last executing test programs: 14m5.5285917s ago: executing program 4 (id=6957): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x34, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = openat$selinux_member(0xffffffffffffff9c, &(0x7f00000017c0), 0x2, 0x0) write$selinux_access(r3, &(0x7f0000001800)={'system_u:object_r:syslogd_var_lib_t:s0', 0x20, 'unconfined_u:system_r:insmod_t:s0-s0:c0.c1023', 0x20, 0x100000000}, 0x6a) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, 0xffffffffffffffff, 0x0) 14m5.45670401s ago: executing program 4 (id=6959): socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$unix(0x1, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) pread64(r2, &(0x7f0000000300)=""/150, 0x96, 0x0) 14m4.625860726s ago: executing program 4 (id=6968): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000000)='signal_generate\x00', r1}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000140), 0x121880, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) r3 = syz_io_uring_setup(0x3bc1, &(0x7f0000000780)={0x0, 0x942e, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_io_uring_submit(r4, r5, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4007, @fd=r2, 0x0, &(0x7f0000000900)=[{&(0x7f0000000000)=""/4, 0x4}], 0x1}) io_uring_enter(r3, 0x567, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, 0x0, 0x0) 14m4.537368516s ago: executing program 4 (id=6970): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xe, &(0x7f0000000200)={[{@quota}, {@oldalloc}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@block_validity}, {@jqfmt_vfsv1}]}, 0x3, 0x434, &(0x7f0000000940)="$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") move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0) mount$bind(&(0x7f00000000c0)='.\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x80700a, 0x0) 14m4.481976165s ago: executing program 4 (id=6973): socket$inet6_sctp(0xa, 0x5, 0x84) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x48) socket$inet6_dccp(0xa, 0x6, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001100a7cc4affeeaf541d002007000000", @ANYRES32=r2, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16=r3, @ANYRES32=r3], 0x44}}, 0x0) 14m4.385332185s ago: executing program 4 (id=6975): socket$inet_sctp(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={0x0}, 0x18) r0 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f00000023c0), 0x1, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r2}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) write$selinux_validatetrans(r0, 0x0, 0x63) 14m4.385091635s ago: executing program 32 (id=6975): socket$inet_sctp(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={0x0}, 0x18) r0 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f00000023c0), 0x1, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r2}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) write$selinux_validatetrans(r0, 0x0, 0x63) 7m2.090392808s ago: executing program 1 (id=13287): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000b40)={{r0}, &(0x7f0000000ac0), &(0x7f0000000b00)='%pK \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r1, &(0x7f0000001000)={&(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x14}, @loopback}}}], 0x20}, 0x0) 7m2.074295668s ago: executing program 1 (id=13288): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_SECURITY_LEVEL(r1, 0x0, 0x2, 0x0, &(0x7f0000002100)) syz_io_uring_setup(0x7a8e, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000), &(0x7f0000000100)) socketpair$unix(0x1, 0x2, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socket$inet6_sctp(0xa, 0x5, 0x84) socket$rds(0x15, 0x5, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0) close(0xffffffffffffffff) r5 = mq_open(&(0x7f000084dff0)='!selynuxselinux\x00', 0x6e93ebbbcc0884f2, 0x184, &(0x7f0000000000)={0x2000000000002000, 0x1, 0x3}) mq_timedsend(r5, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r5, 0x0, 0x0, 0x0, 0x0) mq_timedreceive(r5, &(0x7f0000000680)=""/201, 0xc9, 0xfffffffffffffffa, 0x0) r6 = bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r6, 0x0, 0x0}, 0x10) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x3d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x72030, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x100000, 0x7, 0x0, 0x6, 0x7, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 7m2.029063957s ago: executing program 1 (id=13290): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r2}, &(0x7f0000000000), &(0x7f00000003c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) fcntl$setlease(r4, 0x400, 0x1) fremovexattr(r4, &(0x7f0000000040)=@known='system.posix_acl_default\x00') r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r5, 0xffffffffffffffff, 0x0) 7m1.954475007s ago: executing program 1 (id=13294): openat$tun(0xffffffffffffff9c, 0x0, 0xc0241, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = io_uring_setup(0x2e32, &(0x7f0000000180)={0x0, 0x0, 0x2}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000340)='GPL\x00', 0x2, 0x0, 0x0, 0x1e00, 0x64, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r3}, 0x18) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f00000001c0)='cpu&-0\t\t\t') sendto$inet6(r1, &(0x7f00000002c0)="9e", 0x1a000, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c10, &(0x7f0000000400)={[{@sysvgroups}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000}}]}, 0xff, 0x23f, &(0x7f0000000540)="$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") r4 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f00000001c0)=0x10) symlink(&(0x7f0000000440)='./mnt\x00', &(0x7f00000007c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000880)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xa0}}, 0x0) r7 = socket(0x10, 0x3, 0x0) memfd_create(&(0x7f0000000300)='\x00', 0x4) r8 = syz_usbip_server_init(0x5) ioctl$FIDEDUPERANGE(r7, 0xc0189436, &(0x7f0000000400)={0x0, 0x3, 0x4, 0x0, 0x0, [{{r6}, 0x7f}, {{r6}, 0xe}, {{r8}, 0x7}, {{r6}, 0x3}]}) sendmmsg(r7, 0x0, 0x0, 0x0) semget(0x3, 0x1, 0x4) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r9 = io_uring_setup(0x3454, 0x0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r9, 0x10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000002700)=""/4096, 0x1000}], 0x0, 0xa}, 0x20) r10 = epoll_create(0x1) r11 = perf_event_open(&(0x7f0000000000)={0x2, 0xfffffffffffffed9, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x112047, 0x0, 0x0, 0x0, 0x10000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xb, 0xffffffffffffffff, 0x0) splice(r10, &(0x7f0000000580)=0x8, r11, &(0x7f00000005c0)=0x7, 0x5, 0x3) close_range(r0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) 7m1.171057313s ago: executing program 1 (id=13315): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x1, 0x0, 0x7ffc0001}]}) openat$hwrng(0xffffffffffffff9c, 0x0, 0xa0480, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0", @ANYRES32], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 7m0.762416082s ago: executing program 1 (id=13328): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x1, 0x0, 0x7ffc0001}]}) r3 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) fsmount(r3, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="440000001000090600"/20, @ANYRES32=0x0, @ANYBLOB="adffa888000000001c00128009000100626f6e64000000000c000280050001000600000008000a00"], 0x44}}, 0x0) 7m0.707482482s ago: executing program 33 (id=13328): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x1, 0x0, 0x7ffc0001}]}) r3 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) fsmount(r3, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="440000001000090600"/20, @ANYRES32=0x0, @ANYBLOB="adffa888000000001c00128009000100626f6e64000000000c000280050001000600000008000a00"], 0x44}}, 0x0) 5m29.671167023s ago: executing program 5 (id=14898): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x280f02, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) dup3(r1, r0, 0x0) socket(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x2, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x43}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r4 = dup2(r3, r3) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x200000a, 0x1, 0x8}) ioctl$BLKTRACESETUP(r4, 0x1276, 0x0) 5m29.482002513s ago: executing program 5 (id=14902): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_all\x00', 0x275a, 0x0) fcntl$lock(r0, 0x24, &(0x7f00000006c0)={0x2, 0x4, 0x7fffffffffffffff, 0x80000000}) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) unshare(0x6020400) r2 = epoll_create1(0x0) epoll_pwait(r2, &(0x7f0000000640)=[{}], 0x1, 0x0, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000002c0)={'batadv0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40c4}, 0x2040080) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00', @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=r4, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006100000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000820000009500000000000000e92064980f00bf5d2a58dbe23e227b64d0ab4e"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r8 = syz_io_uring_setup(0x4175, &(0x7f0000000780)={0x0, 0x807e08, 0x20, 0x0, 0xffeffffc}, &(0x7f0000000500)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r8, 0x0, &(0x7f0000000a80)=[{0x0}, {0x0}], 0x2, 0xe}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r6, 0x400c6615, &(0x7f0000000080)={0x0, @aes256, 0x0, @desc2}) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) accept$packet(0xffffffffffffffff, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000005c0)=0x14) setsockopt$packet_tx_ring(r6, 0x107, 0xd, &(0x7f0000000600)=@req={0xa, 0x9, 0x8001, 0x110}, 0x1f) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000400)={0x2, 0x0}, 0x8) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r12, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='kfree\x00', r13}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r11}, &(0x7f0000000200), &(0x7f0000000340)}, 0x20) io_uring_enter(r8, 