last executing test programs: 43.1962868s ago: executing program 32 (id=2188): unshare(0x6a040000) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff85000000040000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) io_setup(0x8f0, &(0x7f0000002400)) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xae, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x4, &(0x7f0000000980)=ANY=[@ANYBLOB="1801000040000000000000006dfeff00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', r3, 0x0, 0x401}, 0x11) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900010073797a30000000000900030073797a3000000000140004800800024000000000080001400000000571000000060a010400000008000000000100000008000b4000000000400004803c0001800a0001006d617463680000002c0002800800010065636e000c000300e4edf2b75cc7c0a308000240000000000c000100706b7474797065000900010073797a30"], 0xf0}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r1}, 0x10) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r4, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3e8, 0x0, 0x0, 0x130, 0x300, 0x300, 0x300, 0x7fffffe, 0x0, {[{{@arp={@local, @empty, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pimreg\x00', 'veth0_to_bridge\x00'}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f67b23ffdfa27f907a03732da3acbc6518e62a77ca06f258762e88c0d9f9d2f413b94a105f4bdf01425ce81c5d000000000000000500ffffffff00"}}}, {{@arp={@multicast2, @empty, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 40.775344726s ago: executing program 33 (id=2217): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$rds(0x15, 0x5, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000016c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x840e, &(0x7f0000001080)={[{@discard}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@jqfmt_vfsold}, {@bsdgroups}, {@quota}]}, 0x3, 0x43a, &(0x7f0000001100)="$eJzs28tvG1UXAPAzfrRfX19CVR59AIGCqHgkTVpKF2xAILEACQkWZRmStCp1G9QEiVYRBITKCqFK7BFLJP4CVrBBwAqJLexRpQpl08LKaOyZxHYcNzFOnOLfT5r23plr3XM8c+07c+MABtZI+k8SsTcifouIoXq1ucFI/b/bSwtTfy0tTCVRrb7xZ1Jrd2tpYSpvmr9uT14pRRQ+SeJwm37nrly9MFmpzFzO6mPzF98dm7ty9ZnzFyfPzZybuTRx+vTJE+PPnZp4tid5pnndOvTB7JGDr7x1/bWpM9ff/umbJM+/JY8eGel08PFqtcfd9de+hnJS6mMgbEixPkyjXBv/Q1GMlZM3FC9/3NfggE1VrVar9619eLEK/Icl0e8IgP7Iv+jT+99826Kpx7Zw84X6DVCa9+1sqx8pRSFrU265v+2lkYg4s/j3l+kWm/McAgCgyXfp/OfpdvO/QjQ+F/p/toYyHBH3RMT+iDgVEQci4t6IWtv7I+KBDfbfukiyev5TuNFVYuuUzv+ez9a2mud/+ewvhotZbV8t/3Jy9nxl5nj2nhyL8s60Pt6hj+9f+vXztY41zv/SLe0/nwtmcdwo7Wx+zfTk/GRziN27+VHEoVK7/JPllYAkIg5GxKEu+zj/5NdH1jp25/w76ME6U/WriCfq538xWvLPJZ3XJ8f+F5WZ42P5VbHaz79ce32t/v9V/j2Qnv/dba//5fyHk8b12rmN93Ht90/XvKfp9vrfkbzZtO/9yfn5y+MRO5JX60E37p9oaTex0j7N/9jR9uN/f6y8E4cjIr2IH4yIhyLi4Sz2RyLi0Yg42iH/H1987J3u899caf7TGzr/K4Ud0bqnfaF44Ydvmzod3kj+6fk/WSsdy/Ysf/51sJ64uruaAQAA4O5TiIi9kRRGl8uFwuho/W/4D8TuQmV2bv6ps7PvXZqu/0ZgOMqF/EnXUMPz0PHstj6vT7TUT2TPjb8o7qrVR6dmK9P9Th4G3J4otR3/qT+K/Y4O2HR+rwWDy/iHwWX8w+Ay/mFwtRn/u/oRB7D12n3/f9iHOICt1zL+LfvBAHH/D4PL+IfBZfzDQJrbFXf+kbyCwqpCFLZFGOssfFbeFmHcRYV+fzIBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD0xj8BAAD//3g65pw=") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='sched_switch\x00'}, 0x18) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) 33.981523112s ago: executing program 34 (id=2067): r0 = fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r2}, 0x18) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r2}, 0x18) pipe2$9p(&(0x7f00000000c0), 0x0) (async) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x1000800, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) (async) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x1000800, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x975, 0x1c080, 0x0, 0x28b, 0x0, r0}) (async) io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x975, 0x1c080, 0x0, 0x28b, 0x0, r0}) r5 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) (async) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x0) fchdir(r6) open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) (async) r7 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) r8 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) write(r9, &(0x7f0000004200)='t', 0x1) sendfile(r9, r8, 0x0, 0x40001) (async) sendfile(r9, r8, 0x0, 0x40001) ftruncate(r7, 0x2007ffb) (async) ftruncate(r7, 0x2007ffb) sendfile(r9, r7, 0x0, 0x1000000200fff) (async) sendfile(r9, r7, 0x0, 0x1000000200fff) r10 = socket(0xa, 0x5, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffffc}, 0x18) syz_mount_image$vfat(&(0x7f0000000340), &(0x7f0000000040)='./file0\x00', 0x40810, &(0x7f0000000f00)=ANY=[@ANYRES64=0x0, @ANYBLOB="2944c739639200a9799900265ce1bc4e12213d54b5fc498c2cbd624288d4af05ddbcdca5fbb2dfbebd3f4a7adc042fc8464f50031afc5721ba2afde6225b0dab806898e7edde4ba628156fbf127195eabe25734b499f3c9c", @ANYRES64=0x0], 0x1, 0x296, &(0x7f0000000480)="$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") ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r11, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) 32.351004197s ago: executing program 35 (id=2323): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000024d00)={0x0, 0x0, &(0x7f0000024cc0)={&(0x7f0000003c40)=@newchain={0xe88, 0x64, 0x300, 0x70bd2e, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x7, 0x1}, {0x5, 0x10}, {0xf, 0x2}}, [@f_rsvp={{0x9}, {0xe58, 0x2, [@TCA_RSVP_ACT={0xe54, 0x6, [@m_pedit={0xe50, 0x3, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x2, 0x7, 0x10000000, 0x9, 0x1}, 0xf1, 0x2}, [{0x2, 0xfffffffb, 0x752b, 0x9, 0x5, 0x2}, {0x6507b03b, 0x1, 0x7, 0xfffffffe, 0x6, 0x5}, {0x4, 0x1, 0x3, 0x8a, 0x6, 0x2}, {0x7, 0x1200000, 0x88d, 0x2, 0x4, 0x2}, {0xffff5cff, 0x4, 0x0, 0x1, 0x40, 0x8001}, {0x6, 0x9, 0x3, 0x0, 0x8, 0xf}, {0x5, 0x9, 0x2, 0x2, 0x3, 0x3}, {0x3, 0x7fffffff, 0x39cbefbf, 0x3, 0x3, 0x8}, {0x6, 0x0, 0xf, 0x1, 0x9, 0x1000}, {0x80000000, 0xffff, 0x4, 0x4, 0x80}, {0x3ff, 0x4, 0x3a14, 0x56d5, 0x2, 0x2}, {0x2, 0x2, 0x8, 0x7, 0xffffff81}, {0x3, 0xc9d, 0x3, 0x13ee, 0x4, 0x6}, {0xcd4, 0x1, 0x8, 0x4e80000, 0xf950, 0x9873}, {0x3772, 0x1182, 0x7, 0x6ae9, 0x79, 0xfb28}, {0x8, 0x6962, 0x0, 0x6, 0x4, 0x157}, {0x12968238, 0x0, 0xffffffff, 0x101, 0x0, 0x6}, {0x8, 0x9, 0xa68c, 0x2, 0x1, 0x80000000}, {0x1, 0x80000001, 0x8, 0x1000, 0x7, 0xa}, {0x6, 0x7, 0x9, 0x7fff, 0x6ffb, 0x7}, {0x2, 0x7bb, 0x10, 0xb6c, 0x9, 0x9}, {0x6, 0x5, 0x80000000, 0x9759, 0x40, 0x1c}, {0xfffff2e7, 0x7, 0x3, 0x7, 0xa2, 0xfffffff9}, {0x7, 0x2, 0xd, 0x5, 0x6, 0x7fffffff}, {0xb30, 0xfffffff8, 0xc767, 0x2, 0x3, 0x805a0}, {0xffff3594, 0x7, 0x8, 0x2, 0xfffff1f2, 0x4}, {0x4, 0x1, 0x3, 0x1ff, 0x3, 0x3ff}, {0xa0d0, 0xffffff30, 0x0, 0x1, 0x5, 0x5}, {0x0, 0x8, 0x3d, 0x4, 0xfffffffd, 0xde0}, {0x6, 0x8, 0xfffffffc, 0x4, 0x9, 0x10000}, {0x0, 0x80000000, 0x85, 0x9, 0x30ba, 0xfc}, {0x6, 0xffffffff, 0xf, 0x7, 0x7f, 0x1efb}, {0xfffffbff, 0x0, 0x3, 0xe8f6, 0x4, 0x98d}, {0x8, 0x7d0, 0x8, 0xff, 0x7, 0x1}, {0x5, 0x3, 0x7ff, 0x0, 0x2, 0x613}, {0x0, 0xfff, 0x4c3c, 0x5, 0x2, 0x2}, {0x8, 0x2, 0x0, 0xfffffffd, 0xdb1c, 0x3ff}, {0x5, 0xfffffffd, 0x8001, 0x81, 0x9, 0x1}, {0x3, 0x4175, 0x0, 0x2, 0x9, 0x5}, {0x1, 0x3, 0x4, 0x9, 0x100, 0x2}, {0x7, 0x10, 0x0, 0x9, 0xdc}, {0xfffffffb, 0x8, 0xff, 0x6, 0x3, 0x8}, {0x5, 0xff, 0x401, 0x6, 0x7, 0x3}, {0x18, 0x1, 0x4, 0xfff, 0xa, 0x2}, {0x6, 0x9, 0x10000, 0x3f, 0xab9, 0xfffffff5}, {0x7fffffff, 0x2, 0x94c, 0x9dee, 0xffff1483, 0x8}, {0x6fce8c73, 0x81, 0x7, 0x3ff, 0x0, 0x1}, {0x7fff, 0xad, 0x4, 0x0, 0x4, 0x7ff}, {0x1, 0xe364, 0x100, 0x9, 0x3, 0x2}, {0x5, 0x4, 0x80000000, 0x6, 0xb, 0x8}, {0xb95c, 0x80000001, 0x9, 0x6, 0xc, 0xb}, {0x3, 0x3, 0xc1, 0x0, 0x7f7, 0xfffff530}, {0x1, 0x0, 0x40, 0x2, 0x5}, {0x0, 0x3, 0x7, 0x82b, 0x0, 0x5}, {0xfff, 0x98, 0x6a4c, 0x101, 0x9, 0x40}, {0xffff, 0x7, 0x38, 0xb, 0x8, 0x8000}, {0x1, 0x0, 0x0, 0x6, 0x5, 0xf8}, {0x1, 0x6, 0xef0, 0x0, 0x101, 0x2}, {0x8, 0x7, 0x6f, 0x7, 0x6, 0x3}, {0x3f, 0x5, 0x3, 0x8, 0x9, 0x1}, {0x80000001, 0xfffffff9, 0x5, 0x800, 0x543, 0x1}, {0x22a, 0x201, 0x3, 0x0, 0x4, 0x7}, {0xad, 0x7, 0xfffffffa, 0x7b9, 0x164, 0x9}, {0x4, 0x7, 0x9, 0x7, 0x5, 0xc66}, {0x9, 0x3, 0x5, 0x3, 0x54, 0x6}, {0xf, 0x5, 0x9, 0x9, 0xe, 0x7}, {0x2a0d, 0x5, 0x4, 0x7, 0x9, 0x4}, {0x17, 0x200, 0xffff8001, 0x6, 0x62a, 0x4}, {0xc, 0x24000, 0x7f, 0x6b, 0x4, 0xd}, {0x7329e723, 0x4, 0x2, 0x1, 0x2, 0x5}, {0x10000, 0x80, 0x5821, 0x0, 0x5, 0x4}, {0x6, 0x3, 0x2, 0x7, 0x3, 0xcb14}, {0x7, 0x25b, 0x2, 0x6, 0x4, 0x9}, {0x8, 0x7, 0x4, 0xfffffffe, 0x7, 0x9}, {0x7, 0x7, 0x0, 0x648, 0x5, 0x100}, {0x1, 0x0, 0x59a0, 0x1, 0x7, 0x401}, {0x10000, 0x7ff, 0xfffffcca, 0xff, 0x8, 0x3}, {0x1, 0x4, 0x5, 0x7, 0x5}, {0x4, 0x2, 0x6, 0xd, 0x7, 0xb152}, {0x47, 0x9, 0x5, 0xfffffff9, 0x7fffffff, 0xa00000}, {0x4, 0x26c, 0x9, 0x8bab, 0xbc5d}, {0x1, 0x7, 0x5, 0x7, 0x8000, 0x40009}, {0x5f, 0x8, 0x5, 0x200, 0x8, 0x10001}, {0x8, 0x2, 0x80000000, 0x6, 0x101, 0x8}, {0x80000003, 0xfff, 0x10, 0xfffffff3, 0x8, 0x4}, {0x800, 0xffff, 0x5, 0x7, 0x344, 0x2b25}, {0x8, 0x7, 0x6, 0x1, 0x3, 0x8e02}, {0x1, 0x9e6, 0x8, 0x400, 0x6, 0x3}, {0x8, 0x0, 0x1, 0x7, 0x1, 0x3}, {0x9, 0x2, 0x2, 0x8, 0x3, 0x4}, {0x6, 0xfffffec4, 0x200, 0x8, 0x8, 0x9}, {0x1, 0x8, 0x500, 0x400, 0xc52b, 0x4}, {0x9, 0x1, 0x100, 0xb6a, 0x9, 0x32b5}, {0x8, 0x1, 0x4, 0x0, 0xd73, 0x870}, {0xe08c, 0x7ff, 0x2, 0x6, 0x40, 0x9}, {0xffff, 0x4428, 0x3, 0x6, 0x8, 0x9}, {0x1000, 0x10001, 0x5, 0x4, 0x3, 0xb}, {0xfffff0aa, 0x9, 0xfffffffa, 0x5, 0x2, 0x4}, {0xd, 0xfffffff0, 0x4, 0x0, 0x8, 0x101}, {0xd, 0x2, 0x686, 0xfffffffa, 0x4, 0x4}, {0x7fff, 0x6, 0x200, 0x6, 0x4, 0x8}, {0x96, 0x6, 0x7, 0x7, 0x226, 0x8}, {0x6, 0x3, 0x5, 0x6, 0x7, 0xfff}, {0x3, 0xffffffff, 0x2, 0x568, 0x4, 0xffffffeb}, {0x2, 0x200, 0x2, 0x7, 0x6, 0x6}, {0x4, 0x566, 0x10001, 0xb, 0x4, 0x5594fdf3}, {0x423303a3, 0x9, 0x6, 0x3, 0x6, 0x3}, {0x100, 0x3, 0x0, 0x9, 0x8, 0x25}, {0x8, 0xd47, 0x0, 0x0, 0x6, 0x8f6d}, {0xff, 0x0, 0x0, 0x1, 0x7, 0xe}, {0xce1, 0x9, 0x0, 0x4, 0xffffffff, 0x200}, {0x4, 0x1000e, 0x3, 0x5e0, 0x8, 0x1}, {0x0, 0x1, 0x1, 0x1, 0x9, 0x8}, {0x4f75, 0x8, 0x3c, 0xb, 0x4, 0x5}, {0x3, 0xd64, 0x1, 0x6, 0x8, 0x6}, {0x3, 0x401, 0x6, 0x4, 0x80, 0x640a525a}, {0x5, 0x0, 0x8, 0xfffffffe, 0xe, 0x6cd4}, {0x9, 0x0, 0x8, 0xa9ba, 0x100, 0x5}, {0x15, 0xfffffeff, 0x2, 0x5, 0x5fc0, 0xfffffff1}, {0x39d, 0x9, 0x1, 0x0, 0xfc, 0x7}, {0x6, 0xe69, 0xe, 0xffffff81, 0xbe7e, 0x401}, {0xfffffffa, 0x4, 0x0, 0x0, 0x6, 0xfffff001}, {0xcf2d, 0x8, 0x9176, 0x0, 0x4f, 0x1}, {0x0, 0x9, 0x5, 0xfff, 0x9030}, {0x4, 0x4, 0x800, 0x41e, 0x8000}, {0x6, 0xfffffffa, 0x0, 0x9a, 0x6, 0x8}, {0x3, 0xb, 0xf079, 0x7fffffff, 0x200, 0x7}, {0x65f, 0x100, 0x8, 0x1, 0x400, 0x2}], [{0x3}, {0x1, 0x1}, {0x5, 0x1}, {}, {}, {0x5}, {0x4}, {}, {0x0, 0x1}, {0x4}, {0x3}, {0x0, 0x1}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x3}, {0x1, 0x1}, {0x3}, {0x3, 0x1}, {0x3}, {0x0, 0x1}, {0x4}, {0x3}, {0x4, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1}, {0x2}, {0x3, 0x1}, {0x3}, {0x2}, {0x3}, {0x3}, {0x1}, {0x0, 0x1}, {0x3}, {0x0, 0x1}, {}, {0x5, 0x1}, {0x5}, {}, {0x4, 0x1}, {0x2}, {}, {0x2}, {0x2, 0x1}, {0x6, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {}, {}, {0x5, 0x649fb4c58d4cf3cc}, {0x0, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x2}, {0x0, 0x1}, {0x1, 0x1}, {0x1}, {0x3}, {0x1, 0x1}, {0x3}, {0x4, 0x1}, {0x5}, {0x0, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x4}, {0x1, 0x1}, {0x2, 0x1}, {0x2}, {0x1}, {0x3}, {0x3, 0x1}, {0x2}, {0x1, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x2}, {0x3}, {0x3, 0x1}, {0x4, 0x1}, {0x7, 0x1}, {0x3}, {0x1}, {0x2, 0xd2cd4f2f2bcaea07}, {0x5}, {0x2, 0x1}, {0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x3}, {0x3, 0x1}, {0x1}, {0x4, 0x1}, {0x1}, {0x2}, {0x1, 0x1}, {0x2, 0x8dafc58315d2bbb3}, {0x2}, {}, {0x0, 0x1}, {0x3, 0x1}, {0x3}, {0x5, 0x1}, {0x5}, {0x5, 0x1}, {0x3}, {0x4, 0x9889dd74d1bcf2ee}, {0x1, 0x1}, {}, {0x3}, {0x4}, {}, {0x3}, {0x3}, {0x1}], 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x2}}}}]}]}}]}, 0xe88}, 0x1, 0x0, 0x0, 0x810}, 0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x301, 0x0, 0x0, {0x3, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x48}, 0x1, 0x0, 0x0, 0x11}, 0x2400c894) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) setsockopt(0xffffffffffffffff, 0x84, 0x81, &(0x7f0000000280)="1a", 0x1) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 30.370980883s ago: executing program 7 (id=2339): socket$unix(0x1, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='statm\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$tipc(r1, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x4) 30.314991808s ago: executing program 7 (id=2340): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0xa, 0xfb, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="06000000040000000800"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x200}, 0xa) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x6c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='kfree\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) pipe(&(0x7f0000005880)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_selinux(r3, &(0x7f00000000c0), &(0x7f0000000040)='system_u:object_r:dhcp_state_t:s0\x00', 0x1e, 0x0) 30.314319738s ago: executing program 7 (id=2341): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1}, 0x18) connect$can_j1939(r0, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f00000027c0)=[{{0x0, 0x0, &(0x7f0000002780)=[{&(0x7f0000002800)="ef0ba6063426720100", 0x9}], 0x1}}], 0x579, 0x20000010) recvmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/189, 0xbd}, {0x0}], 0x2}}], 0x1, 0x0, 0x0) 29.339621525s ago: executing program 7 (id=2357): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="160000000000000004000000ffff000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000aade90975017144c5e44f8be2f8ae65e97c1c0ba517f06ceaea2f2f528a61e0ed6242b6135392aa70127ee59d5e72915543c8e63c4b563"], 0x48) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$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") pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) splice(r2, 0x0, r1, 0x0, 0x800000000ff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xc, 0x4, 0x4, 0x7, 0x0, r0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) mkdir(&(0x7f0000000580)='./file0\x00', 0x92) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) lsetxattr$security_selinux(&(0x7f0000000400)='./file0\x00', &(0x7f0000000000), &(0x7f0000000280)='system_u:object_r:ppp_device_t:s0\x00', 0x22, 0x3) r5 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$sock_SIOCGPGRP(r5, 0x8904, &(0x7f0000000080)) bpf$BPF_GET_MAP_INFO(0x3, &(0x7f0000000140)={r3, 0x58, &(0x7f00000000c0)}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', 0xffffffffffffffff, 0x0, 0x401}, 0x11) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000740)={r6, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000004c0)=[0x8], 0x0, 0x0, 0x1, 0x1}}, 0x40) 29.165655741s ago: executing program 7 (id=2362): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1600000000000000040000005f"], 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000300000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000780), 0x1, 0x50f, &(0x7f0000000b00)="$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") 29.084037678s ago: executing program 6 (id=2363): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x2}, 0x18) syz_io_uring_setup(0x27cb, &(0x7f00000001c0)={0x0, 0xce3a, 0x80, 0x3, 0x1cb, 0x0, r0}, &(0x7f00000000c0), &(0x7f0000000140)) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r1, 0x0, 0x25, 0x2, @val=@perf_event={0x11}}, 0x18) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000680)={r2, r3, 0x4, r0}, 0x10) 29.043973892s ago: executing program 6 (id=2364): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x100, 0x0) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x38e72a2a, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6341, 0x5, 0xffffffed, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000006c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b925, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {}, {0xb, 0xb}, {0x10, 0xd}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xfffe, 0x5, 0xb, 0x1, 0xfffffffc, 0xffff, 0x5, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x24058081}, 0xc804) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 28.565240544s ago: executing program 6 (id=2365): mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) 28.49910629s ago: executing program 6 (id=2366): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="160000000000000004000000ffff000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000aade90975017144c5e44f8be2f8ae65e97c1c0ba517f06ceaea2f2f528a61e0ed6242b6135392aa70127ee59d5e72915543c8e63c4b563"], 0x48) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$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") pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) splice(r2, 0x0, r1, 0x0, 0x800000000ff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xc, 0x4, 0x4, 0x7, 0x0, r0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) mkdir(&(0x7f0000000580)='./file0\x00', 0x92) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) lsetxattr$security_selinux(&(0x7f0000000400)='./file0\x00', &(0x7f0000000000), &(0x7f0000000280)='system_u:object_r:ppp_device_t:s0\x00', 0x22, 0x3) r4 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f0000000080)) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x4, &(0x7f0000000980)=ANY=[@ANYBLOB="1801000000000000000000006dfeff00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', r5, 0x0, 0x401}, 0x11) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000740)={r6, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000004c0)=[0x8], 0x0, 0x0, 0x1, 0x1}}, 0x40) 28.404472249s ago: executing program 6 (id=2367): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000040)='kfree\x00'}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0xa1001) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r1, 0x54a3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7030000001f0000850000001b000000b70000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) sendmsg$NFT_BATCH(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000180a0500000000000000000002000000300003802c00038014000100776732000000000000000000000000001400010076657468315f746f5f627269646765000900020073797a30000000000900010073797a300000000014000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x24040089}, 0x20008000) 28.133408862s ago: executing program 8 (id=2370): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000280)='^', 0x1, 0x40000, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@timestamp, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x2000000000000061) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0) 28.112297575s ago: executing program 6 (id=2371): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000780)='./bus\x00', 0x41, &(0x7f0000000840)={[{@delalloc}, {@noload}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@noblock_validity}, {@noblock_validity}, {@nogrpid}, {@mblk_io_submit}, {@dioread_lock}, {@stripe={'stripe', 0x3d, 0x65cf}}], [], 0x3d}, 0x65, 0x51c, &(0x7f0000000200)="$eJzs3UFoJFkZAOC/Ot3ZyUx2k1UPuuC6uiuZQac72bi7wcO6guhpQV3vY0w6IaSTDunO7iQsmsGDR0FEBU968SJ48iTIghePIizoWVFRRGf0IKhTS3dXZ2aS6k5mpiedSX8fVOrV66r3v9ehqutVPaoCGFnPRcRrEXE7TdMrETGV5ReyKfY7U2u9WzffXmpNSaTpG/9IIsnyumWlbU/EpWyzCxHx5S9EfC05Grexu7e+WKtVt7PlSnNjq9LY3bu6trG4Wl2tbs7Pz7288MrCSwuzA2nnZES8+rm/fO/bP/n8q7/85Ft/vPa3y19Psvw41I77VOz3YafppfZ3cfcG2w8Y7CwqtluYmchbY+xIzo1HXCcAAHp7X0R8LCKuxFSM9T+dBQAAAB5D6Wcm439J997dEeM98gEAAIDHSKE9BjYplLPxvpNRKJTL0R7D+4G4WKjVG81PrNR3Npc7Y2Wno1RYWatVZ7OxwtNRSlrLc+30neUXDy3PR8TTEfHdqYn2cnmpXlse9sUPAAAAGBGXDvX//z3V6f8DAAAA58z0sCsAAAAAPHL6/wAAAHD+6f8DAADAufbF119vTWn3/dfLb+7urNffvLpcbayXN3aWykv17a3yar2+2n5m38Zx5dXq9a1PxebO9Uqz2mhWGrt71zbqO5vNa2v3vAIbAAAAOEVPf+Sd3ycRsf/pifbUMn6yTU+4GnBWFQ9SSTbP2a3/8FRn/udTqhRwKsaGXQFgaIrDrgAwNKVhVwAYuuSYz3sO3vlNNv/oYOsDAAAM3syHet//L/Tdcr//x8CZZyeG0eX+P4yu9v3/k47kdbIA50rJGQCMvIe+/3+sNL2vCgEAAAM32Z6SQjm7vDcZhUK5HPFk+7UApWRlrVadjYinIuJ3U6UnWstz7S2TY/sMAAAAAAAAAAAAAAAAAAAAAAAAAEBHmiaRAgAAAOdaROGvya86z/KfmXph8vD1gfHkP1ORvSL0rR++8f3ri83m9lwr/58H+c0fZPkvDuMKBgAAAIyE4v2s3O2nd/vxAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADBIt26+vdSdTjPu3z8bEdN58YtxoT2/EKWIuPivJIp3bZdExNgA4k+0/nwwL37SqtZByLz4EwOIv3+jb/yYzr6FvPiXBhAfRtk7rePPa3n7XyGea8/z979ixD3LD6r38S8Ojn9jPfb/J08Y45l3f1bpGf9GxDPF/ONPN37SI/7zeQX+/FtHsr76lb29XvHTH0XM5P7+JPfEqjQ3tiqN3b2raxuLq9XV6ub8/NzLC68svLQwW1lZq1Wzv7kxvvPhX9zu1/6LPeJPH9P+F3LKG8/J+/+712++v5Ms5cW//HxO/F//OFvjaPxC9tv38Szd+nymm97vpO/27E9/+2y/9i/3aP9x///LvQo95MqXvvmnE64KAJyCxu7e+mKtVt0+t4lWL/0MVONxS/w3PRPVeLSJbwy0wDRN09Y+9RDlJHF6X0LSv6rDPjIBAACDduekf9g1AQAAAAAAAAAAAAAAAAAAgNF1Gk8aOxxz/yCVDOIR2gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/FeAAAA//+kyeAN") bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0}, 0x0, 0x0}, 0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000c00)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010025bd7000fedbdf251d00000008000300", @ANYRES32=r5, @ANYBLOB="24002f800c0002000201aaaaaaaaaaaa0800010200f70030d38868913261dd00ce46951e4a24e6ef6ee6c5940bfd9325fbb0d3d70000000000000004b7c37ef58112228968b1e748394f"], 0x40}}, 0x8004) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r1}, 0x8) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0x7, &(0x7f0000000900)=ANY=[@ANYBLOB="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", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r6}, 0x18) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = syz_io_uring_setup(0x1104, &(0x7f0000000780)={0x0, 0x0, 0x400, 0x2, 0x80000216}, &(0x7f00000001c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r11, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r11, r12, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x7ff, 0x0, 0x1}) io_uring_enter(r10, 0x47f4, 0xffff7fff, 0x3, 0x0, 0x0) syz_io_uring_submit(r11, r12, &(0x7f00000002c0)=@IORING_OP_SEND={0x1a, 0x20, 0x0, r9, 0x0, 0x0, 0x0, 0x44040001, 0x1}) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000340)='kfree\x00', r13}, 0x18) msgsnd(0x0, 0x0, 0x2000, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a300000000068000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000212c0011800a0001006c696d69740000001c0002800c00024000000000000000030c0001400000000200000101480000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000001c0003800c00008008000340000000020c0000800800034000000002"], 0xf8}, 0x1, 0x0, 0x0, 0x800}, 0x0) 28.111680285s ago: executing program 8 (id=2372): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000100)={[{@usrquota}]}, 0x1, 