fEn27T//x94ifbxjqMX33n6YMd7goA7IHq8srsZLlcWlRQUFBYL3R7ZAIetHtJ3+2WAAAAAAAAAAAAAJ3ai8uJu91HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID94PcAAAD//5j81ps=") chown(&(0x7f00000003c0)='./file0\x00', 0x0, 0xee01) lsetxattr$system_posix_acl(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='system.posix_acl_access\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="020002000100000000000000040000000000000010000200000000002000000000000000"], 0x24, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='block_bio_remap\x00', r4}, 0x10) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) 1.339731021s ago: executing program 7 (id=6172): pselect6(0x40, &(0x7f0000000100)={0x0, 0xffffffff, 0x0, 0x0, 0x2, 0xfffffffffffffffc}, 0x0, &(0x7f0000000240)={0x1f}, 0x0, 0x0) 1.339462441s ago: executing program 7 (id=6173): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='kfree\x00', r0}, 0x18) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xc3, 0x1, 0x0, 0x0, 0x0, 0xd, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x3, 0x800000000001}, 0x9901f3ac80a2c885, 0x5dd8, 0x0, 0x8, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200080, &(0x7f0000000040)={[{@jqfmt_vfsv1}]}, 0xfe, 0x56c, &(0x7f0000000940)="$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") getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @private0}]}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) r2 = socket(0x15, 0x5, 0x0) getsockopt(r2, 0x200000000114, 0x5, 0x0, &(0x7f0000000040)) syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000040)='./bus\x00', 0x2029c1b, 0x0, 0x1, 0x0, &(0x7f0000000080)) renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x4) socket$key(0xf, 0x3, 0x2) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='sched_switch\x00', r3}, 0x10) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e03002a000b05d25a806c8c6f94f91124fc601100077a0a000312050282c137153e370e0c1180fc0b0c000300", 0x33fe0}], 0x1}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 1.333298571s ago: executing program 5 (id=6174): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x15, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x9c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x6c, 0x2, {{}, [@TCA_NETEM_LOSS={0x30, 0x2, 0x0, 0x1, [@NETEM_LOSS_GE={0x18}, @NETEM_LOSS_GI={0x18}]}, @TCA_NETEM_RATE={0x4, 0xd}, @TCA_NETEM_CORRUPT={0xc, 0x2}]}}}]}, 0x9c}}, 0x0) (fail_nth: 1) 1.120065974s ago: executing program 5 (id=6177): r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) pipe(&(0x7f0000005880)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_selinux(r3, &(0x7f00000000c0), &(0x7f0000000040)='system_u:object_r:dhcp_state_t:s0\x00', 0x1e, 0x0) r4 = openat$selinux_policy(0xffffff9c, &(0x7f0000000080), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r4, 0x0) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0x12fe) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r5}, &(0x7f0000000000), &(0x7f00000000c0)}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r6}, 0x10) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) 1.119658074s ago: executing program 8 (id=6178): r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) pipe(&(0x7f0000005880)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_selinux(r3, &(0x7f00000000c0), &(0x7f0000000040)='system_u:object_r:dhcp_state_t:s0\x00', 0x1e, 0x0) r4 = openat$selinux_policy(0xffffff9c, &(0x7f0000000080), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r4, 0x0) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0x12fe) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r5}, &(0x7f0000000000), &(0x7f00000000c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) 1.086712224s ago: executing program 2 (id=6179): r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) pipe(&(0x7f0000005880)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_selinux(r3, &(0x7f00000000c0), &(0x7f0000000040)='system_u:object_r:dhcp_state_t:s0\x00', 0x1e, 0x0) r4 = openat$selinux_policy(0xffffff9c, &(0x7f0000000080), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r4, 0x0) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0x12fe) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r5}, &(0x7f0000000000), &(0x7f00000000c0)}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r6}, 0x10) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) 1.004304736s ago: executing program 8 (id=6180): bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r1}, &(0x7f0000000000), &(0x7f00000005c0)}, 0x20) 972.632466ms ago: executing program 8 (id=6181): r0 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r0, 0x10d, 0x9f, &(0x7f0000001040), 0x0) 972.187916ms ago: executing program 8 (id=6182): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x800000000003}, 0x1100, 0x5dd8, 0x0, 0x3, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000fc0)={0x2, 0x80, 0x82, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20000000}, 0x0, 0x0, 0x3, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000180)='cpu>=0||!') 950.624006ms ago: executing program 5 (id=6183): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x800000000003}, 0x1100, 0x5dd8, 0x0, 0x3, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000180)='cpu>=0||!') 925.009107ms ago: executing program 2 (id=6184): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000002280)=@generic={0x0, r2}, 0x18) 896.624027ms ago: executing program 2 (id=6185): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_emit_ethernet(0x36, 0x0, 0x0) socket$inet6(0xa, 0x200000000003, 0x87) syz_emit_ethernet(0x3e, &(0x7f0000000040)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x15}, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "03136c", 0xfffffffffffffed4, 0x87, 0x0, @private2={0xfc, 0x2, '\x00', 0xfd}, @mcast2, {[@hopopts={0x3b}]}}}}}, 0x0) socket$tipc(0x1e, 0x5, 0x0) r0 = socket$netlink(0x10, 0x3, 0x14) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000006c59850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x2010008, &(0x7f0000000100)={[], [{@rootcontext={'rootcontext', 0x3d, 'staff_u'}}, {@smackfsroot}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/seq\x00'}}]}, 0xff, 0x531, &(0x7f0000000640)="$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") r2 = accept$nfc_llcp(0xffffffffffffffff, &(0x7f0000000240), 0x0) ioctl$sock_ifreq(r2, 0x8925, &(0x7f0000000300)={'lo\x00', @ifru_names='hsr0\x00'}) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a2f000000000800410072786500140033007465616d5f736c6176655f30"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x8844) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9feb01001800000000000000280000002800000002000000002000000000000105000000100000000000000000000000000001000000000000110000de8db2b000fa3d3a97eb45694d50000000000000"], 0x0, 0x42, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) pselect6(0x40, &(0x7f0000000100)={0x0, 0xffffffff, 0x0, 0x0, 0x2, 0xfffffffffffffffc}, 0x0, &(0x7f0000000240)={0x1f}, 0x0, 0x0) 895.641057ms ago: executing program 8 (id=6186): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002100)={r0, 0x0, 0x0, 0x63, 0x0, &(0x7f0000000a00)=""/99, 0xde, 0x0, 0xca, 0x2, &(0x7f0000000a80)="e618049364cfdc05cabb1c44a17acd71204695bc00e23d99174609010fc5531e4302a0bac54053b17b76fe06f0c021728d2e3abcfeb1336890c7821736d8b40baee24d776f1fd00de48e0585aa848e7ab653c68997a75bee0a231720c545b5d71ea30f2a3f897308209644f8539b6482b34d3c89520b4c179aba10ab4b31ccf873a83ad02354c14f9670f75204a1763a80a701b294ea1b6ccf3b47b66f1c329bae4c0bd4f8288621cf55df060a4332cbc67d7a3f7bb8a2ecb0c9da83f1fba4ffe4cbb24a6833b2bfba1b", &(0x7f0000000b80)='9:', 0x1, 0x0, 0xffff7fff}, 0x50) 803.495628ms ago: executing program 8 (id=6187): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_emit_ethernet(0x36, 0x0, 0x0) socket$inet6(0xa, 0x200000000003, 0x87) syz_emit_ethernet(0x3e, &(0x7f0000000040)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x15}, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "03136c", 0xfffffffffffffed4, 0x87, 0x0, @private2={0xfc, 0x2, '\x00', 0xfd}, @mcast2, {[@hopopts={0x3b}]}}}}}, 0x0) socket$tipc(0x1e, 0x5, 0x0) socket$netlink(0x10, 0x3, 0x14) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000006c59850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x2010008, &(0x7f0000000100)={[], [{@rootcontext={'rootcontext', 0x3d, 'staff_u'}}, {@smackfsroot}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/seq\x00'}}]}, 0xff, 0x531, &(0x7f0000000640)="$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") accept$nfc_llcp(0xffffffffffffffff, &(0x7f0000000240), 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r1}, 0x9) pselect6(0x40, &(0x7f0000000100)={0x0, 0xffffffff, 0x0, 0x0, 0x2, 0xfffffffffffffffc}, 0x0, &(0x7f0000000240)={0x1f}, 0x0, 0x0) 803.228039ms ago: executing program 5 (id=6188): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10000, &(0x7f0000000840)={[{@nobh}, {@auto_da_alloc}, {@data_err_ignore}], [{@hash}, {@context={'context', 0x3d, 'sysadm_u'}}, {@seclabel}, {@fsmagic}, {@fowner_gt={'fowner>', 0xee00}}, {@func={'func', 0x3d, 'BPRM_CHECK'}}, {@func={'func', 0x3d, 'FILE_CHECK'}}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}]}, 0x3, 0x4da, &(0x7f0000001180)="$eJzs3MFvFNUfAPDvbHdpgR+/X3+IKIhSQGNjYgsFhYMXTEw8aGLEgxybthJkAUN7EEKkJAbPJN6NR+NNE696NHrxD8CDBxNDQgyJATytmd2Zdrs7u+3S0lL380mmfW/mzbz3ZubNvJ23swH0rZH0TxLxn4i4FRH/a0SXJhhp/Lt/9+rUg7tXp2K+Vjv1Z1JPdy+NZ/L1tmeR0VJE6dOkZYMNs5evnJusVmcuZfHxufMfjc9evvLy2fOTZ2bOzFyYOHHi2NEjx1+deKX3ShXkl9br3t5PLu7b8+bpm29PlfP5Q9n/5np0VO6tGCNdlr3Q26Yeezuawkn7frq2roVhxYay07qStv+r1YOnN7pAwLqp1Wq1wc6L52utrrfNATatJDa6BMDGyG/06efffFqnrsdj4c7JxgegtN73s6mxpBylLE2l5fPtWhqJiPfn//4inaLbc4jfHlEBAIC+88PJvCfY2v8rxe6mdP/NxlCGI+L/EbEzIp6IiF0R8WREPe1TEfF0awZJRK1L/rta4ov5f5uNIpRur7qSXaT9v9eysa2l/b+89xfDA1lsR0TeYZ45nO2T0agMfnC2OnOkw/a3LJN/c/8vndL8875gVo7b5ZYHdNOTc5MPV9t2d65H7C231j8ppwcuH8ZJImJPROztYbvDTeGzL321byFSaR9eXFL/n/8q2lytYEiv5/G4wg1/GfFi4/jPx5Ljv5hj0n18cnwoqjOHx9Oz4HBhHj/9cuOdTvkve/y/+711lTeOf39qtdVekB7/bU3nf+Tjt4v1H04ikoXx2tmI2kBvedz49bP6dkcOtS972PN/S/JePZy3r48n5+YuHYnYkrzVPn9icd08nqdP6z96qLj978zWSffEMxGRnsTPRsRzEbE/K/uBiDgYEQVVW/Dj689/2GnZ8vV/tNL6Txde/5Yc/8Xx+hUG8pXTOQPnDtx60OHisbLjf6weGs3mFF//kiWXiJWWdHV7DwAAADaHUtS/+18aWwiXSmNjjWdAu2JbqXpxdm5/RFyYbrwjMByVUv6kq/E8uJLkzz+Hm+ITLfGj2XPjzwe21uNjUxer0xtdeehz2+ttPmlr/6k/enzOC2xCazCOBmxSy7X/3TfXqSDAunP/h/7V1P7nOySZ900Z+Hdy/4f+VdT+r8XXXd9dcM2Aza/WQ1sufAkH2NTcy6F/lePdhXD9tWc3eugb7v/Ql3p9r7+3QG2weNFQFPxiwNCjKcbWgrw2JJD2rNZwg5WIWFnirQ+TRd4F7JAmWXHueWAw2hcNRLe1ko6/45D2UIvXSvfKsuU5s3vNT/78N1HW+rT5ZrGdVnrc4asMbMjlCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYM39EwAA//9VO9FH") r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="89000000120081ae08060cdc030000007f1be3f74001000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e281ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00014006040400010404009bbc7a46e3988285dcdf12f213e6f768fec601955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xb, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001801000009006c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000feffffff850000002d00000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = gettid() r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x2000) read(r4, &(0x7f0000000200)=""/209, 0x128) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r4, 0x4040534e, &(0x7f0000000080)={0x335, @time={0x80, 0xff}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000300)={0xfffffffb, 0x2, 0x1, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r4, 0x404c534a, &(0x7f0000000400)={0x0, 0x1f000000}) tkill(r3, 0x7) close_range(r0, 0xffffffffffffffff, 0x0) r5 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r6}, &(0x7f0000000180), &(0x7f00000001c0)=r5}, 0x20) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000a00)=ANY=[@ANYBLOB="7d157b7323aa108be4edfa97502e7c96de0420968f30df0e93bb0b1f0c623730e82ec2d6e7a568af3bc770afcc8451167687409c2c2da12621efe78df7eabca20ed9fecbe79bd295c8114fd0a114b9ffb416e13fe5a5eb490aa5731587f98e76bd227d7dd65f319ac6f19306ea267798982807e1292c3b1f8733c77d2bcf6d8cd24ea7f3ceb5a6c9432bdab3b118654496a18242b665fa5ac254980a425699d0cc4ac69f42a5e27002fd00b169a31d656f6d7c235a1696da64f3fdee663c39e4c8c95c6f885138ba716c18a83d19758ef2f1f6bf060b2820ad1973f563e61d0cfe6915dad1a5398199a37427cb57efeb80c0e04a26b8ebed", @ANYRES32=r7, @ANYRES32=r8], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r9}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) 705.56439ms ago: executing program 6 (id=6189): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f00000012c0)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e24}, 0x1c) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000280)=@req={0xed8a, 0x7, 0x4, 0x9}, 0x10) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r2 = fcntl$dupfd(r1, 0x0, r1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800860900000000000000000000000085000000600000009500000000000000"], &(0x7f0000000640)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="0500000004000000080000000b"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xb, 0x14, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0xffff, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x476e, @void, @value}, 0x94) request_key(&(0x7f00000001c0)='asymmetric\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000003c0)='\x00', 0xfffffffffffffffd) sendmsg$IPVS_CMD_GET_CONFIG(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[], 0x14}}, 0x0) r3 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r3, 0x10d, 0xad, &(0x7f0000000200), &(0x7f0000000100)=0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000100)=@ccm_128={{0x303}, "27c6ffe2057b6525", "e1315727ee1c2c5d189aa83c29a48200", "9c24c403", "1f7400000000000e"}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x400, &(0x7f0000000000)={[{@grpjquota}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x1, 0x4a6, &(0x7f0000000a40)="$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") chown(&(0x7f00000003c0)='./file0\x00', 0x0, 0xee01) lsetxattr$system_posix_acl(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='system.posix_acl_access\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="020002000100000000000000040000000000000010000200000000002000000000000000"], 0x24, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='block_bio_remap\x00', r4}, 0x10) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) 588.741282ms ago: executing program 6 (id=6190): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r5}, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x20, r3, 0x301, 0x0, 0x3, {0x1c}, [@ETHTOOL_A_LINKMODES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x20}}, 0x40006) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000180)={[{@delalloc}, {@noload}, {@acl}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x783, &(0x7f0000001000)="$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") r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x3, &(0x7f0000000280)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) r7 = getpgid(0xffffffffffffffff) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000c00)={0x0, 0x0}) r9 = getpid() process_vm_readv(r9, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r10 = getpid() ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000c80)={{0x1, 0x1, 0x18, r2, {0x4}}, './bus\x00'}) syz_clone3(&(0x7f0000000cc0)={0x2000000, &(0x7f00000002c0), &(0x7f0000000340), &(0x7f0000000380), {0x3e}, &(0x7f00000003c0)=""/160, 0xa0, &(0x7f0000000940)=""/213, &(0x7f0000000b80)=[0x0, 0x0, r7, r8, r9, r10, 0xffffffffffffffff], 0x7, {r11}}, 0x58) r12 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) ftruncate(r12, 0x2007ffb) sendfile(0xffffffffffffffff, r12, 0x0, 0x1000000201005) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='mm_page_free\x00'}, 0x15) sendto$packet(r0, &(0x7f0000000180)="10030600e0ff020004004788aa96a13bb100001100007fca1a00", 0x10608, 0x0, &(0x7f0000000140)={0x11, 0x0, r1}, 0x14) 437.172044ms ago: executing program 7 (id=6191): r0 = gettid() tkill(r0, 0x7) 419.915834ms ago: executing program 5 (id=6192): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32, @ANYRES32=r2], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x30dd3000) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000240)={[{@grpquota}, {@auto_da_alloc}, {@minixdf}]}, 0x1, 