0x567, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1b00801900"/14], 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r7, 0x0, 0x7, 0x8, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'geneve1\x00'}) 5m29.422407982s ago: executing program 5 (id=14903): socket$packet(0x11, 0xa, 0x300) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x11, 0x4, &(0x7f0000001180)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000010100)={&(0x7f00000100c0)='kmem_cache_free\x00', r1}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 5m29.268625922s ago: executing program 5 (id=14908): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0600000004000000ff0f00000700000000000000", @ANYRES32, @ANYRESHEX=0x0, @ANYRES32=0x0, @ANYRES32, @ANYRESOCT=r0], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0xf, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3, 0x0, 0x800000000000000}, 0x18) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000400), &(0x7f0000000080)='./file1\x00', 0x1008014, &(0x7f0000000300)=ANY=[@ANYRES16, @ANYRESOCT, @ANYRES16, @ANYRESOCT=0x0, @ANYRESDEC, @ANYRESOCT, @ANYRES64, @ANYRES32, @ANYRES16], 0x3, 0x7bf, &(0x7f0000000d80)="$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") r4 = socket$unix(0x1, 0x5, 0x0) bind$unix(r4, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000800)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020101090800000000170006fffffd00030006001000001a02000000e0000009f9ff0f000500000003258f0180000000000000cadd393c9cc930cc0eb074002ac5e292e31de3f41ffac7dd00754dc3f3cf7792215d55f4a1fe6dfbd8fb1a0fd08af00223d21a85fba70182a8a31f00d63ac2043105ed3f7d2ffdf4bd9627eb14764a67f91de6293df91815a868bc76912101e4a35265a6afe95e"], 0x40}}, 0x0) 5m29.101234421s ago: executing program 5 (id=14910): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x2, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x43}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r2}, 0x10) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000840)=ANY=[@ANYBLOB="40000000100001040000000000000000f7ffffff", @ANYRES32=0x0, @ANYBLOB="2b03000000000000180012800b000100697036746e6c0000080002800400130008000a00", @ANYRES32], 0x40}}, 0x800) 5m28.90677364s ago: executing program 5 (id=14911): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x80003, 0x0) dup2(0xffffffffffffffff, r0) (fail_nth: 1) 5m12.716319966s ago: executing program 34 (id=14911): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x80003, 0x0) dup2(0xffffffffffffffff, r0) (fail_nth: 1) 2.637237632s ago: executing program 7 (id=20729): r0 = openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$RTC_ALM_SET(r0, 0x40247007, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000040)={0x42}, 0x10) socket$tipc(0x1e, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000202300800000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) mkdir(&(0x7f0000002880)='./file0\x00', 0x0) mount$9p_xen(&(0x7f00000001c0), &(0x7f0000000380)='./file0\x00', 0x0, 0x2002084, 0x0) syz_open_dev$usbmon(&(0x7f0000000440), 0x0, 0x0) r2 = syz_open_dev$usbfs(0x0, 0x205, 0x8401) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) socket$tipc(0x1e, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x3, 0xc, &(0x7f0000000c40)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000002300000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="6800000010000100"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000480012800e0001006970366772657461700000003400028008000100", @ANYRES32, @ANYBLOB="14000600fe800000000000000000000000000015140007"], 0x68}}, 0x0) sendto$packet(r4, &(0x7f0000000180)="a6bea8a120e5f8320c30ce5086dda5e986f34c10d8c39c3002de8ec445ae083a4b7fc08a086fc691", 0x28, 0x0, &(0x7f0000000140)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @local}, 0x14) 2.563250402s ago: executing program 7 (id=20731): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$can_j1939(0x1d, 0x2, 0x7) socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmmsg$sock(r0, &(0x7f0000006000), 0x0, 0x24040015) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x29, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)="d800000018008103e00312ba0d8105040a600300ff0f040b067c55a1bc000900b80006990700000015000500fef32702d3001500030001400200000901ac040098007f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b66bce0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f00000e970300"/216, 0xd8}], 0x1}, 0x880) syz_genetlink_get_family_id$smc(0x0, 0xffffffffffffffff) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) bind$packet(r3, &(0x7f0000000200)={0x11, 0x2, r5, 0x1, 0xd, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {}, {0x0, 0xfff3}}}, 0x24}}, 0x8000) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x34}}, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r1}, 0x4) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000006140)={0x11, 0x10, &(0x7f0000000600)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r9}, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) 2.395726671s ago: executing program 7 (id=20733): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000080000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000400), 0xffffffffffffffff) syz_open_dev$usbmon(0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r3}, 0x18) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x20000010}, 0x4) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000020c0)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x91ee, 0x9, 0x10000000, 0x1, 0x7}, 0x9, 0x8}, [{0xd6c, 0x9, 0x8, 0xff, 0x10001, 0x9}, {0x7f, 0xffff, 0x6, 0x7fffffff, 0x1, 0x7}, {0x6, 0xb37b, 0x6, 0xb38, 0x0, 0xd0cb}, {0x4, 0x3, 0x2, 0xa318, 0x80000000, 0x1}, {0x9, 0xfffffff9, 0x2, 0x4, 0x6, 0x4}, {0x8000, 0xffffffff, 0xe, 0x4, 0xcee8000, 0x1}, {0x9, 0x8, 0xfffffffa, 0x6, 0xa0fd, 0x8}, {0xffffffff, 0xe648, 0x7c0c3ffe, 0x8, 0x0, 0x5}, {0x3, 0x3, 0x9, 0xa}, {0x9, 0x6, 0xb6, 0x7fff, 0x5, 0x7}, {0x304, 0x66, 0x3, 0x101, 0x3, 0x9}, {0xff, 0x1, 0xe, 0x800, 0x3, 0x56}, {0xca, 0x4, 0x9, 0xfffffff8, 0x7, 0x7921bcf1}, {0x1, 0xff, 0x5, 0x80000000, 0xaae6, 0x9}, {0x4, 0x3, 0xa9, 0x8, 0x9, 0x4}, {0x5, 0x1000, 0x200, 0x2, 0x8, 0x6}, {0x3d648283, 0x2, 0x5, 0x9, 0x10000, 0x6}, {0x3, 0xa06, 0x1, 0x1, 0x9, 0x260ba674}, {0x6, 0xc5, 0x8d3, 0x9, 0x3, 0xffffffbc}, {0x3, 0x8, 0x3, 0x5, 0x0, 0xc80}, {0x3, 0xffffffff, 0xffff, 0x2, 0x9}, {0xfffffffa, 0x6, 0x77f, 0x160c, 0x3}, {0x1ff, 0x8, 0x0, 0x6, 0xb, 0x400}, {0x3ff, 0x9, 0xffff8001, 0x100, 0x3, 0x47}, {0x529, 0x4, 0x7, 0xffff, 0xc0a, 0xbad}, {0x8, 0x7, 0x884, 0x100, 0x9}, {0x8, 0x6, 0x6, 0xc, 0x3}, {0x4, 0x40, 0xcd6c, 0x71f, 0x8000, 0x6}, {0x5, 0x30a3, 0xa, 0x200, 0xfff, 0x9}, {0x3, 0x1, 0x5, 0x8, 0x2, 0x81}, {0x81, 0x0, 0x0, 0x49f11005, 0x9, 0x7fffffff}, {0x9, 0x0, 0x5c, 0x3bad, 0x8, 0x480}, {0xe, 0x58000000, 0x9, 0x3, 0x1ff, 0xaa2}, {0x800, 0xd1, 0x0, 0x3e, 0x0, 0x5}, {0x8, 0x0, 0x200, 0xfffffc00, 0x100, 0x10001}, {0x6, 0x7, 0x0, 0x101, 0x6, 0x81}, {0x8, 0x2, 0x200, 0x3, 0x4, 0x101}, {0xad, 0xa, 0x401, 0x0, 0x9, 0xff000000}, {0x8, 0x5, 0xd, 0x24, 0xc, 0x1}, {0xfffffff8, 0x9, 0x1000, 0xc, 0xea, 0x4}, {0x3, 0x0, 0x8, 0x1, 0x1, 0xffffff32}, {0x6, 0x5, 0xd7c9, 0x0, 0x5, 0x2}, {0xffff, 0x1, 0x5, 0x2, 0x7, 0x7}, {0x5, 0x2, 0x0, 0x401, 0x6, 0x1}, {0x3, 0x2, 0x4, 0x6, 0xfffffff8, 0x5}, {0x6, 0x0, 0x3, 0x5, 0x0, 0xffff8000}, {0x1, 0x0, 0x0, 0x9, 0x0, 0x4}, {0x2, 0x6, 0x2, 0x7, 0x9}, {0x0, 0xfffffffd, 0x756183d, 0xfffff801, 0x5, 0x8}, {0x7, 0xa, 0xfffffffc, 0x80000001, 0x407b, 0x2}, {0x7, 0x9, 0xee, 0x800, 0x1000}, {0x10, 0x5, 0x57a2a808, 0x80000000, 0x7fff, 0x5}, {0x729, 0x25, 0x6, 0x6, 0x8, 0x4}, {0x2, 0x406, 0xc209, 0x8, 0x0, 0xfffffffc}, {0x1, 0x7, 0x8, 0xfffffffb, 0x80000000, 0x4}, {0x1, 0x5, 0x8, 0x8000, 0x1, 0x7f}, {0x8001, 0xf42, 0x1, 0x3, 0x5, 0x430}, {0x2, 0xfffffff4, 0x5, 0xf, 0xc8, 0x7}, {0x6, 0x7, 0x9, 0x8, 0x5, 0x5}, {0x5, 0x8000000, 0x7, 0x5, 0x401, 0x9}, {0x1, 0x6, 0x1ff, 0xa8de, 0x0, 0x807b}, {0x0, 0x80000000, 0x7fff, 0x5, 0x2, 0x7}, {0xe, 0xfffffffc, 0x7fffffff, 0x7, 0x5, 0x1ff}, {0x81, 0xaa, 0x1e, 0x9, 0x14fc, 0x8}, {0x9, 0xffffffff, 0x40, 0x6, 0x13b, 0xeacd}, {0x100020, 0xff, 0x6, 0x81, 0x0, 0x6}, {0x2, 0xe, 0xb, 0x0, 0x6, 0x2}, {0x8, 0x3, 0x5, 0x4, 0x4, 0x2}, {0x84, 0x3ff, 0x3d0c, 0x1, 0x8, 0x2}, {0x4, 0x4, 0xb85c, 0x1, 0x3, 0x6}, {0x3, 0xc6, 0x0, 0x1, 0x2, 0x3}, {0x7, 0x2, 0x8000, 0x2, 0x7fffffff, 0x79}, {0x6, 0x80000000, 0xfffffffe, 0x7, 0x3, 0x8}, {0xae, 0x3, 0x600, 0x9, 0xff, 0x3}, {0x1, 0xed5, 0x6de6, 0x10, 0x380000, 0x789}, {0x4, 0x7074, 0x32b, 0x3, 0xf}, {0x1ff, 0x7, 0x1, 0x96, 0x1, 0xc}, {0x9, 0x3, 0x0, 0xfff, 0x1ff, 0x8}, {0x1, 0x7d, 0x8, 0x7, 0x2, 0x3}, {0xfffff001, 0x9, 0x65d, 0x3c10, 0x7, 0x53}, {0x7, 0x0, 0x7, 0x101, 0x9, 0x1}, {0x7, 0x9, 0xd, 0x6, 0xfffffff7, 0x827}, {0x113, 0xfffffffe, 0x2, 0x400, 0x28, 0x81}, {0xfff, 0x6, 0x7, 0x40, 0x6, 0x10}, {0xc, 0x9, 0x8001, 0x0, 0x9, 0x6}, {0x5, 0x11b9, 0x401, 0x4, 0x2, 0x6}, {0x9, 0x100, 0x400, 0x9497, 0x101, 0x84b7}, {0xb4, 0xb85, 0x7, 0x3, 0x51, 0x5}, {0x2, 0x4, 0x5, 0xf, 0xf, 0x1283}, {0xfffffff8, 0x1c0000, 0x2, 0x10001, 0x1, 0x6}, {0x61, 0x80, 0xffffffff, 0x10000, 0x5, 0x8}, {0x8, 0x6, 0xc53, 0x80000000, 0x7, 0x5}, {0x0, 0x6, 0x5, 0x2, 0xdc, 0x6}, {0x0, 0xfffffffc, 0x101, 0x6cb685f2, 0x7, 0x1}, {0x0, 0xc3, 0x4, 0x5, 0x0, 0x9}, {0x8, 0xf7b5, 0x5, 0x5, 0x9, 0x7}, {0x1, 0x67f, 0x5689f935, 0x8, 0x6db, 0xff}, {0x1, 0x400, 0x3, 0x1e1, 0xa, 0x80000000}, {0xea, 0x5, 0x8, 0x5, 0x7fff, 0x1000}, {0x6, 0x5, 0x7, 0x3, 0x6, 0x80000000}, {0x9, 0x6, 0x7, 0x1, 0x9, 0x100}, {0x7202, 0x4, 0x5024, 0xf9, 0x6, 0x40}, {0x5, 0x10, 0x4, 0x5, 0xd, 0x8}, {0x1537, 0x101, 0x4000006, 0x1, 0x3, 0x6b}, {0x69, 0x400, 0x3, 0x81, 0xc6, 0x7fff}, {0x10001, 0x1, 0x3, 0x7fffffff, 0x7, 0x10001}, {0xcdc, 0x1, 0x7, 0x0, 0x8}, {0x1, 0x168dccf, 0x3, 0x3, 0x7fff, 0x6}, {0x3, 0x4, 0x7fff, 0x7, 0xaf68, 0x403}, {0x9, 0x0, 0x7, 0x6, 0x6, 0x80000001}, {0x5, 0x200, 0x800, 0xd00000, 0x3, 0x8}, {0x8001, 0x5d, 0xffffffff, 0x42e, 0x8, 0x55}, {0x1970, 0x89, 0x6d, 0x460ebb44, 0x2, 0x2}, {0x951, 0x9, 0x3, 0x8, 0x1, 0x2}, {0x3, 0x8, 0x627b, 0x5, 0x6, 0x5}, {0x6, 0x3, 0x9fbc, 0x4, 0x1, 