0x565, &(0x7f0000000580)="$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") r0 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0xdc) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1802000000"], 0x0, 0xffffffff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) fallocate(r0, 0x0, 0x0, 0x8800000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) pwrite64(r2, &(0x7f0000000140)='2', 0xfdef, 0xfecc) 28.067907759s ago: executing program 36 (id=2371): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000780)='./bus\x00', 0x41, &(0x7f0000000840)={[{@delalloc}, {@noload}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@noblock_validity}, {@noblock_validity}, {@nogrpid}, {@mblk_io_submit}, {@dioread_lock}, {@stripe={'stripe', 0x3d, 0x65cf}}], [], 0x3d}, 0x65, 0x51c, &(0x7f0000000200)="$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") bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0}, 0x0, 0x0}, 0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000c00)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010025bd7000fedbdf251d00000008000300", @ANYRES32=r5, @ANYBLOB="24002f800c0002000201aaaaaaaaaaaa0800010200f70030d38868913261dd00ce46951e4a24e6ef6ee6c5940bfd9325fbb0d3d70000000000000004b7c37ef58112228968b1e748394f"], 0x40}}, 0x8004) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r1}, 0x8) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0x7, &(0x7f0000000900)=ANY=[@ANYBLOB="18f0ffffff10010060456f2c46d4f3d19188afdb8a649981a4c328fc0b1ac3208fedfa73088c6de68d142e9f81ca5e3a68f242254dc81259b0700d4937addcc1b7c04c19033bcd14001049148b8478cfeffcf80b995fe5ec047dafed80b690991be0b6bc365490a7125fd1df67f8de742de1f168ab53cba65a1aeaa932a996706bb3f75cc5ddd2fa427513b95e047e0678b26a30cae2fda7977ebb96189268d83f88dffef72bea3ac15f9b5f5bd187ca01a78f3620e69739bceebe6e235c2c3c853337fb86692dfde2431b56bb6a33e53969c87dedab41dd5eb0708a605df14cf770e64ff001ebcf72ae9734499a82f810d7406205e19d19a13e190f8d191c7508663478fc2644d844d2c9c934b65a607475562e4f8aaf0fbf1ba9da179437b87759f4f12a4d344190b21b4e5f797dc4e7f30cf257514e19d0fe7b1da4aeaeeb861003117c84863bfda01f61cb4870dbfcb69b05d1da6eedd68f1362dad8f9d1713fced0dfe3286063ea74a79fe857c4376eec0e658bacf3ac3b36aa1f0f1615c88f01a7e00b6c022cba7ee0", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r6}, 0x18) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = syz_io_uring_setup(0x1104, &(0x7f0000000780)={0x0, 0x0, 0x400, 0x2, 0x80000216}, &(0x7f00000001c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r11, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r11, r12, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x7ff, 0x0, 0x1}) io_uring_enter(r10, 0x47f4, 0xffff7fff, 0x3, 0x0, 0x0) syz_io_uring_submit(r11, r12, &(0x7f00000002c0)=@IORING_OP_SEND={0x1a, 0x20, 0x0, r9, 0x0, 0x0, 0x0, 0x44040001, 0x1}) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000340)='kfree\x00', r13}, 0x18) msgsnd(0x0, 0x0, 0x2000, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a300000000068000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000212c0011800a0001006c696d69740000001c0002800c00024000000000000000030c0001400000000200000101480000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000001c0003800c00008008000340000000020c0000800800034000000002"], 0xf8}, 0x1, 0x0, 0x0, 0x800}, 0x0) 28.001246535s ago: executing program 7 (id=2375): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r5) ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) close_range(r0, 0xffffffffffffffff, 0x0) 27.989162096s ago: executing program 8 (id=2376): mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) 27.928333271s ago: executing program 37 (id=2375): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r5) ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) close_range(r0, 0xffffffffffffffff, 0x0) 27.835451279s ago: executing program 8 (id=2380): bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="160000000000000004000000ffff000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000aade90975017144c5e44f8be2f8ae65e97c1c0ba517f06ceaea2f2f528a61e0ed6242b6135392aa70127ee59d5e72915543c8e63c4b563"], 0x48) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$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") pipe(&(0x7f00000001c0)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) lsetxattr$security_selinux(&(0x7f0000000400)='./file0\x00', &(0x7f0000000000), &(0x7f0000000280)='system_u:object_r:ppp_device_t:s0\x00', 0x22, 0x3) 27.643421327s ago: executing program 8 (id=2381): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000040)='kfree\x00'}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0xa1001) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r1, 0x54a3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7030000001f0000850000001b000000b70000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) sendmsg$NFT_BATCH(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000180a0500000000000000000002000000300003802c00038014000100776732000000000000000000000000001400010076657468315f746f5f627269646765000900020073797a30000000000900010073797a300000000014000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x24040089}, 0x20008000) 26.097357044s ago: executing program 5 (id=2391): symlink(&(0x7f0000000300)='./file0/../file0/../file0\x00', &(0x7f00000017c0)='./file0\x00') r0 = bpf$MAP_CREATE(0x0, &(0x7f00000011c0)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000002d40)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000000300)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0x4c, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x4}, 0x18) setxattr$trusted_overlay_opaque(&(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0), 0x0, 0x0, 0x1) 26.064946657s ago: executing program 5 (id=2392): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r1, 0x0, 0x200000000000006}, 0x18) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x8, 0x7ffc0001}]}) lsetxattr$security_selinux(&(0x7f0000000080)='.\x00', &(0x7f00000000c0), &(0x7f0000000100)='system_u:object_r:systemd_logger_exec_t:s0\x00', 0x2b, 0x0) 26.022763521s ago: executing program 5 (id=2393): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000140)='./file2\x00', 0x404, &(0x7f0000000080)={[{@nogrpid}, {@noinit_itable}, {@jqfmt_vfsold}, {@debug}, {@nodiscard}, {@quota}]}, 0x1, 0x43d, &(0x7f0000000700)="$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") r0 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x2, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000004740)={0x0, 0x0, &(0x7f0000004700)={&(0x7f0000000000)={0x4c, 0x2, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_REVISION={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x48001}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8d}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x0, 0x2, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff9}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4, 0x0, 0x1}, 0x18) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000000400000014000500fc0000000000000000000000000000010800020005000000070006"], 0x44}}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) r7 = syz_open_dev$loop(&(0x7f00000001c0), 0x3, 0x8080) ioctl$IOC_PR_REGISTER(r7, 0x401870c8, &(0x7f0000000280)={0x488, 0x0, 0x1}) prctl$PR_SET_NAME(0xf, &(0x7f0000000200)='\x04\x00\x00\x00\x00\x00\x00\x00\x00\xbc:\a\xd94\x16\x03\x02+\xd20\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='mm_page_free\x00', r6, 0x0, 0x800000000000}, 0x18) ftruncate(r0, 0x2007ffc) sendfile(r0, r0, 0x0, 0x800000009) 25.801913701s ago: executing program 5 (id=2394): bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="160000000000000004000000ffff000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000aade90975017144c5e44f8be2f8ae65e97c1c0ba517f06ceaea2f2f528a61e0ed6242b6135392aa70127ee59d5e72915543c8e63c4b563"], 0x48) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) lsetxattr$security_selinux(&(0x7f0000000400)='./file0\x00', &(0x7f0000000000), &(0x7f0000000280)='system_u:object_r:ppp_device_t:s0\x00', 0x22, 0x3) 25.731872517s ago: executing program 8 (id=2395): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f00000003c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x23}}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffc95}, 0x48) r2 = socket$kcm(0x29, 0x2, 0x0) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r2, 0x40049366, &(0x7f00000005c0)=0x2) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000180)={r0, r1}) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000001380)={0xffffffffffffffff}) sendmmsg(r3, &(0x7f0000001000)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000027c0)="7f822b", 0x3}], 0x1}}], 0x1, 0x4098) syz_genetlink_get_family_id$devlink(&(0x7f0000000640), r3) 25.731469047s ago: executing program 38 (id=2395): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f00000003c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x23}}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffc95}, 0x48) r2 = socket$kcm(0x29, 0x2, 0x0) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r2, 0x40049366, &(0x7f00000005c0)=0x2) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000180)={r0, r1}) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000001380)={0xffffffffffffffff}) sendmmsg(r3, &(0x7f0000001000)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000027c0)="7f822b", 0x3}], 0x1}}], 0x1, 0x4098) syz_genetlink_get_family_id$devlink(&(0x7f0000000640), r3) 25.681728261s ago: executing program 5 (id=2397): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$MON_IOCX_GETX(0xffffffffffffffff, 0x4018920a, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x24, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xfff1, 0x6}, {0xd}, {0xe, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x40080}, 0x4000440) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='page_pool_release\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB='e\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x005', @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x18000000000002a0, 0x21, 0x0, &(0x7f0000000080)="b9ff030768f1258c989e14f05c71462f866a90569b1b5611f051891fd2cc2662a99b7d286b8037e579b53f7f43", 0x0, 0x2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) read$usbmon(0xffffffffffffffff, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xb, &(0x7f0000000640)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kmem_cache_free\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, &(0x7f0000000640)=0x1002, 0x4) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0xfd, &(0x7f00000004c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x40) sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x4008084) r7 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'bond0\x00'}) 25.313200894s ago: executing program 5 (id=2399): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xb, 0xd}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) recvmmsg(r4, &(0x7f0000002d80)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000640)=""/216, 0xd8}, {&(0x7f00000052c0)=""/235, 0xeb}, {&(0x7f0000003080)=""/4096, 0x1000}, {&(0x7f00000002c0)=""/243, 0xf3}], 0x4}, 0x3}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0xfff}], 0x3, 0x0, 0x0) 25.312584164s ago: executing program 39 (id=2399): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xb, 0xd}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) recvmmsg(r4, &(0x7f0000002d80)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000640)=""/216, 0xd8}, {&(0x7f00000052c0)=""/235, 0xeb}, {&(0x7f0000003080)=""/4096, 0x1000}, {&(0x7f00000002c0)=""/243, 0xf3}], 0x4}, 0x3}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0xfff}], 0x3, 0x0, 0x0) 16.83817091s ago: executing program 4 (id=2502): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r2}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000040000000000000000000300000a20000000000a05000000000000000000070000000900010073797a300000000044000000090a010400000000000000000700ffff08000a40000000030900020073797a31000000000900010073797a3000000000080005400000002106000d40931000005c0000000c0a01020000000000000000070000000900020073797a31000000000900010073797a3000000000300003802c0000800400018024000b80100001800c000100636f756e7465720010000180090001006c617374"], 0xe8}, 0x1, 0x0, 0x0, 0x10}, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r4, 0x541c, &(0x7f0000001900)={0x2, {0xc, 0x117, 0x5, 0x101, 0x200}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r0}, 0x18) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000280)={'ip6tnl0\x00', &(0x7f0000000400)={'ip6gre0\x00', 0x0, 0x2f, 0x0, 0x2, 0x9, 0x59, @loopback, @loopback, 0x10, 0xb6, 0x1, 0x9}}) openat(0xffffffffffffff9c, 0x0, 0x20842, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[], 0xb4}, 0x1, 0x0, 0x0, 0x40000}, 0x24004010) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'ip6gretap0\x00', 0x0}) setsockopt$inet6_mreq(r7, 0x29, 0x1b, &(0x7f0000000280)={@remote, r8}, 0x14) sendmsg$IPSET_CMD_LIST(r5, &(0x7f0000000640)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000480)={&(0x7f0000000380)=ANY=[@ANYBLOB="2c00000007060101000000000000900000000000000080070000000500010007000000080006400000001000"], 0x2c}, 0x1, 0x0, 0x0, 0x8000000}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x4001, 0x0) umount2(&(0x7f0000000180)='./file0\x00', 0xc) r9 = inotify_init1(0x80000) inotify_add_watch(r9, &(0x7f00000000c0)='./file0\x00', 0x60006a4) sendmsg$nl_route_sched(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x2000, {0x0, 0x0, 0x74, r8, {0xfff1, 0x10}, {0x8, 0x4}, {0x6, 0x3}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x14004804}, 0x8804) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) 16.659457216s ago: executing program 4 (id=2505): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x5d, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff7e}, 0x94) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x1, 0x10, 0x80000001, 0x843f}, &(0x7f00000001c0)=0x18) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000300)={r2, @in={{0x2, 0x4e23, @multicast2}}, 0x3ff, 0xe}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000540)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000f00)='kfree\x00', r3}, 0x18) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000200000000000000010000840000000000000000020000000000000000000000001e02ed000006020000"], 0x0, 0x3e, 0x0, 0x0, 0x6}, 0x28) (async, rerun: 32) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (rerun: 32) sendmsg$ETHTOOL_MSG_COALESCE_SET(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000003000000018000180140002007665746830"], 0x2c}}, 0x0) 16.583792992s ago: executing program 4 (id=2506): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000000)) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000040)=@assoc_value={r3, 0x5}, 0x8) socket$netlink(0x10, 0x3, 0x10) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000074"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 16.568531794s ago: executing program 4 (id=2507): syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x18, 0xc, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) lsetxattr$security_selinux(&(0x7f0000000400)='./file0\x00', &(0x7f0000000000), &(0x7f0000000280)='system_u:object_r:ppp_device_t:s0\x00', 0x22, 0x3) 16.514691489s ago: executing program 4 (id=2509): symlink(&(0x7f0000000300)='./file0/../file0/../file0\x00', &(0x7f00000017c0)='./file0\x00') r0 = bpf$MAP_CREATE(0x0, &(0x7f00000011c0)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000002d40)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b7040000000000008500000001000000"], &(0x7f0000000300)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0x4c, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x4}, 0x18) setxattr$trusted_overlay_opaque(&(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0), 0x0, 0x0, 0x1) 16.295960558s ago: executing program 4 (id=2510): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0xa, 0xfb, 0x7ffc1ffb}]}) bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x6c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='kfree\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) pipe(&(0x7f0000005880)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_selinux(r2, &(0x7f00000000c0), &(0x7f0000000040)='system_u:object_r:dhcp_state_t:s0\x00', 0x1e, 0x0) 16.295500078s ago: executing program 40 (id=2510): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0xa, 0xfb, 0x7ffc1ffb}]}) bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x6c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='kfree\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) pipe(&(0x7f0000005880)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_selinux(r2, &(0x7f00000000c0), &(0x7f0000000040)='system_u:object_r:dhcp_state_t:s0\x00', 0x1e, 0x0) 2.290476656s ago: executing program 2 (id=2686): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0xc369d000) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_emit_ethernet(0x87a2f, 0x0, 0x0) r1 = openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) r2 = dup(r0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) r5 = syz_open_dev$vcsn(&(0x7f0000000180), 0x7, 0x10200) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f00000004c0)={0x0, 0xc76}, &(0x7f0000000600)=0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r6}, 0x10) r7 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r7) getsockname$packet(r7, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="4800000010000305ff810000fddbdf2500000000", @ANYRES32=r8, @ANYBLOB="1748000040000200280012800a000100767863616e0000001800028014000100000000", @ANYRES32=r8], 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r9, @ANYBLOB="0000000000000000b703000000010000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sys_enter\x00', r10}, 0x18) rt_sigprocmask(0x0, &(0x7f0000000100)={[0xfffffffffffe]}, 0x0, 0x8) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r11) sendmsg$NL80211_CMD_GET_WIPHY(r11, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)={0x30, r12, 0x301, 0x1, 0x0, {{}, {@val={0x8, 0x1, 0x6c}, @val={0x8}, @val={0xc, 0x99, {0x3, 0x2a}}}}}, 0x30}}, 0x20000004) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r5, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r12, 0xf00, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x6006}]}, 0x24}, 0x1, 0x0, 0x0, 0xc010}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r3}, &(0x7f0000000000), &(0x7f00000005c0)=r4}, 0x20) write$selinux_access(r1, &(0x7f00000003c0)={'system_u:object_r:hugetlbfs_t:s0', 0x20, '/sbin/dhclient', 0x20, 0x7}, 0x45) 2.168278677s ago: executing program 0 (id=2687): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000100)={[{@usrquota}]}, 0x1, 0x565, &(0x7f0000000580)="$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") r0 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0xdc) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000840000"], 0x0, 0xffffffff}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, 0x0, &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) fallocate(r0, 0x0, 0x0, 0x8800000) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) pwrite64(r3, &(0x7f0000000140)='2', 0xfdef, 0xfecc) 1.388066936s ago: executing program 2 (id=2694): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x70}, 0x1, 0x0, 0x0, 0x4000080}, 0x20048004) 1.378759977s ago: executing program 2 (id=2695): syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$eJzs3c9rXNUeAPDvnSRNm/a95MGD9+oqIGigdGJqbBVcVFyIYKGga9thMg01k0zJTEoTAlpEcCOouBB007U/6s6tP7b6X7gQS9W0WHEhkTu5t502M2mSJpnqfD5wM+fceyfnfOf+OGfmHu4NoGeNpn8KEYcj4t0kYjibn0TEQDPVH3Fybb1bK8vldEpidfXlX5LmOjdXlsvR8p7UwSzz/4j45q2II4X15dYXl2ZK1WplPsuPN2YvjNcXl46eny1NV6Yrc8cnJiePnXjqxPGdi/W375cOXXvvhcc/P/nHm/+7+s63SZyMQ9my1jh2ymiMZp/JQPoR3uX5nS6sy5JuV4BtSQ/NvrWjPA7HcPQ1UwDAP9nrEbEKAPSYRPsPAD0m/x3g5spyOZ+6+4vE3rr+XETsX4s/v765tqQ/u2a3v3kddOhmcteVkSQiRnag/NGI+PjLVz9Np9il65AA7bxxOSLOjoyuP/8n68YsbNUTGyzbl72O3jPf+Q/2zldp/+fpdv2/wu3+T7Tp/wy2OXa3477H/4EdKGQDaf/v2Zaxbbda4s+M9GW5fzX7fAPJufPVSnpu+3dEjMXAYJqf2KCMsRt/3ui0rLX/9+v7r32Slp++3lmj8FP/4N3vmSo1Sg8Sc6vrlyMe6W8Xf3J7+ycd+r+nN1nGi8+8/VGnZWn8abz5tD7+yEYn7Y7VKxGPtd3+d0a0JRuOTxxv7g7j+U7Rxhc/fDjUqfzW7Z9Oafn5d4G9kG7/oY3jH0lax2vWt17Gd1eGv+607P7xt9//9yWvNNN5P+JSqdGYn4jYl7y0fv6xO+/N8/n6afxjj7Y//jfa/9PvhGc3GX//tZ8/2378uyuNf2pL23/riau3Zvo6lb+57T/ZTI1lczZz/ttsBR/kswMAAAAAAAAAAAAAAAAAAAAAAACAzSpExKFICsXb6UKhWFx7hvd/Y6hQrdUbR87VFuamovms7JEYKOS3uhxuuR/qRHY//Dx/7J78kxHxn4j4YPBAkt9HcarLsQMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABA7mCH5/+nfhzsdu0AgF2zv9sVAAD2nPYfAHqP9h8Aeo/2HwB6j/YfAHqP9h8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBddvrUqXRa/X1luZzmpy4uLszULh6dqtRnirML5WK5Nn+hOF2rTVcrxXJt9n7/r1qrXZiMuYVL441KvTFeX1w6M1tbmGucOT9bmq6cqQzsSVQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsDX1xaWZUrVamZfYRmL14ahG9xN92e70sNRnTxPJw1GNHU50+cQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8DfxVwAAAP//02Ii/w==") r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x4, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', r0, 0x0, 0x401}, 0x11) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000740)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000004c0)=[0x8], 0x0, 0x0, 0x1, 0x1}}, 0x40) 1.068093985s ago: executing program 2 (id=2696): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) 967.094604ms ago: executing program 2 (id=2698): lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0xee01, @ANYBLOB="02000000", @ANYBLOB="020000", @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="040000000000800008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0) socket$packet(0x11, 0x0, 0x300) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00"/13], 0x48) r0 = syz_clone(0x2b00b100, 0x0, 0x0, &(0x7f0000000140), 0x0, 0x0) setfsgid(0xee01) ptrace(0x4206, r0) wait4(r0, 0x0, 0x2, 0x0) socket$igmp(0x2, 0x3, 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000840)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x97a3}, 0x18) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x200000}, 0x1c) listen(r2, 0x9) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg(r3, 0x0, 0x0, 0x20044000) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) accept(r2, &(0x7f0000000100)=@nfc, &(0x7f00000001c0)=0x80) 932.878307ms ago: executing program 9 (id=2699): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1, 0x0, 0x5}, 0x18) syz_emit_ethernet(0x4a, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0) 898.5342ms ago: executing