0x50c, &(0x7f0000000ac0)="$eJzs3c9vG1kdAPCvnThx0uwmu+wBEOyW3YWCqjqJuxut9gDLEaGVEHsEqRsSN4pix1HsLJvQQ3rmikQlTvTIH8C5Jw7cuCC4cSkHJH5EoAaJg9GMJ6mb2o3VJHYUfz7SaObNm/r7fXH8Xuc59gtgZF2PiP2ImIiITyNiNjufy7b4qL0l1z05uLdyeHBvJRet1if/zKX1ybno+DeJa9ljFiPihw8jfpJ7Pm5jd29juVqtbGfl+WZta76xu3drvba8VlmrbJbLS4tLCx/cfr98bm19qzaRHX318R/2v/WzJK2Z7ExnO85Tu+mF4ziJ8Yj4/kUEG4KxrD0Tw06El5KPiNcj4u309T8bY+mzCQBcZa3WbLRmO8sAwFWXT+fAcvlSNhcwE/l8qdSew3sjpvPVeqN58259Z3O1PVc2F4X83fVqZSGbK5yLQi4pL6bHT8vlE+XbEfFaRPxiciotl1bq1dVh/scHAEbYtRPj/38m2+M/AHDFFYedAAAwcD3G//1B5wEADI77fwAYPcZ/ABg97fF/athpAAAD5P4fAEaP8R8ARsoPPv442VqH2fdfr362u7NR/+zWaqWxUartrJRW6ttbpbV6fS39zp7aaY9Xrde3Ft+Lnc/nvr3VaM43dvfu1Oo7m8076fd636kU0qt8sgAAhum1tx79OZeMyB9OpVt0rOVQGGpmwEXLDzsBYGjGhp0AMDRW+4LRdYZ7fNMDcEV0WaL3GcVuHxBqtVqti0sJuGA3vmT+H0ZVx/y/vwKGEWP+H0aX+X8YXa1Wrt81/6PfCwGAy80cP9Dj/f/Xs/1vsjcHfrx68ooHF5kVAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXG5H6/+WsrXAZyKfL5UiXomIuSjk7q5XKwsR8WpE/GmyMJmUF4ecMwBwVvm/5bL1v27MvjvzTNWb144PJyLip7/65JefLzeb23+MmMj9a/LofPNBdr48+OwBgNMdjdPpvuNG/snBvZWjbZD5/P27EVFsxz88mIjD4/jjMZ7ui1GIiOl/57JyW65j7uIs9u9HxBe7tT8XM+kcSHvl05Pxk9ivDDR+/pn4+bSuvU9+Fl84h1xg1DxK+p+Pur3+8nE93Xd//RfTHurssv4veaiVw7QPfBr/qP8b69H/Xe83xnu/+177aOr5uvsRXx6POIp92NH/HMXP9Yj/bp/x//KVN9/uVdf6dcSN6B6/M9Z8s7Y139jdu7VeW16rrFU2y+WlxaWFD26/X55P56jne48G//jw5qu96pL2T/eIXzyl/V/vs/0P//fpj772gvjffKdb/Hy88YL4yZj4jT7jL0//ttirLom/2qP9pz3/N/uM//ive88tGw4ADE9jd29juVqtbI/kQfR38e+zH9alyHmkD5Jn4RKk0fXgO4OKNRHdq37+TvvXdDKi8xe71XqpWL16jPOYdQMug+MXfUT8d9jJAAAAAAAAAAAAAAAAXQ3iE0vDbiMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABX1/8DAAD//9RMyv0=") r4 = open(&(0x7f0000000080)='./file1\x00', 0x64842, 0x86) pwritev2(r4, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x140000}], 0x1, 0x7800, 0x0, 0x3) 381.840364ms ago: executing program 7 (id=6193): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='kfree\x00', r0}, 0x18) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xc3, 0x1, 0x0, 0x0, 0x0, 0xd, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x3, 0x800000000001}, 0x9901f3ac80a2c885, 0x5dd8, 0x0, 0x8, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200080, &(0x7f0000000040)={[{@jqfmt_vfsv1}]}, 0xfe, 0x56c, &(0x7f0000000940)="$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") getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @private0}]}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) r2 = socket(0x15, 0x5, 0x0) getsockopt(r2, 0x200000000114, 0x5, 0x0, &(0x7f0000000040)) syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000040)='./bus\x00', 0x2029c1b, 0x0, 0x1, 0x0, &(0x7f0000000080)) renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x4) socket$key(0xf, 0x3, 0x2) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='sched_switch\x00', r3}, 0x10) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e03002a000b05d25a806c8c6f94f91124fc601100077a0a000312050282c137153e370e0c1180fc0b0c000300", 0x33fe0}], 0x1}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 276.444226ms ago: executing program 6 (id=6194): bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) socket$caif_stream(0x25, 0x1, 0x3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 128.166688ms ago: executing program 6 (id=6195): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10000, &(0x7f0000000840)={[{@nobh}, {@auto_da_alloc}, {@data_err_ignore}], [{@hash}, {@context={'context', 0x3d, 'sysadm_u'}}, {@seclabel}, {@fsmagic}, {@fowner_gt={'fowner>', 0xee00}}, {@func={'func', 0x3d, 'BPRM_CHECK'}}, {@func={'func', 0x3d, 'FILE_CHECK'}}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}]}, 0x3, 0x4da, &(0x7f0000001180)="$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") r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="89000000120081ae08060cdc030000007f1be3f74001000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e281ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00014006040400010404009bbc7a46e3988285dcdf12f213e6f768fec601955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xb, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001801000009006c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000feffffff850000002d00000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = gettid() r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x2000) read(r4, &(0x7f0000000200)=""/209, 0x128) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r4, 0x4040534e, &(0x7f0000000080)={0x335, @time={0x80, 0xff}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000300)={0xfffffffb, 0x2, 0x1, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r4, 0x404c534a, &(0x7f0000000400)={0x0, 0x1f000000}) tkill(r3, 0x7) close_range(r0, 0xffffffffffffffff, 0x0) 40.349619ms ago: executing program 2 (id=6196): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000680)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@func={0x1}]}, {0x0, [0x2e, 0x2e]}}, &(0x7f0000000440)=""/192, 0x28, 0xc0, 0x1, 0x0, 0x0, @void, @value}, 0x28) 39.790539ms ago: executing program 2 (id=6197): r0 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0xfc, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0xfc00) 0s ago: executing program 5 (id=6198): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xf4, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000010900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000025940000000c0a01030000000000000000070000080900020073797a31000000000900010073797a30000000006800038064000080080003400000000258000b802c0001800a0001006c696d69740000001c0002"], 0x118}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) kernel console output (not intermixed with test programs): ][ T2946] bridge0: port 1(bridge_slave_0) entered forwarding state [ 399.312189][ T30] audit: type=1400 audit(1746857083.726:18312): avc: denied { unlink } for pid=20166 comm="syz-executor" name="file0" dev="tmpfs" ino=214 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 399.337270][T20852] loop9: detected capacity change from 0 to 2048 [ 399.358500][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 399.365626][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 399.385314][T20735] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 399.395845][T20735] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 399.408820][ T1738] TC_ACT_REPEAT abuse ? [ 399.427611][T20852] loop9: p1 < > p4 [ 399.432101][T20852] loop9: p4 size 8388608 extends beyond EOD, truncated [ 399.561281][T20703] veth0_vlan: entered promiscuous mode [ 399.577087][T20703] veth1_vlan: entered promiscuous mode [ 399.620852][T20703] veth0_macvtap: entered promiscuous mode [ 399.646398][T20703] veth1_macvtap: entered promiscuous mode [ 399.667744][T20703] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 399.678287][T20703] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 399.688149][T20703] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 399.698605][T20703] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 399.763493][T20703] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 399.786741][T20735] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 399.817379][T20703] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 399.828003][T20703] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 399.837976][T20703] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 399.848454][T20703] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 399.882472][T20703] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 399.910280][T20703] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.919248][T20703] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.928077][T20703] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.936906][T20703] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.048233][T20893] loop6: detected capacity change from 0 to 512 [ 400.055487][ T2946] TC_ACT_REPEAT abuse ? [ 400.071348][T20893] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 400.101299][T20883] infiniband syz!: set active [ 400.106172][T20883] infiniband syz!: added team_slave_0 [ 400.119277][T20735] veth0_vlan: entered promiscuous mode [ 400.136791][T20883] RDS/IB: syz!: added [ 400.141586][T20893] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 400.154314][T20883] smc: adding ib device syz! with port count 1 [ 400.158323][T20735] veth1_vlan: entered promiscuous mode [ 400.160484][T20883] smc: ib device syz! port 1 has pnetid [ 400.172891][T20893] ext4 filesystem being mounted at /1/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 400.176589][T20735] veth0_macvtap: entered promiscuous mode [ 400.199303][T20735] veth1_macvtap: entered promiscuous mode [ 400.221153][ T30] audit: type=1400 audit(1746857084.636:18313): avc: denied { bind } for pid=20882 comm="syz.0.5687" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 400.254404][T20735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 400.264917][T20735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 400.271595][T20908] loop9: detected capacity change from 0 to 1024 [ 400.274749][T20735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 400.282894][T20908] EXT4-fs (loop9): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 400.291530][T20735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 400.291547][T20735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 400.302431][T20908] EXT4-fs (loop9): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 400.312226][T20735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 400.343076][ T30] audit: type=1400 audit(1746857084.636:18314): avc: denied { listen } for pid=20882 comm="syz.0.5687" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 400.343794][T20735] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 400.375607][T20735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 400.386186][T20735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 400.396055][T20735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 400.406521][T20735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 400.416037][T20908] JBD2: no valid journal superblock found [ 400.416344][T20735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 400.422054][T20908] EXT4-fs (loop9): Could not load journal inode [ 400.432477][T20735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 400.433388][T20735] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 400.457819][T20735] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.466651][T20735] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.475390][T20735] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.484143][T20735] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.563779][T20703] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 400.598529][T20916] SELinux: security policydb version 18 (MLS) not backwards compatible [ 400.610054][T20908] loop9: detected capacity change from 0 to 512 [ 400.614751][T20916] SELinux: failed to load policy [ 400.644978][T20908] EXT4-fs (loop9): Cannot turn on journaled quota: type 1: error -13 [ 400.662862][T20908] EXT4-fs warning (device loop9): ext4_block_to_path:107: block 3279945729 > max in inode 13 [ 400.683870][ T29] TC_ACT_REPEAT abuse ? [ 400.688546][T20908] EXT4-fs warning (device loop9): ext4_block_to_path:107: block 3279945730 > max in inode 13 [ 400.699400][T20908] EXT4-fs (loop9): 1 truncate cleaned up [ 400.705571][T20908] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 400.722094][T20908] 9pnet_fd: Insufficient options for proto=fd [ 400.727931][T20918] binfmt_misc: register: failed to install interpreter file ./file0 [ 400.740591][ T30] audit: type=1326 audit(1746857085.156:18315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20907 comm="syz.9.5686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57714de969 code=0x7ffc0000 [ 400.764857][ T30] audit: type=1326 audit(1746857085.186:18316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20907 comm="syz.9.5686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f57714de969 code=0x7ffc0000 [ 400.788580][ T30] audit: type=1326 audit(1746857085.186:18317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20907 comm="syz.9.5686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57714de969 code=0x7ffc0000 [ 400.812183][ T30] audit: type=1326 audit(1746857085.186:18318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20907 comm="syz.9.5686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57714de969 code=0x7ffc0000 [ 400.837699][ T30] audit: type=1326 audit(1746857085.196:18319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20907 comm="syz.9.5686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f57714de969 code=0x7ffc0000 [ 400.861441][ T30] audit: type=1326 audit(1746857085.196:18320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20907 comm="syz.9.5686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57714de969 code=0x7ffc0000 [ 400.924783][T20166] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 400.950925][ T3392] Process accounting resumed [ 401.018557][T20945] loop4: detected capacity change from 0 to 1024 [ 401.049140][T20949] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5701'. [ 401.056246][T20945] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 401.058140][T20949] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5701'. [ 401.068895][T20945] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 401.080076][T20949] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5701'. [ 401.093127][T20945] JBD2: no valid journal superblock found [ 401.102257][T20945] EXT4-fs (loop4): Could not load journal inode [ 401.123430][T20949] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5701'. [ 401.132411][T20949] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5701'. [ 401.141736][T20949] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5701'. [ 401.151209][T20945] loop4: detected capacity change from 0 to 512 [ 401.160260][T20945] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -13 [ 401.169288][T20945] EXT4-fs warning (device loop4): ext4_block_to_path:107: block 3279945729 > max in inode 13 [ 401.179574][T20945] EXT4-fs warning (device loop4): ext4_block_to_path:107: block 3279945730 > max in inode 13 [ 401.180564][T20949] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5701'. [ 401.190266][T20945] EXT4-fs (loop4): 1 truncate cleaned up [ 401.198746][T20949] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5701'. [ 401.204881][T20945] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 401.239671][T20945] 9pnet_fd: Insufficient options for proto=fd [ 401.264369][T20735] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 401.386591][T20966] binfmt_misc: register: failed to install interpreter file ./file0 [ 401.562147][T20982] loop2: detected capacity change from 0 to 512 [ 401.571677][T20982] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 401.584150][T20982] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 401.708403][T20988] loop4: detected capacity change from 0 to 164 [ 401.725005][T20988] iso9660: Unknown parameter 'ÿÿÿÿÿÿÿÿÿÿÿÿ0xffffffffffffffff' [ 401.787105][T20990] loop6: detected capacity change from 0 to 512 [ 401.797596][T20990] EXT4-fs error (device loop6): ext4_iget_extra_inode:4693: inode #15: comm syz.6.5715: corrupted in-inode xattr: invalid ea_ino [ 401.814287][T20990] EXT4-fs error (device loop6): ext4_orphan_get:1396: comm syz.6.5715: couldn't read orphan inode 15 (err -117) [ 401.827745][T20990] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 401.892534][ T51] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.170076][ T51] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.192777][T20998] binfmt_misc: register: failed to install interpreter file ./file0 [ 402.228964][T21001] EXT4-fs error (device loop6): htree_dirblock_to_tree:1053: inode #2: comm syz.6.5715: Directory hole found for htree leaf block 0 [ 402.323881][ T51] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.386631][ T51] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.800667][T20703] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 402.814414][ T51] bond0 (unregistering): Released all slaves [ 402.883840][T21036] loop6: detected capacity change from 0 to 2048 [ 402.890455][T21032] loop2: detected capacity change from 0 to 512 [ 402.906037][T21036] loop6: p1 < > p4 [ 402.910453][T21036] loop6: p4 size 8388608 extends beyond EOD, truncated [ 402.934967][T21032] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 402.999744][T21032] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 403.018554][ T51] hsr_slave_0: left promiscuous mode [ 403.026030][T21032] ext4 filesystem being mounted at /10/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 403.036618][ T51] hsr_slave_1: left promiscuous mode [ 403.046374][ T51] veth1_macvtap: left promiscuous mode [ 403.052047][ T51] veth0_macvtap: left promiscuous mode [ 403.057762][ T51] veth1_vlan: left promiscuous mode [ 403.063140][ T51] veth0_vlan: left promiscuous mode [ 403.095347][T20683] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 403.117114][T21053] SELinux: Context system_u:object_r:mouse_device_t:s0 is