0x2}, {0x401, 0x6, 0x32d84255, 0xfa, 0x27f, 0x8000}, {0x0, 0x9, 0x3, 0xc, 0x8000, 0x40}, {0x5, 0x4, 0x1, 0x3, 0x0, 0x5}, {0x7f, 0x4, 0x7f, 0x10001, 0xff, 0x8}, {0x7, 0x96a3, 0x2, 0xd7, 0x6, 0x200}, {0x1, 0x5, 0x5, 0x37a3, 0x7, 0x8}, {0x81, 0x4, 0xd, 0xffffffff, 0x200, 0x4}, {0x4, 0x3ff, 0x7, 0x4, 0x4, 0x4}, {0x1, 0xffffffa4, 0x9, 0x2, 0x3}, {0xd, 0x0, 0x3ff, 0x9, 0x8, 0x48}, {0x2, 0x10001, 0x9, 0x2, 0x8, 0x9}, {0xf, 0x1, 0x8, 0x101, 0xfffffffd, 0xc88}], [{}, {0x5}, {0x0, 0x1}, {0x1}, {0x4}, {0x2, 0x1}, {0x3}, {}, {0x5}, {0x3}, {0x2}, {0x3, 0x1}, {0x3, 0x1}, {0x2}, {0x8cd778652b20be70, 0x1}, {0x1, 0x1}, {0x1}, {0x2}, {0x4}, {0x1, 0x1}, {0x5, 0x3}, {0x2, 0x1}, {0x2}, {0x0, 0x1}, {}, {0x4, 0x1}, {0x6}, {0x4}, {0x4, 0x1}, {0x4}, {0xa4f33433e7b7e23d, 0x1}, {0x4}, {0x0, 0x1}, {0x6}, {0x2, 0xa5b0c5c50171756a}, {0x5}, {}, {0x4}, {0x4, 0x1}, {0x3}, {0x5, 0x1}, {0x2, 0x1}, {0x4}, {0x4}, {0x5, 0x1}, {0x1}, {0x2}, {0x3, 0x1}, {0x4}, {0x5}, {0x1, 0x1}, {0x5}, {0x2}, {0x1, 0x1}, {0x6}, {0x1}, {0x5, 0x1}, {0x5}, {0x2}, {}, {0x0, 0x1}, {0x3}, {0x5}, {0x5, 0x1}, {0x5}, {0x4, 0x1}, {0x2, 0x1}, {0x1}, {0x0, 0x1}, {0x2}, {0x5, 0x1}, {0x2}, {0x5}, {0x0, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x1}, {0x5}, {0x4}, {0x5, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {}, {0x3, 0x1}, {0x1}, {0x1}, {0x3}, {0x3, 0x1}, {0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x3}, {0x5, 0x1}, {}, {0x3, 0x1}, {0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x3}, {0x1}, {0x1, 0x1}, {0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x3}, {0x3, 0x1}, {0x3}, {0x4}, {0x0, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x5}, {0x3, 0x1}, {0x2}, {0x4, 0x1}], 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) socket$packet(0x11, 0xa, 0x300) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x11, 0x4, &(0x7f0000001180)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000010100)={&(0x7f00000100c0)='kmem_cache_free\x00', r6}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) listen(r2, 0x3) r7 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r7, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r8}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x4, 0x5, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="440000001000090600"/20, @ANYRES32=0x0, @ANYBLOB="adffa888000000001c00128009000100626f6e64000000000c000280050001000600000008000a"], 0x44}}, 0x0) 1.770522418s ago: executing program 7 (id=20747): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0x5}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000002c0)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x1, 0x7ffc1ffb}]}) statx(0xffffffffffffffff, 0x0, 0x6000, 0x800, 0x0) pipe(&(0x7f0000000000)) socket$inet6_sctp(0xa, 0x1, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0\x00', 0x400, &(0x7f00000006c0), 0x1, 0x246, &(0x7f00000007c0)="$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") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) fallocate(r2, 0x20, 0x2000, 0x2000) 1.703102228s ago: executing program 3 (id=20750): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r1}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0, 0x0, 0x8000000000000000}, 0x18) r2 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$tipc(r2, &(0x7f0000000900)={&(0x7f0000000180)=@name={0x1e, 0x2, 0x0, {{0x41}, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x44}, 0x8000) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000080)) ioctl$PPPIOCSMAXCID(r3, 0x40047451, &(0x7f0000002540)=0x1) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa1"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) close_range(r4, 0xffffffffffffffff, 0x0) 1.675622218s ago: executing program 7 (id=20751): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000540)='net_dev_xmit\x00', r1, 0x0, 0x1}, 0x18) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x14}}, 0x0) 1.580201047s ago: executing program 7 (id=20753): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1b0000000000000000000000000004000000", @ANYRES32=0x0, @ANYBLOB="00000000000037e735ad08e385252f10b92159bacae4c209258817d2ed1f0000000000000000000000000e00", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) r1 = syz_usb_connect$printer(0x2, 0x2d, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_disconnect(r1) ioctl$EVIOCGBITSW(r0, 0x40095505, 0x0) r2 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0) mknodat(r2, &(0x7f0000000000)='./file0\x00', 0x1000, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x4) r3 = gettid() timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) newfstatat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f0000000380), 0x400) 1.543052747s ago: executing program 3 (id=20755): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, 0x0) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x24, r1, 0x601, 0x0, 0x25dfdbfd, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x24}}, 0x0) socket$inet6_sctp(0xa, 0x4, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x17, 0xc, &(0x7f0000001200)=ANY=[@ANYBLOB="18000000ffffff0c3ca32800000000", @ANYBLOB="12e02a472d291ad715b5995b24327aedb189852589bf51dc02a891d043ae1077ebaed85843d00814ea896db6bfe67a4a348dd5a79b8d7b105871ee8b6e0d94c0f8d9eb756aabcc5594029967ebe7f0356172ff4b0d12c9e04ba242e1657c81e5b5f3e238ac08c3da77393af5fdf8619941c2975cbd9b54ec444bc2ec2ed6bb9a94f69e0ee56fd6b761150caf6b17bff4b9973b32352ff4aed957718bd421711729abe5ba4dfc17306c871ef2c76817917cb019323a7fee00d4b5930baf398986f29b93a849dfdb1f493f0ec7c95021d0f3e5344543815e2c448c609c42ae92427ae9a365093d824aa95164cdbb6c2216636d8ef0b27ad07b40d125346134b64bcfba2e898c45264ce2dd24a1c98f55e426fd1eab529bc90c631de8a4cdcde9408fa33117d10951b1f1c0f0984c2e20b25693bd0de1171aa73e7d15de2a6353c6b9c8ec190ba364636b2b38a2e543ee57fcc2796feb5b542a1e9224443bce764fe0c4e5ced387be44a1e00a3378eefe094200ec793a8293abd9393f1cd1c714421abff1704ec13841ca572efe99ccb981f6961b33eee38a8086abb18aa1bfa4ae7fc7e3df120c3ff9046f17b2f059a3921fc71cb912e50a10d1a939c25f875b1f47c12fed868040864513140cd04b56cdacc94a1582e02368e206692ecbdcb527b831c7e09c8da071f64a0224c0bbfe0dd4edffb02d93877b5e219baca999c0fdafc8fe7e36b6bb44e10815b8389db7deeb1532b960565fa78451b35ca6b06ca6066e6d50354805c1c6ae3b37fd180ed7096d2ebee525edf8a0b7be4b12ec9ae16e5bc88088ccdcdc7c2ff3950fc6a626f80d0d6e59d8da368c2b9fadd5f90101372609a799053269e0b8ee4876b6bb28d965e96e8d2463c0ec32b04ee18965eab71a592f4943967e3546effe024c1148cff0678dfdc9d190b3b9e39d0c2e8db25ae10c85dfba381e831f139d7192f505207f12f0f1dbed8a9b47517c2e723f598601ffc8c1d5c082490c9e37bac1209de2df1ded89da6c84d2070043e28ce6eac34ad72f855898857deeb5d4458ad06fbff364fc0f913b79c867d6d74631d228b9b9a74cac45c3f3037c136214c12a3daec8fb39fe24b68ff97414c4f1c224aa7a7ebd7b983c75a8e692187dadc781608c3bb3b0d29475494d274b7de58f5a88c1acd337fc6770974a048579b73402fd4ffd4c7afa58481dada26355c9c51175e1269699b38025bd13b0cc683d2add28fe56d25c4262129686c85dbb155ff74bcc0a7dba78dfd65480dccbfc7c013bbc7d75283a4764ead4fb4b241a625613ca11bc097231612d3cbceb5cc9e0fb858974d451f7e033e557b1a7644f6be8e1d5c9064de677af1f8f6aa67bc96a2d7b815a737b3a4a548199bc892870fecf043a5cd44f6baec11c37dc0106990f9c0ddc81df7ec5130fd91e302f785794ea384f36a2d276084e8a40e9e01ac631eac4f2efd572ba32b755959d3c3e73e970e072fedeb681b93fabfca30e80e510478fd073c4933f5cbca458af4fc1e45962ef3a92541b503e73056b94504b0b38e49c2e76c05d00cb83e3ceb8e5b12f137832b2c64e7b8231b59c2925c25a9bf381a4fc8a13e0f7f01227a90fc70d7219aad1e4966ba608a54824d844c1005ad4243700b9fac962df65d8760c3e28dde817e3aa1845f5b00723406703efe134e0087d0bd71f2a634b0c98b9685b9932c2e1fcbdb07d7ceafd139cc5109fefda052710bb3bb274db0bda6f0cc21af55d52d017339cb3a3c57ee1d2b7e0ab882bbc0f17d32ac4614d358052cff0bf9e13c89c4e68be8d645e804c2d5c3e44cceae98af059ce4992c352f6d826883b5c483870444bf4ef9d3390f2399fa13b73f9350a0dc2511bcb3f5b26c37d04a3516371f732531b4bf41898f44122466524066e29d1af2ef6502be279edced26a28923d0b0c56e81e0c09458f76e64bcc47c5f13eb5e17bc2877aa7e744959e3a874c5d172c1e7a488f793365bb0d3c2744ba3a9b0a5e204a1c799c1a9171ff8f3fe5e92fadf8ad8c32c5ca4ffc227b92b8df12eb1533a764c0f0084f40ee096744abf9f17d5f316eb9dee370c9ab6a34c4d65ca00afb1382dabe4d10a9238e6d5a053afd72dcc6b96decbbe22fefe98d17725e8e8d94a8c4eeea2968b5ce0305c5ea81cfda2990343692af62bd0eba4c897e0e4e25c23d0f85459165a4de03a29338d2cb60b95f1c2f0973728543cc0304c776b4f29ebe6f29e888118cf528caac72c839456a96a1877a00785da07e0a3d60ff7fd4b3329911072771137252bfbcb8f1a7780851016c59796cb9d7aeec31597c02fdfc2b5bd83ec19b2413228a3f3136d1b1b3bf314341b952e3e8a31e1f9894ede7a0e20e88eb35d7bd6a5dfd0c9d1d2ad59cb23c9a5aeca28526c24b9b78ca865e23b80a8cfe48ad1eb4072cc2cc58449edc8223e7f1a5a57966b06403382d9dee07731265a9f10b1ad97377a7dd802e84a067ba8b7f0771e9eee48ec72f2a71fd2bd78f1b4d5293593c2e116b00894238a5d99e75f50d6ad0b9bde439a6f3ffdab248bb97819e471c2569537e4b600b0cd640b9fa82582e2ab47df37d995fe3879b6cd4f83ae4e27e475dc26057988de78f526135a7c95bc96da1b1f56882e00d702ef8eebdfa53474d601c1e06fd4ee7924096f8915455ce52b61faaa643e1014751e4c5bf4f529342120b356acac04df2ebc98f6931fa3ac64f9684753b449402cf8b719f677dd0e88cf482908fc64002ebd72720df77fa04d081047ac7efd9039203677cd4d9715890eaddd983d6dc4642c414d28dbf936a804ef2b30a0d26199e099d8fd8ea3b17a038b0614f59bc6950028b990fac195601b832e2798b8da4ea8433279998e3e97e2473b15ed769abb70a54e59d4eb5d4cfe6f17dec9e76e00a9a8e7d454e58d921028f3298705e0c2001997bf268f3875a2e2adbeb6a061f581a7847920252b822d8f9b796d1c04d54dac1b31d14d168d57534bfe626229053414b5f107f29cc72679c77385c0a9da4658a9e20b861019ae99b2c54231124a2c5dc8af7f933d1f549577c71a39b616380ee3831d5955f4517d3ab1ebc5f0b6115b2177abef06391fb094cae81ae2ba457057217c41d4ef2c955810f6379729cfcde4f92f3ea4cc48d3af52240f72b04ff5ce0e98eb02045c2435adb80d308a11b03d56db2d2b6f4c0802885bbc1e64be14b56e1bcd2df36c0d0444e37f99f77d8edc170cc1776530d564f0c4e273fe085df1fca1fbea5341a9c3d37bcfb22b644099d93bc02bc0191b249c28a7bf803f18b3423beb5093d253abcd08678d11f86aa8a870c4167ff010cab0a700b6edae49a7fb97bf03647e907232993fd97dd702713467651ff794075bd021eccfc2fc83659c9e039e6b0ab0d8f76130e52593ce728e53cddcb551834fb3860f951dd9d4834b822aeb1c572e3b65ff83e07365cbbd31ab01df321a56e6c39064bb26d97bc7c72