program 1 (id=2700): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x2}, 0x18) syz_io_uring_setup(0x27cb, &(0x7f00000001c0)={0x0, 0xce3a, 0x80, 0x3, 0x1cb, 0x0, r0}, &(0x7f00000000c0), &(0x7f0000000140)) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000580)={'veth1_to_bond\x00', 0x0}) r4 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r1, r3, 0x25, 0x2, @val=@perf_event={0x11}}, 0x18) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000680)={r4, r5, 0x4, r0}, 0x10) 827.566076ms ago: executing program 3 (id=2702): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000050b6850000002d00000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x10, 0x5, 0x0, 'queue0\x00', 0x10000}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r1, 0x404c534a, &(0x7f0000000380)) syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="0b000000050000000400000032a9000009"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000900000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000f9ffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000540)='kfree\x00', r3}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00'}) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffff05850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r5}, 0x10) r6 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r6, &(0x7f0000000200)={0xa, 0x0, 0xfffffffd, @empty}, 0x1c) r7 = dup(r6) r8 = open(0x0, 0x1298c2, 0x0) ftruncate(r8, 0x0) sendfile(r7, r8, 0x0, 0x80001d00c0d1) r9 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x8040044}, 0x810) sendmsg$RDMA_NLDEV_CMD_DELLINK(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08d1ca4eb6b8b4889cdd4e786eb807e04eb88b935d78"], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@ifindex, 0x35, 0x0, 0x6, &(0x7f0000000440), 0x0, 0x0, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0]}, 0x40) 824.813986ms ago: executing program 1 (id=2703): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000000)) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000040)=@assoc_value={r3, 0x5}, 0x8) socket$netlink(0x10, 0x3, 0x10) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r4, 0x0, 0xffffffffffffff0b}, 0x18) 820.286287ms ago: executing program 9 (id=2704): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000100)={[{@usrquota}]}, 0x1, 0x565, &(0x7f0000000580)="$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") r0 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0xdc) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000840000"], 0x0, 0xffffffff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fallocate(r0, 0x0, 0x0, 0x8800000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xfecc) 764.370722ms ago: executing program 3 (id=2705): bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0b00000005000000020000000400000005000000", @ANYRESOCT=0x0, @ANYBLOB="0000ded544cc9cb14b5600"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/25], 0x50) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb01011800000000000000000000000000000006000002002e2e615f04"], &(0x7f0000000600)=""/4096, 0x1e, 0x1000, 0x0, 0x77}, 0x28) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000950025c0c2a5a0cb452e98000080000000"], &(0x7f0000000180)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfda8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000240)='sched_switch\x00', r1}, 0x18) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) getegid() sendmsg$netlink(0xffffffffffffffff, 0x0, 0x90) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r3, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000000340)={r5, 0x9}, &(0x7f0000000380)=0x8) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x1000) r6 = socket$packet(0x11, 0x2, 0x300) bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) bind$packet(r6, &(0x7f0000000300)={0x11, 0x1b, r7, 0x1, 0x0, 0x6, @local}, 0x14) r8 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) ioctl$USBDEVFS_REAPURB(r8, 0x4008550c, 0x0) ioctl$USBDEVFS_SUBMITURB(r8, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x2000000b, 0x81, &(0x7f0000000240)={0x80, 0x11, 0x5, 0x5360, 0x7}, 0x1a, 0x6, 0x81, 0x0, 0xffffffff, 0x101, 0x0}) bind$packet(r6, &(0x7f0000000000)={0x11, 0x7, r7, 0x1, 0x9, 0x6, @multicast}, 0x14) sendmsg$NFC_CMD_GET_TARGET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) r9 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$GIO_SCRNMAP(r9, 0x4b40, &(0x7f0000000000)=""/251) ioctl$VT_RESIZE(r9, 0x5609, &(0x7f00000002c0)={0x2, 0x404, 0x26}) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r2) 748.827034ms ago: executing program 1 (id=2706): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', r1, 0x0, 0x200000000000006}, 0x18) lsetxattr$security_selinux(0x0, &(0x7f00000000c0), &(0x7f0000000100)='system_u:object_r:systemd_logger_exec_t:s0\x00', 0x2b, 0x0) 628.993674ms ago: executing program 1 (id=2707): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x13, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000080000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000100000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r0}, 0x10) socket$netlink(0x10, 0x3, 0x400000000000004) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x94) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000c00)=@filter={'filter\x00', 0x42, 0x4, 0x348, 0xffffffff, 0xf8, 0x0, 0x1c8, 0xffffffff, 0xffffffff, 0x2b0, 0x2b0, 0x2b0, 0xffffffff, 0x5, 0x0, {[{{@ip={@empty, @dev, 0x0, 0x0, 'bridge_slave_1\x00', 'nr0\x00'}, 0x3127, 0xd0, 0xf8, 0x1ba, {0x46010000}, [@common=@addrtype={{0x30}}, @common=@addrtype={{0x30}}]}, @REJECT={0x28}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x11}, @broadcast, 0xffffffff, 0xff000000, 'vlan1\x00', 'macvlan1\x00', {}, {0xff}, 0x16, 0x0, 0x8}, 0x287, 0x70, 0xd0, 0x0, {0x0, 0x4}}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x2, 0x1, 0x16], 0x4, 0x1}, {0x0, [0x4, 0x0, 0x5, 0x1, 0x5], 0x4, 0x3}}}}, {{@ip={@multicast1, @broadcast, 0x0, 0x0, 'lo\x00', 'veth0_virt_wifi\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@osf={{0x50}, {'syz1\x00', 0x0, 0x1, 0x1, 0x1}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3a8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="14000000100001000c000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x44051}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000006000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc4c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000020000380100000800c00018006000100d10300000c000080080003400000000214000000110001"], 0xb0}}, 0x40) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfd, 0x0, 0x7ffc0002}]}) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) r6 = io_uring_setup(0xad5, &(0x7f0000000240)={0x0, 0x4, 0x0, 0x1, 0xe9}) close(r6) r7 = mq_open(&(0x7f0000000000)='batadv_slave_1\xbb', 0x2, 0x30, &(0x7f0000000080)={0x13, 0x40008, 0x6, 0xc07}) mq_getsetattr(r7, &(0x7f0000000040)={0x0, 0x40, 0x4, 0xffff}, 0x0) mq_timedreceive(r7, &(0x7f0000000100)=""/90, 0x5a, 0x0, 0x0) mq_timedsend(r7, 0x0, 0x0, 0x5, 0x0) unlink(&(0x7f00000003c0)='./file0\x00') r8 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89001) mount_setattr(r8, &(0x7f0000001d80)='.\x00', 0x8800, &(0x7f00000002c0)={0x0, 0x8, 0x40000}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000200)={r8}, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000004c0)='ext4_insert_range\x00', 0xffffffffffffffff, 0x0, 0x8000000000000000}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) 627.491444ms ago: executing program 9 (id=2708): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000016c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x840e, &(0x7f0000001080)={[{@discard}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@jqfmt_vfsold}, {@bsdgroups}, {@quota}]}, 0x3, 0x43a, &(0x7f0000001100)="$eJzs28tvG1UXAPAzfrRfX19CVR59AIGCqHgkTVpKF2xAILEACQkWZRmStCp1G9QEiVYRBITKCqFK7BFLJP4CVrBBwAqJLexRpQpl08LKaOyZxHYcNzFOnOLfT5r23plr3XM8c+07c+MABtZI+k8SsTcifouIoXq1ucFI/b/bSwtTfy0tTCVRrb7xZ1Jrd2tpYSpvmr9uT14pRRQ+SeJwm37nrly9MFmpzFzO6mPzF98dm7ty9ZnzFyfPzZybuTRx+vTJE+PPnZp4tid5pnndOvTB7JGDr7x1/bWpM9ff/umbJM+/JY8eGel08PFqtcfd9de+hnJS6mMgbEixPkyjXBv/Q1GMlZM3FC9/3NfggE1VrVar9619eLEK/Icl0e8IgP7Iv+jT+99826Kpx7Zw84X6DVCa9+1sqx8pRSFrU265v+2lkYg4s/j3l+kWm/McAgCgyXfp/OfpdvO/QjQ+F/p/toYyHBH3RMT+iDgVEQci4t6IWtv7I+KBDfbfukiyev5TuNFVYuuUzv+ez9a2mud/+ewvhotZbV8t/3Jy9nxl5nj2nhyL8s60Pt6hj+9f+vXztY41zv/SLe0/nwtmcdwo7Wx+zfTk/GRziN27+VHEoVK7/JPllYAkIg5GxKEu+zj/5NdH1jp25/w76ME6U/WriCfq538xWvLPJZ3XJ8f+F5WZ42P5VbHaz79ce32t/v9V/j2Qnv/dba//5fyHk8b12rmN93Ht90/XvKfp9vrfkbzZtO/9yfn5y+MRO5JX60E37p9oaTex0j7N/9jR9uN/f6y8E4cjIr2IH4yIhyLi4Sz2RyLi0Yg42iH/H1987J3u899caf7TGzr/K4Ud0bqnfaF44Ydvmzod3kj+6fk/WSsdy/Ysf/51sJ64uruaAQAA4O5TiIi9kRRGl8uFwuho/W/4D8TuQmV2bv6ps7PvXZqu/0ZgOMqF/EnXUMPz0PHstj6vT7TUT2TPjb8o7qrVR6dmK9P9Th4G3J4otR3/qT+K/Y4O2HR+rwWDy/iHwWX8w+Ay/mFwtRn/u/oRB7D12n3/f9iHOICt1zL+LfvBAHH/D4PL+IfBZfzDQJrbFXf+kbyCwqpCFLZFGOssfFbeFmHcRYV+fzIBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD0xj8BAAD//3g65pw=") r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007500000004000000070000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000), 0x208e24b) bind$rds(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet(0x2, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000140)='kfree\x00', r2, 0x0, 0xfffffffffffff001}, 0x18) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021940000000c0a01030000000000000000070000000900020073797a31000000000900010073797a3000000000680003806400dec6080003400000000258000b80200001800a00010071756f7461000000100002800c0001"], 0x118}}, 0x0) sendmsg$inet(r1, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0xffff, @multicast1}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b', 0x1}], 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0xfffe) 595.956777ms ago: executing program 3 (id=2709): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000280), 0x0, 0x50a, &(0x7f0000001700)="$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") r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000780)={0x565, 0x0, 0x1, 0xffff, 0x2, "5f730000a9003f00"}) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f00000006c0)=0x5f) quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f0000000080)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000100)={0x3, 0x7, 0x800000000000246, 0x6, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0, 0x7fff, 0x9f}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x72b26edb631798e4, 0x14, &(0x7f00000008c0)=ANY=[@ANYRES16=r1, @ANYRES32=r1, @ANYRES32, @ANYRES8=r2, @ANYRES16], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kmem_cache_free\x00', r3, 0x0, 0xffff}, 0x18) r4 = syz_io_uring_setup(0x7b, &(0x7f0000000540)={0x0, 0x11d3, 0x1000, 0x0, 0x313}, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x1, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000030ffffff95000041c45c1bb500"/37], &(0x7f00000002c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) sendmsg$inet(r7, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)="fe", 0x1}], 0x1}, 0x4000000) syz_io_uring_submit(r5, r6, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x40, 0x0, r8, 0x0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000002c0)=""/183, 0xb7}], 0x1}}) io_uring_enter(r4, 0x46f3, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) ioctl$SG_NEXT_CMD_LEN(r9, 0x2283, &(0x7f0000000440)=0x25) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r8, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000740)={&(0x7f00000007c0)={0x4c, 0x0, 0x8, 0x101, 0x0, 0x0, {0x1}, [@CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x80}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x9}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6558}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x890d}, @CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @tcp}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2000c0c4}, 0x0) socket$tipc(0x1e, 0x2, 0x0) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r10) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x28, r11, 0x101, 0x70bd29, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x3}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x84) r12 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000500), r10) sendmsg$NET_DM_CMD_STOP(r10, &(0x7f00000006c0)={&(0x7f00000004c0), 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x14, r12, 0x8, 0x70bd29, 0x25dfdbff, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x2000c010}, 0x8000) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000480), r10) connect$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) 593.726018ms ago: executing program 0 (id=2710): syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$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") r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x4, &(0x7f0000000980)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', r0, 0x0, 0x401}, 0x11) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000740)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000004c0)=[0x8], 0x0, 0x0, 0x1, 0x1}}, 0x40) 549.102891ms ago: executing program 1 (id=2711): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000000)) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000040)=@assoc_value={r3, 0x5}, 0x8) socket$netlink(0x10, 0x3, 0x10) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r4, 0x0, 0xffffffffffffff0b}, 0x18) 544.739682ms ago: executing program 0 (id=2712): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x18) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRESHEX=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r4, 0x0, 0x3}, 0x18) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x18) umount2(&(0x7f0000000100)='./file0\x00', 0xc) 508.437195ms ago: executing program 0 (id=2713): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x2}, 0x18) syz_io_uring_setup(0x27cb, &(0x7f00000001c0)={0x0, 0xce3a, 0x80, 0x3, 0x1cb, 0x0, r0}, &(0x7f00000000c0), &(0x7f0000000140)) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000580)={'veth1_to_bond\x00', 0x0}) r4 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r1, r3, 0x25, 0x2, @val=@perf_event={0x11}}, 0x18) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000680)={r4, r5, 0x4, r0}, 0x10) 496.830916ms ago: executing program 9 (id=2714): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b000000000000000000000000800000000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000010000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (fail_nth: 2) 405.587094ms ago: executing program 0 (id=2715): sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)={0x94, 0x3, 0x8, 0x101, 0x0, 0x0, {0x3, 0x0, 0x7}, [@CTA_TIMEOUT_DATA={0x44, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_CLOSING={0x8, 0x6, 0x1, 0x0, 0x7ff}, @CTA_TIMEOUT_DCCP_PARTOPEN={0x8}, @CTA_TIMEOUT_DCCP_PARTOPEN={0x8, 0x3, 0x1, 0x0, 0x7fffffff}, @CTA_TIMEOUT_DCCP_CLOSING={0x8, 0x6, 0x1, 0x0, 0x1ff}, @CTA_TIMEOUT_DCCP_OPEN={0x8}, @CTA_TIMEOUT_DCCP_RESPOND={0x8, 0x2, 0x1, 0x0, 0xb59}, @CTA_TIMEOUT_DCCP_REQUEST={0x8, 0x1, 0x1, 0x0, 0xfff}, @CTA_TIMEOUT_DCCP_PARTOPEN={0x8, 0x3, 0x1, 0x0, 0x6a99}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x10}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x1}]}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x100}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x6}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x16}]}, 0x94}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[], 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r0}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[], 0x50) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x29, 0x1, 0x0, 0x2, 0x0, 0x9, 0x65299, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={&(0x7f0000000340), 0xa}, 0xa00, 0x81, 0x7f, 0x7, 0x9, 0x6, 0x2, 0x0, 0x3, 0x0, 0x2009}, 0x0, 0x3fffffffff, 0xffffffffffffffff, 0x0) writev(0xffffffffffffffff, &(0x7f0000000600), 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000005c0)=[{}], 0x1, 0x0, 0x0, 0x11000000}, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000540)) ptrace$cont(0x20, r1, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000080), 0xf944, 0x40002) setitimer(0x2, &(0x7f0000000200)={{}, {0x0, 0xea60}}, 0x0) clock_gettime(0x2, &(0x7f0000000140)) bpf$MAP_CREATE(0x0, 0x0, 0x50) r4 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r4, 0x114, 0x1d, &(0x7f0000000380), 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000c"], 0x48) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x18) ioctl$USBDEVFS_CONTROL(r3, 0xc0185500, &(0x7f00000001c0)={0x67, 0x1e, 0x3f8, 0x7, 0x1, 0x5, &(0x7f0000000100)="cc"}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010007000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000048000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0c00098008000140000000075c0000000e0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xec}}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.bfq.idle_time\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r6, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$FS_IOC_RESVSP(r5, 0x4030582b, &(0x7f0000000c00)={0x0, 0x2, 0x1004, 0x40000000000400, 0x0, 0xf0}) 405.067295ms ago: executing program 9 (id=2716): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000050b6850000002d00000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x10, 0x5, 0x0, 'queue0\x00', 0x10000}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r1, 0x404c534a, &(0x7f0000000380)) syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="0b000000050000000400000032a9000009"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000900000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000f9ffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000540)='kfree\x00', r3}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00'}) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffff05850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r5}, 0x10) r6 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r6, &(0x7f0000000200)={0xa, 0x0, 0xfffffffd, @empty}, 0x1c) r7 = dup(r6) r8 = open(0x0, 0x1298c2, 0x0) ftruncate(r8, 0x0) sendfile(r7, r8, 0x0, 0x80001d00c0d1) r9 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x8040044}, 0x810) sendmsg$RDMA_NLDEV_CMD_DELLINK(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08d1ca4eb6b8b4889cdd4e786eb807e04eb88b935d78"], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@ifindex, 0x35, 0x0, 0x6, &(0x7f0000000440), 0x0, 0x0, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0]}, 0x40) 189.871113ms ago: executing program 9 (id=2717): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b000000000000000000000000800000000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000010000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x18) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_read_part_table(0x5c2, &(0x7f0000000000)="$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") r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/slabinfo\x00', 0x0, 0x0) r3 = socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'geneve1\x00', 0x0}) sendto$packet(r2, &(0x7f0000000180)="0b032200e0ff25000200475400f6a13bb1000000080086dd4803", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r4}, 0x14) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 184.592044ms ago: executing program 3 (id=2718): socket$netlink(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) (async) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) (async, rerun: 64) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async, rerun: 64) getpid() (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001380)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa10000ffffffb702000008000000b7030000ff9bb5000000020000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3, 0x0, 0x10000002}, 0x18) (async, rerun: 32) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a300000000008000a40ffffffff580000000c0a010100000000000000000a0000060900020073797a30000000000900010073797a31000000012c0003802800008004000180200007800e000100636f6e6e6c696d69740000000c000280080001"], 0xbc}, 0x1, 0x0, 0x0, 0x4000851}, 0x40) sched_setaffinity(0x0, 0x0, 0x0) (async, rerun: 32) ioctl$TIOCL_BLANKSCREEN(0xffffffffffffffff, 0x541c, &(0x7f0000001340)) (async, rerun: 32) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000500000002"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='kmem_cache_free\x00', r6}, 0x18) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) (async) ustat(0x801, &(0x7f0000000240)) (async, rerun: 32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) (async, rerun: 32) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) (async) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, 0x0, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x6, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000001300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x3}, 0x8, 0x10, &(0x7f00000000c0), 0x10}, 0x94) (async, rerun: 32) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (rerun: 32) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r10 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) 141.488638ms ago: executing program 0 (id=2719): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000000)) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000040)=@assoc_value={r3, 0x5}, 0x8) r4 = socket$netlink(0x10, 0x3, 0x10) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000074"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r6, 0x0, 0xffffffffffffff0b}, 0x18) sendmsg$DEVLINK_CMD_RATE_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, 0x0, 0x1, 0x3, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 88.869493ms ago: executing program 3 (id=2720): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14) recvmmsg(r2, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) r3 = socket$netlink(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$SEG6_CMD_SET_TUNSRC(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r4, 0xc35, 0x70bd25, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4001000}, 0x20000050) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r5, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0x1f4, {}, {}, @raw32={[0x2600]}}], 0xffc8) 88.116253ms ago: executing program 2 (id=2721): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x38e72a2a, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6341, 0x5, 0xffffffed, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r5, 