not valid (left unmapped). [ 403.138697][T21058] FAULT_INJECTION: forcing a failure. [ 403.138697][T21058] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 403.152179][T21058] CPU: 0 UID: 0 PID: 21058 Comm: syz.0.5737 Not tainted 6.15.0-rc5-syzkaller-00204-g0e1329d4045c #0 PREEMPT(voluntary) [ 403.152323][T21058] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 403.152338][T21058] Call Trace: [ 403.152345][T21058] [ 403.152354][T21058] __dump_stack+0x1d/0x30 [ 403.152378][T21058] dump_stack_lvl+0xe8/0x140 [ 403.152424][T21058] dump_stack+0x15/0x1b [ 403.152443][T21058] should_fail_ex+0x265/0x280 [ 403.152496][T21058] should_fail_alloc_page+0xf2/0x100 [ 403.152565][T21058] __alloc_frozen_pages_noprof+0xff/0x360 [ 403.152593][T21058] alloc_pages_mpol+0xb3/0x250 [ 403.152614][T21058] alloc_pages_noprof+0x90/0x130 [ 403.152634][T21058] pte_alloc_one+0x2a/0x110 [ 403.152655][T21058] __pte_alloc+0x32/0x290 [ 403.152797][T21058] handle_mm_fault+0x1d74/0x2ae0 [ 403.152848][T21058] ? __rcu_read_unlock+0x4f/0x70 [ 403.152882][T21058] do_user_addr_fault+0x3fe/0x1090 [ 403.152926][T21058] exc_page_fault+0x54/0xc0 [ 403.153006][T21058] asm_exc_page_fault+0x26/0x30 [ 403.153029][T21058] RIP: 0010:__get_user_4+0x14/0x20 [ 403.153067][T21058] Code: 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 ba 00 f0 ff ff ff 7f 00 00 48 39 d0 48 0f 47 c2 0f 01 cb <8b> 10 31 c0 0f 01 ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 [ 403.153187][T21058] RSP: 0018:ffffc9000162fe68 EFLAGS: 00050287 [ 403.153206][T21058] RAX: 0000200000000000 RBX: 0000000000000000 RCX: ffffffff813ab69e [ 403.153218][T21058] RDX: 00007ffffffff000 RSI: 0000000000000000 RDI: ffffc9000162fe78 [ 403.153233][T21058] RBP: ffffc9000162fef0 R08: 0001c9000162fe7f R09: 0000000000000000 [ 403.153324][T21058] R10: ffffc9000162fe90 R11: 0001c9000162fe90 R12: 0000000000000000 [ 403.153339][T21058] R13: 0000000000000000 R14: 0000200000000000 R15: 0000000000000000 [ 403.153358][T21058] ? __se_sys_capset+0x6e/0x450 [ 403.153385][T21058] __se_sys_capset+0x7f/0x450 [ 403.153410][T21058] ? fpregs_assert_state_consistent+0x84/0xa0 [ 403.153463][T21058] __x64_sys_capset+0x31/0x40 [ 403.153486][T21058] x64_sys_call+0x1426/0x2fb0 [ 403.153506][T21058] do_syscall_64+0xd0/0x1a0 [ 403.153526][T21058] ? clear_bhb_loop+0x25/0x80 [ 403.153606][T21058] ? clear_bhb_loop+0x25/0x80 [ 403.153632][T21058] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 403.153656][T21058] RIP: 0033:0x7f159ddde969 [ 403.153751][T21058] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 403.153775][T21058] RSP: 002b:00007f159c447038 EFLAGS: 00000246 ORIG_RAX: 000000000000007e [ 403.153795][T21058] RAX: ffffffffffffffda RBX: 00007f159e005fa0 RCX: 00007f159ddde969 [ 403.153806][T21058] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000000 [ 403.153816][T21058] RBP: 00007f159c447090 R08: 0000000000000000 R09: 0000000000000000 [ 403.153908][T21058] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 403.153938][T21058] R13: 0000000000000000 R14: 00007f159e005fa0 R15: 00007ffdf16766d8 [ 403.153960][T21058] [ 403.696247][T21004] chnl_net:caif_netlink_parms(): no params data found [ 403.770121][T21074] netlink: 'syz.0.5742': attribute type 12 has an invalid length. [ 403.795128][T21081] sd 0:0:1:0: device reset [ 403.843716][T21004] bridge0: port 1(bridge_slave_0) entered blocking state [ 403.850855][T21004] bridge0: port 1(bridge_slave_0) entered disabled state [ 403.908558][T21004] bridge_slave_0: entered allmulticast mode [ 403.924862][T21004] bridge_slave_0: entered promiscuous mode [ 403.964737][T21004] bridge0: port 2(bridge_slave_1) entered blocking state [ 403.972233][T21089] loop6: detected capacity change from 0 to 2048 [ 403.978842][T21004] bridge0: port 2(bridge_slave_1) entered disabled state [ 403.979896][T21094] loop4: detected capacity change from 0 to 512 [ 404.002531][T21004] bridge_slave_1: entered allmulticast mode [ 404.013169][T21004] bridge_slave_1: entered promiscuous mode [ 404.030678][T21089] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 404.053934][T21094] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 404.064936][T21004] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 404.071083][T21094] EXT4-fs (loop4): orphan cleanup on readonly fs [ 404.082436][T21004] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 404.092386][T21094] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.5750: bg 0: block 248: padding at end of block bitmap is not set [ 404.107369][T21094] __quota_error: 101 callbacks suppressed [ 404.107386][T21094] Quota error (device loop4): write_blk: dquota write failed [ 404.120602][T21094] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 404.130786][T21094] EXT4-fs error (device loop4): ext4_acquire_dquot:6935: comm syz.4.5750: Failed to acquire dquot type 1 [ 404.149093][T21094] EXT4-fs (loop4): 1 truncate cleaned up [ 404.156224][T21094] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 404.186910][T21004] team0: Port device team_slave_0 added [ 404.207856][T21004] team0: Port device team_slave_1 added [ 404.254708][T21004] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 404.261804][T21004] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 404.287805][T21004] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 404.307223][T20735] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 404.330923][T21114] FAULT_INJECTION: forcing a failure. [ 404.330923][T21114] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 404.344095][T21114] CPU: 0 UID: 0 PID: 21114 Comm: syz.4.5755 Not tainted 6.15.0-rc5-syzkaller-00204-g0e1329d4045c #0 PREEMPT(voluntary) [ 404.344127][T21114] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 404.344138][T21114] Call Trace: [ 404.344156][T21114] [ 404.344163][T21114] __dump_stack+0x1d/0x30 [ 404.344182][T21114] dump_stack_lvl+0xe8/0x140 [ 404.344230][T21114] dump_stack+0x15/0x1b [ 404.344249][T21114] should_fail_ex+0x265/0x280 [ 404.344284][T21114] should_fail+0xb/0x20 [ 404.344388][T21114] should_fail_usercopy+0x1a/0x20 [ 404.344409][T21114] _copy_from_iter+0xcf/0xdd0 [ 404.344429][T21114] ? __build_skb_around+0x1a0/0x200 [ 404.344462][T21114] ? __alloc_skb+0x223/0x320 [ 404.344533][T21114] netlink_sendmsg+0x471/0x6b0 [ 404.344568][T21114] ? __pfx_netlink_sendmsg+0x10/0x10 [ 404.344597][T21114] __sock_sendmsg+0x142/0x180 [ 404.344726][T21114] ____sys_sendmsg+0x31e/0x4e0 [ 404.344753][T21114] ___sys_sendmsg+0x17b/0x1d0 [ 404.344792][T21114] __x64_sys_sendmsg+0xd4/0x160 [ 404.344820][T21114] x64_sys_call+0x2999/0x2fb0 [ 404.344844][T21114] do_syscall_64+0xd0/0x1a0 [ 404.344915][T21114] ? clear_bhb_loop+0x25/0x80 [ 404.344998][T21114] ? clear_bhb_loop+0x25/0x80 [ 404.345018][T21114] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 404.345050][T21114] RIP: 0033:0x7f1393cde969 [ 404.345064][T21114] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 404.345121][T21114] RSP: 002b:00007f1392347038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 404.345143][T21114] RAX: ffffffffffffffda RBX: 00007f1393f05fa0 RCX: 00007f1393cde969 [ 404.345157][T21114] RDX: 0000000000000850 RSI: 0000200000000200 RDI: 0000000000000003 [ 404.345172][T21114] RBP: 00007f1392347090 R08: 0000000000000000 R09: 0000000000000000 [ 404.345185][T21114] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 404.345199][T21114] R13: 0000000000000000 R14: 00007f1393f05fa0 R15: 00007ffefa417fa8 [ 404.345282][T21114] [ 404.555706][ T1738] TC_ACT_REPEAT abuse ? [ 404.563988][T21004] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 404.571024][T21004] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 404.596976][T21004] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 404.641331][T21004] hsr_slave_0: entered promiscuous mode [ 404.647585][T21004] hsr_slave_1: entered promiscuous mode [ 404.685800][ T30] audit: type=1400 audit(1746857345.103:18422): avc: denied { read } for pid=21115 comm="syz.0.5756" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 404.747206][T21004] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.796022][T21127] loop4: detected capacity change from 0 to 512 [ 404.802679][T21127] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 404.808696][T21112] bond1: entered promiscuous mode [ 404.816105][T21112] bond1: entered allmulticast mode [ 404.833391][T21112] 8021q: adding VLAN 0 to HW filter on device bond1 [ 404.844456][T21112] bond1 (unregistering): Released all slaves [ 405.022837][T21004] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.086799][T21004] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.156873][T21004] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.203626][ T36] Process accounting resumed [ 405.255993][T21004] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 405.279085][ T59] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 405.294129][T21127] loop4: detected capacity change from 0 to 1024 [ 405.300821][T21127] EXT4-fs: Ignoring removed nobh option [ 405.305452][T21004] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 405.313651][ T59] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 405.326455][ T59] EXT4-fs (loop6): This should not happen!! Data will be lost [ 405.326455][ T59] [ 405.328471][T21127] ext2: Unknown parameter 'dont_hash' [ 405.336357][ T59] EXT4-fs (loop6): Total free blocks count 0 [ 405.347729][ T59] EXT4-fs (loop6): Free/Dirty block details [ 405.353734][ T59] EXT4-fs (loop6): free_blocks=2415919504 [ 405.359536][ T59] EXT4-fs (loop6): dirty_blocks=9600 [ 405.364865][ T59] EXT4-fs (loop6): Block reservation details [ 405.370857][ T59] EXT4-fs (loop6): i_reserved_data_blocks=600 [ 405.372130][T21137] loop2: detected capacity change from 0 to 512 [ 405.385363][T21004] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 405.390657][ T59] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 405.416604][T21004] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 405.437177][T21137] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 405.529075][T21004] 8021q: adding VLAN 0 to HW filter on device bond0 [ 405.546883][T21137] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 405.553417][ T30] audit: type=1326 audit(1746857345.953:18423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21138 comm="syz.4.5764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1393cde969 code=0x7ffc0000 [ 405.568922][T21004] 8021q: adding VLAN 0 to HW filter on device team0 [ 405.577275][ T30] audit: type=1326 audit(1746857345.953:18424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21138 comm="syz.4.5764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1393cde969 code=0x7ffc0000 [ 405.607479][ T30] audit: type=1326 audit(1746857345.953:18425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21138 comm="syz.4.5764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1393cdd2d0 code=0x7ffc0000 [ 405.631119][ T30] audit: type=1326 audit(1746857345.953:18426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21138 comm="syz.4.5764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1393cdd2d0 code=0x7ffc0000 [ 405.654957][ T30] audit: type=1326 audit(1746857345.953:18427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21138 comm="syz.4.5764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1393cde969 code=0x7ffc0000 [ 405.678794][ T30] audit: type=1326 audit(1746857345.953:18428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21138 comm="syz.4.5764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1393cde969 code=0x7ffc0000 [ 405.694888][T21004] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 405.702418][ T30] audit: type=1326 audit(1746857345.953:18429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21138 comm="syz.4.5764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f1393cde969 code=0x7ffc0000 [ 405.712729][T21004] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 405.776144][ T1738] bridge0: port 1(bridge_slave_0) entered blocking state [ 405.783386][ T1738] bridge0: port 1(bridge_slave_0) entered forwarding state [ 405.798219][ T1738] bridge0: port 2(bridge_slave_1) entered blocking state [ 405.805370][ T1738] bridge0: port 2(bridge_slave_1) entered forwarding state [ 405.813464][ T3446] TC_ACT_REPEAT abuse ? [ 405.944506][T21004] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 406.061052][T21004] veth0_vlan: entered promiscuous mode [ 406.102310][T21004] veth1_vlan: entered promiscuous mode [ 406.152205][T21004] veth0_macvtap: entered promiscuous mode [ 406.206075][T21004] veth1_macvtap: entered promiscuous mode [ 406.235763][T21004] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 406.246272][T21004] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 406.256354][T21004] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 406.266899][T21004] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 406.270111][T21178] loop4: detected capacity change from 0 to 2048 [ 406.276936][T21004] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 406.293680][T21004] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 406.303699][T21004] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 406.314151][T21004] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 406.377296][T21004] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 406.387285][T21004] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 406.397808][T21004] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 406.407713][T21004] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 406.418171][T21004] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 406.428070][T21004] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 406.438585][T21004] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 406.446824][ T29] TC_ACT_REPEAT abuse ? [ 406.448571][T21004] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 406.463044][T21004] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 406.477472][T21180] SELinux: Context system_u:object_r:etc_aliases_t:s0 is not valid (left unmapped). [ 406.503953][T21004] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 406.522037][T21004] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.530898][T21004] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.539703][T21004] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.548451][T21004] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.560842][T21178] loop4: p1 < > p4 [ 406.565302][T21178] loop4: p4 size 8388608 extends beyond EOD, truncated [ 406.827274][T21198] __nla_validate_parse: 3 callbacks suppressed [ 406.827289][T21198] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5779'. [ 406.891678][T21200] bridge_slave_0: left allmulticast mode [ 406.897574][T21200] bridge_slave_0: left promiscuous mode [ 406.903292][T21200] bridge0: port 1(bridge_slave_0) entered disabled state [ 406.945307][T21200] bridge_slave_1: left allmulticast mode [ 406.951053][T21200] bridge_slave_1: left promiscuous mode [ 406.956930][T21200] bridge0: port 2(bridge_slave_1) entered disabled state [ 406.989104][T21200] bond0: (slave bond_slave_0): Releasing backup interface [ 407.018136][T21200] bond0: (slave bond_slave_1): Releasing backup interface [ 407.038981][T21200] team0: Port device team_slave_0 removed [ 407.049541][T21200] team0: Port device team_slave_1 removed [ 407.057684][T21206] loop2: detected capacity change from 0 to 2048 [ 407.065589][T21200] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 407.073086][T21200] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 407.085500][T21200] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 407.093599][T21200] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 407.109287][T21206] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 407.156743][T21213] infiniband srz1: RDMA CMA: cma_listen_on_dev, error -98 [ 407.270895][ T3446] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.274095][T20683] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 407.328142][ T3446] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.405019][T21238] loop6: detected capacity change from 0 to 512 [ 407.412958][T21238] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 407.430824][T21239] loop2: detected capacity change from 0 to 512 [ 407.441913][ T3446] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.454852][T21239] EXT4-fs: inline encryption not supported [ 407.466303][T21238] EXT4-fs (loop6): 1 truncate cleaned up [ 407.472368][T21238] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 407.515948][T21239] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 407.560152][T21239] ext4 filesystem being mounted at /29/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 407.571776][ T3446] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.611094][T20683] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 407.663294][T20703] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 407.677039][ T3446] bridge_slave_1: left allmulticast mode [ 407.682790][ T3446] bridge_slave_1: left promiscuous mode [ 407.688713][ T3446] bridge0: port 2(bridge_slave_1) entered disabled state [ 407.710247][ T3446] bridge_slave_0: left allmulticast mode [ 407.716002][ T3446] bridge_slave_0: left promiscuous mode [ 407.721721][ T3446] bridge0: port 1(bridge_slave_0) entered disabled state [ 407.731996][T21262] loop2: detected capacity change from 0 to 256 [ 407.778082][T21270] FAULT_INJECTION: forcing a failure. [ 407.778082][T21270] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 407.789005][T21262] FAULT_INJECTION: forcing a failure. [ 407.789005][T21262] name failslab, interval 1, probability 0, space 0, times 0 [ 407.791322][T21270] CPU: 1 UID: 0 PID: 21270 Comm: syz.6.5803 Not tainted 6.15.0-rc5-syzkaller-00204-g0e1329d4045c #0 PREEMPT(voluntary) [ 407.791360][T21270] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 407.791376][T21270] Call Trace: [ 407.791383][T21270] [ 407.791394][T21270] __dump_stack+0x1d/0x30 [ 407.791421][T21270] dump_stack_lvl+0xe8/0x140 [ 407.791520][T21270] dump_stack+0x15/0x1b [ 407.791542][T21270] should_fail_ex+0x265/0x280 [ 407.791583][T21270] should_fail+0xb/0x20 [ 407.791684][T21270] should_fail_usercopy+0x1a/0x20 [ 407.791708][T21270] _copy_from_user+0x1c/0xb0 [ 407.791744][T21270] memdup_user+0x5e/0xd0 [ 407.791767][T21270] io_parse_restrictions+0x56/0x210 [ 407.791807][T21270] io_register_restrictions+0x81/0xc0 [ 407.791851][T21270] __se_sys_io_uring_register+0xd72/0xeb0 [ 407.791884][T21270] ? fput+0x8f/0xc0 [ 407.791917][T21270] ? ksys_write+0x16e/0x1a0 [ 407.791993][T21270] __x64_sys_io_uring_register+0x55/0x70 [ 407.792025][T21270] x64_sys_call+0xc91/0x2fb0 [ 407.792051][T21270] do_syscall_64+0xd0/0x1a0 [ 407.792078][T21270] ? clear_bhb_loop+0x25/0x80 [ 407.792171][T21270] ? clear_bhb_loop+0x25/0x80 [ 407.792198][T21270] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 407.792264][T21270] RIP: 0033:0x7fb2e4abe969 [ 407.792283][T21270] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 407.792305][T21270] RSP: 002b:00007fb2e3127038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 407.792329][T21270] RAX: ffffffffffffffda RBX: 00007fb2e4ce5fa0 RCX: 00007fb2e4abe969 [ 407.792346][T21270] RDX: 0000200000000480 RSI: 000000000000000b RDI: 0000000000000003 [ 407.792361][T21270] RBP: 00007fb2e3127090 R08: 0000000000000000 R09: 0000000000000000 [ 407.792376][T21270] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 407.792392][T21270] R13: 0000000000000000 R14: 00007fb2e4ce5fa0 R15: 00007fff8cbd26c8 [ 407.792487][T21270] [ 407.850908][T21272] loop4: detected capacity change from 0 to 256 [ 407.854899][T21262] CPU: 0 UID: 0 PID: 21262 Comm: syz.2.5800 Not tainted 6.15.0-rc5-syzkaller-00204-g0e1329d4045c #0 PREEMPT(voluntary) [ 407.854933][T21262] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 407.854948][T21262] Call Trace: [ 407.854954][T21262] [ 407.854964][T21262] __dump_stack+0x1d/0x30 [ 407.855067][T21262] dump_stack_lvl+0xe8/0x140 [ 407.855092][T21262] dump_stack+0x15/0x1b [ 407.855113][T21262] should_fail_ex+0x265/0x280 [ 407.855152][T21262] ? alloc_pipe_info+0xae/0x350 [ 407.855209][T21262] should_failslab+0x8c/0xb0 [ 407.855245][T21262] __kmalloc_cache_noprof+0x4c/0x320 [ 407.855272][T21262] alloc_pipe_info+0xae/0x350 [ 407.855306][T21262] splice_direct_to_actor+0x592/0x680 [ 407.855340][T21262] ? kstrtouint_from_user+0x9f/0xf0 [ 407.855378][T21262] ? __pfx_direct_splice_actor+0x10/0x10 [ 407.855442][T21262] ? __rcu_read_unlock+0x4f/0x70 [ 407.855469][T21262] ? get_pid_task+0x96/0xd0 [ 407.855521][T21262] ? avc_policy_seqno+0x15/0x30 [ 407.855614][T21262] do_splice_direct+0xda/0x150 [ 407.855641][T21262] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 407.855677][T21262] do_sendfile+0x380/0x640 [ 407.855722][T21262] __x64_sys_sendfile64+0x105/0x150 [ 407.855822][T21262] x64_sys_call+0xb39/0x2fb0 [ 407.855850][T21262] do_syscall_64+0xd0/0x1a0 [ 407.855878][T21262] ? clear_bhb_loop+0x25/0x80 [ 407.855932][T21262] ? clear_bhb_loop+0x25/0x80 [ 407.855961][T21262] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 407.855988][T21262] RIP: 0033:0x7fd102abe969 [ 407.856008][T21262] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 407.856032][T21262] RSP: 002b:00007fd101127038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 407.856088][T21262] RAX: ffffffffffffffda RBX: 00007fd102ce5fa0 RCX: 00007fd102abe969 [ 407.856104][T21262] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 407.856120][T21262] RBP: 00007fd101127090 R08: 0000000000000000 R09: 0000000000000000 [ 407.856136][T21262] R10: 000000000000e065 R11: 0000000000000246 R12: 0000000000000001 [ 407.856188][T21262] R13: 0000000000000000 R14: 00007fd102ce5fa0 R15: 00007ffc9e034718 [ 407.856214][T21262] [ 408.287047][T21284] loop2: detected capacity change from 0 to 164 [ 408.293740][ T3446] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 408.308857][T21284] Unable to read rock-ridge attributes [ 408.316755][ T3446] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 408.320807][T21284] Unable to read rock-ridge attributes [ 408.331254][T21284] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 408.339957][ T3446] bond0 (unregistering): Released all slaves [ 408.341495][T21284] block device autoloading is deprecated and will be removed. [ 408.354686][T21284] syz.2.5808: attempt to access beyond end of device [ 408.354686][T21284] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 408.386050][T21207] chnl_net:caif_netlink_parms(): no params data found [ 408.429397][T12496] Process accounting resumed [ 408.466282][T21294] loop2: detected capacity change from 0 to 512 [ 408.473535][T21292] netlink: 'syz.1.5812': attribute type 7 has an invalid length. [ 408.481371][T21292] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5812'. [ 408.508975][ T3446] hsr_slave_0: left promiscuous mode [ 408.533493][ T3446] hsr_slave_1: left promiscuous mode [ 408.546104][T21294] ext4 filesystem being mounted at /35/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 408.557808][ T3446] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 408.565322][ T3446] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 408.590799][T21294] EXT4-fs error (device loop2): ext4_do_update_inode:5211: inode #2: comm syz.2.5813: corrupted inode contents [ 408.612000][ T3446] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 408.619567][ T3446] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 408.630143][T21294] EXT4-fs error (device loop2): ext4_dirty_inode:6103: inode #2: comm syz.2.5813: mark_inode_dirty error [ 408.645717][T21310] SELinux: policydb version 0 does not match my version range 15-34 [ 408.671927][T21310] SELinux: failed to load policy [ 408.695633][ T3446] veth1_macvtap: left promiscuous mode [ 408.699237][T21312] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5819'. [ 408.702179][ T3446] veth0_macvtap: left promiscuous mode [ 408.716222][T21294] EXT4-fs error (device loop2): ext4_do_update_inode:5211: inode #2: comm syz.2.5813: corrupted inode contents [ 408.730047][ T3446] veth1_vlan: left promiscuous mode [ 408.736187][ T3446] veth0_vlan: left promiscuous mode [ 408.871544][ T3446] team0 (unregistering): Port device team_slave_1 removed [ 408.881222][ T3446] team0 (unregistering): Port device team_slave_0 removed [ 408.888844][ T59] smc: removing ib device syz! [ 408.900005][T21316] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5819'. [ 408.950984][T21303] pim6reg: entered allmulticast mode [ 408.956696][T21302] pim6reg: left allmulticast mode [ 408.965818][T21312] IPVS: Error joining to the multicast group [ 409.020444][T21207] bridge0: port 1(bridge_slave_0) entered blocking state [ 409.027675][T21207] bridge0: port 1(bridge_slave_0) entered disabled state [ 409.089290][T21207] bridge_slave_0: entered allmulticast mode [ 409.103927][T21207] bridge_slave_0: entered promiscuous mode [ 409.141717][T21334] loop2: detected capacity change from 0 to 512 [ 409.150915][T21207] bridge0: port 2(bridge_slave_1) entered blocking state [ 409.158225][T21207] bridge0: port 2(bridge_slave_1) entered disabled state [ 409.190701][T21334] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 409.199290][T21207] bridge_slave_1: entered allmulticast mode [ 409.213951][T21207] bridge_slave_1: entered promiscuous mode [ 409.219345][T21334] EXT4-fs (loop2): orphan cleanup on readonly fs [ 409.233989][T21334] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.5824: bg 0: block 248: padding at end of block bitmap is not set [ 409.250079][T21334] __quota_error: 120 callbacks suppressed [ 409.250095][T21334] Quota error (device loop2): write_blk: dquota write failed [ 409.263294][T21334] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 409.273196][T21334] EXT4-fs error (device loop2): ext4_acquire_dquot:6935: comm syz.2.5824: Failed to acquire dquot type 1 [ 409.273279][ T30] audit: type=1326 audit(1746857349.683:18550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21338 comm="syz.4.5827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1393cde969 code=0x7ffc0000 [ 409.277484][T21334] EXT4-fs (loop2): 1 truncate cleaned up [ 409.284568][ T30] audit: type=1326 audit(1746857349.683:18551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21338 comm="syz.4.5827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1393cde969 code=0x7ffc0000 [ 409.337346][ T30] audit: type=1326 audit(1746857349.683:18552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21338 comm="syz.4.5827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1393cde969 code=0x7ffc0000 [ 409.361009][ T30] audit: type=1326 audit(1746857349.683:18553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21338 comm="syz.4.5827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1393cde969 code=0x7ffc0000 [ 409.384692][ T30] audit: type=1326 audit(1746857349.683:18554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21338 comm="syz.4.5827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1393cde969 code=0x7ffc0000 [ 409.408484][ T30] audit: type=1326 audit(1746857349.683:18555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21338 comm="syz.4.5827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1393cde969 code=0x7ffc0000 [ 409.435121][ T30] audit: type=1326 audit(1746857349.843:18556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21338 comm="syz.4.5827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1393cde969 code=0x7ffc0000 [ 409.458799][ T30] audit: type=1326 audit(1746857349.843:18557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21338 comm="syz.4.5827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1393cde969 code=0x7ffc0000 [ 409.492750][T21207] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 409.509835][T21207] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 409.559445][T21207] team0: Port device team_slave_0 added [ 409.567684][T21207] team0: Port device team_slave_1 added [ 409.577657][T21351] loop4: detected capacity change from 0 to 512 [ 409.593007][T21349] SELinux: policydb version 0 does not match my version range 15-34 [ 409.596961][T21351] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 409.613693][T21349] SELinux: failed to load policy [ 409.626918][T21207] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 409.633934][T21207] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 409.660173][T21207] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 409.714115][T21351] EXT4-fs (loop4): 1 truncate cleaned up [ 409.795067][T21207] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 409.802044][T21207] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 409.828209][T21207] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 409.916208][T21207] hsr_slave_0: entered promiscuous mode [ 409.931201][T21207] hsr_slave_1: entered promiscuous mode [ 409.946215][T21207] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 409.967751][T21207] Cannot create hsr debugfs directory [ 409.984135][T21366] 9pnet_fd: Insufficient options for proto=fd [ 410.247166][T21375] loop4: detected capacity change from 0 to 512 [ 410.265606][T21375] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 410.284662][ T3446] TC_ACT_REPEAT abuse ? [ 410.290730][T21375] EXT4-fs (loop4): orphan cleanup on readonly fs [ 410.313911][T21375] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.5839: bg 0: block 248: padding at end of block bitmap is not set [ 410.358938][T21375] EXT4-fs error (device loop4): ext4_acquire_dquot:6935: comm syz.4.5839: Failed to acquire dquot type 1 [ 410.394953][T21375] EXT4-fs (loop4): 1 truncate cleaned up [ 410.417775][T21207] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 410.436257][T21207] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 410.449193][T21384] loop4: detected capacity change from 0 to 512 [ 410.455840][T21384] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 410.477961][T21207] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 410.513794][T21207] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 410.559410][T21384] infiniband syz!: set down [ 410.564010][T21384] infiniband syz!: added team_slave_0 [ 410.612283][T21207] 8021q: adding VLAN 0 to HW filter on device bond0 [ 410.624973][T21384] RDS/IB: syz!: added [ 410.629184][T21384] smc: adding ib device syz! with port count 1 [ 410.636755][T21384] smc: ib device syz! port 1 has pnetid [ 410.647562][T21207] 8021q: adding VLAN 0 to HW filter on device team0 [ 410.681675][ T3446] bridge0: port 1(bridge_slave_0) entered blocking state [ 410.688934][ T3446] bridge0: port 1(bridge_slave_0) entered forwarding state [ 410.751769][T21207] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 410.762194][T21207] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 410.783813][ T377] bridge0: port 2(bridge_slave_1) entered blocking state [ 410.790914][ T377] bridge0: port 2(bridge_slave_1) entered forwarding state [ 411.154669][T21207] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 411.576147][ T3446] TC_ACT_REPEAT abuse ? [ 411.688938][T21424] loop4: detected capacity change from 0 to 512 [ 411.698627][T21207] veth0_vlan: entered promiscuous mode [ 411.727724][T21424] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 411.739186][T21207] veth1_vlan: entered promiscuous mode [ 411.757763][T21424] EXT4-fs (loop4): orphan cleanup on readonly fs [ 411.770445][T21207] veth0_macvtap: entered promiscuous mode [ 411.783809][T21424] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.5852: bg 0: block 248: padding at end of block bitmap is not set [ 411.817901][T21207] veth1_macvtap: entered promiscuous mode [ 411.833517][T21424] EXT4-fs error (device loop4): ext4_acquire_dquot:6935: comm syz.4.5852: Failed to acquire dquot type 1 [ 411.845454][T21424] EXT4-fs (loop4): 1 truncate cleaned up [ 411.847211][T21207] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 411.861714][T21207] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 411.871587][T21207] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 411.882057][T21207] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 411.891961][T21207] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 411.902512][T21207] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 411.916909][T21207] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 411.925360][T21207] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 411.935898][T21207] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 411.945748][T21207] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 411.956241][T21207] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 411.966077][T21207] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 411.976526][T21207] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 412.121827][T21430] loop2: detected capacity change from 0 to 512 [ 412.133908][T21207] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 412.162471][T21430] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 412.175621][T21207] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.184447][T21207] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.193354][T21207] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.202046][T21207] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.212265][ T1738] TC_ACT_REPEAT abuse ? [ 412.233129][T21430] EXT4-fs (loop2): 1 truncate cleaned up [ 412.427948][T21444] siw: device registration error -23 [ 412.439875][T21438] bridge_slave_0: left allmulticast mode [ 