432c911487648b2dbbf1dd23931400c55e127d6a11d052d0f7f6ba09948e33a46045a06b6e337ed72487480fcabeac337cd0c22c7b2c0e1b2972bed1308435d0a779224d7835bc6d1abe9171bd81b2d4b1a45ed4b8515f0b8f3ae5769ff9cd396bd1e7f858881d3ee652ba434702b3f93b774f8f12f31f1414033de6ca17965c2726830bf345bd57e8a41902a180641e5ed55641ee8689168cefc8d3aa1fba37a062421f31e385369714f5f20d0b34189c646e5aba9a66fb933fb5a23156c562fc4a20e66bbd615c78fed696be467ba722ba5be83fdea5ffd5202f54f2b8d991d9c437f980f420663f80526c55e4db360bdad089bf2a79881f4693e1f70fd8e7eb18f268566454925b969ff3b8f6cdfb9c0f9ef9b0ff9de737599643ae3134b82760ac67063d2476e11b987fe51f852cd7323aeac2eaa5217285ebc8fe02f081c8dc15d9ff274bca7a34d4d38448fff4c00a0a1d56c5e43d1c4562e8772f9877f1009728293a61c38402d6e255ee8bc023b79574334daa5d351157ba9f28ec41aa5cbd11d36ccfa0e71ca559eaa084492fdd1a438c1cca7818cef0fb4ef76220f13d0b161232d5c10f2c67a0c16c90864e17b64f7580f0d35ed7f57bd12dd653d7419989f7f8d223f6b5f5faabcfe98164b94bb199b47fecd87102c821f2693a5d2bf78022fcaf2c78a63fb6ff7d3fe5d240c339052bfe9071ad5a3607d59e57274122b991e3530d85b72303090b564e38eb9232dd1467735e58c5682a11bfad3582c04a064075b1f68ab2d22ad7177196f2b6c49c0176846f33f935c71ad8a7db88f8adce794a9e6079bb4784d11ca09ebbfebb486c6051162da16c9000bb4220521f9182e1f29f2ef969f5fc78f5f7896f6aa8f87c0a58b93e0c6b708892eb06c42303a8b124cee47d2121794b5b69126c88383ee188f813a6eed6dd20712cc2512a93794889e436a940ad7c00cc14c55011c467713e65fbf5a206998fa5fb5836100ed792bed726191a3d7d842712cb26d1ac7c160de626349cc011422b10a7e7c53ff7560c6890f174a3498511c70fb36de506ac123b1c417aead6b9b5df48145ff41d8a6196a5679f68423bed3abc969cdd54f8dee64c3b5a555ace6d529959d1fdef3f70df7235ee83afa5b9e168906a0028ac404ad126dea58b0368f035ceeb36b8bc68b504c1a04f1aa251e382ab12b7d747016ae4f35bb3565cb908b8902455209dffbce7b6205a625efb5752be4bd0901fc929f9c43d172631301c5835d770e61df2eb7452bef18af6b56a1e40afe6ee4dd39654d0461f2369cd24462846875f89ac022de87a721edd143136cd6f81585d85a52a9992b7dc1577bd155c793afec835c367d2d8f7f52550c9b3edaa445c82f0f4e87dd3ba6569c6d16e8838a4194bb6f503cb8d8660958b5aeec22b515bc1cf243780ecc29baca603051bca7f18dc6d226884e23b56664003f7ff64d4750e5ec06d9ae37096188fc47c551f93d5261bd59b42350525434fd20ce50a6ab16f2b485174fd107619e0170d5f108dfcd7d9b8f111dcde23cae93a30f808f062b74cda625ff8a724b8f97824a464a49a2b55872208f764bfadabf2f34bc3016987115e14ad1f4a6c220b31d91209521006d0c0b4ac9767ef3da2c70e0efa73725ca1621f6d87860c639e90f316ed7d5f39ec33100f17caf140096ce045e38ff4c0dac32fcf540b72d9203484565ff1624afdb39f938e8f2fd10d002d800572b70921ee02733e49808811568dd6f153f68150d471099f4c06c1d3d83ef6c17686a144c99cf2a26ba6d2c14eac1955a499e5a606ce772e69c367c16c5316df31f1574169180a8b7bcafc629839070e3b6733e585d988d760f5bd2b5aeb4d029caae30c4209370247485054f7bad12401c0bed8bc3ac617479687e0efcb7a45173a0f13f5f96bfbb297d8aa324f90ed257bc44df24202c73ae212f3b60fc181b89c7912a1c37c5e51332c00454bc448b341da6783930330cef0260473c1441332ff5151a2e69252226b572ed896f945b22fdb12a623bfbda2295d46213b05cec5c561a3d1276bc36e27aa48c2fd049a032df37dc2795029b6696e3072f3cf26f0112c74f678dcabb5c060ed653604f1ec8fa9f59540c065c93f35f22f973dbce0a1c918a5a4b729c2b6d3e51900857e210033a471b21665c048bb03f81b1b9aad011f8ad09f602f0a7f3a25d6c9cc51defa261aa93bf00180a11bc51586e44b6abd5727cd02ad423dcabc8e99e323f21be761d9100e97be63dcd3ab43bae52380c38fe20f3d2788", @ANYRES16=0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0x14, &(0x7f0000000000)=0x930d, 0x4) r4 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'erspan0\x00'}) r5 = socket(0x10, 0x3, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r6}, 0x10) sendto$inet6(r5, &(0x7f0000000000)="7800000018002507b9409b14ffff00000204be04020506050e0204094300080004000000040011000d0068d0bf46d32345653600648d0a0012000200000049935ade4a460c89b6ec0cff3959547f509058ba86c902000000004a32000400160005000a0000000000e000e218d1ddf66ed538f25232500000", 0x78, 0x0, 0x0, 0x0) r7 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r7}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x0, 0x30100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) request_key(0x0, 0x0, &(0x7f0000000100)='\x00', 0xfffffffffffffffd) futex(0x0, 0xd, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) r8 = mq_open(&(0x7f0000000480)='\x00', 0x2, 0x180, &(0x7f00000004c0)={0x1000, 0x100000001, 0x8, 0x1}) mq_notify(r8, &(0x7f0000000500)={0x0, 0x1b, 0x0, @tid=r7}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000011c0)={&(0x7f0000000ec0)=ANY=[@ANYBLOB="9feb01001800000000000000380000003800000009000000060000000200000c03000000070000000000000e0300000000000000000000000200000d00000000000000000008000000000000020000000000000000005f"], 0x0, 0x59, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) 1.212067695s ago: executing program 2 (id=20764): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480), 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x2c, r4, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x2c}}, 0x20000840) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r6}, 0x10) r7 = socket(0x2, 0x80805, 0x0) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000140)={'ipvlan1\x00', &(0x7f00000000c0)=@ethtool_sset_info={0x37, 0x6, 0x8}}) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00'}, 0x10) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000010000000000"], 0x48) syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r9}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="440000001000090600"/20, @ANYRES32=0x0, @ANYBLOB="adffa888000000001c00128009000100626f6e64000000000c000280050001000600000008000a00"], 0x44}}, 0x0) 1.186623216s ago: executing program 6 (id=20767): prlimit64(0x0, 0xe, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x8, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r2}, 0x18) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}]}, 0x2c}}, 0x0) 1.068034005s ago: executing program 0 (id=20768): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r1}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0, 0x0, 0x8000000000000000}, 0x18) r2 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$tipc(r2, &(0x7f0000000900)={&(0x7f0000000180)=@name={0x1e, 0x2, 0x0, {{0x41}, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x44}, 0x8000) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000080)) ioctl$PPPIOCSMAXCID(r3, 0x40047451, &(0x7f0000002540)=0x1) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa1"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) close_range(r4, 0xffffffffffffffff, 0x0) 828.396154ms ago: executing program 2 (id=20769): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) creat(&(0x7f0000000040)='./file0\x00', 0x81) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000180)={[{@mpol={'mpol', 0x3d, {'interleave', '=relative', @void}}}]}) 768.003974ms ago: executing program 2 (id=20770): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', 0xffffffffffffffff, 0x0, 0x80000000000}, 0x18) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="4400000010000304000000000000000000000c00", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n'], 0x44}}, 0x4800) sendmmsg$inet6(r0, &(0x7f0000001800)=[{{&(0x7f0000000200)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'dummy0\x00'}) r2 = getpgrp(0xffffffffffffffff) fcntl$setown(r1, 0x8, r2) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000001c0)={'tunl0\x00', &(0x7f0000000580)={'erspan0\x00', 0x0, 0x20, 0x7800, 0x6, 0x401, {{0x3f, 0x4, 0x2, 0x1, 0xfc, 0x67, 0x0, 0x5, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x2e}, @rand_addr=0x64010100, {[@lsrr={0x83, 0x2b, 0x64, [@loopback, @remote, @dev={0xac, 0x14, 0x14, 0x38}, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x3c}, @empty, @local, @multicast1, @broadcast, @remote]}, @cipso={0x86, 0x20, 0x1, [{0x2, 0x9, "290d2a93bd2ac8"}, {0x7, 0x7, "e0cbca4415"}, {0x6, 0xa, "4dac9b6b08afda46"}]}, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x14, 0xda, 0x0, 0x0, [0xfffffff5, 0x10, 0x100, 0x80000000]}, @noop, @ra={0x94, 0x4, 0x1}, @generic={0x94, 0x12, "14621d602ea4e16c58c0f988a28d5569"}, @cipso={0x86, 0x4c, 0x3, [{0x7, 0x2}, {0x0, 0x3, "da"}, {0x0, 0xb, "5f708eec1fa460d49d"}, {0x6, 0x7, "0f1583a8a4"}, {0x6, 0x9, "e14c62667104dd"}, {0x0, 0x12, "d2cf32e47832f1f4645dd0772cec147d"}, {0x2, 0x4, "803f"}, {0x5, 0x10, "548f90001a844773672e4dd54f43"}]}, @cipso={0x86, 0x22, 0x1, [{0x1, 0xd, "26366911a140c5ea082b04"}, {0x5, 0x3, '['}, {0x1, 0xc, "8ffe9f564073f241342f"}]}]}}}}}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000980)={&(0x7f0000000900)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x5, [@const={0xe}, @func={0xa, 0x0, 0x0, 0xc, 0x1}, @ptr={0xf, 0x0, 0x0, 0x2, 0x4}, @decl_tag={0x10, 0x0, 0x0, 0x11, 0x4, 0x2}, @volatile={0x11}]}, {0x0, [0x2e, 0x30, 0x30]}}, &(0x7f0000002ec0)=""/4097, 0x5d, 0x1001, 0x0, 0xa8cb413, 0x0, @void, @value}, 0x28) socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000009c0)=[@in6={0xa, 0x4e23, 0x8, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1c}]}, &(0x7f0000000180)=0x10) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000001580)={r4, @in={{0x2, 0x0, @private=0xa010101}}}, &(0x7f0000000540)=0x9c) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) ioctl$int_in(r5, 0x5452, &(0x7f00000002c0)=0x1) recvmsg(r5, &(0x7f00000008c0)={0x0, 0x4, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/48, 0x1b}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/124, 0x79}, {&(0x7f0000000400)=""/168, 0xb7}], 0x6, 0x0, 0x0, 0xb7}, 0x40000110) 759.861014ms ago: executing program 6 (id=20771): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) syz_clone3(&(0x7f00000004c0)={0x10000000, &(0x7f0000000080), &(0x7f0000000180), &(0x7f00000001c0), {0x8}, &(0x7f0000000200)=""/52, 0x34, &(0x7f0000000280)=""/14, &(0x7f00000002c0)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x7, {r0}}, 0x58) prlimit64(0x0, 0x7, &(0x7f0000000380)={0x5, 0x5}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000008c0)='sys_enter\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x18) 710.715524ms ago: executing program 0 (id=20772): ioctl$SG_BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000300)={'\x00', 