0x0, 0xc804) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 57.612565ms ago: executing program 1 (id=2722): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="0500000004000000080000000b"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000180)='kfree\x00', r0, 0x0, 0xac5}, 0x18) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x78, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f0000002040)=[{0x4, 0x8, 0x8, 0x6}]}, 0x10) 0s ago: executing program 3 (id=2723): syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$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") r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x4, &(0x7f0000000980)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', r0, 0x0, 0x401}, 0x11) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000740)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000004c0)=[0x8], 0x0, 0x0, 0x1, 0x1}}, 0x40) kernel console output (not intermixed with test programs): =0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10188 comm="syz.3.2311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16bd39f749 code=0x7ffc0000 [ 168.987918][ T29] audit: type=1326 audit(1767949327.865:8153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10188 comm="syz.3.2311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f16bd39f749 code=0x7ffc0000 [ 169.011429][ T29] audit: type=1326 audit(1767949327.865:8154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10188 comm="syz.3.2311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16bd39f749 code=0x7ffc0000 [ 169.034954][ T29] audit: type=1326 audit(1767949327.865:8155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10188 comm="syz.3.2311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f16bd39f749 code=0x7ffc0000 [ 169.059331][ T29] audit: type=1326 audit(1767949327.865:8156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10188 comm="syz.3.2311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16bd39f749 code=0x7ffc0000 [ 169.062086][T10163] chnl_net:caif_netlink_parms(): no params data found [ 169.083319][ T29] audit: type=1326 audit(1767949327.865:8157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10188 comm="syz.3.2311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f16bd39f749 code=0x7ffc0000 [ 169.152569][T10201] loop3: detected capacity change from 0 to 2048 [ 169.270028][T10203] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.283027][T10201] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 169.338705][T10163] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.345855][T10163] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.387667][T10163] bridge_slave_0: entered allmulticast mode [ 169.411221][T10163] bridge_slave_0: entered promiscuous mode [ 169.435892][T10203] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.457863][T10163] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.465155][T10163] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.503579][T10163] bridge_slave_1: entered allmulticast mode [ 169.518207][ T4493] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.535082][T10163] bridge_slave_1: entered promiscuous mode [ 169.553622][T10203] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.600028][T10163] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 169.624277][T10163] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 169.639007][T10203] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.682988][ T4493] syz_tun (unregistering): left allmulticast mode [ 169.701526][T10163] team0: Port device team_slave_0 added [ 169.709188][T10163] team0: Port device team_slave_1 added [ 169.730198][ T335] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.739329][T10163] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 169.746383][T10163] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 169.772389][T10163] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 169.788092][ T1822] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.805768][ T1822] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.814838][T10163] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 169.821858][T10163] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 169.847914][T10163] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 169.941082][ T1822] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.955195][T10218] __nla_validate_parse: 2 callbacks suppressed [ 169.955218][T10218] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2321'. [ 170.034789][ T31] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.050339][T10163] hsr_slave_0: entered promiscuous mode [ 170.057378][T10228] usb usb9: usbfs: process 10228 (syz.5.2325) did not claim interface 0 before use [ 170.067711][T10163] hsr_slave_1: entered promiscuous mode [ 170.073702][T10163] debugfs: 'hsr0' already exists in 'hsr' [ 170.079477][T10163] Cannot create hsr debugfs directory [ 170.095853][T10228] loop5: detected capacity change from 0 to 128 [ 170.107547][ T31] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.115473][T10228] EXT4-fs (loop5): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 170.157340][ T31] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.199844][T10239] loop5: detected capacity change from 0 to 1024 [ 170.210583][ T31] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.237736][T10224] lo speed is unknown, defaulting to 1000 [ 170.245932][T10239] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 170.268061][T10239] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4215: comm syz.5.2326: Allocating blocks 385-513 which overlap fs metadata [ 170.287518][T10239] EXT4-fs (loop5): pa ffff888100616700: logic 16, phys. 129, len 24 [ 170.295693][T10239] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 8 [ 170.321310][ T9736] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.404046][ T31] dvmrp9 (unregistering): left allmulticast mode [ 170.422294][ T31] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 170.432226][ T31] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 170.443369][ T31] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 170.454026][ T31] bond0 (unregistering): Released all slaves [ 170.489724][T10163] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 170.501149][T10163] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 170.513911][ T31] tipc: Left network mode [ 170.519832][T10163] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 170.532173][T10252] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=10252 comm=syz.5.2331 [ 170.546196][ T31] hsr_slave_0: left promiscuous mode [ 170.551963][ T31] hsr_slave_1: left promiscuous mode [ 170.557755][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 170.565184][ T31] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 170.572876][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 170.580320][ T31] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 170.589383][ T31] veth1_macvtap: left promiscuous mode [ 170.595045][ T31] veth0_macvtap: left promiscuous mode [ 170.644740][ T31] team0 (unregistering): Port device team_slave_1 removed [ 170.655891][ T31] team0 (unregistering): Port device team_slave_0 removed [ 170.689062][T10163] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 170.701400][T10224] chnl_net:caif_netlink_parms(): no params data found [ 170.748954][T10224] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.756215][T10224] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.763531][T10224] bridge_slave_0: entered allmulticast mode [ 170.770118][T10224] bridge_slave_0: entered promiscuous mode [ 170.777273][T10224] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.784402][T10224] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.791559][T10224] bridge_slave_1: entered allmulticast mode [ 170.798745][T10224] bridge_slave_1: entered promiscuous mode [ 170.825524][T10224] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 170.836972][T10224] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 170.861946][T10224] team0: Port device team_slave_0 added [ 170.868672][T10224] team0: Port device team_slave_1 added [ 170.889542][T10224] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 170.896562][T10224] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 170.922534][T10224] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 170.935106][T10224] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 170.942167][T10224] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 170.968251][T10224] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 171.001323][T10224] hsr_slave_0: entered promiscuous mode [ 171.007647][T10224] hsr_slave_1: entered promiscuous mode [ 171.013576][T10224] debugfs: 'hsr0' already exists in 'hsr' [ 171.019347][T10224] Cannot create hsr debugfs directory [ 171.040183][T10163] 8021q: adding VLAN 0 to HW filter on device bond0 [ 171.084496][T10163] 8021q: adding VLAN 0 to HW filter on device team0 [ 171.103204][ T1473] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.110318][ T1473] bridge0: port 1(bridge_slave_0) entered forwarding state [ 171.122369][ T1473] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.129493][ T1473] bridge0: port 2(bridge_slave_1) entered forwarding state [ 171.159106][T10224] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 171.170436][T10224] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 171.181864][T10224] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 171.196055][T10224] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 171.259850][T10163] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 171.403901][T10294] loop6: detected capacity change from 0 to 512 [ 171.410891][T10294] EXT4-fs (loop6): bad geometry: first data block 2 is beyond end of filesystem (0) [ 171.445558][T10294] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(3) [ 171.451094][T10224] 8021q: adding VLAN 0 to HW filter on device bond0 [ 171.452170][T10294] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 171.466563][T10294] vhci_hcd vhci_hcd.0: Device attached [ 171.480801][T10224] 8021q: adding VLAN 0 to HW filter on device team0 [ 171.492177][T10294] netlink: 'syz.6.2335': attribute type 15 has an invalid length. [ 171.504610][ T802] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.511778][ T802] bridge0: port 1(bridge_slave_0) entered forwarding state [ 171.524355][T10294] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2335'. [ 171.527511][ T1473] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.534759][T10299] vhci_hcd: connection closed [ 171.540316][ T1473] bridge0: port 2(bridge_slave_1) entered forwarding state [ 171.540722][ T802] vhci_hcd vhci_hcd.6: stop threads [ 171.557802][ T802] vhci_hcd vhci_hcd.6: release socket [ 171.563234][ T802] vhci_hcd vhci_hcd.6: disconnect device [ 171.639318][T10163] veth0_vlan: entered promiscuous mode [ 171.654505][T10163] veth1_vlan: entered promiscuous mode [ 171.679183][T10163] veth0_macvtap: entered promiscuous mode [ 171.699712][T10163] veth1_macvtap: entered promiscuous mode [ 171.725187][T10163] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 171.746439][T10163] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 171.767733][ T1473] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.778354][T10224] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 171.785897][ T1473] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.802409][ T1473] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.823395][ T1473] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.934669][T10326] siw: device registration error -23 [ 172.032190][T10224] veth0_vlan: entered promiscuous mode [ 172.040563][T10224] veth1_vlan: entered promiscuous mode [ 172.058436][T10224] veth0_macvtap: entered promiscuous mode [ 172.066476][T10224] veth1_macvtap: entered promiscuous mode [ 172.078689][T10224] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 172.091997][T10224] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 172.107472][ T1822] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.126696][ T1822] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.139504][ T1822] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.153442][ T1822] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.194184][T10343] loop8: detected capacity change from 0 to 1024 [ 172.224680][T10343] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 172.355647][T10343] EXT4-fs error (device loop8): ext4_mb_mark_diskspace_used:4215: comm syz.8.2324: Allocating blocks 385-513 which overlap fs metadata [ 172.373693][T10348] EXT4-fs (loop8): pa ffff8881063e9e00: logic 16, phys. 129, len 24 [ 172.381856][T10348] EXT4-fs error (device loop8): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 8 [ 172.457788][T10356] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2347'. [ 172.474895][T10358] siw: device registration error -23 [ 172.486051][T10356] loop5: detected capacity change from 0 to 512 [ 172.509465][T10360] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2349'. [ 172.519891][T10224] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.529902][T10356] EXT4-fs (loop5): orphan cleanup on readonly fs [ 172.537297][T10356] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.2347: bg 0: block 248: padding at end of block bitmap is not set [ 172.558386][T10360] loop6: detected capacity change from 0 to 512 [ 172.568046][T10360] EXT4-fs (loop6): orphan cleanup on readonly fs [ 172.576098][T10360] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.2349: bg 0: block 248: padding at end of block bitmap is not set [ 172.590545][T10356] EXT4-fs error (device loop5): ext4_acquire_dquot:6986: comm syz.5.2347: Failed to acquire dquot type 1 [ 172.602065][T10360] EXT4-fs error (device loop6): ext4_acquire_dquot:6986: comm syz.6.2349: Failed to acquire dquot type 1 [ 172.602954][T10356] EXT4-fs (loop5): 1 truncate cleaned up [ 172.619735][T10356] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 172.633189][T10360] EXT4-fs (loop6): 1 truncate cleaned up [ 172.639885][T10360] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 172.674316][ T9736] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.748202][ T9844] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.971125][T10376] loop6: detected capacity change from 0 to 1024 [ 172.986404][T10379] loop7: detected capacity change from 0 to 2048 [ 173.003918][T10376] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 173.020286][T10376] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4215: comm syz.6.2355: Allocating blocks 385-513 which overlap fs metadata [ 173.037615][T10376] EXT4-fs (loop6): pa ffff8881063e9ee0: logic 16, phys. 129, len 24 [ 173.045886][T10376] EXT4-fs error (device loop6): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 8 [ 173.093895][T10379] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 173.128695][ T9844] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.296822][T10401] tipc: Started in network mode [ 173.301963][T10401] tipc: Node identity f6a5f38c593a, cluster identity 4711 [ 173.309180][T10401] tipc: Enabled bearer , priority 0 [ 173.329487][T10401] syzkaller0: entered promiscuous mode [ 173.335067][T10401] syzkaller0: entered allmulticast mode [ 173.360927][T10400] tipc: Resetting bearer [ 173.417828][T10400] tipc: Disabling bearer [ 173.864329][T10406] loop6: detected capacity change from 0 to 2048 [ 173.876506][T10406] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 173.974794][T10104] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.089791][T10410] loop5: detected capacity change from 0 to 2048 [ 174.143531][T10410] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 174.176421][T10410] netlink: 204 bytes leftover after parsing attributes in process `syz.5.2369'. [ 174.186944][ T335] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.229103][T10416] loop8: detected capacity change from 0 to 1024 [ 174.244093][T10163] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.253344][ T9736] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.264791][T10416] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 174.278929][ T335] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.292866][T10416] EXT4-fs error (device loop8): ext4_mb_mark_diskspace_used:4215: comm syz.8.2372: Allocating blocks 385-513 which overlap fs metadata [ 174.310739][T10416] EXT4-fs (loop8): pa ffff8881006161c0: logic 16, phys. 129, len 24 [ 174.318913][T10416] EXT4-fs error (device loop8): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 8 [ 174.343138][T10224] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.365666][ T335] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.386721][T10421] siw: device registration error -23 [ 174.444305][ T335] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.539486][T10422] lo speed is unknown, defaulting to 1000 [ 174.553384][ T335] bridge_slave_1: left allmulticast mode [ 174.559252][ T335] bridge_slave_1: left promiscuous mode [ 174.564947][ T335] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.574050][T10440] loop8: detected capacity change from 0 to 2048 [ 174.581353][ T335] bridge_slave_0: left allmulticast mode [ 174.587110][ T335] bridge_slave_0: left promiscuous mode [ 174.592793][ T335] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.623559][T10440] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 174.715311][ T335] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 174.734198][ T335] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 174.754358][ T335] bond0 (unregistering): Released all slaves [ 174.804291][ T335] tipc: Left network mode [ 174.815323][ T335] hsr_slave_0: left promiscuous mode [ 174.826767][ T335] hsr_slave_1: left promiscuous mode [ 174.832768][ T335] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 174.840182][ T335] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 174.848237][ T335] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 174.855742][ T335] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 174.868365][ T335] veth1_macvtap: left promiscuous mode [ 174.873924][ T335] veth0_macvtap: left promiscuous mode [ 174.879911][ T335] veth1_vlan: left promiscuous mode [ 174.885973][ T335] veth0_vlan: left promiscuous mode [ 174.963824][ T335] team0 (unregistering): Port device team_slave_1 removed [ 174.974937][ T335] team0 (unregistering): Port device team_slave_0 removed [ 175.046564][T10433] lo speed is unknown, defaulting to 1000 [ 175.054106][T10422] chnl_net:caif_netlink_parms(): no params data found [ 175.112726][T10422] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.119896][T10422] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.128557][T10422] bridge_slave_0: entered allmulticast mode [ 175.135344][T10422] bridge_slave_0: entered promiscuous mode [ 175.142369][T10422] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.149520][T10422] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.157012][T10422] bridge_slave_1: entered allmulticast mode [ 175.163685][T10422] bridge_slave_1: entered promiscuous mode [ 175.188817][T10422] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 175.201511][T10422] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 175.232494][T10422] team0: Port device team_slave_0 added [ 175.241271][T10422] team0: Port device team_slave_1 added [ 175.260585][T10433] chnl_net:caif_netlink_parms(): no params data found [ 175.269868][T10422] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 175.276934][T10422] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 175.303015][T10422] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 175.314704][T10422] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 175.321672][T10422] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 175.347689][T10422] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 175.406876][T10422] hsr_slave_0: entered promiscuous mode [ 175.414273][T10422] hsr_slave_1: entered promiscuous mode [ 175.420203][T10422] debugfs: 'hsr0' already exists in 'hsr' [ 175.426003][T10422] Cannot create hsr debugfs directory [ 175.444241][T10433] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.451386][T10433] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.453211][ T29] kauditd_printk_skb: 150 callbacks suppressed [ 175.453252][ T29] audit: type=1326 audit(1767949334.455:8304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10466 comm="syz.5.2382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbecf0f749 code=0x7ffc0000 [ 175.459383][T10433] bridge_slave_0: entered allmulticast mode [ 175.464759][ T29] audit: type=1326 audit(1767949334.455:8305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10466 comm="syz.5.2382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbecf0f749 code=0x7ffc0000 [ 175.489845][T10433] bridge_slave_0: entered promiscuous mode [ 175.527023][ T29] audit: type=1326 audit(1767949334.505:8306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10466 comm="syz.5.2382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbecf0f749 code=0x7ffc0000 [ 175.550674][ T29] audit: type=1326 audit(1767949334.505:8307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10466 comm="syz.5.2382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbecf0f749 code=0x7ffc0000 [ 175.574209][ T29] audit: type=1326 audit(1767949334.505:8308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10466 comm="syz.5.2382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=189 compat=0 ip=0x7fcbecf0f749 code=0x7ffc0000 [ 175.597741][ T29] audit: type=1326 audit(1767949334.505:8309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10466 comm="syz.5.2382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbecf0f749 code=0x7ffc0000 [ 175.621449][ T29] audit: type=1326 audit(1767949334.505:8310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10466 comm="syz.5.2382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fcbecf0f749 code=0x7ffc0000 [ 175.645143][ T29] audit: type=1326 audit(1767949334.505:8311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10466 comm="syz.5.2382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fcbecf0f749 code=0x7ffc0000 [ 175.672931][T10433] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.680018][T10433] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.687276][T10433] bridge_slave_1: entered allmulticast mode [ 175.693989][T10433] bridge_slave_1: entered promiscuous mode [ 