412.445836][T21438] bridge_slave_0: left promiscuous mode [ 412.451547][T21438] bridge0: port 1(bridge_slave_0) entered disabled state [ 412.484166][T21450] loop2: detected capacity change from 0 to 2048 [ 412.492914][T21438] bridge_slave_1: left allmulticast mode [ 412.498738][T21438] bridge_slave_1: left promiscuous mode [ 412.504435][T21438] bridge0: port 2(bridge_slave_1) entered disabled state [ 412.520225][T21438] bond0: (slave bond_slave_0): Releasing backup interface [ 412.556094][T21438] bond0: (slave bond_slave_1): Releasing backup interface [ 412.586710][T21438] team0: Port device team_slave_0 removed [ 412.616697][T21438] team0: Port device team_slave_1 removed [ 412.641889][T21438] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 412.649399][T21438] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 412.681114][T21438] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 412.688639][T21438] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 412.781706][T11421] srz1: Port: 1 Link DOWN [ 412.807246][T21467] FAULT_INJECTION: forcing a failure. [ 412.807246][T21467] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 412.820517][T21467] CPU: 0 UID: 0 PID: 21467 Comm: syz.1.5864 Not tainted 6.15.0-rc5-syzkaller-00204-g0e1329d4045c #0 PREEMPT(voluntary) [ 412.820589][T21467] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 412.820678][T21467] Call Trace: [ 412.820685][T21467] [ 412.820694][T21467] __dump_stack+0x1d/0x30 [ 412.820716][T21467] dump_stack_lvl+0xe8/0x140 [ 412.820759][T21467] dump_stack+0x15/0x1b [ 412.820779][T21467] should_fail_ex+0x265/0x280 [ 412.820842][T21467] should_fail+0xb/0x20 [ 412.820873][T21467] should_fail_usercopy+0x1a/0x20 [ 412.820891][T21467] strncpy_from_user+0x25/0x230 [ 412.820983][T21467] ? kmem_cache_alloc_noprof+0x186/0x310 [ 412.821014][T21467] ? getname_flags+0x80/0x3b0 [ 412.821063][T21467] getname_flags+0xae/0x3b0 [ 412.821093][T21467] do_readlinkat+0x64/0x320 [ 412.821119][T21467] __x64_sys_readlinkat+0x51/0x60 [ 412.821158][T21467] x64_sys_call+0x2768/0x2fb0 [ 412.821284][T21467] do_syscall_64+0xd0/0x1a0 [ 412.821309][T21467] ? clear_bhb_loop+0x25/0x80 [ 412.821336][T21467] ? clear_bhb_loop+0x25/0x80 [ 412.821363][T21467] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 412.821480][T21467] RIP: 0033:0x7fe4a15de969 [ 412.821498][T21467] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 412.821522][T21467] RSP: 002b:00007fe49fc47038 EFLAGS: 00000246 ORIG_RAX: 000000000000010b [ 412.821544][T21467] RAX: ffffffffffffffda RBX: 00007fe4a1805fa0 RCX: 00007fe4a15de969 [ 412.821559][T21467] RDX: 00002000000002c0 RSI: 00002000000001c0 RDI: 0000000000000006 [ 412.821571][T21467] RBP: 00007fe49fc47090 R08: 0000000000000000 R09: 0000000000000000 [ 412.821650][T21467] R10: 00000000000000cc R11: 0000000000000246 R12: 0000000000000001 [ 412.821729][T21467] R13: 0000000000000000 R14: 00007fe4a1805fa0 R15: 00007ffc448c62f8 [ 412.821799][T21467] [ 412.855735][T21470] loop4: detected capacity change from 0 to 1024 [ 413.015235][T21472] loop7: detected capacity change from 0 to 512 [ 413.021431][T21470] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 413.033413][T21470] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 413.053580][T21470] JBD2: no valid journal superblock found [ 413.055011][T21472] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 413.059333][T21470] EXT4-fs (loop4): Could not load journal inode [ 413.092161][T21470] loop4: detected capacity change from 0 to 512 [ 413.104368][T21472] EXT4-fs (loop7): 1 truncate cleaned up [ 413.121063][T21470] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -13 [ 413.130092][T21470] EXT4-fs warning (device loop4): ext4_block_to_path:107: block 3279945729 > max in inode 13 [ 413.153290][T21470] EXT4-fs warning (device loop4): ext4_block_to_path:107: block 3279945730 > max in inode 13 [ 413.177832][T21470] EXT4-fs (loop4): 1 truncate cleaned up [ 413.197331][T21470] 9pnet_fd: Insufficient options for proto=fd [ 413.270701][T21486] siw: device registration error -23 [ 413.306456][T21488] FAULT_INJECTION: forcing a failure. [ 413.306456][T21488] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 413.319676][T21488] CPU: 0 UID: 0 PID: 21488 Comm: syz.4.5870 Not tainted 6.15.0-rc5-syzkaller-00204-g0e1329d4045c #0 PREEMPT(voluntary) [ 413.319754][T21488] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 413.319813][T21488] Call Trace: [ 413.319822][T21488] [ 413.319829][T21488] __dump_stack+0x1d/0x30 [ 413.319916][T21488] dump_stack_lvl+0xe8/0x140 [ 413.319939][T21488] dump_stack+0x15/0x1b [ 413.319966][T21488] should_fail_ex+0x265/0x280 [ 413.320002][T21488] should_fail+0xb/0x20 [ 413.320037][T21488] should_fail_usercopy+0x1a/0x20 [ 413.320054][T21488] _copy_to_user+0x20/0xa0 [ 413.320074][T21488] simple_read_from_buffer+0xb5/0x130 [ 413.320103][T21488] proc_fail_nth_read+0x100/0x140 [ 413.320129][T21488] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 413.320201][T21488] vfs_read+0x19d/0x6f0 [ 413.320229][T21488] ? __rcu_read_unlock+0x4f/0x70 [ 413.320254][T21488] ? __fget_files+0x184/0x1c0 [ 413.320329][T21488] ? __sys_bind+0x1f9/0x2a0 [ 413.320363][T21488] ksys_read+0xda/0x1a0 [ 413.320433][T21488] __x64_sys_read+0x40/0x50 [ 413.320510][T21488] x64_sys_call+0x2d77/0x2fb0 [ 413.320533][T21488] do_syscall_64+0xd0/0x1a0 [ 413.320554][T21488] ? clear_bhb_loop+0x25/0x80 [ 413.320573][T21488] ? clear_bhb_loop+0x25/0x80 [ 413.320592][T21488] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 413.320635][T21488] RIP: 0033:0x7f1393cdd37c [ 413.320652][T21488] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 413.320669][T21488] RSP: 002b:00007f1392347030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 413.320686][T21488] RAX: ffffffffffffffda RBX: 00007f1393f05fa0 RCX: 00007f1393cdd37c [ 413.320698][T21488] RDX: 000000000000000f RSI: 00007f13923470a0 RDI: 0000000000000006 [ 413.320709][T21488] RBP: 00007f1392347090 R08: 0000000000000000 R09: 0000000000000000 [ 413.320739][T21488] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 413.320754][T21488] R13: 0000000000000000 R14: 00007f1393f05fa0 R15: 00007ffefa417fa8 [ 413.320855][T21488] [ 413.612744][ T3446] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 413.628231][ T3446] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 413.641206][ T3446] EXT4-fs (loop2): This should not happen!! Data will be lost [ 413.641206][ T3446] [ 413.651121][ T3446] EXT4-fs (loop2): Total free blocks count 0 [ 413.657186][ T3446] EXT4-fs (loop2): Free/Dirty block details [ 413.663135][ T3446] EXT4-fs (loop2): free_blocks=2415919504 [ 413.668971][ T3446] EXT4-fs (loop2): dirty_blocks=8752 [ 413.674291][ T3446] EXT4-fs (loop2): Block reservation details [ 413.680277][ T3446] EXT4-fs (loop2): i_reserved_data_blocks=547 [ 413.708634][ T3446] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 413.721427][ T3446] EXT4-fs (loop2): This should not happen!! Data will be lost [ 413.721427][ T3446] [ 413.731263][T21501] loop4: detected capacity change from 0 to 8192 [ 413.800236][T21511] loop7: detected capacity change from 0 to 512 [ 413.808161][T21511] EXT4-fs (loop7): couldn't mount as ext3 due to feature incompatibilities [ 413.844629][T21513] loop4: detected capacity change from 0 to 1024 [ 413.852722][T21513] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 413.863805][T21513] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 413.885049][T21513] JBD2: no valid journal superblock found [ 413.890913][T21513] EXT4-fs (loop4): Could not load journal inode [ 413.910754][T21521] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5882'. [ 413.919930][T21513] loop4: detected capacity change from 0 to 512 [ 413.942520][T21513] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -13 [ 413.950960][T21513] EXT4-fs warning (device loop4): ext4_block_to_path:107: block 3279945729 > max in inode 13 [ 413.961627][T21513] EXT4-fs warning (device loop4): ext4_block_to_path:107: block 3279945730 > max in inode 13 [ 413.983521][T21513] EXT4-fs (loop4): 1 truncate cleaned up [ 413.992303][T21513] 9pnet_fd: Insufficient options for proto=fd [ 414.020809][T21530] loop2: detected capacity change from 0 to 512 [ 414.029646][T21527] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 414.043588][T21527] loop6: detected capacity change from 0 to 512 [ 414.050980][T21527] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 414.071858][T21533] smc: net device bond0 applied user defined pnetid SYZ2 [ 414.072696][T21527] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002] [ 414.086872][T21530] ext4 filesystem being mounted at /49/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 414.088662][T21530] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.5884: bg 0: block 424: padding at end of block bitmap is not set [ 414.097514][T21527] EXT4-fs error (device loop6): ext4_iget_extra_inode:4693: inode #15: comm syz.6.5885: corrupted in-inode xattr: e_value size too large [ 414.120528][T21533] smc: net device bond0 erased user defined pnetid SYZ2 [ 414.164064][T21527] EXT4-fs error (device loop6): ext4_orphan_get:1396: comm syz.6.5885: couldn't read orphan inode 15 (err -117) [ 414.453577][ T51] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.520253][ T51] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.577349][ T51] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.686598][ T51] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.985451][ T51] bond0 (unregistering): Released all slaves [ 415.211279][ T51] hsr_slave_0: left promiscuous mode [ 415.234614][ T51] hsr_slave_1: left promiscuous mode [ 415.257875][ T51] veth1_macvtap: left promiscuous mode [ 415.266915][ T51] veth0_macvtap: left promiscuous mode [ 415.272590][ T51] veth1_vlan: left promiscuous mode [ 415.306861][ T51] veth0_vlan: left promiscuous mode [ 415.326298][ T377] TC_ACT_REPEAT abuse ? [ 415.356141][T21576] netlink: 'syz.7.5900': attribute type 9 has an invalid length. [ 415.364133][T21576] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5900'. [ 415.399460][T21577] loop6: detected capacity change from 0 to 128 [ 415.451896][T21577] syz.6.5896: attempt to access beyond end of device [ 415.451896][T21577] loop6: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 415.494690][ T30] kauditd_printk_skb: 133 callbacks suppressed [ 415.494707][ T30] audit: type=1400 audit(1746857355.913:18687): avc: denied { accept } for pid=21575 comm="syz.7.5900" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 415.541368][ T6624] smc: removing ib device syz! [ 415.606249][T21553] chnl_net:caif_netlink_parms(): no params data found [ 415.670516][ T30] audit: type=1326 audit(1746857356.073:18688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21585 comm="syz.7.5903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7708bde969 code=0x7ffc0000 [ 415.694267][ T30] audit: type=1326 audit(1746857356.073:18689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21585 comm="syz.7.5903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7708bde969 code=0x7ffc0000 [ 415.717894][ T30] audit: type=1400 audit(1746857356.073:18690): avc: denied { search } for pid=21581 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 415.740221][ T30] audit: type=1400 audit(1746857356.073:18691): avc: denied { read } for pid=21587 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=482 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 415.763579][ T30] audit: type=1400 audit(1746857356.073:18692): avc: denied { open } for pid=21587 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=482 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 415.764684][T21586] SELinux: failed to load policy [ 415.788757][ T30] audit: type=1400 audit(1746857356.073:18693): avc: denied { getattr } for pid=21587 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=482 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 415.819291][ T30] audit: type=1400 audit(1746857356.073:18694): avc: denied { getattr } for pid=21587 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=508 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 415.845814][ T30] audit: type=1326 audit(1746857356.083:18695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21585 comm="syz.7.5903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7708bde969 code=0x7ffc0000 [ 415.869462][ T30] audit: type=1326 audit(1746857356.083:18696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21585 comm="syz.7.5903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7708bde969 code=0x7ffc0000 [ 415.994716][T21600] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 416.010217][T21604] loop7: detected capacity change from 0 to 512 [ 416.018184][T21604] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 416.041327][T21604] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 416.198275][T21553] bridge0: port 1(bridge_slave_0) entered blocking state [ 416.205604][T21553] bridge0: port 1(bridge_slave_0) entered disabled state [ 416.220305][T21553] bridge_slave_0: entered allmulticast mode [ 416.236706][T21553] bridge_slave_0: entered promiscuous mode [ 416.269610][T21553] bridge0: port 2(bridge_slave_1) entered blocking state [ 416.276763][T21553] bridge0: port 2(bridge_slave_1) entered disabled state [ 416.304717][T21553] bridge_slave_1: entered allmulticast mode [ 416.313699][T21553] bridge_slave_1: entered promiscuous mode [ 416.353172][T21553] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 416.370493][T21553] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 416.424789][T21553] team0: Port device team_slave_0 added [ 416.447558][T21553] team0: Port device team_slave_1 added [ 416.491572][T21553] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 416.498599][T21553] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 416.524577][T21553] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 416.541868][T21553] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 416.548956][T21553] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 416.574940][T21553] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 416.608642][T21553] hsr_slave_0: entered promiscuous mode [ 416.614843][T21553] hsr_slave_1: entered promiscuous mode [ 416.620910][T21553] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 416.640800][T21553] Cannot create hsr debugfs directory [ 417.107905][T21553] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 417.134904][T21553] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 417.156489][T21553] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 417.179727][T21553] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 417.277142][T21553] 8021q: adding VLAN 0 to HW filter on device bond0 [ 417.317256][T21553] 8021q: adding VLAN 0 to HW filter on device team0 [ 417.325047][ T377] TC_ACT_REPEAT abuse ? [ 417.351090][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 417.358228][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 417.413510][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 417.420783][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 417.473390][T21686] smc: net device bond0 applied user defined pnetid SYZ2 [ 417.475533][T21553] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 417.496290][T21686] smc: net device bond0 erased user defined pnetid SYZ2 [ 417.598926][T21698] loop6: detected capacity change from 0 to 256 [ 417.620959][T21553] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 417.682738][T21698] FAT-fs (loop6): count of clusters too big (178174) [ 417.689628][T21698] FAT-fs (loop6): Can't find a valid FAT filesystem [ 417.810130][T21719] loop7: detected capacity change from 0 to 512 [ 417.821780][T21720] loop6: detected capacity change from 0 to 512 [ 417.834996][T21719] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 417.857805][T21553] veth0_vlan: entered promiscuous mode [ 417.871750][T21720] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 417.896201][T21553] veth1_vlan: entered promiscuous mode [ 417.905980][T21719] EXT4-fs (loop7): orphan cleanup on readonly fs [ 417.914730][T21719] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.5923: bg 0: block 248: padding at end of block bitmap is not set [ 417.933330][T21553] veth0_macvtap: entered promiscuous mode [ 417.941724][T21720] EXT4-fs mount: 24 callbacks suppressed [ 417.941740][T21720] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 417.950381][T21553] veth1_macvtap: entered promiscuous mode [ 417.966828][ T3446] TC_ACT_REPEAT abuse ? [ 417.994852][T21719] EXT4-fs error (device loop7): ext4_acquire_dquot:6935: comm syz.7.5923: Failed to acquire dquot type 1 [ 418.003606][T21720] ext4 filesystem being mounted at /38/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 418.040457][T21553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 418.051090][T21553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 418.060968][T21553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 418.071442][T21553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 418.081370][T21553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 418.091848][T21553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 418.114961][T21719] EXT4-fs (loop7): 1 truncate cleaned up [ 418.124322][T21553] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 418.132849][T21719] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 418.147972][T21553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 418.158521][T21553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 418.168350][T21553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 418.178824][T21553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 418.188691][T21553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 418.199185][T21553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 418.210420][T21553] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 418.221351][T20703] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 418.232332][T21207] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 418.243500][T21553] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.252313][T21553] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.261055][T21553] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.269793][T21553] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.318020][T21746] loop6: detected capacity change from 0 to 2048 [ 418.373966][T21743] infiniband syz!: set active [ 418.378787][T21743] infiniband syz!: added team_slave_0 [ 418.393637][T21743] RDS/IB: syz!: added [ 418.397717][T21743] smc: adding ib device syz! with port count 1 [ 418.405255][T21746] loop6: p1 < > p4 [ 418.423303][T21743] smc: ib device syz! port 1 has pnetid [ 418.423400][T21746] loop6: p4 size 8388608 extends beyond EOD, truncated [ 418.515765][ T3396] Process accounting resumed [ 418.518733][T21761] SELinux: failed to load policy [ 418.835493][T21775] SELinux: security policydb version 18 (MLS) not backwards compatible [ 418.845813][T21775] SELinux: failed to load policy [ 418.864500][T21773] loop7: detected capacity change from 0 to 512 [ 418.895148][T21773] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 418.923389][T21773] ext4 filesystem being mounted at /25/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 418.975592][T21782] smc: net device bond0 applied user defined pnetid SYZ2 [ 418.992365][T21782] smc: net device bond0 erased user defined pnetid SYZ2 [ 419.039437][T21207] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 419.114492][T21786] loop7: detected capacity change from 0 to 128 [ 419.179211][T21786] syz.7.5937: attempt to access beyond end of device [ 419.179211][T21786] loop7: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 419.203101][T21786] syz.7.5937: attempt to access beyond end of device [ 419.203101][T21786] loop7: rw=524288, sector=145, nr_sectors = 224 limit=128 [ 419.251349][T21793] loop7: detected capacity change from 0 to 512 [ 419.268452][T21793] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 419.279088][T21795] program syz.3.5942 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 419.368946][T21801] siw: device registration error -23 [ 419.397300][T21804] smc: net device bond0 applied user defined pnetid SYZ2 [ 419.407147][T21804] smc: net device bond0 erased user defined pnetid SYZ2 [ 419.566180][T21815] loop3: detected capacity change from 0 to 2048 [ 419.589770][T21793] loop7: detected capacity change from 0 to 1024 [ 419.601003][T21793] EXT4-fs: Ignoring removed nobh option [ 419.609502][T21793] ext2: Unknown parameter 'dont_hash' [ 419.634977][T21815] loop3: p1 < > p4 [ 419.641185][T21815] loop3: p4 size 8388608 extends beyond EOD, truncated [ 419.683659][T21822] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5951'. [ 419.713243][T21822] bond1: entered promiscuous mode [ 419.718388][T21822] bond1: entered allmulticast mode [ 419.725690][T21822] 8021q: adding VLAN 0 to HW filter on device bond1 [ 420.118911][T21846] loop7: detected capacity change from 0 to 512 [ 420.128946][T21846] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 420.139328][T21846] EXT4-fs (loop7): orphan cleanup on readonly fs [ 420.155016][T21846] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.5962: bg 0: block 248: padding at end of block bitmap is not set [ 420.171691][T21846] EXT4-fs error (device loop7): ext4_acquire_dquot:6935: comm syz.7.5962: Failed to acquire dquot type 1 [ 420.184859][T21846] EXT4-fs (loop7): 1 truncate cleaned up [ 420.191079][T21846] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 420.240332][T21851] loop6: detected capacity change from 0 to 2048 [ 420.250005][T21207] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 420.288432][T21856] loop2: detected capacity change from 0 to 512 [ 420.295628][T21851] loop6: p1 < > p4 [ 420.295802][T21856] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 420.300317][T21851] loop6: p4 size 8388608 extends beyond EOD, truncated [ 420.312908][T21856] EXT4-fs (loop2): 1 truncate cleaned up [ 420.322647][T21856] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 420.398505][T21856] vhci_hcd: invalid port number 224 [ 420.450222][T21867] loop6: detected capacity change from 0 to 1024 [ 420.459462][T21867] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 420.470462][T21867] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 420.492539][T21867] JBD2: no valid journal superblock found [ 420.498381][T21867] EXT4-fs (loop6): Could not load journal inode [ 420.540125][T21867] loop6: detected capacity change from 0 to 512 [ 420.548114][T21867] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -13 [ 420.557897][T21867] EXT4-fs warning (device loop6): ext4_block_to_path:107: block 3279945729 > max in inode 13 [ 420.568231][T21867] EXT4-fs warning (device loop6): ext4_block_to_path:107: block 3279945730 > max in inode 13 [ 420.589716][T21867] EXT4-fs (loop6): 1 truncate cleaned up [ 420.596920][T21867] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 420.612134][T20683] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 420.614425][T21867] 9pnet_fd: Insufficient options for proto=fd [ 420.635580][ T30] kauditd_printk_skb: 105 callbacks suppressed [ 420.635676][ T30] audit: type=1326 audit(1746857361.053:18798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21866 comm="syz.6.5968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2e4abe969 code=0x7ffc0000 [ 420.671619][ T30] audit: type=1326 audit(1746857361.083:18799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21866 comm="syz.6.5968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fb2e4abe969 code=0x7ffc0000 [ 420.695312][ T30] audit: type=1326 audit(1746857361.083:18800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21866 comm="syz.6.5968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2e4abe969 code=0x7ffc0000 [ 420.719008][ T30] audit: type=1326 audit(1746857361.083:18801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21866 comm="syz.6.5968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7fb2e4abe969 code=0x7ffc0000 [ 420.742741][ T30] audit: type=1326 audit(1746857361.083:18802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21866 comm="syz.6.5968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2e4abe969 code=0x7ffc0000 [ 420.766327][ T30] audit: type=1326 audit(1746857361.083:18803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21866 comm="syz.6.5968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fb2e4abe969 code=0x7ffc0000 [ 420.789985][ T30] audit: type=1326 audit(1746857361.083:18804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21866 comm="syz.6.5968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2e4abe969 code=0x7ffc0000 [ 420.813656][ T30] audit: type=1326 audit(1746857361.083:18805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21866 comm="syz.6.5968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7fb2e4abe969 code=0x7ffc0000 [ 420.814024][T21875] loop2: detected capacity change from 0 to 512 [ 420.837342][ T30] audit: type=1326 audit(1746857361.083:18806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21866 comm="syz.6.5968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2e4abe969 code=0x7ffc0000 [ 420.837377][ T30] audit: type=1326 audit(1746857361.083:18807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21866 comm="syz.6.5968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb2e4abe969 code=0x7ffc0000 [ 420.893874][T20703] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 420.894973][T21875] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 420.916653][T21875] ext4 filesystem being mounted at /60/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 421.044859][T20683] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 421.053047][T21887] loop6: detected capacity change from 0 to 512 [ 421.062340][T21887] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 421.078499][T21887] EXT4-fs (loop6): orphan cleanup on readonly fs [ 421.081208][T21892] loop2: detected capacity change from 0 to 256 [ 421.092444][T21892] FAT-fs (loop2): count of clusters too big (178174) [ 421.099189][T21892] FAT-fs (loop2): Can't find a valid FAT filesystem [ 421.106118][T21887] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.5975: bg 0: block 248: padding at end of block bitmap is not set [ 421.120826][T21887] EXT4-fs error (device loop6): ext4_acquire_dquot:6935: comm syz.6.5975: Failed to acquire dquot type 1 [ 421.154007][T21887] EXT4-fs (loop6): 1 truncate cleaned up [ 421.160400][T21887] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 421.177844][ T377] TC_ACT_REPEAT abuse ? [ 421.200368][T20703] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 421.233723][T21902] loop2: detected capacity change from 0 to 512 [ 421.240333][T21902] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 421.511956][T21902] loop2: detected capacity change from 0 to 1024 [ 421.520912][T21902] EXT4-fs: Ignoring removed nobh option [ 421.529846][T21902] ext2: Unknown parameter 'dont_hash' [ 421.540950][T21926] smc: net device bond0 applied user defined pnetid SYZ2 [ 421.548579][T21926] smc: net device bond0 erased user defined pnetid SYZ2 [ 421.661209][T21938] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5994'. [ 421.671718][T21938] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5994'. [ 421.828091][ T51] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 421.876510][ T51] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 421.926728][ T51] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 421.976832][ T51] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.091825][T21961] loop6: detected capacity change from 0 to 512 [ 422.098686][T21961] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 422.099976][ T51] bridge_slave_1: left allmulticast mode [ 422.112779][ T51] bridge_slave_1: left promiscuous mode [ 422.118475][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 422.139443][ T51] bridge_slave_0: left allmulticast mode [ 422.145173][ T51] bridge_slave_0: left promiscuous mode [ 422.150857][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 422.246959][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 422.265418][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 422.281735][ T51] bond0 (unregistering): Released all slaves [ 422.295602][T21950] chnl_net:caif_netlink_parms(): no params data found [ 422.295613][T21966] loop7: detected capacity change from 0 to 512 [ 422.311796][T21966] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 422.329723][T21966] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 422.345792][T21966] ext4 filesystem being mounted at /39/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 422.363836][ T377] TC_ACT_REPEAT abuse ? [ 422.410340][T21207] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 422.453218][ T51] hsr_slave_0: left promiscuous mode [ 422.460240][ T51] hsr_slave_1: left promiscuous mode [ 422.466079][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 422.473622][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 422.490385][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 422.497891][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 422.515956][ T51] veth1_macvtap: left promiscuous mode [ 422.525278][ T51] veth0_macvtap: left promiscuous mode [ 422.534197][ T51] veth1_vlan: left promiscuous mode [ 422.542823][ T51] veth0_vlan: left promiscuous mode [ 422.675034][ T51] team0 (unregistering): Port device team_slave_1 removed [ 422.687013][T21987] loop2: detected capacity change from 0 to 512 [ 422.696269][ T51] team0 (unregistering): Port device team_slave_0 removed [ 422.716107][T21987] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 422.743453][T21987] ext4 filesystem being mounted at /68/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 422.775856][T21950] bridge0: port 1(bridge_slave_0) entered blocking state [ 422.782975][T21950] bridge0: port 1(bridge_slave_0) entered disabled state [ 422.790283][T21950] bridge_slave_0: entered allmulticast mode [ 422.796861][T21950] bridge_slave_0: entered promiscuous mode [ 422.816948][T21950] bridge0: port 2(bridge_slave_1) entered blocking state [ 422.824100][T21950] bridge0: port 2(bridge_slave_1) entered disabled state [ 422.831748][T21950] bridge_slave_1: entered allmulticast mode [ 422.838370][T21950] bridge_slave_1: entered promiscuous mode [ 422.867602][T21950] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 422.885074][T21950] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 422.919709][T21950] team0: Port device team_slave_0 added [ 422.926526][T21950] team0: Port device team_slave_1 added [ 422.940202][T20683] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 422.959347][T22003] loop6: detected capacity change from 0 to 1024 [ 422.959833][T21950] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 422.972773][T21950] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 422.998783][T21950] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 423.010440][T21950] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 423.017672][T21950] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 423.025897][T22003] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 423.043638][T21950] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 423.087563][T22007] loop2: detected capacity change from 0 to 512 [ 423.106823][T21950] hsr_slave_0: entered promiscuous mode [ 423.112969][T21950] hsr_slave_1: entered promiscuous mode [ 423.134180][T21950] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 423.141760][T21950] Cannot create hsr debugfs directory [ 423.166981][T22007] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 423.212278][T22007] ext4 filesystem being mounted at /69/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 423.252688][T22007] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.6012: bg 0: block 424: padding at end of block bitmap is not set [ 423.274994][T22010] 9pnet_fd: Insufficient options for proto=fd [ 423.392315][T20683] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 423.572081][T21950] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 423.592196][T21950] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 423.615764][T21950] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 423.634156][T21950] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 423.709935][T22023] loop2: detected capacity change from 0 to 512 [ 423.724644][ T6624] TC_ACT_REPEAT abuse ? [ 423.728047][T21950] 8021q: adding VLAN 0 to HW filter on device bond0 [ 423.740085][T22023] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 423.758052][T22023] ext4 filesystem being mounted at /71/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 423.786505][T21950] 8021q: adding VLAN 0 to HW filter on device team0 [ 423.808817][ T1738] bridge0: port 1(bridge_slave_0) entered blocking state [ 423.815924][ T1738] bridge0: port 1(bridge_slave_0) entered forwarding state [ 423.845953][ T1738] bridge0: port 2(bridge_slave_1) entered blocking state [ 423.853133][ T1738] bridge0: port 2(bridge_slave_1) entered forwarding state [ 423.884860][T21950] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 423.895379][T21950] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 423.918584][T22003] netlink: 197276 bytes leftover after parsing attributes in process `syz.6.6011'. [ 423.994395][T22032] loop7: detected capacity