0x41, 0x1ad8, 0x0, 0x101, 0x1}) sendmsg$NFT_MSG_GETOBJ(0xffffffffffffffff, 0x0, 0x4044000) fcntl$notify(0xffffffffffffffff, 0x402, 0x29) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_setup(0x145c, &(0x7f0000000500)={0x0, 0xa48d, 0x4, 0x2000, 0xfffffff9}, &(0x7f0000000240), &(0x7f00000003c0)) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) io_uring_setup(0xc90, &(0x7f0000000080)) r0 = io_uring_setup(0x51c6, &(0x7f0000000000)={0x0, 0xef3f, 0x20, 0x80000003, 0x7e}) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x140f, 0x1, 0x70bd29, 0x25dfdbfd}, 0x10}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) io_uring_register$IORING_REGISTER_BUFFERS2(r0, 0x14, &(0x7f0000003480)={0x0, 0x0, 0x4, &(0x7f00000001c0), 0x0}, 0x20) io_uring_enter(r0, 0x0, 0x0, 0x1f, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000380)='./file0\x00', 0x800004, &(0x7f0000002080), 0x1, 0x586, &(0x7f0000000f80)="$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") bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x2, &(0x7f0000000440)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents64(r3, &(0x7f00000000c0)=""/44, 0x2c) 648.505823ms ago: executing program 6 (id=20773): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b7030000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents64(r1, &(0x7f00000000c0)=""/44, 0x2c) 628.715343ms ago: executing program 2 (id=20774): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, 0x0}, 0x0) 475.281572ms ago: executing program 6 (id=20775): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000540)='net_dev_xmit\x00', r1, 0x0, 0x1}, 0x18) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x14}}, 0x0) 474.469092ms ago: executing program 3 (id=20776): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000004940)=@base={0xb, 0x5, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kfree\x00', r2, 0x0, 0x8000000000000000}, 0x18) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a300000000058000000030a01040000000000000000010000000900030073797a300000000028000480080002400000000008000140000000051400030076657468315f746f5f626174616476000900010073797a30000000000400088014"], 0xa0}, 0x1, 0x0, 0x0, 0x10}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) shmctl$IPC_INFO(0x0, 0x3, 0x0) 421.455062ms ago: executing program 2 (id=20777): r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) fcntl$notify(r0, 0x402, 0x29) r1 = syz_open_procfs(0x0, &(0x7f0000000400)='stack\x00') pread64(r1, &(0x7f000001a240)=""/102386, 0x18ff2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b7030000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents64(r3, &(0x7f00000000c0)=""/44, 0x2c) 414.543782ms ago: executing program 2 (id=20778): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r0}, 0x18) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da07000000000001090224"], 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 253.802431ms ago: executing program 0 (id=20779): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a300000000058000000030a0104000000000000000001"], 0xa0}, 0x1, 0x0, 0x0, 0x10}, 0x0) 215.470151ms ago: executing program 3 (id=20780): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) creat(&(0x7f0000000040)='./file0\x00', 0x81) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000180)={[{@mpol={'mpol', 0x3d, {'interleave', '=relative', @void}}}]}) 214.992451ms ago: executing program 6 (id=20781): prlimit64(0x0, 0xe, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x8, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r2}, 0x18) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}]}, 0x2c}}, 0x0) 201.581791ms ago: executing program 0 (id=20782): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b70300000000000085000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents64(r1, &(0x7f00000000c0)=""/44, 0x2c) 179.256271ms ago: executing program 3 (id=20783): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18030000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/locks\x00', 0x0, 0x0) preadv(r1, &(0x7f0000004ec0)=[{&(0x7f0000004bc0)=""/68, 0x44}], 0x1, 0x4bd, 0x8) r2 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setsig(r2, 0xa, 0x13) fcntl$setlease(r2, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) fcntl$setlease(r2, 0x400, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setpgid(0x0, 0x0) 128.445871ms ago: executing program 0 (id=20784): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000380)={0x5, 0x5}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000008c0)='sys_enter\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x18) 127.587841ms ago: executing program 0 (id=20785): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000080000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000400), 0xffffffffffffffff) syz_open_dev$usbmon(0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r3}, 0x18) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x20000010}, 0x4) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000020c0)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x91ee, 0x9, 0x10000000, 0x1, 0x7}, 0x9, 0x8}, [{0xd6c, 0x9, 0x8, 0xff, 0x10001, 0x9}, {0x7f, 0xffff, 0x6, 0x7fffffff, 0x1, 0x7}, {0x6, 0xb37b, 0x6, 0xb38, 0x0, 0xd0cb}, {0x4, 0x3, 0x2, 0xa318, 0x80000000, 0x1}, {0x9, 0xfffffff9, 0x2, 0x4, 0x6, 0x4}, {0x8000, 0xffffffff, 0xe, 0x4, 0xcee8000, 0x1}, {0x9, 0x8, 0xfffffffa, 0x6, 0xa0fd, 0x8}, {0xffffffff, 0xe648, 0x7c0c3ffe, 0x8, 0x0, 0x5}, {0x3, 0x3, 0x9, 0xa}, {0x9, 0x6, 0xb6, 0x7fff, 0x5, 0x7}, {0x304, 0x66, 0x3, 0x101, 0x3, 0x9}, {0xff, 0x1, 0xe, 0x800, 0x3, 0x56}, {0xca, 0x4, 0x9, 0xfffffff8, 0x7, 0x7921bcf1}, {0x1, 0xff, 0x5, 0x80000000, 0xaae6, 0x9}, {0x4, 0x3, 0xa9, 0x8, 0x9, 0x4}, {0x5, 0x1000, 0x200, 0x2, 0x8, 0x6}, {0x3d648283, 0x2, 0x5, 0x9, 0x10000, 0x6}, {0x3, 0xa06, 0x1, 0x1, 0x9, 0x260ba674}, {0x6, 0xc5, 0x8d3, 0x9, 0x3, 0xffffffbc}, {0x3, 0x8, 0x3, 0x5, 0x0, 0xc80}, {0x3, 0xffffffff, 0xffff, 0x2, 0x9}, {0xfffffffa, 0x6, 0x77f, 0x160c, 0x3}, {0x1ff, 0x8, 0x0, 0x6, 0xb, 0x400}, {0x3ff, 0x9, 0xffff8001, 0x100, 0x3, 0x47}, {0x529, 0x4, 0x7, 0xffff, 0xc0a, 0xbad}, {0x8, 0x7, 0x884, 0x100, 0x9}, {0x8, 0x6, 0x6, 0xc, 0x3}, {0x4, 0x40, 0xcd6c, 0x71f, 0x8000, 0x6}, {0x5, 0x30a3, 0xa, 0x200, 0xfff, 0x9}, {0x3, 0x1, 0x5, 0x8, 0x2, 0x81}, {0x81, 0x0, 0x0, 0x49f11005, 0x9, 0x7fffffff}, {0x9, 0x0, 0x5c, 0x3bad, 0x8, 0x480}, {0xe, 0x58000000, 0x9, 0x3, 0x1ff, 0xaa2}, {0x800, 0xd1, 0x0, 0x3e, 0x0, 0x5}, {0x8, 0x0, 0x200, 0xfffffc00, 0x100, 0x10001}, {0x6, 0x7, 0x0, 0x101, 0x6, 0x81}, {0x8, 0x2, 0x200, 0x3, 0x4, 0x101}, {0xad, 0xa, 0x401, 0x0, 0x9, 0xff000000}, {0x8, 0x5, 0xd, 0x24, 0xc, 0x1}, {0xfffffff8, 0x9, 0x1000, 0xc, 0xea, 0x4}, {0x3, 0x0, 0x8, 0x1, 0x1, 0xffffff32}, {0x6, 0x5, 0xd7c9, 0x0, 0x5, 0x2}, {0xffff, 0x1, 0x5, 0x2, 0x7, 0x7}, {0x5, 0x2, 0x0, 0x401, 0x6, 0x1}, {0x3, 0x2, 0x4, 0x6, 0xfffffff8, 0x5}, {0x6, 0x0, 0x3, 0x5, 0x0, 0xffff8000}, {0x1, 0x0, 0x0, 0x9, 0x0, 0x4}, {0x2, 0x6, 0x2, 0x7, 0x9}, {0x0, 0xfffffffd, 0x756183d, 0xfffff801, 0x5, 0x8}, {0x7, 0xa, 0xfffffffc, 0x80000001, 0x407b, 0x2}, {0x7, 0x9, 0xee, 0x800, 0x1000}, {0x10, 0x5, 0x57a2a808, 0x80000000, 0x7fff, 0x5}, {0x729, 0x25, 0x6, 0x6, 0x8, 0x4}, {0x2, 0x406, 0xc209, 0x8, 0x0, 0xfffffffc}, {0x1, 0x7, 0x8, 0xfffffffb, 0x80000000, 0x4}, {0x1, 0x5, 0x8, 0x8000, 0x1, 0x7f}, {0x8001, 0xf42, 0x1, 0x3, 0x5, 0x430}, {0x2, 0xfffffff4, 0x5, 0xf, 0xc8, 0x7}, {0x6, 0x7, 0x9, 0x8, 0x5, 0x5}, {0x5, 0x8000000, 0x7, 0x5, 0x401, 0x9}, {0x1, 0x6, 0x1ff, 0xa8de, 0x0, 0x807b}, {0x0, 0x80000000, 0x7fff, 0x5, 0x2, 0x7}, {0xe, 0xfffffffc, 0x7fffffff, 0x7, 0x5, 0x1ff}, {0x81, 0xaa, 0x1e, 0x9, 0x14fc, 0x8}, {0x9, 0xffffffff, 0x40, 0x6, 0x13b, 0xeacd}, {0x100020, 0xff, 0x6, 0x81, 0x0, 0x6}, {0x2, 0xe, 0xb, 0x0, 0x6, 0x2}, {0x8, 0x3, 0x5, 0x4, 0x4, 0x2}, {0x84, 0x3ff, 0x3d0c, 0x1, 0x8, 0x2}, {0x4, 0x4, 0xb85c, 0x1, 0x3, 0x6}, {0x3, 0xc6, 0x0, 0x1, 0x2, 0x3}, {0x7, 0x2, 0x8000, 0x2, 0x7fffffff, 0x79}, {0x6, 0x80000000, 0xfffffffe, 0x7, 0x3, 0x8}, {0xae, 0x3, 0x600, 0x9, 0xff, 0x3}, {0x1, 0xed5, 0x6de6, 0x10, 0x380000, 0x789}, {0x4, 0x7074, 0x32b, 0x3, 0xf}, {0x1ff, 0x7, 0x1, 0x96, 0x1, 0xc}, {0x9, 0x3, 0x0, 0xfff, 0x1ff, 0x8}, {0x1, 0x7d, 0x8, 0x7, 0x2, 0x3}, {0xfffff001, 0x9, 0x65d, 0x3c10, 0x7, 0x53}, {0x7, 0x0, 0x7, 0x101, 0x9, 0x1}, {0x7, 0x9, 0xd, 0x6, 0xfffffff7, 0x827}, {0x113, 0xfffffffe, 0x2, 0x400, 0x28, 0x81}, {0xfff, 0x6, 0x7, 0x40, 0x6, 0x10}, {0xc, 0x9, 0x8001, 0x0, 0x9, 0x6}, {0x5, 0x11b9, 0x401, 0x4, 0x2, 0x6}, {0x9, 0x100, 0x400, 0x9497, 0x101, 0x84b7}, {0xb4, 0xb85, 0x7, 0x3, 0x51, 0x5}, {0x2, 0x4, 0x5, 0xf, 0xf, 0x1283}, {0xfffffff8, 0x1c0000, 0x2, 0x10001, 0x1, 0x6}, {0x61, 0x80, 0xffffffff, 0x10000, 0x5, 0x8}, {0x8, 0x6, 0xc53, 0x80000000, 0x7, 0x5}, {0x0, 0x6, 0x5, 0x2, 0xdc, 0x6}, {0x0, 0xfffffffc, 0x101, 0x6cb685f2, 0x7, 0x1}, {0x0, 0xc3, 0x4, 0x5, 0x0, 0x9}, {0x8, 0xf7b5, 0x5, 0x5, 0x9, 0x7}, {0x1, 0x67f, 0x5689f935, 0x8, 0x6db, 0xff}, {0x1, 0x400, 0x3, 0x1e1, 0xa, 0x80000000}, {0xea, 0x5, 0x8, 0x5, 0x7fff, 0x1000}, {0x6, 0x5, 0x7, 0x3, 0x6, 0x80000000}, {0x9, 0x6, 0x7, 0x1, 0x9, 0x100}, {0x7202, 0x4, 0x5024, 0xf9, 0x6, 0x40}, {0x5, 0x10, 0x4, 0x5, 0xd, 0x8}, {0x1537, 0x101, 0x4000006, 0x1, 0x3, 0x6b}, {0x69, 0x400, 0x3, 0x81, 0xc6, 0x7fff}, {0x10001, 0x1, 0x3, 0x7fffffff, 0x7, 0x10001}, {0xcdc, 0x1, 0x7, 0x0, 0x8}, {0x1, 0x168dccf, 0x3, 0x3, 0x7fff, 0x6}, {0x3, 0x4, 0x7fff, 0x7, 0xaf68, 0x403}, {0x9, 0x0, 0x7, 0x6, 0x6, 0x80000001}, {0x5, 0x200, 0x800, 0xd00000, 0x3, 0x8}, {0x8001, 0x5d, 0xffffffff, 0x42e, 0x8, 0x55}, {0x1970, 0x89, 0x6d, 0x460ebb44, 0x2, 0x2}, {0x951, 0x9, 0x3, 0x8, 0x1, 0x2}, {0x3, 0x8, 0x627b, 0x5, 0x6, 0x5}, {0x6, 0x3, 0x9fbc, 0x4, 0x1, 0x2}, {0x401, 0x6, 0x32d84255, 0xfa, 0x27f, 0x8000}, {0x0, 0x9, 0x3, 0xc, 0x8000, 0x40}, {0x5, 0x4, 0x1, 0x3, 0x0, 0x5}, {0x7f, 0x4, 0x7f, 0x10001, 0xff, 0x8}, {0x7, 0x96a3, 0x2, 0xd7, 0x6, 0x200}, {0x1, 0x5, 0x5, 0x37a3, 0x7, 0x8}, {0x81, 0x4, 0xd, 0xffffffff, 0x200, 0x4}, {0x4, 0x3ff, 0x7, 0x4, 0x4, 0x4}, {0x1, 0xffffffa4, 0x9, 0x2, 0x3}, {0xd, 0x0, 