175.705793][ T29] audit: type=1326 audit(1767949334.585:8312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10468 comm="syz.5.2383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbecf0f749 code=0x7ffc0000 [ 175.729434][ T29] audit: type=1326 audit(1767949334.585:8313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10468 comm="syz.5.2383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbecf0f749 code=0x7ffc0000 [ 175.778519][T10433] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 175.793257][T10433] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 175.813178][ T335] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.826661][T10477] loop5: detected capacity change from 0 to 512 [ 175.838572][T10477] EXT4-fs (loop5): orphan cleanup on readonly fs [ 175.847809][T10477] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.2385: bg 0: block 248: padding at end of block bitmap is not set [ 175.863199][T10477] EXT4-fs error (device loop5): ext4_acquire_dquot:6986: comm syz.5.2385: Failed to acquire dquot type 1 [ 175.864162][T10477] EXT4-fs (loop5): 1 truncate cleaned up [ 175.882774][T10477] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 175.904964][T10480] siw: device registration error -23 [ 175.915111][ T9736] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.931961][ T335] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.965780][T10433] team0: Port device team_slave_0 added [ 176.006190][T10484] syzkaller0: entered promiscuous mode [ 176.011804][T10484] syzkaller0: entered allmulticast mode [ 176.020161][T10433] team0: Port device team_slave_1 added [ 176.039933][ T335] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.090305][T10433] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 176.097375][T10433] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 176.123450][T10433] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 176.138694][ T335] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.152110][T10433] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 176.159119][T10433] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 176.185334][T10433] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 176.209181][T10422] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 176.224770][T10422] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 176.241113][T10422] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 176.252959][T10433] hsr_slave_0: entered promiscuous mode [ 176.259256][T10433] hsr_slave_1: entered promiscuous mode [ 176.265261][T10433] debugfs: 'hsr0' already exists in 'hsr' [ 176.271020][T10433] Cannot create hsr debugfs directory [ 176.276913][T10422] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 176.317411][T10503] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 176.329827][T10503] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=200ec018, mo2=0002] [ 176.338007][T10503] System zones: 1-12 [ 176.338453][ T335] bridge_slave_1: left allmulticast mode [ 176.347651][ T335] bridge_slave_1: left promiscuous mode [ 176.353685][ T335] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.360819][T10503] EXT4-fs (loop5): 1 truncate cleaned up [ 176.367364][ T335] bridge_slave_0: left allmulticast mode [ 176.367618][T10503] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 176.373142][ T335] bridge_slave_0: left promiscuous mode [ 176.391205][ T335] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.403925][T10503] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2393'. [ 176.474406][ T335] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 176.484698][ T335] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 176.494302][ T335] bond0 (unregistering): Released all slaves [ 176.529075][ T9736] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.543299][T10224] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.557190][ T335] hsr_slave_0: left promiscuous mode [ 176.565885][ T335] hsr_slave_1: left promiscuous mode [ 176.583159][ T335] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 176.590623][ T335] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 176.598254][ T335] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 176.605708][ T335] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 176.614215][T10506] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 176.626604][ T335] veth1_macvtap: left promiscuous mode [ 176.639617][ T335] veth0_macvtap: left promiscuous mode [ 176.652900][ T335] veth1_vlan: left promiscuous mode [ 176.662426][ T335] veth0_vlan: left promiscuous mode [ 176.695581][T10304] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.756709][ T335] team0 (unregistering): Port device team_slave_1 removed [ 176.766565][ T335] team0 (unregistering): Port device team_slave_0 removed [ 176.837311][T10422] 8021q: adding VLAN 0 to HW filter on device bond0 [ 176.852135][T10422] 8021q: adding VLAN 0 to HW filter on device team0 [ 176.862408][ T400] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.869526][ T400] bridge0: port 1(bridge_slave_0) entered forwarding state [ 176.889548][T10422] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 176.900069][T10422] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 176.914811][ T400] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.921944][ T400] bridge0: port 2(bridge_slave_1) entered forwarding state [ 176.958621][T10510] lo speed is unknown, defaulting to 1000 [ 177.085474][T10526] syzkaller0: entered promiscuous mode [ 177.091067][T10526] syzkaller0: entered allmulticast mode [ 177.101929][T10510] chnl_net:caif_netlink_parms(): no params data found [ 177.163990][T10422] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 177.185851][T10510] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.193045][T10510] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.200618][T10510] bridge_slave_0: entered allmulticast mode [ 177.208286][T10510] bridge_slave_0: entered promiscuous mode [ 177.217875][T10510] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.225067][T10510] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.232894][T10510] bridge_slave_1: entered allmulticast mode [ 177.239548][T10510] bridge_slave_1: entered promiscuous mode [ 177.273666][ T335] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.299545][T10529] lo speed is unknown, defaulting to 1000 [ 177.313637][T10545] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.333104][ T335] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.347080][T10510] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 177.360571][T10510] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 177.369881][T10433] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 177.388133][T10433] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 177.413347][T10545] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.426988][T10433] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 177.439967][T10510] team0: Port device team_slave_0 added [ 177.445995][T10433] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 177.460961][ T335] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.473348][T10510] team0: Port device team_slave_1 added [ 177.491817][T10545] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.524232][T10510] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 177.531295][T10510] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 177.557281][T10510] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 177.571696][ T335] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.585852][T10510] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 177.592895][T10510] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 177.618952][T10510] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 177.655419][T10545] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.710572][T10510] hsr_slave_0: entered promiscuous mode [ 177.716955][T10510] hsr_slave_1: entered promiscuous mode [ 177.722977][T10510] debugfs: 'hsr0' already exists in 'hsr' [ 177.728792][T10510] Cannot create hsr debugfs directory [ 177.764719][T10529] chnl_net:caif_netlink_parms(): no params data found [ 177.796819][ T1473] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.822608][ T335] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.833729][T10422] veth0_vlan: entered promiscuous mode [ 177.848044][ T863] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.869486][ T335] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.894441][ T53] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.930167][ T53] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.941819][ T335] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.953626][T10422] veth1_vlan: entered promiscuous mode [ 177.968749][T10529] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.976132][T10529] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.983754][T10529] bridge_slave_0: entered allmulticast mode [ 177.990813][T10529] bridge_slave_0: entered promiscuous mode [ 177.998779][T10529] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.005968][T10529] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.013445][T10529] bridge_slave_1: entered allmulticast mode [ 178.020013][T10529] bridge_slave_1: entered promiscuous mode [ 178.041423][ T335] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.071368][T10529] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 178.084788][T10529] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 178.113832][T10529] team0: Port device team_slave_0 added [ 178.128245][T10433] 8021q: adding VLAN 0 to HW filter on device bond0 [ 178.137674][T10529] team0: Port device team_slave_1 added [ 178.158159][T10422] veth0_macvtap: entered promiscuous mode [ 178.181809][T10529] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 178.188946][T10529] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 178.214952][T10529] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 178.227179][T10529] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 178.234286][T10529] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 178.260321][T10529] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 178.283848][T10422] veth1_macvtap: entered promiscuous mode [ 178.294594][ T335] bridge_slave_1: left allmulticast mode [ 178.300305][ T335] bridge_slave_1: left promiscuous mode [ 178.306068][ T335] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.314533][ T335] bridge_slave_0: left allmulticast mode [ 178.320282][ T335] bridge_slave_0: left promiscuous mode [ 178.326151][ T335] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.335641][ T335] bridge_slave_1: left allmulticast mode [ 178.341375][ T335] bridge_slave_1: left promiscuous mode [ 178.347128][ T335] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.355008][ T335] bridge_slave_0: left allmulticast mode [ 178.360667][ T335] bridge_slave_0: left promiscuous mode [ 178.366425][ T335] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.484759][ T335] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 178.495564][ T335] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 178.505263][ T335] bond0 (unregistering): Released all slaves [ 178.585775][ T335] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 178.596509][ T335] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 178.606393][ T335] bond0 (unregistering): Released all slaves [ 178.632965][T10433] 8021q: adding VLAN 0 to HW filter on device team0 [ 178.647134][T10422] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 178.659358][T10529] hsr_slave_0: entered promiscuous mode [ 178.666049][T10529] hsr_slave_1: entered promiscuous mode [ 178.672094][T10529] debugfs: 'hsr0' already exists in 'hsr' [ 178.677884][T10529] Cannot create hsr debugfs directory [ 178.685744][ T1473] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.693008][ T1473] bridge0: port 1(bridge_slave_0) entered forwarding state [ 178.703691][T10422] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 178.715537][ T335] tipc: Left network mode [ 178.732500][ T1473] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.752382][ T863] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.759497][ T863] bridge0: port 2(bridge_slave_1) entered forwarding state [ 178.769394][ T1473] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.779968][ T335] hsr_slave_0: left promiscuous mode [ 178.785790][ T335] hsr_slave_1: left promiscuous mode [ 178.791422][ T335] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 178.798872][ T335] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 178.811561][ T335] hsr_slave_0: left promiscuous mode [ 178.817533][ T335] hsr_slave_1: left promiscuous mode [ 178.823349][ T335] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 178.830751][ T335] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 178.838595][ T335] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 178.846063][ T335] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 178.859364][ T335] veth1_macvtap: left promiscuous mode [ 178.864915][ T335] veth0_macvtap: left promiscuous mode [ 178.870517][ T335] veth1_vlan: left promiscuous mode [ 178.875822][ T335] veth0_vlan: left promiscuous mode [ 178.882663][ T335] veth1_macvtap: left promiscuous mode [ 178.888266][ T335] veth0_macvtap: left promiscuous mode [ 178.894136][ T335] veth1_vlan: left promiscuous mode [ 178.899499][ T335] veth0_vlan: left promiscuous mode [ 179.015576][ T335] team0 (unregistering): Port device team_slave_1 removed [ 179.026821][ T335] team0 (unregistering): Port device team_slave_0 removed [ 179.092689][ T335] team0 (unregistering): Port device team_slave_1 removed [ 179.102837][ T335] team0 (unregistering): Port device team_slave_0 removed [ 179.152512][ T1473] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.176170][ T1473] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.213663][T10510] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 179.236331][T10510] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 179.254763][T10510] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 179.273190][T10510] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 179.332592][T10581] set_capacity_and_notify: 2 callbacks suppressed [ 179.332612][T10581] loop9: detected capacity change from 0 to 2048 [ 179.370652][T10581] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 179.392871][T10529] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.403282][T10529] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 179.426659][T10422] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.460682][T10433] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 179.473097][T10594] syz_tun: entered allmulticast mode [ 179.498000][T10593] syz_tun: left allmulticast mode [ 179.534312][T10510] 8021q: adding VLAN 0 to HW filter on device bond0 [ 179.564276][T10529] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.574652][T10529] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 179.600718][T10510] 8021q: adding VLAN 0 to HW filter on device team0 [ 179.610462][T10600] Cannot find del_set index 0 as target [ 179.617315][ T802] bridge0: port 1(bridge_slave_0) entered blocking state [ 179.624514][ T802] bridge0: port 1(bridge_slave_0) entered forwarding state [ 179.644031][ T802] bridge0: port 2(bridge_slave_1) entered blocking state [ 179.651204][ T802] bridge0: port 2(bridge_slave_1) entered forwarding state [ 179.677059][T10529] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.687440][T10529] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 179.754089][T10529] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.764545][T10529] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 179.809349][T10433] veth0_vlan: entered promiscuous mode [ 179.812875][T10613] loop9: detected capacity change from 0 to 512 [ 179.821924][T10613] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 179.833718][T10433] veth1_vlan: entered promiscuous mode [ 179.840906][T10613] EXT4-fs (loop9): 1 truncate cleaned up [ 179.850512][T10613] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 179.877165][T10422] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.890085][T10529] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 179.908866][T10433] veth0_macvtap: entered promiscuous mode [ 179.918231][T10618] loop9: detected capacity change from 0 to 128 [ 179.924787][T10529] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 179.936005][T10433] veth1_macvtap: entered promiscuous mode [ 179.943147][T10529] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 179.952152][T10529] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 179.973864][T10433] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 179.984509][T10433] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 180.007833][T10510] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 180.015376][ T1710] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.026883][ T1710] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.042309][ T1710] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.052403][ T1710] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.105286][T10529] 8021q: adding VLAN 0 to HW filter on device bond0 [ 180.118846][T10529] 8021q: adding VLAN 0 to HW filter on device team0 [ 180.136030][ T1473] bridge0: port 1(bridge_slave_0) entered blocking state [ 180.143183][ T1473] bridge0: port 1(bridge_slave_0) entered forwarding state [ 180.155996][T10637] loop2: detected capacity change from 0 to 128 [ 180.167406][T10628] loop9: detected capacity change from 0 to 512 [ 180.170505][ T1473] bridge0: port 2(bridge_slave_1) entered blocking state [ 180.180773][ T1473] bridge0: port 2(bridge_slave_1) entered forwarding state [ 180.190694][T10628] ------------[ cut here ]------------ [ 180.196232][T10628] EA inode 11 i_nlink=2 [ 180.196257][T10628] WARNING: fs/ext4/xattr.c:1058 at ext4_xattr_inode_update_ref+0x2e6/0x320, CPU#0: syz.9.2411/10628 [ 180.211371][T10628] Modules linked in: [ 180.212367][T10529] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 180.215520][T10628] CPU: 0 UID: 0 PID: 10628 Comm: syz.9.2411 Not tainted syzkaller #0 PREEMPT(voluntary) [ 180.226024][T10529] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 180.235933][T10628] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 180.256262][T10628] RIP: 0010:ext4_xattr_inode_update_ref+0x305/0x320 [ 180.262947][T10628] Code: 61 e1 9c ff 4c 8d 2d fa ec 20 05 49 8d 7e 40 e8 d1 6b b8 ff 49 8b 6e 40 4c 89 e7 e8 e5 66 b8 ff 41 8b 56 48 4c 89 ef 48 89 ee <67> 48 0f b9 3a e9 2b ff ff ff e8 3c 8b ba 03 66 66 66 2e 0f 1f 84 [ 180.282647][T10628] RSP: 0018:ffffc900016c75a0 EFLAGS: 00010246 [ 180.288744][T10628] RAX: ffff88811b456d90 RBX: ffff88811b3ca950 RCX: ffffffff81bb1ecb [ 180.296814][T10628] RDX: 0000000000000002 RSI: 000000000000000b RDI: ffffffff86dc0bb0 [ 180.304894][T10628] RBP: 000000000000000b R08: 000188811b3ca903 R09: 0000000000000000 [ 180.313006][T10628] R10: ffffc900016c74d0 R11: 0001c900016c74d0 R12: ffff88811b3ca900 [ 180.321010][T10628] R13: ffffffff86dc0bb0 R14: ffff88811b3ca8b8 R15: 0000000000000001 [ 180.329088][T10628] FS: 00007f31184b76c0(0000) GS:ffff8882aedc5000(0000) knlGS:0000000000000000 [ 180.338173][T10628] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 180.344894][T10628] CR2: 0000200000003000 CR3: 00000001048d0000 CR4: 00000000003506f0 [ 180.352920][T10628] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 180.360939][T10628] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 180.368975][T10628] Call Trace: [ 180.372296][T10628] [ 180.375317][T10628] ext4_xattr_set_entry+0x77f/0x1020 [ 180.380748][T10628] ext4_xattr_ibody_set+0x184/0x3c0 [ 180.386108][T10628] ext4_expand_extra_isize_ea+0xcbb/0x11f0 [ 180.391977][T10628] __ext4_expand_extra_isize+0x246/0x280 [ 180.397756][T10628] __ext4_mark_inode_dirty+0x29d/0x3f0 [ 180.403348][T10628] ext4_evict_inode+0x7c4/0xd40 [ 180.408238][T10628] ? __pfx_ext4_evict_inode+0x10/0x10 [ 180.413688][T10628] evict+0x2af/0x510 [ 180.417663][T10628] ? __dquot_initialize+0x146/0x7c0 [ 180.423023][T10628] iput+0x4bd/0x650 [ 180.426886][T10628] ext4_process_orphan+0x1a9/0x1c0 [ 180.432049][T10628] ext4_orphan_cleanup+0x6a8/0xa00 [ 180.437245][T10628] ext4_fill_super+0x3411/0x37a0 [ 180.442269][T10628] ? set_blocksize+0x1a8/0x310 [ 180.447071][T10628] ? sb_set_blocksize+0xfc/0x170 [ 180.452048][T10628] ? setup_bdev_super+0x30e/0x370 [ 180.457136][T10628] ? __pfx_ext4_fill_super+0x10/0x10 [ 180.462513][T10628] get_tree_bdev_flags+0x291/0x300 [ 180.467789][T10628] ? __pfx_ext4_fill_super+0x10/0x10 [ 180.473204][T10628] get_tree_bdev+0x1f/0x30 [ 180.477653][T10628] ext4_get_tree+0x1c/0x30 [ 180.482122][T10628] vfs_get_tree+0x57/0x1d0 [ 180.486624][T10628] do_new_mount+0x24d/0x6a0 [ 180.491350][T10628] path_mount+0x4ab/0xb80 [ 180.495832][T10628] ? user_path_at+0xbf/0x130 [ 180.500470][T10628] __se_sys_mount+0x28c/0x2e0 [ 180.505776][T10628] __x64_sys_mount+0x67/0x80 [ 180.510545][T10628] x64_sys_call+0x2cca/0x3000 [ 180.515313][T10628] do_syscall_64+0xca/0x2b0 [ 180.519922][T10628] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.525915][T10628] RIP: 0033:0x7f3119a50eea [ 180.530403][T10628] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 180.550126][T10628] RSP: 002b:00007f31184b6e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 180.558643][T10628] RAX: ffffffffffffffda RBX: 00007f31184b6ef0 RCX: 00007f3119a50eea [ 180.560366][T10529] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 180.566833][T10628] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007f31184b6eb0 [ 180.581692][T10628] RBP: 0000200000000180 R08: 00007f31184b6ef0 R09: 0000000000800700 [ 180.589798][T10628] R10: 0000000000800700 R11: 0000000000000246 R12: 00002000000001c0 [ 180.597857][T10628] R13: 00007f31184b6eb0 R14: 000000000000046f R15: 000000000000002c [ 180.606080][T10628] [ 180.609283][T10628] ---[ end trace 0000000000000000 ]--- [ 180.616545][T10628] EXT4-fs error (device loop9): ext4_xattr_inode_iget:441: inode #18: comm syz.9.2411: iget: bad extra_isize 90 (inode size 256) [ 180.631899][T10628] EXT4-fs (loop9): Remounting filesystem read-only [ 180.638703][T10628] EXT4-fs warning (device loop9): ext4_evict_inode:273: xattr delete (err -30) [ 180.648614][T10628] EXT4-fs (loop9): 1 orphan inode deleted [ 180.655047][T10628] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 180.698737][T10510] veth0_vlan: entered promiscuous mode [ 