change from 0 to 512 [ 424.016393][T20683] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 424.033473][T21950] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 424.039349][T22032] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 424.058596][T22032] ext4 filesystem being mounted at /42/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 424.078507][T22041] loop2: detected capacity change from 0 to 2048 [ 424.127395][T22041] loop2: p1 < > p4 [ 424.131891][T22041] loop2: p4 size 8388608 extends beyond EOD, truncated [ 424.201093][T21207] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 424.245014][T22050] loop2: detected capacity change from 0 to 2048 [ 424.256095][T22050] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 424.296642][T22057] program syz.7.6022 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 424.341172][T20703] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 424.355538][T21950] veth0_vlan: entered promiscuous mode [ 424.388573][T21950] veth1_vlan: entered promiscuous mode [ 424.413974][T21950] veth0_macvtap: entered promiscuous mode [ 424.429619][T22066] loop7: detected capacity change from 0 to 512 [ 424.437341][T21950] veth1_macvtap: entered promiscuous mode [ 424.446964][T22066] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 424.457141][T21950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 424.467643][T21950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 424.477561][T21950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 424.488051][T21950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 424.497885][T21950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 424.508340][T21950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 424.519779][T21950] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 424.524435][T22066] EXT4-fs (loop7): orphan cleanup on readonly fs [ 424.528122][T21950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 424.543992][T21950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 424.553906][T21950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 424.564423][T21950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 424.574268][T21950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 424.574939][T22066] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.6026: bg 0: block 248: padding at end of block bitmap is not set [ 424.584728][T21950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 424.587216][T21950] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 424.654321][T22073] 9pnet_fd: Insufficient options for proto=fd [ 424.672534][T22075] SELinux: failed to load policy [ 424.680157][T22066] EXT4-fs error (device loop7): ext4_acquire_dquot:6935: comm syz.7.6026: Failed to acquire dquot type 1 [ 424.692696][T22066] EXT4-fs (loop7): 1 truncate cleaned up [ 424.704831][T22066] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 424.718369][T21950] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.727348][T21950] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.736322][T21950] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.745128][T21950] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.791151][T21207] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 424.808518][T20683] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 424.835414][T22082] smc: net device bond0 applied user defined pnetid SYZ2 [ 424.848920][T22082] smc: net device bond0 erased user defined pnetid SYZ2 [ 424.876774][T22085] loop7: detected capacity change from 0 to 2048 [ 424.899575][T22088] loop5: detected capacity change from 0 to 512 [ 424.944019][T22085] loop7: p1 < > p4 [ 424.944925][T22088] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 424.957485][T22085] loop7: p4 size 8388608 extends beyond EOD, truncated [ 424.986097][T22090] loop2: detected capacity change from 0 to 512 [ 425.002998][T22090] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 425.029047][T22090] EXT4-fs (loop2): orphan cleanup on readonly fs [ 425.053603][T22090] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.6034: bg 0: block 248: padding at end of block bitmap is not set [ 425.068855][T22090] EXT4-fs error (device loop2): ext4_acquire_dquot:6935: comm syz.2.6034: Failed to acquire dquot type 1 [ 425.081060][T22090] EXT4-fs (loop2): 1 truncate cleaned up [ 425.090628][T22090] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 425.130218][T20683] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 425.196167][T22101] loop7: detected capacity change from 0 to 512 [ 425.218757][T22101] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 425.235224][T22101] ext4 filesystem being mounted at /49/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 425.275376][T22111] loop2: detected capacity change from 0 to 512 [ 425.282268][T22111] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 425.293701][T22101] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.6038: bg 0: block 424: padding at end of block bitmap is not set [ 425.313763][T22111] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 425.381602][T21207] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 425.401744][T22117] loop5: detected capacity change from 0 to 512 [ 425.425596][T22117] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 425.448802][T22117] ext4 filesystem being mounted at /3/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 425.465086][T22117] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.6043: bg 0: block 424: padding at end of block bitmap is not set [ 425.550039][T21950] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 425.567462][ T36] Process accounting resumed [ 425.648992][T22137] program syz.7.6051 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 425.701324][ T30] kauditd_printk_skb: 325 callbacks suppressed [ 425.701348][ T30] audit: type=1400 audit(1746857366.113:19127): avc: denied { append } for pid=22134 comm="syz.7.6051" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 426.071482][ T30] audit: type=1326 audit(1746857366.483:19128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22157 comm="syz.1.6056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4a15de969 code=0x7ffc0000 [ 426.095135][ T30] audit: type=1326 audit(1746857366.483:19129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22157 comm="syz.1.6056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4a15de969 code=0x7ffc0000 [ 426.120616][ T30] audit: type=1326 audit(1746857366.483:19130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22157 comm="syz.1.6056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe4a15de969 code=0x7ffc0000 [ 426.144323][ T30] audit: type=1326 audit(1746857366.483:19131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22157 comm="syz.1.6056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4a15de969 code=0x7ffc0000 [ 426.167994][ T30] audit: type=1326 audit(1746857366.483:19132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22157 comm="syz.1.6056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4a15de969 code=0x7ffc0000 [ 426.191639][ T30] audit: type=1326 audit(1746857366.483:19133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22157 comm="syz.1.6056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe4a15de969 code=0x7ffc0000 [ 426.215289][ T30] audit: type=1326 audit(1746857366.483:19134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22157 comm="syz.1.6056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4a15de969 code=0x7ffc0000 [ 426.238981][ T30] audit: type=1326 audit(1746857366.483:19135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22157 comm="syz.1.6056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4a15de969 code=0x7ffc0000 [ 426.262721][ T30] audit: type=1326 audit(1746857366.483:19136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22157 comm="syz.1.6056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe4a15de969 code=0x7ffc0000 [ 426.313541][T22158] SELinux: failed to load policy [ 426.346761][T22160] loop2: detected capacity change from 0 to 1024 [ 426.366137][T22160] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 426.388462][T22164] loop6: detected capacity change from 0 to 512 [ 426.406114][T22164] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 426.419080][T22164] ext4 filesystem being mounted at /71/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 426.434034][T22164] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.6057: bg 0: block 424: padding at end of block bitmap is not set [ 426.483175][T20703] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 426.498915][T22169] loop5: detected capacity change from 0 to 1024 [ 426.536351][T22169] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 426.916764][T22160] netlink: 197276 bytes leftover after parsing attributes in process `syz.2.6058'. [ 426.927252][ T1738] TC_ACT_REPEAT abuse ? [ 427.272900][T20683] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 427.437250][T22169] netlink: 197276 bytes leftover after parsing attributes in process `syz.5.6059'. [ 427.529835][T22198] syz!: rxe_newlink: already configured on team_slave_0 [ 427.617416][T22202] loop6: detected capacity change from 0 to 512 [ 427.645379][T22202] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 427.686353][T21950] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 427.689538][T22202] ext4 filesystem being mounted at /74/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 427.727768][T22202] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.6070: bg 0: block 424: padding at end of block bitmap is not set [ 427.775678][T20703] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 427.942456][T22227] netlink: 40 bytes leftover after parsing attributes in process `syz.6.6078'. [ 427.951715][T22227] erspan0: entered allmulticast mode [ 427.961690][T22227] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 427.993028][T22232] loop2: detected capacity change from 0 to 2048 [ 428.024136][T22232] loop2: p1 < > p4 [ 428.028641][T22232] loop2: p4 size 8388608 extends beyond EOD, truncated [ 428.050467][T22234] loop6: detected capacity change from 0 to 1024 [ 428.058788][T22234] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 428.069739][T22234] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 428.083713][T22234] JBD2: no valid journal superblock found [ 428.089486][T22234] EXT4-fs (loop6): Could not load journal inode [ 428.101864][T22236] loop2: detected capacity change from 0 to 1024 [ 428.103116][T22234] loop6: detected capacity change from 0 to 512 [ 428.117261][T22234] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -13 [ 428.125837][T22234] EXT4-fs warning (device loop6): ext4_block_to_path:107: block 3279945729 > max in inode 13 [ 428.135240][T22236] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 428.136253][T22234] EXT4-fs warning (device loop6): ext4_block_to_path:107: block 3279945730 > max in inode 13 [ 428.171130][T22234] EXT4-fs (loop6): 1 truncate cleaned up [ 428.180774][T22234] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 428.206669][T22234] 9pnet_fd: Insufficient options for proto=fd [ 428.277446][T20703] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 428.411390][T22244] SELinux: failed to load policy [ 428.455824][T22249] program syz.1.6086 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 428.551473][T22255] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6088'. [ 428.601102][T22259] siw: device registration error -23 [ 428.607923][T22255] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6088'. [ 428.673703][T22262] loop7: detected capacity change from 0 to 512 [ 428.691143][T22262] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 428.765237][T22257] loop6: detected capacity change from 0 to 512 [ 428.782861][T22257] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 428.809337][T22257] ext4 filesystem being mounted at /80/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 428.843376][ C0] TC_ACT_REPEAT abuse ? [ 428.869090][T22267] loop5: detected capacity change from 0 to 2048 [ 428.913680][T22267] loop5: p1 < > p4 [ 428.918194][T22267] loop5: p4 size 8388608 extends beyond EOD, truncated [ 428.936744][T22236] netlink: 197276 bytes leftover after parsing attributes in process `syz.2.6082'. [ 428.947098][T20703] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 429.191340][T20683] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 429.218350][T22291] siw: device registration error -23 [ 429.238271][T22295] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 429.265694][T22300] loop6: detected capacity change from 0 to 512 [ 429.272356][T22300] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 429.343033][T22302] loop5: detected capacity change from 0 to 2048 [ 429.403985][T22302] loop5: p1 < > p4 [ 429.409093][T22302] loop5: p4 size 8388608 extends beyond EOD, truncated [ 429.480143][T22314] program syz.5.6109 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 429.494172][ T377] TC_ACT_REPEAT abuse ? [ 429.498568][ T6624] TC_ACT_REPEAT abuse ? [ 429.600695][T22322] loop6: detected capacity change from 0 to 1024 [ 429.625369][T22324] siw: device registration error -23 [ 429.645483][T22322] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 429.737203][T22330] loop5: detected capacity change from 0 to 512 [ 429.760680][T22330] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 429.976790][T22330] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 430.024314][T22330] ext4 filesystem being mounted at /20/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 430.154672][T22348] loop2: detected capacity change from 0 to 1024 [ 430.155892][T21950] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 430.194276][T22348] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 430.205471][T22348] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 430.226513][T22350] program syz.5.6122 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 430.266980][T22348] JBD2: no valid journal superblock found [ 430.272772][T22348] EXT4-fs (loop2): Could not load journal inode [ 430.315010][T22348] loop2: detected capacity change from 0 to 512 [ 430.354310][T22348] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -13 [ 430.362631][T22348] EXT4-fs warning (device loop2): ext4_block_to_path:107: block 3279945729 > max in inode 13 [ 430.385397][T22348] EXT4-fs warning (device loop2): ext4_block_to_path:107: block 3279945730 > max in inode 13 [ 430.386350][ T29] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 430.406105][T22348] EXT4-fs (loop2): 1 truncate cleaned up [ 430.412320][T22348] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 430.464892][T22360] loop5: detected capacity change from 0 to 512 [ 430.471976][T22360] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 430.488436][T22348] 9pnet_fd: Insufficient options for proto=fd [ 430.497991][T22360] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 430.519034][ T29] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 430.535695][T22332] netlink: 197276 bytes leftover after parsing attributes in process `syz.6.6112'. [ 430.537607][T22360] ext4 filesystem being mounted at /23/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 430.604624][T20683] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 430.669908][ T29] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 430.735378][ T29] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 430.750778][T21950] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 430.774823][T22377] loop5: detected capacity change from 0 to 512 [ 430.783492][T22377] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 430.876732][T20703] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 430.887301][ T29] bridge_slave_1: left allmulticast mode [ 430.892987][ T29] bridge_slave_1: left promiscuous mode [ 430.898682][ T29] bridge0: port 2(bridge_slave_1) entered disabled state [ 430.907334][ T29] bridge_slave_0: left allmulticast mode [ 430.913049][ T29] bridge_slave_0: left promiscuous mode [ 430.918806][ T29] bridge0: port 1(bridge_slave_0) entered disabled state [ 430.928458][ T30] kauditd_printk_skb: 201 callbacks suppressed [ 430.928473][ T30] audit: type=1326 audit(1746857371.343:19338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22380 comm="syz.6.6132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2e4abe969 code=0x7ffc0000 [ 430.950946][T22381] SELinux: failed to load policy [ 430.958281][ T30] audit: type=1326 audit(1746857371.343:19339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22380 comm="syz.6.6132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2e4abe969 code=0x7ffc0000 [ 430.987017][ T30] audit: type=1326 audit(1746857371.343:19340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22380 comm="syz.6.6132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb2e4abe969 code=0x7ffc0000 [ 431.010711][ T30] audit: type=1326 audit(1746857371.343:19341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22380 comm="syz.6.6132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2e4abe969 code=0x7ffc0000 [ 431.034340][ T30] audit: type=1326 audit(1746857371.343:19342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22380 comm="syz.6.6132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2e4abe969 code=0x7ffc0000 [ 431.058134][ T30] audit: type=1326 audit(1746857371.343:19343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22380 comm="syz.6.6132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb2e4abe969 code=0x7ffc0000 [ 431.081891][ T30] audit: type=1326 audit(1746857371.343:19344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22380 comm="syz.6.6132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2e4abe969 code=0x7ffc0000 [ 431.105655][ T30] audit: type=1326 audit(1746857371.343:19345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22380 comm="syz.6.6132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb2e4abe969 code=0x7ffc0000 [ 431.129276][ T30] audit: type=1326 audit(1746857371.343:19346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22380 comm="syz.6.6132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2e4abe969 code=0x7ffc0000 [ 431.152930][ T30] audit: type=1326 audit(1746857371.343:19347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22380 comm="syz.6.6132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb2e4abe969 code=0x7ffc0000 [ 431.276920][ T29] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 431.292704][ T29] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 431.314744][ T29] bond0 (unregistering): Released all slaves [ 431.387302][ T29] hsr_slave_0: left promiscuous mode [ 431.393099][ T29] hsr_slave_1: left promiscuous mode [ 431.408250][ T29] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 431.415771][ T29] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 431.421668][T22389] loop5: detected capacity change from 0 to 512 [ 431.433258][T22389] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 431.433721][ T29] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 431.447230][T22389] ext4 filesystem being mounted at /26/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 431.453253][ T29] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 431.489992][ T29] veth1_macvtap: left promiscuous mode [ 431.495606][ T29] veth0_macvtap: left promiscuous mode [ 431.503442][ T29] veth1_vlan: left promiscuous mode [ 431.513293][ T29] veth0_vlan: left promiscuous mode [ 431.570596][T21950] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 431.593889][T22393] loop2: detected capacity change from 0 to 512 [ 431.608049][T22393] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 431.651671][ T29] team0 (unregistering): Port device team_slave_1 removed [ 431.662070][ T29] team0 (unregistering): Port device team_slave_0 removed [ 431.675302][ T6624] smc: removing ib device syz! [ 431.762581][T22364] chnl_net:caif_netlink_parms(): no params data found [ 431.811998][T22410] loop6: detected capacity change from 0 to 512 [ 431.843116][T22410] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 431.877547][T22410] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 431.958339][T22364] bridge0: port 1(bridge_slave_0) entered blocking state [ 431.965763][T22364] bridge0: port 1(bridge_slave_0) entered disabled state [ 431.973010][T22417] loop2: detected capacity change from 0 to 512 [ 431.985904][T22364] bridge_slave_0: entered allmulticast mode [ 431.992533][T22364] bridge_slave_0: entered promiscuous mode [ 431.992787][T22417] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 432.008790][T22364] bridge0: port 2(bridge_slave_1) entered blocking state [ 432.015943][T22364] bridge0: port 2(bridge_slave_1) entered disabled state [ 432.026412][T22364] bridge_slave_1: entered allmulticast mode [ 432.033069][T22364] bridge_slave_1: entered promiscuous mode [ 432.041858][T22417] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 432.055435][ T1738] TC_ACT_REPEAT abuse ? [ 432.063384][T22417] ext4 filesystem being mounted at /90/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 432.088685][T22364] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 432.103783][T22364] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 432.127732][T20683] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 432.136925][T22422] loop5: detected capacity change from 0 to 512 [ 432.144426][T22422] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 432.145183][T22364] team0: Port device team_slave_0 added [ 432.159830][T22364] team0: Port device team_slave_1 added [ 432.166930][T22422] ext4 filesystem being mounted at /30/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 432.185655][T22364] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 432.192642][T22364] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 432.218823][T22364] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 432.218853][T22427] loop2: detected capacity change from 0 to 512 [ 432.219761][T22427] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 432.230845][T22364] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 432.251360][T22364] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 432.277323][T22364] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 432.301981][T22427] ext4 filesystem being mounted at /91/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 432.316608][T22364] hsr_slave_0: entered promiscuous mode [ 432.323804][T22364] hsr_slave_1: entered promiscuous mode [ 432.653177][T22364] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 432.667977][T22447] loop7: detected capacity change from 0 to 512 [ 432.676469][T22364] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 432.685265][T22364] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 432.696886][T22447] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 432.697719][T22364] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 432.920360][T22364] 8021q: adding VLAN 0 to HW filter on device bond0 [ 432.943045][T22364] 8021q: adding VLAN 0 to HW filter on device team0 [ 432.983842][ T29] bridge0: port 1(bridge_slave_0) entered blocking state [ 432.991021][ T29] bridge0: port 1(bridge_slave_0) entered forwarding state [ 433.036870][ T1738] bridge0: port 2(bridge_slave_1) entered blocking state [ 433.043982][ T1738] bridge0: port 2(bridge_slave_1) entered forwarding state [ 433.190108][T22364] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 433.191666][T22462] loop6: detected capacity change from 0 to 2048 [ 433.254938][T22471] loop7: detected capacity change from 0 to 512 [ 433.294842][T22471] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 433.315067][T22478] program syz.2.6157 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 433.375386][T22483] loop2: detected capacity change from 0 to 512 [ 433.403020][T22471] ext4 filesystem being mounted at /70/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 433.417686][T22483] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 433.475388][T22364] veth0_vlan: entered promiscuous mode [ 433.482770][T22483] ext4 filesystem being mounted at /95/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 433.521117][T22364] veth1_vlan: entered promiscuous mode [ 433.557237][T22364] veth0_macvtap: entered promiscuous mode [ 433.565016][T22364] veth1_macvtap: entered promiscuous mode [ 433.575727][T22364] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 433.586273][T22364] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 433.596215][T22364] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 433.606716][T22364] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 433.616569][T22364] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 433.627113][T22364] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 433.645364][T22364] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 433.657299][T22364] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 433.667819][T22364] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 433.677807][T22364] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 433.688345][T22364] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 433.698281][T22364] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 433.708870][T22364] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 433.721606][T22491] loop5: detected capacity change from 0 to 512 [ 433.726035][T22364] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 433.739749][T22364] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.748628][T22364] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.757405][T22364] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.766409][T22364] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.780104][T22491] ext4 filesystem being mounted at /34/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 433.849093][T22516] syz_tun: entered allmulticast mode [ 433.879051][T22520] loop8: detected capacity change from 0 to 2048 [ 433.924129][T22520] loop8: p1 < > p4 [ 433.930067][T22520] loop8: p4 size 8388608 extends beyond EOD, truncated [ 433.941466][T22524] loop2: detected capacity change from 0 to 512 [ 433.955499][T22524] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 433.987983][T22524] ext4 filesystem being mounted at /99/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 434.001833][T22530] loop7: detected capacity change from 0 to 1024 [ 434.017984][T22535] FAULT_INJECTION: forcing a failure. [ 434.017984][T22535] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 434.031345][T22535] CPU: 1 UID: 0 PID: 22535 Comm: syz.5.6174 Not tainted 6.15.0-rc5-syzkaller-00204-g0e1329d4045c #0 PREEMPT(voluntary) [ 434.031387][T22535] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 434.031399][T22535] Call Trace: [ 434.031405][T22535] [ 434.031412][T22535] __dump_stack+0x1d/0x30 [ 434.031436][T22535] dump_stack_lvl+0xe8/0x140 [ 434.031461][T22535] dump_stack+0x15/0x1b [ 434.031540][T22535] should_fail_ex+0x265/0x280 [ 434.031611][T22535] should_fail+0xb/0x20 [ 434.031647][T22535] should_fail_usercopy+0x1a/0x20 [ 434.031674][T22535] _copy_from_user+0x1c/0xb0 [ 434.031701][T22535] ___sys_sendmsg+0xc1/0x1d0 [ 434.031741][T22535] __x64_sys_sendmsg+0xd4/0x160 [ 434.031769][T22535] x64_sys_call+0x2999/0x2fb0 [ 434.031795][T22535] do_syscall_64+0xd0/0x1a0 [ 434.031860][T22535] ? clear_bhb_loop+0x25/0x80 [ 434.031968][T22535] ? clear_bhb_loop+0x25/0x80 [ 434.031990][T22535] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 434.032010][T22535] RIP: 0033:0x7fc1ac24e969 [ 434.032028][T22535] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 434.032058][T22535] RSP: 002b:00007fc1aa8b7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 434.032207][T22535] RAX: ffffffffffffffda RBX: 00007fc1ac475fa0 RCX: 00007fc1ac24e969 [ 434.032222][T22535] RDX: 0000000000000000 RSI: 0000200000001200 RDI: 0000000000000006 [ 434.032236][T22535] RBP: 00007fc1aa8b7090 R08: 0000000000000000 R09: 0000000000000000 [ 434.032251][T22535] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 434.032265][T22535] R13: 0000000000000000 R14: 00007fc1ac475fa0 R15: 00007ffde4f9ba38 [ 434.032286][T22535] [ 434.277812][T22544] SELinux: failed to load policy [ 434.283837][T22545] SELinux: policydb magic number 0x1 does not match expected magic number 0xf97cff8c [ 434.315786][T22545] SELinux: failed to load policy [ 434.383128][T22547] SELinux: failed to load policy [ 434.450535][T22560] loop2: detected capacity change from 0 to 512 [ 434.461309][T22560] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 434.511988][T22564] loop8: detected capacity change from 0 to 512 [ 434.512684][T22560] infiniband syz!: set active [ 434.523010][T22560] infiniband syz!: added team_slave_0 [ 434.531417][T22564] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 434.548230][T22567] loop5: detected capacity change from 0 to 512 [ 434.557307][T22567] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 434.566468][T22560] RDS/IB: syz!: added [ 434.571698][T22560] smc: adding ib device syz! with port count 1 [ 434.578009][T22560] smc: ib device syz! port 1 has pnetid [ 434.650164][T22570] loop6: detected capacity change from 0 to 512 [ 434.681589][T22570] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 434.719913][T22570] ext4 filesystem being mounted at /93/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 434.796654][T22576] loop6: detected capacity change from 0 to 2048 [ 434.835203][T22530] netlink: 197276 bytes leftover after parsing attributes in process `syz.7.6173'. [ 434.988761][T22588] loop7: detected capacity change from 0 to 1024 [ 435.141224][T22584] loop5: detected capacity change from 0 to 512 [ 435.160164][T22584] ext4 filesystem being mounted at /40/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 435.223410][T22597] loop6: detected capacity change from 0 to 512 [ 435.230059][T22597] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 435.243605][ T29] TC_ACT_REPEAT abuse ? [ 435.368042][T21950] ================================================================== [ 435.376174][T21950] BUG: KCSAN: data-race in find_get_block_common / has_bh_in_lru [ 435.383929][T21950] [ 435.386265][T21950] read-write to 0xffff888237c26b70 of 8 bytes by task 22605 on cpu 0: [ 435.394422][T21950] find_get_block_common+0x4f0/0x960 [ 435.399726][T21950] bdev_getblk+0x7f/0x3d0 [ 435.404083][T21950] __ext4_get_inode_loc+0x303/0x930 [ 435.409307][T21950] ext4_reserve_inode_write+0xdb/0x230 [ 435.414792][T21950] __ext4_mark_inode_dirty+0x8c/0x3f0 [ 435.420183][T21950] ext4_dirty_inode+0x92/0xc0 [ 435.424906][T21950] __mark_inode_dirty+0x15c/0x760 [ 435.429957][T21950] file_update_time+0x288/0x2b0 [ 435.434861][T21950] ext4_page_mkwrite+0x18b/0xba0 [ 435.439852][T21950] handle_mm_fault+0x1733/0x2ae0 [ 435.444824][T21950] do_user_addr_fault+0x636/0x1090 [ 435.449969][T21950] exc_page_fault+0x54/0xc0 [ 435.454509][T21950] asm_exc_page_fault+0x26/0x30 [ 435.459378][T21950] [ 435.460532][T22607] loop2: detected capacity change from 0 to 1024 [ 435.461696][T21950] read to 0xffff888237c26b70 of 8 bytes by task 21950 on cpu 1: [ 435.475646][T21950] has_bh_in_lru+0x35/0x1f0 [ 435.480165][T21950] smp_call_function_many_cond+0x394/0xb20 [ 435.486025][T21950] on_each_cpu_cond_mask+0x3c/0x80 [ 435.486673][T22607] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 435.491145][T21950] invalidate_bh_lrus+0x2a/0x30 [ 435.491179][T21950] blkdev_flush_mapping+0x9a/0x1a0 [ 435.502225][T22607] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 435.506927][T21950] bdev_release+0x2bf/0x3d0 [ 435.506958][T21950] blkdev_release+0x15/0x20 [ 435.506988][T21950] __fput+0x298/0x650 [ 435.507006][T21950] ____fput+0x1c/0x30 [ 435.507022][T21950] task_work_run+0x12e/0x1a0 [ 435.507044][T21950] resume_user_mode_work+0x6a/0x70 [ 435.507068][T21950] syscall_exit_to_user_mode+0x77/0xb0 [ 435.507089][T21950] do_syscall_64+0xdd/0x1a0 [ 435.507112][T21950] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 435.507131][T21950] [ 435.507135][T21950] value changed: 0x0000000000000000 -> 0xffff888106e9d820 [ 435.507146][T21950] [ 435.507150][T21950] Reported by Kernel Concurrency Sanitizer on: [ 435.527925][T22607] JBD2: no valid journal superblock found [ 435.530760][T21950] CPU: 1 UID: 0 PID: 21950 Comm: syz-executor Not tainted 6.15.0-rc5-syzkaller-00204-g0e1329d4045c #0 PREEMPT(voluntary) [ 435.534813][T22607] EXT4-fs (loop2): Could not load journal inode [ 435.538726][T21950] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 435.586452][T22604] loop2: detected capacity change from 0 to 512 [ 435.587841][T21950] ================================================================== [ 435.620077][T22612] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6198'. [ 435.646374][T22604] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -13 [ 435.660612][T22604] EXT4-fs warning (device loop2): ext4_block_to_path:107: block 3279945729 > max in inode 13 [ 435.682564][T22604] EXT4-fs warning (device loop2): ext4_block_to_path:107: block 3279945730 > max in inode 13 [ 435.694221][T22604] EXT4-fs (loop2): 1 truncate cleaned up [ 435.708213][T22604] 9pnet_fd: Insufficient options for proto=fd [ 435.788888][T22588] netlink: 197276 bytes leftover after parsing attributes in process `syz.7.6193'. [ 437.804028][ T1738] TC_ACT_REPEAT abuse ? [ 441.004030][ T1738] TC_ACT_REPEAT abuse ? [ 442.843687][ T29] TC_ACT_REPEAT abuse ?