0x3ff, 0x9, 0x8, 0x48}, {0x2, 0x10001, 0x9, 0x2, 0x8, 0x9}, {0xf, 0x1, 0x8, 0x101, 0xfffffffd, 0xc88}], [{}, {0x5}, {0x0, 0x1}, {0x1}, {0x4}, {0x2, 0x1}, {0x3}, {}, {0x5}, {0x3}, {0x2}, {0x3, 0x1}, {0x3, 0x1}, {0x2}, {0x8cd778652b20be70, 0x1}, {0x1, 0x1}, {0x1}, {0x2}, {0x4}, {0x1, 0x1}, {0x5, 0x3}, {0x2, 0x1}, {0x2}, {0x0, 0x1}, {}, {0x4, 0x1}, {0x6}, {0x4}, {0x4, 0x1}, {0x4}, {0xa4f33433e7b7e23d, 0x1}, {0x4}, {0x0, 0x1}, {0x6}, {0x2, 0xa5b0c5c50171756a}, {0x5}, {}, {0x4}, {0x4, 0x1}, {0x3}, {0x5, 0x1}, {0x2, 0x1}, {0x4}, {0x4}, {0x5, 0x1}, {0x1}, {0x2}, {0x3, 0x1}, {0x4}, {0x5}, {0x1, 0x1}, {0x5}, {0x2}, {0x1, 0x1}, {0x6}, {0x1}, {0x5, 0x1}, {0x5}, {0x2}, {}, {0x0, 0x1}, {0x3}, {0x5}, {0x5, 0x1}, {0x5}, {0x4, 0x1}, {0x2, 0x1}, {0x1}, {0x0, 0x1}, {0x2}, {0x5, 0x1}, {0x2}, {0x5}, {0x0, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x1}, {0x5}, {0x4}, {0x5, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {}, {0x3, 0x1}, {0x1}, {0x1}, {0x3}, {0x3, 0x1}, {0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x3}, {0x5, 0x1}, {}, {0x3, 0x1}, {0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x3}, {0x1}, {0x1, 0x1}, {0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x3}, {0x3, 0x1}, {0x3}, {0x4}, {0x0, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x5}, {0x3, 0x1}, {0x2}, {0x4, 0x1}], 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) socket$packet(0x11, 0xa, 0x300) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x11, 0x4, &(0x7f0000001180)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000010100)={&(0x7f00000100c0)='kmem_cache_free\x00', r6}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) listen(r2, 0x3) r7 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r7, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r8}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x4, 0x5, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="440000001000090600"/20, @ANYRES32=0x0, @ANYBLOB="adffa888000000001c00128009000100626f6e64000000000c000280050001000600000008000a"], 0x44}}, 0x0) 58.35297ms ago: executing program 3 (id=20786): openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000), 0x220000, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x16, 0xc, &(0x7f00000002c0)=ANY=[@ANYRESDEC=r1], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events.local\x00', 0x275a, 0x0) r3 = creat(&(0x7f0000000500)='\x00', 0x0) fallocate(r3, 0x0, 0xfffffffffffffff8, 0x3) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) r4 = gettid() process_vm_writev(r4, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) syz_io_uring_setup(0x2c0c, &(0x7f0000000400)={0x0, 0x0, 0x4002}, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000002346e20000000000030000850000007b000000496c714e0ecb289cd573c99708a814952d6d32b28066992632e3bed66a462e602bed22313d"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x58, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r5, 0x0, &(0x7f0000000380)=""/53}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe6, 0x0) 0s ago: executing program 6 (id=20787): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, &(0x7f0000000040)}) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18030000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/locks\x00', 0x0, 0x0) preadv(r1, &(0x7f0000004ec0)=[{&(0x7f0000004bc0)=""/68, 0x44}], 0x1, 0x4bd, 0x8) r2 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setsig(r2, 0xa, 0x13) fcntl$setlease(r2, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) fcntl$setlease(r2, 0x400, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setpgid(0x0, 0x0) kernel console output (not intermixed with test programs): (i_pos 1046) [ 1128.959609][T25627] FAT-fs (loop0): Filesystem has been set read-only [ 1128.969645][T25627] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 1128.981720][T19522] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1128.995990][T25627] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 1129.005563][T25627] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 1129.017996][T25627] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 1129.099936][T25640] loop7: detected capacity change from 0 to 128 [ 1129.187508][T25640] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1129.223945][T25645] loop0: detected capacity change from 0 to 128 [ 1129.258827][T25645] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1129.513006][T18287] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1129.706779][T25655] loop6: detected capacity change from 0 to 128 [ 1129.726985][T20095] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1129.789889][T25655] syz.6.19953: attempt to access beyond end of device [ 1129.789889][T25655] loop6: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 1129.816708][T25657] netlink: 24 bytes leftover after parsing attributes in process `syz.3.19947'. [ 1129.844518][T25660] netlink: 24 bytes leftover after parsing attributes in process `syz.0.19950'. [ 1129.853801][T25655] netlink: 8 bytes leftover after parsing attributes in process `syz.6.19953'. [ 1129.882187][T25660] loop0: detected capacity change from 0 to 1024 [ 1129.887255][T25657] loop3: detected capacity change from 0 to 1024 [ 1129.968342][T25660] EXT4-fs warning (device loop0): ext4_enable_quotas:7156: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 1130.002036][T25660] EXT4-fs (loop0): mount failed [ 1130.057280][T25671] loop0: detected capacity change from 0 to 128 [ 1130.077659][T25674] loop6: detected capacity change from 0 to 128 [ 1130.086571][T25671] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1130.100029][T25674] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1130.195073][T24350] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1130.216250][T18287] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1130.259491][T25683] loop0: detected capacity change from 0 to 128 [ 1130.302045][T25683] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1130.316218][T25680] netlink: 16 bytes leftover after parsing attributes in process `syz.3.19962'. [ 1130.411817][T18287] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1130.585728][T25700] netlink: 'syz.6.19966': attribute type 11 has an invalid length. [ 1130.650057][T25700] tipc: Failed to obtain node identity [ 1130.655634][T25700] tipc: Enabling of bearer rejected, failed to enable media [ 1131.040769][T25715] loop0: detected capacity change from 0 to 128 [ 1131.072264][T25715] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1131.084639][T25714] loop6: detected capacity change from 0 to 2048 [ 1131.129209][T25714] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1131.161489][T25723] loop7: detected capacity change from 0 to 128 [ 1131.198583][T25723] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1131.282537][T25726] loop3: detected capacity change from 0 to 2048 [ 1131.296768][T18287] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1131.333014][T24350] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1131.346678][T25726] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1131.389310][T25726] netlink: 4 bytes leftover after parsing attributes in process `syz.3.19974'. [ 1131.422179][T20095] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1131.427474][T25732] loop6: detected capacity change from 0 to 1024 [ 1131.432273][T25730] loop0: detected capacity change from 0 to 2048 [ 1131.482094][T25734] loop7: detected capacity change from 0 to 1024 [ 1131.504328][T25730] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1131.520979][T19522] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1131.525088][T25734] EXT4-fs warning (device loop7): ext4_enable_quotas:7156: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 1131.533559][T25730] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 18 with error 28 [ 1131.546174][T25734] EXT4-fs (loop7): mount failed [ 1131.557146][T25730] EXT4-fs (loop0): This should not happen!! Data will be lost [ 1131.557146][T25730] [ 1131.571929][T25730] EXT4-fs (loop0): Total free blocks count 0 [ 1131.577968][T25730] EXT4-fs (loop0): Free/Dirty block details [ 1131.584063][T25730] EXT4-fs (loop0): free_blocks=0 [ 1131.589075][T25730] EXT4-fs (loop0): dirty_blocks=0 [ 1131.594205][T25730] EXT4-fs (loop0): Block reservation details [ 1131.600307][T25730] EXT4-fs (loop0): i_reserved_data_blocks=0 [ 1131.668687][T18287] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1132.163548][ T29] kauditd_printk_skb: 967 callbacks suppressed [ 1132.163566][ T29] audit: type=1326 audit(1090.478:156321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25733 comm="syz.7.19977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1670d75d29 code=0x7ffc0000 [ 1132.214348][ T29] audit: type=1326 audit(1090.525:156322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25733 comm="syz.7.19977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1670d75d29 code=0x7ffc0000 [ 1132.237651][ T29] audit: type=1326 audit(1090.525:156323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25733 comm="syz.7.19977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1670d75d29 code=0x7ffc0000 [ 1132.261465][ T29] audit: type=1326 audit(1090.544:156324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25733 comm="syz.7.19977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1670d75d29 code=0x7ffc0000 [ 1132.284796][ T29] audit: type=1326 audit(1090.544:156325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25733 comm="syz.7.19977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1670d75d29 code=0x7ffc0000 [ 1132.308314][ T29] audit: type=1326 audit(1090.544:156326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25733 comm="syz.7.19977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1670d75d29 code=0x7ffc0000 [ 1132.506508][T25755] __nla_validate_parse: 2 callbacks suppressed [ 1132.506539][T25755] netlink: 24 bytes leftover after parsing attributes in process `syz.7.19984'. [ 1132.526045][ T29] audit: type=1326 