180.727208][T10422] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.734260][T10510] veth1_vlan: entered promiscuous mode [ 180.767352][T10510] veth0_macvtap: entered promiscuous mode [ 180.782753][T10510] veth1_macvtap: entered promiscuous mode [ 180.809563][T10663] loop9: detected capacity change from 0 to 512 [ 180.821267][T10510] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 180.859713][T10510] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 180.877304][ T335] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.894230][T10663] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 180.918889][T10663] ext4 filesystem being mounted at /8/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 180.929683][ T335] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.941162][ T29] kauditd_printk_skb: 73 callbacks suppressed [ 180.941178][ T29] audit: type=1326 audit(1767949339.945:8385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10676 comm="syz.0.2419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa192b2f749 code=0x7ffc0000 [ 180.972790][ T29] audit: type=1326 audit(1767949339.945:8386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10676 comm="syz.0.2419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa192b2f749 code=0x7ffc0000 [ 180.983873][ T335] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.996455][ T29] audit: type=1326 audit(1767949339.945:8387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10676 comm="syz.0.2419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa192b2f749 code=0x7ffc0000 [ 180.996483][ T29] audit: type=1326 audit(1767949339.945:8388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10676 comm="syz.0.2419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa192b2f749 code=0x7ffc0000 [ 180.996508][ T29] audit: type=1326 audit(1767949339.945:8389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10676 comm="syz.0.2419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa192b2f749 code=0x7ffc0000 [ 181.076058][ T29] audit: type=1326 audit(1767949339.945:8390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10676 comm="syz.0.2419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa192b2f749 code=0x7ffc0000 [ 181.099672][ T29] audit: type=1326 audit(1767949339.955:8391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10676 comm="syz.0.2419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa192b2f749 code=0x7ffc0000 [ 181.123207][ T29] audit: type=1326 audit(1767949339.955:8392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10676 comm="syz.0.2419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa192b2f749 code=0x7ffc0000 [ 181.146780][ T29] audit: type=1326 audit(1767949339.955:8393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10676 comm="syz.0.2419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fa192b2f749 code=0x7ffc0000 [ 181.170312][ T29] audit: type=1326 audit(1767949339.955:8394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10676 comm="syz.0.2419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa192b2f749 code=0x7ffc0000 [ 181.271878][T10684] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2421'. [ 181.293691][ T335] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.310521][T10529] veth0_vlan: entered promiscuous mode [ 181.322376][T10684] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 181.334084][T10690] loop1: detected capacity change from 0 to 512 [ 181.334786][T10684] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 181.348567][T10690] EXT4-fs (loop1): orphan cleanup on readonly fs [ 181.357478][T10529] veth1_vlan: entered promiscuous mode [ 181.388087][T10529] veth0_macvtap: entered promiscuous mode [ 181.396462][T10529] veth1_macvtap: entered promiscuous mode [ 181.416614][T10690] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.2396: bg 0: block 248: padding at end of block bitmap is not set [ 181.431803][T10690] EXT4-fs error (device loop1): ext4_acquire_dquot:6986: comm syz.1.2396: Failed to acquire dquot type 1 [ 181.433114][T10529] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 181.448231][T10690] EXT4-fs (loop1): 1 truncate cleaned up [ 181.457655][T10690] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 181.467851][T10529] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 181.482148][ T1710] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.493072][ T1710] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.503825][ T1710] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.515497][ T1710] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.604382][T10704] loop1: detected capacity change from 0 to 764 [ 181.611942][T10704] rock: directory entry would overflow storage [ 181.618291][T10704] rock: sig=0x5245, size=8, remaining=5 [ 181.681686][T10710] loop1: detected capacity change from 0 to 512 [ 181.697130][T10710] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 181.716785][T10710] EXT4-fs (loop1): 1 truncate cleaned up [ 181.750832][T10718] tipc: Started in network mode [ 181.755830][T10718] tipc: Node identity 8aed8ef90285, cluster identity 4711 [ 181.761954][T10706] loop4: detected capacity change from 0 to 1024 [ 181.763286][T10718] tipc: Enabled bearer , priority 0 [ 181.777827][T10718] syzkaller0: entered promiscuous mode [ 181.783403][T10718] syzkaller0: entered allmulticast mode [ 181.794352][T10718] tipc: Resetting bearer [ 181.803152][T10717] tipc: Resetting bearer [ 181.810510][T10717] tipc: Disabling bearer [ 181.928083][T10728] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4215: comm syz.2.2433: Allocating blocks 385-513 which overlap fs metadata [ 181.957131][T10728] EXT4-fs (loop2): pa ffff888100616070: logic 16, phys. 129, len 24 [ 181.957296][T10728] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 8 [ 181.993473][T10720] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 181.993660][T10734] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.995403][T10720] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 182.110159][T10734] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.177736][T10734] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.238062][T10734] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.357542][ T53] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.372120][ T53] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.471312][ T53] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.508623][ T53] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.552056][T10748] FAULT_INJECTION: forcing a failure. [ 182.552056][T10748] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 182.565413][T10748] CPU: 1 UID: 0 PID: 10748 Comm: syz.9.2440 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 182.565454][T10748] Tainted: [W]=WARN [ 182.565463][T10748] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 182.565480][T10748] Call Trace: [ 182.565487][T10748] [ 182.565571][T10748] __dump_stack+0x1d/0x30 [ 182.565596][T10748] dump_stack_lvl+0x95/0xd0 [ 182.565620][T10748] dump_stack+0x15/0x1b [ 182.565640][T10748] should_fail_ex+0x265/0x280 [ 182.565667][T10748] should_fail+0xb/0x20 [ 182.565733][T10748] should_fail_usercopy+0x1a/0x20 [ 182.565765][T10748] _copy_from_user+0x1c/0xb0 [ 182.565845][T10748] __copy_msghdr+0x244/0x300 [ 182.565880][T10748] ___sys_sendmsg+0x109/0x1d0 [ 182.565936][T10748] __sys_sendmmsg+0x178/0x300 [ 182.565979][T10748] __x64_sys_sendmmsg+0x57/0x70 [ 182.566075][T10748] x64_sys_call+0x1e28/0x3000 [ 182.566100][T10748] do_syscall_64+0xca/0x2b0 [ 182.566173][T10748] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.566201][T10748] RIP: 0033:0x7f3119a4f749 [ 182.566220][T10748] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 182.566243][T10748] RSP: 002b:00007f31184b7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 182.566262][T10748] RAX: ffffffffffffffda RBX: 00007f3119ca5fa0 RCX: 00007f3119a4f749 [ 182.566275][T10748] RDX: 0000000000000002 RSI: 0000200000005f40 RDI: 0000000000000006 [ 182.566361][T10748] RBP: 00007f31184b7090 R08: 0000000000000000 R09: 0000000000000000 [ 182.566373][T10748] R10: 0000000004000004 R11: 0000000000000246 R12: 0000000000000001 [ 182.566398][T10748] R13: 00007f3119ca6038 R14: 00007f3119ca5fa0 R15: 00007ffd63161498 [ 182.566417][T10748] [ 182.753463][T10749] random: crng reseeded on system resumption [ 182.879805][T10762] EXT4-fs error (device loop9): ext4_mb_mark_diskspace_used:4215: comm syz.9.2445: Allocating blocks 385-513 which overlap fs metadata [ 182.897970][T10762] EXT4-fs (loop9): pa ffff8881063e9ee0: logic 16, phys. 129, len 24 [ 182.906199][T10762] EXT4-fs error (device loop9): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 8 [ 182.945329][T10771] EXT4-fs (loop4): orphan cleanup on readonly fs [ 182.954572][T10771] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.2448: bg 0: block 248: padding at end of block bitmap is not set [ 182.972742][T10771] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.2448: Failed to acquire dquot type 1 [ 182.985836][T10771] EXT4-fs (loop4): 1 truncate cleaned up [ 182.995442][T10775] netlink: 'syz.1.2450': attribute type 7 has an invalid length. [ 183.027324][T10777] tipc: Started in network mode [ 183.032444][T10777] tipc: Node identity 3269fd7e6a33, cluster identity 4711 [ 183.039687][T10777] tipc: Enabled bearer , priority 0 [ 183.047407][T10777] syzkaller0: entered promiscuous mode [ 183.053106][T10777] syzkaller0: entered allmulticast mode [ 183.065734][T10777] tipc: Resetting bearer [ 183.077545][T10776] tipc: Resetting bearer [ 183.085315][T10776] tipc: Disabling bearer [ 183.283984][T10782] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 183.293130][T10782] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 183.473325][T10792] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 183.500670][T10792] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 183.518899][T10802] ip6gretap0: entered allmulticast mode [ 183.619618][T10806] FAULT_INJECTION: forcing a failure. [ 183.619618][T10806] name failslab, interval 1, probability 0, space 0, times 0 [ 183.632448][T10806] CPU: 1 UID: 0 PID: 10806 Comm: syz.0.2463 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 183.632535][T10806] Tainted: [W]=WARN [ 183.632542][T10806] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 183.632610][T10806] Call Trace: [ 183.632618][T10806] [ 183.632627][T10806] __dump_stack+0x1d/0x30 [ 183.632652][T10806] dump_stack_lvl+0x95/0xd0 [ 183.632733][T10806] dump_stack+0x15/0x1b [ 183.632753][T10806] should_fail_ex+0x265/0x280 [ 183.632831][T10806] should_failslab+0x8c/0xb0 [ 183.632868][T10806] kmem_cache_alloc_node_noprof+0x6b/0x4c0 [ 183.632897][T10806] ? __alloc_skb+0x2ff/0x4b0 [ 183.632929][T10806] __alloc_skb+0x2ff/0x4b0 [ 183.632957][T10806] ? __alloc_skb+0x228/0x4b0 [ 183.633023][T10806] netlink_alloc_large_skb+0xbf/0xf0 [ 183.633105][T10806] netlink_sendmsg+0x3cf/0x6b0 [ 183.633140][T10806] ? __pfx_netlink_sendmsg+0x10/0x10 [ 183.633256][T10806] __sock_sendmsg+0x145/0x180 [ 183.633292][T10806] ____sys_sendmsg+0x31e/0x4a0 [ 183.633382][T10806] ___sys_sendmsg+0x17b/0x1d0 [ 183.633434][T10806] __x64_sys_sendmsg+0xd4/0x160 [ 183.633501][T10806] x64_sys_call+0x17ba/0x3000 [ 183.633531][T10806] do_syscall_64+0xca/0x2b0 [ 183.633565][T10806] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.633590][T10806] RIP: 0033:0x7fa192b2f749 [ 183.633609][T10806] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 183.633632][T10806] RSP: 002b:00007fa19158f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 183.633657][T10806] RAX: ffffffffffffffda RBX: 00007fa192d85fa0 RCX: 00007fa192b2f749 [ 183.633673][T10806] RDX: 0000000000000814 RSI: 0000200000000540 RDI: 0000000000000004 [ 183.633689][T10806] RBP: 00007fa19158f090 R08: 0000000000000000 R09: 0000000000000000 [ 183.633702][T10806] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 183.633715][T10806] R13: 00007fa192d86038 R14: 00007fa192d85fa0 R15: 00007ffef7fcce28 [ 183.633807][T10806] [ 183.894694][T10815] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 183.906398][T10815] EXT4-fs (loop1): 1 truncate cleaned up [ 183.994164][T10826] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2468'. [ 184.377590][T10841] set_capacity_and_notify: 10 callbacks suppressed [ 184.377612][T10841] loop9: detected capacity change from 0 to 1024 [ 184.538827][T10841] EXT4-fs error (device loop9): ext4_mb_mark_diskspace_used:4215: comm syz.9.2475: Allocating blocks 385-513 which overlap fs metadata [ 184.597325][T10841] EXT4-fs (loop9): pa ffff8881006161c0: logic 16, phys. 129, len 24 [ 184.605491][T10841] EXT4-fs error (device loop9): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 8 [ 184.630255][T10852] loop1: detected capacity change from 0 to 2048 [ 184.684982][T10857] loop9: detected capacity change from 0 to 512 [ 184.688842][T10858] loop1: detected capacity change from 0 to 512 [ 184.698778][T10858] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 184.710132][T10857] EXT4-fs (loop9): orphan cleanup on readonly fs [ 184.719256][T10857] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.2479: bg 0: block 248: padding at end of block bitmap is not set [ 184.721518][T10858] EXT4-fs (loop1): 1 truncate cleaned up [ 184.751241][T10857] EXT4-fs error (device loop9): ext4_acquire_dquot:6986: comm syz.9.2479: Failed to acquire dquot type 1 [ 184.764889][T10857] EXT4-fs (loop9): 1 truncate cleaned up [ 184.826747][T10869] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2484'. [ 184.883860][T10869] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 184.908541][T10873] loop1: detected capacity change from 0 to 512 [ 184.910551][T10872] loop4: detected capacity change from 0 to 1024 [ 184.918508][T10873] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 184.934406][T10869] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 184.957272][T10872] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4215: comm syz.4.2485: Allocating blocks 385-513 which overlap fs metadata [ 184.978872][T10872] EXT4-fs (loop4): pa ffff8881006161c0: logic 16, phys. 129, len 24 [ 184.987015][T10872] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 8 [ 185.102844][T10884] Cannot find del_set index 0 as target [ 185.313812][T10899] siw: device registration error -23 [ 185.406310][T10903] loop2: detected capacity change from 0 to 1024 [ 185.446995][T10903] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4215: comm syz.2.2499: Allocating blocks 385-513 which overlap fs metadata [ 185.468414][T10903] EXT4-fs (loop2): pa ffff8881006161c0: logic 16, phys. 129, len 24 [ 185.476794][T10903] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 8 [ 185.506304][T10912] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2502'. [ 185.517719][T10912] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2502'. [ 185.787104][T10926] loop4: detected capacity change from 0 to 2048 [ 185.986884][ T802] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.998578][T10928] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 186.007272][T10928] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 186.037114][ T802] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.085679][ T802] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.133535][ T802] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.161716][T10932] lo speed is unknown, defaulting to 1000 [ 186.235555][T10932] chnl_net:caif_netlink_parms(): no params data found [ 186.284500][T10932] bridge0: port 1(bridge_slave_0) entered blocking state [ 186.291717][T10932] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.298929][T10932] bridge_slave_0: entered allmulticast mode [ 186.305636][T10932] bridge_slave_0: entered promiscuous mode [ 186.314799][T10932] bridge0: port 2(bridge_slave_1) entered blocking state [ 186.322181][T10932] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.329587][T10932] bridge_slave_1: entered allmulticast mode [ 186.336621][T10932] bridge_slave_1: entered promiscuous mode [ 186.358142][T10932] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 186.371126][T10932] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 186.394292][ T802] bridge_slave_1: left allmulticast mode [ 186.400086][ T802] bridge_slave_1: left promiscuous mode [ 186.406221][ T802] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.414174][ T802] bridge_slave_0: left allmulticast mode [ 186.419857][ T802] bridge_slave_0: left promiscuous mode [ 186.425782][ T802] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.459495][T10952] FAULT_INJECTION: forcing a failure. [ 186.459495][T10952] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 186.472847][T10952] CPU: 1 UID: 0 PID: 10952 Comm: syz.2.2514 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 186.472959][T10952] Tainted: [W]=WARN [ 186.472966][T10952] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 186.472978][T10952] Call Trace: [ 186.472984][T10952] [ 186.472991][T10952] __dump_stack+0x1d/0x30 [ 186.473030][T10952] dump_stack_lvl+0x95/0xd0 [ 186.473058][T10952] dump_stack+0x15/0x1b [ 186.473105][T10952] should_fail_ex+0x265/0x280 [ 186.473128][T10952] should_fail+0xb/0x20 [ 186.473146][T10952] should_fail_usercopy+0x1a/0x20 [ 186.473174][T10952] _copy_to_user+0x20/0xa0 [ 186.473263][T10952] simple_read_from_buffer+0xb5/0x130 [ 186.473291][T10952] proc_fail_nth_read+0x10e/0x150 [ 186.473327][T10952] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 186.473373][T10952] vfs_read+0x1a8/0x770 [ 186.473394][T10952] ? __rcu_read_unlock+0x4f/0x70 [ 186.473420][T10952] ? __fget_files+0x184/0x1c0 [ 186.473444][T10952] ? mutex_lock+0x58/0x90 [ 186.473469][T10952] ksys_read+0xda/0x1a0 [ 186.473502][T10952] __x64_sys_read+0x40/0x50 [ 186.473522][T10952] x64_sys_call+0x2889/0x3000 [ 186.473567][T10952] do_syscall_64+0xca/0x2b0 [ 186.473635][T10952] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.473656][T10952] RIP: 0033:0x7fe9654ee15c [ 186.473671][T10952] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 186.473689][T10952] RSP: 002b:00007fe963f4f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 186.473713][T10952] RAX: ffffffffffffffda RBX: 00007fe965745fa0 RCX: 00007fe9654ee15c [ 186.473741][T10952] RDX: 000000000000000f RSI: 00007fe963f4f0a0 RDI: 0000000000000008 [ 186.473755][T10952] RBP: 00007fe963f4f090 R08: 0000000000000000 R09: 0000000000000000 [ 186.473771][T10952] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 186.473787][T10952] R13: 00007fe965746038 R14: 00007fe965745fa0 R15: 00007ffc1472a9c8 [ 186.473811][T10952] [ 186.715298][ T802] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 186.724356][T10956] loop2: detected capacity change from 0 to 512 [ 186.732141][ T802] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 186.734809][T10956] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 186.748853][T10956] System zones: 0-2, 18-18, 34-34 [ 186.750893][ T802] bond0 (unregistering): Released all slaves [ 186.759594][T10956] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.2515: bg 0: block 248: padding at end of block bitmap is not set [ 186.775430][T10956] __quota_error: 486 callbacks suppressed [ 186.775443][T10956] Quota error (device loop2): write_blk: dquota write failed [ 186.775990][ T29] audit: type=1400 audit(1767949345.785:8875): avc: denied { map } for pid=10954 comm="syz.0.2516" path="socket:[33505]" dev="sockfs" ino=33505 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 186.781256][T10956] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 186.788672][ T29] audit: type=1400 audit(1767949345.785:8876): avc: denied { read } for pid=10954 comm="syz.0.2516" path="socket:[33505]" dev="sockfs" ino=33505 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 186.814594][T10956] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm syz.2.2515: Failed to acquire dquot type 1 [ 186.827821][T10932] team0: Port device team_slave_0 added [ 186.862498][T10932] team0: Port device team_slave_1 added [ 186.870558][T10956] EXT4-fs (loop2): 1 truncate cleaned up [ 186.876898][T10956] ext4 filesystem being mounted at /20/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 186.907430][T10932] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 186.914531][T10932] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 186.940672][T10932] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 186.953641][T10932] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 186.960629][T10932] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 186.986702][T10932] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 187.061009][ T802] hsr_slave_0: left promiscuous mode [ 187.067608][ T802] hsr_slave_1: left promiscuous mode [ 187.073418][ T802] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 187.080846][ T802] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 187.088444][ T802] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 187.095891][ T802] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 187.312030][ T802] veth1_macvtap: left promiscuous mode [ 187.318264][ T9] IPVS: starting estimator thread 0... [ 187.323947][ T802] veth0_macvtap: left promiscuous mode [ 187.329759][ T802] veth1_vlan: left promiscuous mode [ 187.335298][ T802] veth0_vlan: left promiscuous mode [ 187.414177][T10974] IPVS: using max 2400 ests per chain, 120000 per kthread [ 187.486224][ T802] team0 (unregistering): Port device team_slave_1 removed [ 187.500668][ T802] team0 (unregistering): Port device team_slave_0 removed [ 187.559189][T10964] tipc: Enabled bearer , priority 0 [ 187.572722][T10967] wg2: entered promiscuous mode [ 187.577810][T10967] wg2: entered allmulticast mode [ 187.585875][T10932] hsr_slave_0: entered promiscuous mode [ 187.592163][T10932] hsr_slave_1: entered promiscuous mode [ 187.602945][T10932] debugfs: 'hsr0' already exists in 'hsr' [ 187.608722][T10932] Cannot create hsr debugfs directory [ 187.622150][T10961] syzkaller0: entered promiscuous mode [ 187.627718][T10961] syzkaller0: entered allmulticast mode [ 187.652699][T10970] lo speed is unknown, defaulting to 1000 [ 187.686785][T10972] tipc: Resetting bearer [ 187.700319][T10960] tipc: Resetting bearer [ 187.713449][T10960] tipc: Disabling bearer [ 187.872034][T10982] loop2: detected capacity change from 0 to 128 [ 188.121753][T10932] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 188.153495][T10932] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 188.174707][T10932] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 188.183653][T10932] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 