audit(1090.815:156327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25754 comm="syz.7.19984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1670d75d29 code=0x7ffc0000 [ 1132.549624][ T29] audit: type=1326 audit(1090.815:156328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25754 comm="syz.7.19984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1670d75d29 code=0x7ffc0000 [ 1132.550366][T25755] loop7: detected capacity change from 0 to 1024 [ 1132.573114][ T29] audit: type=1326 audit(1090.815:156329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25754 comm="syz.7.19984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f1670d75d29 code=0x7ffc0000 [ 1132.602867][ T29] audit: type=1326 audit(1090.815:156330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25754 comm="syz.7.19984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1670d75d29 code=0x7ffc0000 [ 1132.603324][T25755] EXT4-fs warning (device loop7): ext4_enable_quotas:7156: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 1132.642244][T25755] EXT4-fs (loop7): mount failed [ 1132.762558][T25762] loop7: detected capacity change from 0 to 128 [ 1132.796757][T25762] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1132.906110][T20095] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1133.004851][T25772] loop7: detected capacity change from 0 to 2048 [ 1133.025572][T25772] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1133.043882][T25772] netlink: 4 bytes leftover after parsing attributes in process `syz.7.19990'. [ 1133.129905][T25777] netlink: 24 bytes leftover after parsing attributes in process `syz.3.19989'. [ 1133.154014][T25777] loop3: detected capacity change from 0 to 1024 [ 1133.176197][T20095] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1133.903399][T25804] loop3: detected capacity change from 0 to 2048 [ 1133.970193][T25804] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1134.128225][T19522] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1134.139425][T25791] bond10: entered promiscuous mode [ 1134.144611][T25791] bond10: entered allmulticast mode [ 1134.151572][T25791] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1134.199715][T25826] netlink: 24 bytes leftover after parsing attributes in process `syz.3.20011'. [ 1134.220857][T25826] loop3: detected capacity change from 0 to 1024 [ 1134.223660][T25827] loop6: detected capacity change from 0 to 128 [ 1134.266186][T25826] EXT4-fs warning (device loop3): ext4_enable_quotas:7156: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 1134.277401][T25835] netlink: 24 bytes leftover after parsing attributes in process `syz.7.20015'. [ 1134.287368][T25827] syz.6.20012: attempt to access beyond end of device [ 1134.287368][T25827] loop6: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 1134.305103][T25826] EXT4-fs (loop3): mount failed [ 1134.305178][T25835] loop7: detected capacity change from 0 to 1024 [ 1134.323877][T25835] EXT4-fs warning (device loop7): ext4_enable_quotas:7156: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 1134.327739][T25827] netlink: 8 bytes leftover after parsing attributes in process `syz.6.20012'. [ 1134.341743][T25835] EXT4-fs (loop7): mount failed [ 1134.489814][T25851] loop7: detected capacity change from 0 to 2048 [ 1134.512197][T25851] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1134.547841][T20095] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1134.774206][T25868] netlink: 'syz.7.20027': attribute type 11 has an invalid length. [ 1134.838576][T25868] tipc: Failed to obtain node identity [ 1134.844188][T25868] tipc: Enabling of bearer rejected, failed to enable media [ 1135.086004][T25881] loop0: detected capacity change from 0 to 2048 [ 1135.131951][T25881] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1135.218594][T25881] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 18 with error 28 [ 1135.231047][T25881] EXT4-fs (loop0): This should not happen!! Data will be lost [ 1135.231047][T25881] [ 1135.240784][T25881] EXT4-fs (loop0): Total free blocks count 0 [ 1135.246841][T25881] EXT4-fs (loop0): Free/Dirty block details [ 1135.252770][T25881] EXT4-fs (loop0): free_blocks=0 [ 1135.257761][T25881] EXT4-fs (loop0): dirty_blocks=0 [ 1135.262837][T25881] EXT4-fs (loop0): Block reservation details [ 1135.268882][T25881] EXT4-fs (loop0): i_reserved_data_blocks=0 [ 1135.364788][T25900] loop3: detected capacity change from 0 to 2048 [ 1135.366050][T18287] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1135.417857][T25900] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1135.456776][T25911] netlink: 24 bytes leftover after parsing attributes in process `syz.6.20042'. [ 1135.568043][T19522] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1136.121640][T25930] ªªªªªª: renamed from vlan0 (while UP) [ 1136.243136][T25934] loop7: detected capacity change from 0 to 2048 [ 1136.286256][T25934] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1136.356017][T20095] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1136.815908][T25945] loop6: detected capacity change from 0 to 2048 [ 1136.897540][T25952] loop2: detected capacity change from 0 to 512 [ 1136.915288][T25945] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1136.967232][T25952] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1137.017013][T25952] EXT4-fs error (device loop2): ext4_orphan_get:1389: inode #15: comm syz.2.20057: iget: bad extended attribute block 512 [ 1137.095787][T25952] EXT4-fs error (device loop2): ext4_orphan_get:1394: comm syz.2.20057: couldn't read orphan inode 15 (err -117) [ 1137.135578][T25952] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1137.205065][T24350] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1137.223533][T25967] netlink: 24 bytes leftover after parsing attributes in process `syz.7.20062'. [ 1137.297662][T25970] loop7: detected capacity change from 0 to 2048 [ 1137.327564][T25973] loop0: detected capacity change from 0 to 2048 [ 1137.348474][T25973] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1137.351870][T25970] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1137.375861][T18287] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1137.384304][T25979] loop6: detected capacity change from 0 to 128 [ 1137.406049][T25970] netlink: 4 bytes leftover after parsing attributes in process `syz.7.20065'. [ 1137.444906][T25979] syz.6.20066: attempt to access beyond end of device [ 1137.444906][T25979] loop6: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 1137.462651][T25979] netlink: 8 bytes leftover after parsing attributes in process `syz.6.20066'. [ 1137.519137][T25982] lo speed is unknown, defaulting to 1000 [ 1137.575680][T25982] lo speed is unknown, defaulting to 1000 [ 1137.586944][T25982] lo speed is unknown, defaulting to 1000 [ 1137.597598][T25982] lo speed is unknown, defaulting to 1000 [ 1137.640411][T20095] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1137.688574][T25989] loop7: detected capacity change from 0 to 512 [ 1137.699604][T25989] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 1137.716260][T25989] EXT4-fs error (device loop7): ext4_orphan_get:1389: inode #15: comm syz.7.20068: iget: bad extended attribute block 512 [ 1137.737615][T25989] EXT4-fs error (device loop7): ext4_orphan_get:1394: comm syz.7.20068: couldn't read orphan inode 15 (err -117) [ 1138.122084][T26003] __nla_validate_parse: 1 callbacks suppressed [ 1138.122106][T26003] netlink: 12 bytes leftover after parsing attributes in process `syz.7.20068'. [ 1138.430104][T26006] loop0: detected capacity change from 0 to 2048 [ 1138.689863][ T29] kauditd_printk_skb: 645 callbacks suppressed [ 1138.689879][ T29] audit: type=1326 audit(1096.580:156976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26009 comm="syz.3.20074" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fad75815d29 code=0x0 [ 1138.793952][ T29] audit: type=1326 audit(1096.655:156977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26015 comm="syz.0.20076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51502e5d29 code=0x7ffc0000 [ 1138.817315][ T29] audit: type=1326 audit(1096.655:156978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26015 comm="syz.0.20076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51502e5d29 code=0x7ffc0000 [ 1138.854527][T26019] netlink: 24 bytes leftover after parsing attributes in process `syz.6.20077'. [ 1138.954222][ T29] audit: type=1326 audit(1096.730:156979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26015 comm="syz.0.20076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f51502e5d29 code=0x7ffc0000 [ 1138.977651][ T29] audit: type=1326 audit(1096.730:156980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26015 comm="syz.0.20076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51502e5d29 code=0x7ffc0000 [ 1139.001006][ T29] audit: type=1326 audit(1096.730:156981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26015 comm="syz.0.20076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51502e5d29 code=0x7ffc0000 [ 1139.024359][ T29] audit: type=1326 audit(1096.730:156982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26015 comm="syz.0.20076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f51502e5d29 code=0x7ffc0000 [ 1139.047963][ T29] audit: type=1326 audit(1096.730:156983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26015 comm="syz.0.20076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51502e5d29 code=0x7ffc0000 [ 1139.071304][ T29] audit: type=1326 audit(1096.730:156984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26015 comm="syz.0.20076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f51502e5d29 code=0x7ffc0000 [ 1139.094694][ T29] audit: type=1326 audit(1096.730:156985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26015 comm="syz.0.20076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51502e5d29 code=0x7ffc0000 [ 1139.366135][T26025] netlink: 24 bytes leftover after parsing attributes in process `syz.6.20079'. [ 