188.195720][T10997] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2527'. [ 188.208790][T10992] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 188.217827][T10992] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 188.228451][T10997] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2527'. [ 188.263286][T10997] netdevsim netdevsim9 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.323351][T10932] 8021q: adding VLAN 0 to HW filter on device bond0 [ 188.336757][T10932] 8021q: adding VLAN 0 to HW filter on device team0 [ 188.347810][T10997] netdevsim netdevsim9 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.361469][ T1710] bridge0: port 1(bridge_slave_0) entered blocking state [ 188.368680][ T1710] bridge0: port 1(bridge_slave_0) entered forwarding state [ 188.389954][ T1710] bridge0: port 2(bridge_slave_1) entered blocking state [ 188.397072][ T1710] bridge0: port 2(bridge_slave_1) entered forwarding state [ 188.417989][T10997] netdevsim netdevsim9 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.475942][T10932] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 188.484720][T10997] netdevsim netdevsim9 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.542750][ T400] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.563266][ T400] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.572139][ T400] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.580851][ T400] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.604435][T10932] veth0_vlan: entered promiscuous mode [ 188.617585][T10932] veth1_vlan: entered promiscuous mode [ 188.636198][T10932] veth0_macvtap: entered promiscuous mode [ 188.643836][T10932] veth1_macvtap: entered promiscuous mode [ 188.655609][T10932] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 188.668405][T10932] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 188.688352][ T400] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.708018][ T400] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.731651][ T400] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.750257][ T400] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.807811][T11023] tipc: Started in network mode [ 188.812811][T11023] tipc: Node identity 3e379f84fa88, cluster identity 4711 [ 188.812996][T11023] tipc: Enabled bearer , priority 0 [ 188.877110][T11027] syzkaller0: entered promiscuous mode [ 188.877133][T11027] syzkaller0: entered allmulticast mode [ 188.894030][T11023] tipc: Resetting bearer [ 188.895667][T11021] tipc: Resetting bearer [ 188.899326][T11021] tipc: Disabling bearer [ 188.983103][T11029] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 189.026977][T11029] EXT4-fs (loop2): 1 truncate cleaned up [ 189.057676][T11035] siw: device registration error -23 [ 189.095879][ T29] audit: type=1326 audit(1767949348.085:8877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11036 comm="syz.9.2534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3119a4f749 code=0x7ffc0000 [ 189.119587][ T29] audit: type=1326 audit(1767949348.095:8878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11036 comm="syz.9.2534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3119a4f749 code=0x7ffc0000 [ 189.143189][ T29] audit: type=1326 audit(1767949348.095:8879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11036 comm="syz.9.2534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3119a4f749 code=0x7ffc0000 [ 189.166708][ T29] audit: type=1326 audit(1767949348.095:8880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11036 comm="syz.9.2534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f3119a4f749 code=0x7ffc0000 [ 189.272332][ T29] audit: type=1326 audit(1767949348.195:8881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11040 comm="syz.9.2534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f3119a82005 code=0x7ffc0000 [ 189.296013][ T29] audit: type=1326 audit(1767949348.195:8882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11036 comm="syz.9.2534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3119a4f749 code=0x7ffc0000 [ 189.774816][T11062] set_capacity_and_notify: 1 callbacks suppressed [ 189.774850][T11062] loop3: detected capacity change from 0 to 128 [ 189.811361][T11066] ALSA: seq fatal error: cannot create timer (-22) [ 189.894573][T11078] loop2: detected capacity change from 0 to 2048 [ 189.951642][T11088] loop2: detected capacity change from 0 to 1024 [ 189.971982][T11088] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4215: comm syz.2.2553: Allocating blocks 385-513 which overlap fs metadata [ 189.989528][T11088] EXT4-fs (loop2): pa ffff8881063e9ee0: logic 16, phys. 129, len 24 [ 189.989588][T11088] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 8 [ 190.162887][T11100] FAULT_INJECTION: forcing a failure. [ 190.162887][T11100] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 190.176238][T11100] CPU: 0 UID: 0 PID: 11100 Comm: syz.1.2556 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 190.176286][T11100] Tainted: [W]=WARN [ 190.176349][T11100] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 190.176365][T11100] Call Trace: [ 190.176373][T11100] [ 190.176383][T11100] __dump_stack+0x1d/0x30 [ 190.176414][T11100] dump_stack_lvl+0x95/0xd0 [ 190.176488][T11100] dump_stack+0x15/0x1b [ 190.176508][T11100] should_fail_ex+0x265/0x280 [ 190.176532][T11100] should_fail_alloc_page+0xf2/0x100 [ 190.176555][T11100] __alloc_frozen_pages_noprof+0x109/0x360 [ 190.176598][T11100] alloc_pages_mpol+0xb3/0x260 [ 190.176653][T11100] alloc_pages_noprof+0x90/0x130 [ 190.176682][T11100] rds_page_remainder_alloc+0x1fa/0x5a0 [ 190.176783][T11100] ? rds_page_remainder_alloc+0xbe/0x5a0 [ 190.176817][T11100] rds_message_copy_from_user+0x1a4/0x710 [ 190.176841][T11100] ? sg_init_table+0x3e/0x50 [ 190.176945][T11100] rds_sendmsg+0xa2b/0x14a0 [ 190.176979][T11100] ? __pfx_rds_sendmsg+0x10/0x10 [ 190.177005][T11100] __sock_sendmsg+0x145/0x180 [ 190.177071][T11100] ____sys_sendmsg+0x31e/0x4a0 [ 190.177111][T11100] ___sys_sendmsg+0x17b/0x1d0 [ 190.177155][T11100] __x64_sys_sendmsg+0xd4/0x160 [ 190.177277][T11100] x64_sys_call+0x17ba/0x3000 [ 190.177309][T11100] do_syscall_64+0xca/0x2b0 [ 190.177419][T11100] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.177440][T11100] RIP: 0033:0x7fdbae37f749 [ 190.177458][T11100] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 190.177481][T11100] RSP: 002b:00007fdbacde7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 190.177576][T11100] RAX: ffffffffffffffda RBX: 00007fdbae5d5fa0 RCX: 00007fdbae37f749 [ 190.177628][T11100] RDX: 0000000000000040 RSI: 00002000000001c0 RDI: 000000000000000a [ 190.177640][T11100] RBP: 00007fdbacde7090 R08: 0000000000000000 R09: 0000000000000000 [ 190.177652][T11100] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 190.177668][T11100] R13: 00007fdbae5d6038 R14: 00007fdbae5d5fa0 R15: 00007ffe4ce46aa8 [ 190.177693][T11100] [ 190.440791][T11102] loop2: detected capacity change from 0 to 128 [ 191.052073][T11116] FAULT_INJECTION: forcing a failure. [ 191.052073][T11116] name failslab, interval 1, probability 0, space 0, times 0 [ 191.064829][T11116] CPU: 0 UID: 0 PID: 11116 Comm: syz.3.2563 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 191.064862][T11116] Tainted: [W]=WARN [ 191.064868][T11116] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 191.064881][T11116] Call Trace: [ 191.064888][T11116] [ 191.064898][T11116] __dump_stack+0x1d/0x30 [ 191.064937][T11116] dump_stack_lvl+0x95/0xd0 [ 191.065024][T11116] dump_stack+0x15/0x1b [ 191.065106][T11116] should_fail_ex+0x265/0x280 [ 191.065133][T11116] should_failslab+0x8c/0xb0 [ 191.065155][T11116] __kmalloc_node_track_caller_noprof+0xb9/0x5b0 [ 191.065182][T11116] ? security_context_to_sid_core+0x69/0x3b0 [ 191.065237][T11116] kmemdup_nul+0x36/0xc0 [ 191.065261][T11116] security_context_to_sid_core+0x69/0x3b0 [ 191.065298][T11116] security_context_str_to_sid+0x33/0x40 [ 191.065373][T11116] sel_write_access+0x198/0x2b0 [ 191.065395][T11116] selinux_transaction_write+0xc6/0x110 [ 191.065470][T11116] ? __pfx_selinux_transaction_write+0x10/0x10 [ 191.065490][T11116] vfs_write+0x269/0x960 [ 191.065508][T11116] ? __rcu_read_unlock+0x4f/0x70 [ 191.065528][T11116] ? __fget_files+0x184/0x1c0 [ 191.065633][T11116] ? mutex_lock+0x58/0x90 [ 191.065667][T11116] ksys_write+0xda/0x1a0 [ 191.065690][T11116] __x64_sys_write+0x40/0x50 [ 191.065738][T11116] x64_sys_call+0x2847/0x3000 [ 191.065763][T11116] do_syscall_64+0xca/0x2b0 [ 191.065850][T11116] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.065900][T11116] RIP: 0033:0x7f99102af749 [ 191.065919][T11116] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 191.065950][T11116] RSP: 002b:00007f990ed0f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 191.065969][T11116] RAX: ffffffffffffffda RBX: 00007f9910505fa0 RCX: 00007f99102af749 [ 191.065983][T11116] RDX: 0000000000000045 RSI: 00002000000003c0 RDI: 0000000000000003 [ 191.065995][T11116] RBP: 00007f990ed0f090 R08: 0000000000000000 R09: 0000000000000000 [ 191.066006][T11116] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 191.066017][T11116] R13: 00007f9910506038 R14: 00007f9910505fa0 R15: 00007ffea1361c98 [ 191.066096][T11116] [ 191.375371][T11152] FAULT_INJECTION: forcing a failure. [ 191.375371][T11152] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 191.388522][T11152] CPU: 1 UID: 0 PID: 11152 Comm: syz.2.2577 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 191.388558][T11152] Tainted: [W]=WARN [ 191.388564][T11152] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 191.388578][T11152] Call Trace: [ 191.388584][T11152] [ 191.388592][T11152] __dump_stack+0x1d/0x30 [ 191.388685][T11152] dump_stack_lvl+0x95/0xd0 [ 191.388714][T11152] dump_stack+0x15/0x1b [ 191.388734][T11152] should_fail_ex+0x265/0x280 [ 191.388758][T11152] should_fail+0xb/0x20 [ 191.388855][T11152] should_fail_usercopy+0x1a/0x20 [ 191.388879][T11152] _copy_to_iter+0x251/0xe70 [ 191.388905][T11152] ? _raw_write_lock_bh+0x56/0xb0 [ 191.389040][T11152] ? ipv6_route_seq_stop+0x19c/0x1d0 [ 191.389077][T11152] seq_read_iter+0x776/0x950 [ 191.389114][T11152] seq_read+0x270/0x2b0 [ 191.389228][T11152] ? __pfx_seq_read+0x10/0x10 [ 191.389257][T11152] proc_reg_read+0x128/0x1c0 [ 191.389354][T11152] ? __pfx_proc_reg_read+0x10/0x10 [ 191.389387][T11152] vfs_readv+0x3fb/0x690 [ 191.389423][T11152] __x64_sys_preadv+0xfd/0x1c0 [ 191.389481][T11152] x64_sys_call+0x2805/0x3000 [ 191.389507][T11152] do_syscall_64+0xca/0x2b0 [ 191.389542][T11152] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.389567][T11152] RIP: 0033:0x7fe9654ef749 [ 191.389606][T11152] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 191.389624][T11152] RSP: 002b:00007fe963f4f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 191.389661][T11152] RAX: ffffffffffffffda RBX: 00007fe965745fa0 RCX: 00007fe9654ef749 [ 191.389674][T11152] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000003 [ 191.389687][T11152] RBP: 00007fe963f4f090 R08: 0000000080000000 R09: 0000000000000000 [ 191.389700][T11152] R10: 0000000000000145 R11: 0000000000000246 R12: 0000000000000001 [ 191.389789][T11152] R13: 00007fe965746038 R14: 00007fe965745fa0 R15: 00007ffc1472a9c8 [ 191.389808][T11152] [ 191.633838][T11154] loop3: detected capacity change from 0 to 1024 [ 191.664358][T11156] FAULT_INJECTION: forcing a failure. [ 191.664358][T11156] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 191.677496][T11156] CPU: 1 UID: 0 PID: 11156 Comm: syz.9.2579 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 191.677529][T11156] Tainted: [W]=WARN [ 191.677536][T11156] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 191.677551][T11156] Call Trace: [ 191.677558][T11156] [ 191.677567][T11156] __dump_stack+0x1d/0x30 [ 191.677598][T11156] dump_stack_lvl+0x95/0xd0 [ 191.677624][T11156] dump_stack+0x15/0x1b [ 191.677691][T11156] should_fail_ex+0x265/0x280 [ 191.677718][T11156] should_fail+0xb/0x20 [ 191.677787][T11156] should_fail_usercopy+0x1a/0x20 [ 191.677841][T11156] _copy_to_user+0x20/0xa0 [ 191.677875][T11156] simple_read_from_buffer+0xb5/0x130 [ 191.677902][T11156] proc_fail_nth_read+0x10e/0x150 [ 191.677931][T11156] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 191.678007][T11156] vfs_read+0x1a8/0x770 [ 191.678068][T11156] ? __rcu_read_unlock+0x4f/0x70 [ 191.678087][T11156] ? __fget_files+0x184/0x1c0 [ 191.678109][T11156] ? mutex_lock+0x58/0x90 [ 191.678134][T11156] ksys_read+0xda/0x1a0 [ 191.678156][T11156] __x64_sys_read+0x40/0x50 [ 191.678249][T11156] x64_sys_call+0x2889/0x3000 [ 191.678281][T11156] do_syscall_64+0xca/0x2b0 [ 191.678317][T11156] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.678412][T11156] RIP: 0033:0x7f3119a4e15c [ 191.678428][T11156] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 191.678497][T11156] RSP: 002b:00007f31184b7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 191.678521][T11156] RAX: ffffffffffffffda RBX: 00007f3119ca5fa0 RCX: 00007f3119a4e15c [ 191.678537][T11156] RDX: 000000000000000f RSI: 00007f31184b70a0 RDI: 0000000000000008 [ 191.678553][T11156] RBP: 00007f31184b7090 R08: 0000000000000000 R09: 0000000000000000 [ 191.678567][T11156] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 191.678579][T11156] R13: 00007f3119ca6038 R14: 00007f3119ca5fa0 R15: 00007ffd63161498 [ 191.678598][T11156] [ 191.903381][T11154] EXT4-fs mount: 36 callbacks suppressed [ 191.903396][T11154] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 191.966486][T11154] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4215: comm syz.3.2578: Allocating blocks 385-513 which overlap fs metadata [ 191.984641][T11154] EXT4-fs (loop3): pa ffff8881006167e0: logic 16, phys. 129, len 24 [ 191.992764][T11154] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 8 [ 192.039966][T10932] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.104849][ T29] kauditd_printk_skb: 544 callbacks suppressed [ 192.104867][ T29] audit: type=1326 audit(1767949351.105:9427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11174 comm="syz.3.2583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99102af749 code=0x7ffc0000 [ 192.169176][T11179] loop1: detected capacity change from 0 to 128 [ 192.190771][ T29] audit: type=1326 audit(1767949351.145:9428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11174 comm="syz.3.2583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99102af749 code=0x7ffc0000 [ 192.214587][ T29] audit: type=1326 audit(1767949351.145:9429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11174 comm="syz.3.2583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99102af749 code=0x7ffc0000 [ 192.238237][ T29] audit: type=1326 audit(1767949351.145:9430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11174 comm="syz.3.2583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99102af749 code=0x7ffc0000 [ 192.261862][ T29] audit: type=1326 audit(1767949351.145:9431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11174 comm="syz.3.2583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=189 compat=0 ip=0x7f99102af749 code=0x7ffc0000 [ 192.285583][ T29] audit: type=1326 audit(1767949351.145:9432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11174 comm="syz.3.2583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99102af749 code=0x7ffc0000 [ 192.299730][T11181] netlink: 'syz.9.2589': attribute type 2 has an invalid length. [ 192.309131][ T29] audit: type=1326 audit(1767949351.145:9433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11174 comm="syz.3.2583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f99102af749 code=0x7ffc0000 [ 192.316896][T11181] netlink: 'syz.9.2589': attribute type 11 has an invalid length. [ 192.316912][T11181] netlink: 132 bytes leftover after parsing attributes in process `syz.9.2589'. [ 192.357476][ T29] audit: type=1326 audit(1767949351.145:9434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11174 comm="syz.3.2583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f99102af749 code=0x7ffc0000 [ 192.381103][ T29] audit: type=1326 audit(1767949351.185:9435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11180 comm="syz.9.2589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3119a4f749 code=0x7ffc0000 [ 192.405298][ T29] audit: type=1326 audit(1767949351.185:9436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11180 comm="syz.9.2589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3119a4f749 code=0x7ffc0000 [ 192.499999][T11191] loop9: detected capacity change from 0 to 512 [ 192.514360][T11191] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 192.525908][T11191] EXT4-fs (loop9): 1 truncate cleaned up [ 192.532511][T11191] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 192.553677][T11195] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 192.565057][T11195] SELinux: failed to load policy [ 192.650166][T10422] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.678399][T11207] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2598'. [ 192.688785][T11207] SELinux: policydb magic number 0xb40 does not match expected magic number 0xf97cff8c [ 192.698908][T11207] SELinux: failed to load policy [ 192.745708][T11213] FAULT_INJECTION: forcing a failure. [ 192.745708][T11213] name failslab, interval 1, probability 0, space 0, times 0 [ 192.758588][T11213] CPU: 0 UID: 0 PID: 11213 Comm: syz.9.2596 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 192.758620][T11213] Tainted: [W]=WARN [ 192.758629][T11213] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 192.758706][T11213] Call Trace: [ 192.758713][T11213] [ 192.758722][T11213] __dump_stack+0x1d/0x30 [ 192.758753][T11213] dump_stack_lvl+0x95/0xd0 [ 192.758850][T11213] dump_stack+0x15/0x1b [ 192.758875][T11213] should_fail_ex+0x265/0x280 [ 192.758904][T11213] should_failslab+0x8c/0xb0 [ 192.758932][T11213] __kmalloc_cache_node_noprof+0x6a/0x4d0 [ 192.758965][T11213] ? __get_vm_area_node+0x106/0x1d0 [ 192.759042][T11213] __get_vm_area_node+0x106/0x1d0 [ 192.759066][T11213] __vmalloc_node_range_noprof+0x28e/0x1310 [ 192.759116][T11213] ? sel_write_load+0x157/0x380 [ 192.759152][T11213] ? path_openat+0x1e82/0x23b0 [ 192.759190][T11213] ? _parse_integer_limit+0x170/0x190 [ 192.759218][T11213] ? _parse_integer+0x27/0x40 [ 192.759332][T11213] ? __rcu_read_unlock+0x4f/0x70 [ 192.759426][T11213] ? avc_has_perm_noaudit+0xab/0x130 [ 192.759472][T11213] ? sel_write_load+0x157/0x380 [ 192.759534][T11213] vmalloc_noprof+0x82/0xc0 [ 192.759617][T11213] ? sel_write_load+0x157/0x380 [ 192.759691][T11213] sel_write_load+0x157/0x380 [ 192.759733][T11213] ? __pfx_sel_write_load+0x10/0x10 [ 192.759774][T11213] vfs_write+0x269/0x960 [ 192.759877][T11213] ? __rcu_read_unlock+0x4f/0x70 [ 192.759902][T11213] ? __fget_files+0x184/0x1c0 [ 192.759929][T11213] ? mutex_lock+0x58/0x90 [ 192.760025][T11213] ksys_write+0xda/0x1a0 [ 192.760051][T11213] __x64_sys_write+0x40/0x50 [ 192.760074][T11213] x64_sys_call+0x2847/0x3000 [ 192.760113][T11213] do_syscall_64+0xca/0x2b0 [ 192.760151][T11213] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.760237][T11213] RIP: 0033:0x7f3119a4f749 [ 192.760256][T11213] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 192.760278][T11213] RSP: 002b:00007f31184b7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 192.760302][T11213] RAX: ffffffffffffffda RBX: 00007f3119ca5fa0 RCX: 00007f3119a4f749 [ 192.760318][T11213] RDX: 00000000000190da RSI: 0000200000000000 RDI: 0000000000000003 [ 192.760334][T11213] RBP: 00007f31184b7090 R08: 0000000000000000 R09: 0000000000000000 [ 192.760356][T11213] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 192.760410][T11213] R13: 00007f3119ca6038 R14: 00007f3119ca5fa0 R15: 00007ffd63161498 [ 192.760430][T11213] [ 192.760440][T11213] syz.9.2596: vmalloc error: size 102618, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null) [ 192.903099][T11216] option changes via remount are deprecated (pid=11215 comm=syz.3.2602) [ 192.905844][T11213] ,cpuset=/,mems_allowed=0 [ 193.035076][T11213] CPU: 0 UID: 0 PID: 11213 Comm: syz.9.2596 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 193.035122][T11213] Tainted: [W]=WARN [ 193.035131][T11213] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 193.035204][T11213] Call Trace: [ 193.035213][T11213] [ 193.035245][T11213] __dump_stack+0x1d/0x30 [ 193.035274][T11213] dump_stack_lvl+0x95/0xd0 [ 193.035372][T11213] dump_stack+0x15/0x1b [ 193.035395][T11213] warn_alloc+0x12b/0x1a0 [ 193.035432][T11213] __vmalloc_node_range_noprof+0x2b3/0x1310 [ 193.035589][T11213] ? path_openat+0x1e82/0x23b0 [ 193.035624][T11213] ? _parse_integer_limit+0x170/0x190 [ 193.035808][T11213] ? _parse_integer+0x27/0x40 [ 193.035829][T11213] ? __rcu_read_unlock+0x4f/0x70 [ 193.035854][T11213] ? avc_has_perm_noaudit+0xab/0x130 [ 193.035899][T11213] ? sel_write_load+0x157/0x380 [ 193.035995][T11213] vmalloc_noprof+0x82/0xc0 [ 193.036025][T11213] ? sel_write_load+0x157/0x380 [ 193.036139][T11213] sel_write_load+0x157/0x380 [ 193.036181][T11213] ? __pfx_sel_write_load+0x10/0x10 [ 193.036220][T11213] vfs_write+0x269/0x960 [ 193.036238][T11213] ? __rcu_read_unlock+0x4f/0x70 [ 193.036326][T11213] ? __fget_files+0x184/0x1c0 [ 193.036361][T11213] ? mutex_lock+0x58/0x90 [ 193.036395][T11213] ksys_write+0xda/0x1a0 [ 193.036415][T11213] __x64_sys_write+0x40/0x50 [ 193.036432][T11213] x64_sys_call+0x2847/0x3000 [ 193.036455][T11213] do_syscall_64+0xca/0x2b0 [ 193.036504][T11213] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.036525][T11213] RIP: 0033:0x7f3119a4f749 [ 193.036541][T11213] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 193.036569][T11213] RSP: 002b:00007f31184b7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 193.036592][T11213] RAX: ffffffffffffffda RBX: 00007f3119ca5fa0 RCX: 00007f3119a4f749 [ 193.036607][T11213] RDX: 00000000000190da RSI: 0000200000000000 RDI: 0000000000000003 [ 193.036662][T11213] RBP: 00007f31184b7090 R08: 0000000000000000 R09: 0000000000000000 [ 193.036674][T11213] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 193.036686][T11213] R13: 00007f3119ca6038 R14: 00007f3119ca5fa0 R15: 00007ffd63161498 [ 193.036741][T11213] [ 193.036761][T11213] Mem-Info: [ 193.264336][T11221] loop1: detected capacity change from 0 to 1024 [ 193.264905][T11213] active_anon:17563 inactive_anon:12 isolated_anon:0 [ 193.264905][T11213] active_file:8468 inactive_file:12725 isolated_file:0 [ 193.264905][T11213] unevictable:7 dirty:416 writeback:5 [ 193.264905][T11213] slab_reclaimable:3563 slab_unreclaimable:17101 [ 193.264905][T11213] mapped:34805 shmem:13171 pagetables:1439 [ 193.264905][T11213] sec_pagetables:0 bounce:0 [ 193.264905][T11213] kernel_misc_reclaimable:0 [ 193.264905][T11213] free:1850239 free_pcp:24680 free_cma:0 [ 193.316505][T11213] Node 0 active_anon:70600kB inactive_anon:48kB active_file:33872kB inactive_file:50900kB unevictable:28kB isolated(anon):0kB isolated(file):0kB mapped:139220kB dirty:1664kB writeback:20kB shmem:53032kB kernel_stack:3728kB pagetables:5872kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 193.344312][T11213] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 193.366109][T11221] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 193.374022][T11213] lowmem_reserve[]: 0 2880 7859 7859 [ 193.391917][T11213] Node 0 DMA32 free:2945996kB boost:0kB min:4132kB low:7060kB high:9988kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2949524kB mlocked:0kB bounce:0kB free_pcp:3528kB local_pcp:3528kB free_cma:0kB [ 193.423492][T11213] lowmem_reserve[]: 0 0 4978 4978 [ 193.428616][T11213] Node 0 Normal free:4439600kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:75704kB inactive_anon:48kB active_file:33872kB inactive_file:50900kB unevictable:28kB writepending:1684kB zspages:0kB present:5242880kB managed:5098240kB mlocked:28kB bounce:0kB free_pcp:89420kB local_pcp:35728kB free_cma:0kB [ 193.433472][T11221] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4215: comm syz.1.2605: Allocating blocks 385-513 which overlap fs metadata [ 193.462030][T11213] lowmem_reserve[]: 0 0 0 0 [ 193.462077][T11213] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 193.493354][T11213] Node 0 DMA32: 3*4kB (M) 2*8kB (M) 3*16kB (M) 4*32kB (M) 4*64kB (M) 2*128kB (M) 3*256kB (M) 3*512kB (M) 4*1024kB (M) 3*2048kB (M) 716*4096kB (M) = 2945996kB [ 193.509563][T11213] Node 0 Normal: 1578*4kB (UME) 1615*8kB (UM) 1095*16kB (UM) 472*32kB (UME) 359*64kB (UME) 285*128kB (UME) 207*256kB (UME) 218*512kB (UME) 174*1024kB (UME) 162*2048kB (UME) 892*4096kB (UM) = 4439504kB [ 193.529627][T11213] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 193.539029][T11213] 33898 total pagecache pages [ 193.543757][T11213] 12 pages in swap cache [ 193.548054][T11213] Free swap = 124948kB [ 193.552297][T11213] Total swap = 124996kB [ 193.556468][T11213] 2097051 pages RAM [ 193.560284][T11213] 0 pages HighMem/MovableOnly [ 193.560923][T11226] EXT4-fs (loop1): pa ffff8881006161c0: logic 16, phys. 129, len 24 [ 193.564990][T11213] 81270 pages reserved [ 193.577137][T11226] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 8 [ 193.629106][T11228] loop3: detected capacity change from 0 to 128 [ 193.708119][T11237] loop3: detected capacity change from 0 to 512 [ 193.735134][T10510] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.763413][T11237] EXT4-fs (loop3): orphan cleanup on readonly fs [ 193.773739][T11235] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 193.783288][T11237] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.2609: bg 0: block 248: padding at end of block bitmap is not set [ 193.815578][T11237] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.2609: Failed to acquire dquot type 1 [ 193.832057][T11237] EXT4-fs (loop3): 1 truncate cleaned up [ 193.838702][T11237] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 193.855309][T10422] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.877795][T10932] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.141976][T11266] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2617'. [ 194.193474][T11270] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2618'. [ 194.202591][T11270] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2618'. [ 194.216564][T11270] bridge0: entered promiscuous mode [ 194.222919][T11270] ip6gretap0: entered promiscuous mode [ 195.285311][T11283] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 195.330951][T10433] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.391368][T11305] vhci_hcd vhci_hcd.3: invalid port number 9 [ 195.457268][T11309] FAULT_INJECTION: forcing a failure. [ 195.457268][T11309] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 195.472311][T11309] CPU: 0 UID: 0 PID: 11309 Comm: syz.3.2631 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 195.472356][T11309] Tainted: [W]=WARN [ 195.472364][T11309] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 195.472378][T11309] Call Trace: [ 195.472384][T11309] [ 195.472392][T11309] __dump_stack+0x1d/0x30 [ 195.472473][T11309] dump_stack_lvl+0x95/0xd0 [ 195.472502][T11309] dump_stack+0x15/0x1b [ 195.472524][T11309] should_fail_ex+0x265/0x280 [ 195.472555][T11309] should_fail+0xb/0x20 [ 195.472638][T11309] should_fail_usercopy+0x1a/0x20 [ 195.472667][T11309] _copy_from_user+0x1c/0xb0 [ 195.472695][T11309] copy_clone_args_from_user+0x14f/0x490 [ 195.472821][T11309] __se_sys_clone3+0x6f/0x200 [ 195.472866][T11309] __x64_sys_clone3+0x31/0x40 [ 195.472944][T11309] x64_sys_call+0x2c0f/0x3000 [ 195.472969][T11309] do_syscall_64+0xca/0x2b0 [ 195.473014][T11309] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.473041][T11309] RIP: 0033:0x7f99102af749 [ 195.473061][T11309] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 195.473091][T11309] RSP: 002b:00007f990ed0ef08 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 195.473113][T11309] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f99102af749 [ 195.473177][T11309] RDX: 00007f990ed0ef20 RSI: 0000000000000058 RDI: 00007f990ed0ef20 [ 195.473194][T11309] RBP: 00007f990ed0f090 R08: 0000000000000000 R09: 0000000000000058 [ 195.473211][T11309] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 195.473228][T11309] R13: 00007f9910506038 R14: 00007f9910505fa0 R15: 00007ffea1361c98 [ 195.473295][T11309] [ 195.656467][T11313] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.702332][T11317] set_capacity_and_notify: 4 callbacks suppressed [ 195.702349][T11317] loop3: detected capacity change from 0 to 128 [ 195.728559][T11313] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.776459][T11313] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.935894][T11313] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.953570][T11334] FAULT_INJECTION: forcing a failure. [ 195.953570][T11334] name failslab, interval 1, probability 0, space 0, times 0 [ 195.966324][T11334] CPU: 0 UID: 0 PID: 11334 Comm: syz.0.2640 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 195.966371][T11334] Tainted: [W]=WARN [ 195.966378][T11334] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 195.966390][T11334] Call Trace: [ 195.966434][T11334] [ 195.966443][T11334] __dump_stack+0x1d/0x30 [ 195.966469][T11334] dump_stack_lvl+0x95/0xd0 [ 195.966490][T11334] dump_stack+0x15/0x1b [ 195.966537][T11334] should_fail_ex+0x265/0x280 [ 195.966629][T11334] should_failslab+0x8c/0xb0 [ 195.966655][T11334] __kmalloc_noprof+0xb9/0x5a0 [ 195.966684][T11334] ? sock_kmalloc+0x85/0xc0 [ 195.966771][T11334] ? terminate_walk+0x1e6/0x210 [ 195.966870][T11334] ? iovec_from_user+0x5e/0x210 [ 195.966900][T11334] sock_kmalloc+0x85/0xc0 [ 195.966930][T11334] ____sys_sendmsg+0xf8/0x4a0 [ 195.966959][T11334] ___sys_sendmsg+0x17b/0x1d0 [ 195.967003][T11334] __x64_sys_sendmsg+0xd4/0x160 [ 195.967035][T11334] x64_sys_call+0x17ba/0x3000 [ 195.967145][T11334] do_syscall_64+0xca/0x2b0 [ 195.967185][T11334] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.967205][T11334] RIP: 0033:0x7fa192b2f749 [ 195.967219][T11334] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 195.967288][T11334] RSP: 002b:00007fa19158f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 195.967312][T11334] RAX: ffffffffffffffda RBX: 00007fa192d85fa0 RCX: 00007fa192b2f749 [ 195.967325][T11334] RDX: 0000000000000106 RSI: 0000200000000140 RDI: 0000000000000007 [ 195.967337][T11334] RBP: 00007fa19158f090 R08: 0000000000000000 R09: 0000000000000000 [ 195.967348][T11334] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 195.967359][T11334] R13: 00007fa192d86038 R14: 00007fa192d85fa0 R15: 00007ffef7fcce28 [ 195.967419][T11334] [ 196.233278][ T37] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.285036][ T37] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.332308][ T37] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.384894][ T37] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.478531][T11341] loop2: detected capacity change from 0 to 1024 [ 196.485456][T11341] EXT4-fs: inline encryption not supported [ 196.491477][T11341] EXT4-fs: quotafile must be on filesystem root [ 196.607418][T11345] loop1: detected capacity change from 0 to 1024 [ 196.635288][T11345] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 196.651012][T11345] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4215: comm syz.1.2644: Allocating blocks 385-513 which overlap fs metadata [ 196.654248][T11345] EXT4-fs (loop1): pa ffff8881063e9e00: logic 16, phys. 129, len 24 [ 196.654343][T11345] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 8 [ 196.667199][T10510] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.769170][T11363] loop9: detected capacity change from 0 to 1024 [ 196.784240][T11363] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 196.801911][T11363] EXT4-fs error (device loop9): ext4_mb_mark_diskspace_used:4215: comm syz.9.2651: Allocating blocks 385-513 which overlap fs metadata [ 196.821658][T11363] EXT4-fs (loop9): pa ffff8881063e9ee0: logic 16, phys. 129, len 24 [ 196.829733][T11363] EXT4-fs error (device loop9): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 8 [ 196.853179][T10422] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.875771][T11370] siw: device registration error -23 [ 196.985007][T11382] loop1: detected capacity change from 0 to 128 [ 197.109423][T11385] netlink: 'syz.0.2659': attribute type 1 has an invalid length. [ 197.117452][T11385] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2659'. [ 198.328887][T11396] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2662'. [ 198.574555][T11399] loop1: detected capacity change from 0 to 1024 [ 198.672612][T11399] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 198.696304][T11399] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4215: comm syz.1.2664: Allocating blocks 385-513 which overlap fs metadata [ 198.715765][T11400] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2663'. [ 198.724932][T11400] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2663'. [ 198.740224][T11399] EXT4-fs (loop1): pa ffff8881006161c0: logic 16, phys. 129, len 24 [ 198.748441][T11399] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 8 [ 198.779513][T10510] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.809304][T11419] loop1: detected capacity change from 0 to 1024 [ 198.836207][T11419] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 198.868395][T10510] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.896083][T11433] loop2: detected capacity change from 0 to 512 [ 198.904433][T11433] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 198.912858][T11431] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2672'. [ 198.921140][T11433] EXT4-fs (loop2): 1 truncate cleaned up [ 198.933055][T11433] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 198.963129][T10433] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.026256][T11445] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2672'. [ 199.107327][ T29] kauditd_printk_skb: 439 callbacks suppressed [ 199.107347][ T29] audit: type=1326 audit(1767949358.035:9872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11428 comm="syz.9.2673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3119a4f749 code=0x7ffc0000 [ 199.136256][T11445] gre1: entered promiscuous mode [ 199.137770][ T29] audit: type=1326 audit(1767949358.035:9873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11428 comm="syz.9.2673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3119a4f749 code=0x7ffc0000 [ 199.142138][T11445] gre1: entered allmulticast mode [ 199.165755][ T29] audit: type=1326 audit(1767949358.035:9874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11428 comm="syz.9.2673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=238 compat=0 ip=0x7f3119a4f749 code=0x7ffc0000 [ 199.194327][ T29] audit: type=1326 audit(1767949358.035:9875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11428 comm="syz.9.2673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3119a4f749 code=0x7ffc0000 [ 199.217870][ T29] audit: type=1326 audit(1767949358.035:9876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11428 comm="syz.9.2673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3119a4f749 code=0x7ffc0000 [ 199.241383][ T29] audit: type=1326 audit(1767949358.035:9877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11428 comm="syz.9.2673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3119a4f749 code=0x7ffc0000 [ 199.265032][ T29] audit: type=1326 audit(1767949358.035:9878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11428 comm="syz.9.2673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f3119a4f749 code=0x7ffc0000 [ 199.339532][ T29] audit: type=1326 audit(1767949358.335:9879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11450 comm="syz.1.2678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbae37f749 code=0x7ffc0000 [ 199.764478][ T29] audit: type=1326 audit(1767949358.335:9880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11450 comm="syz.1.2678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbae37f749 code=0x7ffc0000 [ 199.788226][ T29] audit: type=1326 audit(1767949358.335:9881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11450 comm="syz.1.2678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdbae37f749 code=0x7ffc0000 [ 199.832593][T11456] siw: device registration error -23 [ 199.918282][T11460] loop3: detected capacity change from 0 to 1024 [ 199.952540][T11460] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 199.989232][T10932] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.998785][T11468] loop2: detected capacity change from 0 to 512 [ 200.005434][T11468] ext4: Unknown parameter 'measure' [ 200.068841][T11474] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 200.069500][T11474] EXT4-fs (loop3): 1 truncate cleaned up [ 200.070024][T11474] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 200.096495][T11474] EXT4-fs error (device loop3): ext4_append:79: inode #2: comm syz.3.2685: Logical block already allocated [ 200.096701][T11474] EXT4-fs (loop3): Remounting filesystem read-only [ 200.218317][T10932] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.050824][T11499] set_capacity_and_notify: 3 callbacks suppressed [ 201.050846][T11499] loop2: detected capacity change from 0 to 2048 [ 201.149191][T11499] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 201.169172][T11491] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 201.197044][T11491] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4215: comm syz.3.2693: Allocating blocks 385-513 which overlap fs metadata [ 201.215657][T11491] EXT4-fs (loop3): pa ffff888100616a10: logic 16, phys. 129, len 24 [ 201.223758][T11491] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 8 [ 201.261167][T10433] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.285479][T10932] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.349817][T11505] loop3: detected capacity change from 0 to 512 [ 201.384051][T11505] ext4: Unknown parameter 'measure' [ 201.495866][T11518] siw: device registration error -23 [ 201.557364][T11523] loop9: detected capacity change from 0 to 1024 [ 201.588547][T11523] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 201.607366][T11523] EXT4-fs error (device loop9): ext4_mb_mark_diskspace_used:4215: comm syz.9.2704: Allocating blocks 385-513 which overlap fs metadata [ 201.636711][T11523] EXT4-fs (loop9): pa ffff8881063e9e00: logic 16, phys. 129, len 24 [ 201.644865][T11523] EXT4-fs error (device loop9): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 8 [ 201.666231][T11531] Cannot find del_set index 0 as target [ 201.684322][T11532] vhci_hcd vhci_hcd.2: invalid port number 96 [ 201.690474][T11532] vhci_hcd vhci_hcd.2: default hub control req: 8011 v0005 i0060 l7 [ 201.700849][T10422] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.751259][T11536] loop3: detected capacity change from 0 to 512 [ 201.756552][T11538] loop9: detected capacity change from 0 to 512 [ 201.767847][T11538] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 201.792926][T11538] EXT4-fs (loop9): 1 truncate cleaned up [ 201.793366][T11538] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 201.804162][T11536] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 201.804319][T11536] ext4 filesystem being mounted at /41/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 201.852617][T10422] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.871277][T11550] FAULT_INJECTION: forcing a failure. [ 201.871277][T11550] name failslab, interval 1, probability 0, space 0, times 0 [ 201.871312][T11550] CPU: 0 UID: 0 PID: 11550 Comm: syz.9.2714 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 201.871395][T11550] Tainted: [W]=WARN [ 201.871401][T11550] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 201.871414][T11550] Call Trace: [ 201.871420][T11550] [ 201.871429][T11550] __dump_stack+0x1d/0x30 [ 201.871459][T11550] dump_stack_lvl+0x95/0xd0 [ 201.871486][T11550] dump_stack+0x15/0x1b [ 201.871583][T11550] should_fail_ex+0x265/0x280 [ 201.871606][T11550] should_failslab+0x8c/0xb0 [ 201.871631][T11550] kmem_cache_alloc_node_noprof+0x6b/0x4c0 [ 201.871661][T11550] ? __alloc_skb+0x2ff/0x4b0 [ 201.871714][T11550] __alloc_skb+0x2ff/0x4b0 [ 201.871737][T11550] ? __alloc_skb+0x228/0x4b0 [ 201.871767][T11550] audit_log_start+0x3a0/0x720 [ 201.871794][T11550] ? kstrtouint+0x76/0xc0 [ 201.871840][T11550] audit_seccomp+0x48/0x100 [ 201.871875][T11550] ? __seccomp_filter+0x832/0x1260 [ 201.871978][T11550] __seccomp_filter+0x843/0x1260 [ 201.872065][T11550] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 201.872099][T11550] ? vfs_write+0x7e8/0x960 [ 201.872172][T11550] __secure_computing+0x82/0x150 [ 201.872290][T11550] syscall_trace_enter+0xcf/0x1e0 [ 201.872335][T11550] do_syscall_64+0xa4/0x2b0 [ 201.872372][T11550] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.872399][T11550] RIP: 0033:0x7f3119a4df90 [ 201.872417][T11550] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 69 95 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 bc 95 02 00 8b 44 [ 201.872440][T11550] RSP: 002b:00007f31184b6f60 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 201.872542][T11550] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f3119a4df90 [ 201.872559][T11550] RDX: 0000000000000000 RSI: 00007f3119ad407e RDI: 00000000ffffff9c [ 201.872574][T11550] RBP: 00007f3119ad407e R08: 0000000000000000 R09: 0000000000000000 [ 201.872589][T11550] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 201.872605][T11550] R13: 00007f3119ca6038 R14: 00007f3119ca5fa0 R15: 00007ffd63161498 [ 201.872630][T11550] [ 201.972966][T11553] vhci_hcd vhci_hcd.0: default hub control req: 671e v03f8 i0007 l1 [ 202.123223][T11556] siw: device registration error -23 [ 202.149825][T10932] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.171817][T11559] loop9: detected capacity change from 0 to 2048 [ 202.198239][T11559] Alternate GPT is invalid, using primary GPT. [ 202.204690][T11559] loop9: p1 p2 p3 [ 202.208436][T11559] loop9: partition table partially beyond EOD, truncated [ 202.272537][T11570] tipc: Enabled bearer , priority 0 [ 202.288478][T11570] syzkaller0: entered promiscuous mode [ 202.288570][T11570] syzkaller0: entered allmulticast mode [ 202.307824][T11570] tipc: Resetting bearer [ 202.313956][T11569] tipc: Resetting bearer [ 202.331116][T11574] loop3: detected capacity change from 0 to 2048 [ 202.339620][T11558] ================================================================== [ 202.347739][T11558] BUG: KCSAN: data-race in __bpf_get_stackid / bcmp [ 202.354348][T11558] [ 202.356681][T11558] write to 0xffffc9000f343528 of 96 bytes by task 335 on cpu 0: [ 202.364455][T11558] __bpf_get_stackid+0x737/0x7d0 [ 202.369404][T11558] bpf_get_stackid+0xf3/0x130 [ 202.374087][T11558] bpf_get_stackid_raw_tp+0xf6/0x120 [ 202.379381][T11558] bpf_prog_53f0063d4d7f65ce+0x2a/0x32 [ 202.384837][T11558] bpf_trace_run4+0x117/0x1e0 [ 202.389521][T11558] __traceiter_sched_switch+0x3f/0x60 [ 202.394915][T11558] __schedule+0xb0f/0xcd0 [ 202.399244][T11558] __cond_resched+0x31/0x60 [ 202.403745][T11558] loop_process_work+0x837/0xaa0 [ 202.408682][T11558] loop_workfn+0x31/0x40 [ 202.412918][T11558] process_scheduled_works+0x4ce/0x9d0 [ 202.418379][T11558] worker_thread+0x582/0x770 [ 202.422969][T11558] kthread+0x489/0x510 [ 202.427047][T11558] ret_from_fork+0x149/0x290 [ 202.431641][T11558] ret_from_fork_asm+0x1a/0x30 [ 202.436417][T11558] [ 202.438739][T11558] read to 0xffffc9000f343548 of 8 bytes by task 11558 on cpu 1: [ 202.446363][T11558] bcmp+0x23/0x90 [ 202.450006][T11558] __bpf_get_stackid+0x382/0x7d0 [ 202.455032][T11558] bpf_get_stackid+0xf3/0x130 [ 202.459722][T11558] bpf_get_stackid_raw_tp+0xf6/0x120 [ 202.465013][T11558] bpf_prog_53f0063d4d7f65ce+0x2a/0x32 [ 202.470486][T11558] bpf_trace_run4+0x117/0x1e0 [ 202.475192][T11558] __traceiter_sched_switch+0x3f/0x60 [ 202.480570][T11558] __schedule+0xb0f/0xcd0 [ 202.484916][T11558] schedule+0x5f/0xd0 [ 202.488900][T11558] __futex_wait+0x117/0x260 [ 202.493407][T11558] futex_wait+0x9d/0x1d0 [ 202.497659][T11558] do_futex+0x2bf/0x380 [ 202.501829][T11558] __se_sys_futex+0x2ed/0x360 [ 202.506510][T11558] __x64_sys_futex+0x78/0x90 [ 202.511114][T11558] x64_sys_call+0x2bc2/0x3000 [ 202.515793][T11558] do_syscall_64+0xca/0x2b0 [ 202.520321][T11558] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.526218][T11558] [ 202.528535][T11558] value changed: 0xffffffff85761d6f -> 0xffffffff85761fe1 [ 202.535635][T11558] [ 202.537952][T11558] Reported by Kernel Concurrency Sanitizer on: [ 202.544104][T11558] CPU: 1 UID: 0 PID: 11558 Comm: syz.9.2717 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 202.555524][T11558] Tainted: [W]=WARN [ 202.559320][T11558] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 202.569389][T11558] ================================================================== [ 202.580227][T11569] tipc: Disabling bearer [ 202.603887][T11574] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 202.627352][T10932] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.