1139.419484][T26027] netlink: 'syz.2.20080': attribute type 11 has an invalid length. [ 1139.430292][T26025] loop6: detected capacity change from 0 to 1024 [ 1139.462905][T26027] tipc: Enabling of bearer rejected, failed to enable media [ 1139.585065][T26025] EXT4-fs warning (device loop6): ext4_enable_quotas:7156: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 1139.601025][T26025] EXT4-fs (loop6): mount failed [ 1139.729004][T26044] loop6: detected capacity change from 0 to 2048 [ 1139.751259][T26046] loop7: detected capacity change from 0 to 128 [ 1139.808081][T26051] netlink: 24 bytes leftover after parsing attributes in process `syz.7.20088'. [ 1140.324953][T26061] netlink: 12 bytes leftover after parsing attributes in process `syz.6.20090'. [ 1140.382536][T26063] loop7: detected capacity change from 0 to 2048 [ 1140.488048][T26063] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 18 with error 28 [ 1140.500545][T26063] EXT4-fs (loop7): This should not happen!! Data will be lost [ 1140.500545][T26063] [ 1140.510504][T26063] EXT4-fs (loop7): Total free blocks count 0 [ 1140.516529][T26063] EXT4-fs (loop7): Free/Dirty block details [ 1140.522474][T26063] EXT4-fs (loop7): free_blocks=0 [ 1140.527448][T26063] EXT4-fs (loop7): dirty_blocks=0 [ 1140.532513][T26063] EXT4-fs (loop7): Block reservation details [ 1140.538527][T26063] EXT4-fs (loop7): i_reserved_data_blocks=0 [ 1140.573543][T26068] netlink: 'syz.2.20092': attribute type 11 has an invalid length. [ 1140.622112][T26068] tipc: Enabling of bearer rejected, failed to enable media [ 1140.685469][T26063] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28 [ 1140.697917][T26063] EXT4-fs (loop7): This should not happen!! Data will be lost [ 1140.697917][T26063] [ 1140.724155][T26078] 9pnet_fd: Insufficient options for proto=fd [ 1140.743383][T26077] loop2: detected capacity change from 0 to 2048 [ 1140.795304][T26084] loop7: detected capacity change from 0 to 128 [ 1140.920013][T26088] netlink: 24 bytes leftover after parsing attributes in process `syz.7.20099'. [ 1140.994596][T26090] loop2: detected capacity change from 0 to 2048 [ 1141.033710][T26093] loop7: detected capacity change from 0 to 2048 [ 1141.064357][T26093] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 18 with error 28 [ 1141.077046][T26093] EXT4-fs (loop7): This should not happen!! Data will be lost [ 1141.077046][T26093] [ 1141.086877][T26093] EXT4-fs (loop7): Total free blocks count 0 [ 1141.086899][T26093] EXT4-fs (loop7): Free/Dirty block details [ 1141.086913][T26093] EXT4-fs (loop7): free_blocks=0 [ 1141.086928][T26093] EXT4-fs (loop7): dirty_blocks=0 [ 1141.086944][T26093] EXT4-fs (loop7): Block reservation details [ 1141.086957][T26093] EXT4-fs (loop7): i_reserved_data_blocks=0 [ 1141.095113][T26093] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28 [ 1141.137588][T26093] EXT4-fs (loop7): This should not happen!! Data will be lost [ 1141.137588][T26093] [ 1141.183685][T26102] loop7: detected capacity change from 0 to 2048 [ 1141.291359][T26111] loop7: detected capacity change from 0 to 8192 [ 1141.310325][T26111] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 1141.319699][T26111] FAT-fs (loop7): Filesystem has been set read-only [ 1141.326676][T26111] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 1141.335753][T26111] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 1141.345447][T26111] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 1141.393948][T26113] 9pnet_fd: Insufficient options for proto=fd [ 1141.462371][T26118] loop7: detected capacity change from 0 to 2048 [ 1141.471390][T26109] bond18: entered promiscuous mode [ 1141.476597][T26109] bond18: entered allmulticast mode [ 1141.482068][T26109] 8021q: adding VLAN 0 to HW filter on device bond18 [ 1141.527604][T26123] netlink: 24 bytes leftover after parsing attributes in process `syz.2.20111'. [ 1141.686731][T26132] loop7: detected capacity change from 0 to 2048 [ 1141.800632][T26138] netlink: 12 bytes leftover after parsing attributes in process `syz.2.20112'. [ 1142.008414][T26145] 9pnet_fd: Insufficient options for proto=fd [ 1142.247936][T26164] loop6: detected capacity change from 0 to 2048 [ 1142.830437][T26176] 9pnet_fd: Insufficient options for proto=fd [ 1142.919476][T26179] loop0: detected capacity change from 0 to 2048 [ 1143.145562][T26203] netlink: 24 bytes leftover after parsing attributes in process `syz.3.20144'. [ 1143.182036][T26203] loop3: detected capacity change from 0 to 1024 [ 1143.200903][T26203] EXT4-fs warning (device loop3): ext4_enable_quotas:7156: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 1143.229146][T26203] EXT4-fs (loop3): mount failed [ 1143.238361][T26209] 9pnet_fd: Insufficient options for proto=fd [ 1143.363956][T26220] netlink: 24 bytes leftover after parsing attributes in process `syz.7.20150'. [ 1143.382959][T26220] loop7: detected capacity change from 0 to 1024 [ 1143.399653][T26220] EXT4-fs (loop7): blocks per group (131072) and clusters per group (8192) inconsistent [ 1143.435540][T26224] loop3: detected capacity change from 0 to 2048 [ 1143.475762][T26227] netlink: 12 bytes leftover after parsing attributes in process `syz.0.20141'. [ 1143.638757][T26234] syz.3.20155[26234] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1143.638904][T26234] syz.3.20155[26234] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1143.663941][T26234] syz.3.20155[26234] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1143.727733][T26236] loop2: detected capacity change from 0 to 8192 [ 1143.845586][T26238] 9pnet_fd: Insufficient options for proto=fd [ 1143.880772][T26240] netlink: 24 bytes leftover after parsing attributes in process `syz.2.20158'. [ 1143.898060][T26240] loop2: detected capacity change from 0 to 1024 [ 1143.914116][T26240] EXT4-fs warning (device loop2): ext4_enable_quotas:7156: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 1143.943993][T26240] EXT4-fs (loop2): mount failed [ 1143.977867][T26245] netlink: 24 bytes leftover after parsing attributes in process `syz.3.20160'. [ 1144.045457][ T29] kauditd_printk_skb: 554 callbacks suppressed [ 1144.045524][ T29] audit: type=1326 audit(1101.597:157540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26244 comm="syz.3.20160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fad75815db7 code=0x7ffc0000 [ 1144.085288][T26245] loop3: detected capacity change from 0 to 1024 [ 1144.104736][ T29] audit: type=1326 audit(1101.634:157541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26244 comm="syz.3.20160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fad75814690 code=0x7ffc0000 [ 1144.128099][ T29] audit: type=1326 audit(1101.634:157542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26244 comm="syz.3.20160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fad7581592b code=0x7ffc0000 [ 1144.151329][ T29] audit: type=1326 audit(1101.644:157543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26244 comm="syz.3.20160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fad7581498a code=0x7ffc0000 [ 1144.174633][ T29] audit: type=1326 audit(1101.644:157544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26244 comm="syz.3.20160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fad7581498a code=0x7ffc0000 [ 1144.197857][ T29] audit: type=1326 audit(1101.644:157545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26244 comm="syz.3.20160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fad75814597 code=0x7ffc0000 [ 1144.221285][ T29] audit: type=1326 audit(1101.644:157546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26244 comm="syz.3.20160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fad758174ca code=0x7ffc0000 [ 1144.260741][T26245] EXT4-fs warning (device loop3): ext4_enable_quotas:7156: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 1144.277104][T26245] EXT4-fs (loop3): mount failed [ 1144.287563][ T29] audit: type=1326 audit(1101.812:157547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26244 comm="syz.3.20160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fad75814690 code=0x7ffc0000 [ 1144.310895][ T29] audit: type=1326 audit(1101.812:157548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26244 comm="syz.3.20160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fad7581592b code=0x7ffc0000 [ 1144.334536][ T29] audit: type=1326 audit(1101.812:157549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26244 comm="syz.3.20160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fad7581498a code=0x7ffc0000 [ 1144.395421][T26260] loop6: detected capacity change from 0 to 8192 [ 1144.416911][T26262] loop7: detected capacity change from 0 to 2048 [ 1144.431196][T26258] loop2: detected capacity change from 0 to 2048 [ 1144.436050][T26264] 9pnet_fd: Insufficient options for proto=fd [ 1144.524695][T26262] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 18 with error 28 [ 1144.537136][T26262] EXT4-fs (loop7): This should not happen!! Data will be lost [ 1144.537136][T26262] [ 1144.546865][T26262] EXT4-fs (loop7): Total free blocks count 0 [ 1144.552878][T26262] EXT4-fs (loop7): Free/Dirty block details [ 1144.558962][T26262] EXT4-fs (loop7): free_blocks=0 [ 1144.563955][T26262] EXT4-fs (loop7): dirty_blocks=0 [ 1144.569055][T26262] EXT4-fs (loop7): Block reservation details [ 1144.575148][T26262] EXT4-fs (loop7): i_reserved_data_blocks=0 [ 1144.589420][T26279] loop6: detected capacity change from 0 to 2048 [ 1144.633593][T26279] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 18 with error 28 [ 1144.646166][T26279] EXT4-fs (loop6): This should not happen!! Data will be lost [ 1144.646166][T26279] [ 1144.656324][T26279] EXT4-fs (loop6): Total free blocks count 0 [ 1144.662469][T26279] EXT4-fs (loop6): Free/Dirty block details [ 1144.668472][T26279] EXT4-fs (loop6): free_blocks=0 [ 1144.673531][T26279] EXT4-fs (loop6): dirty_blocks=0 [ 1144.678582][T26279] EXT4-fs (loop6): Block reservation details [ 1144.684796][T26279] EXT4-fs (loop6): i_reserved_data_blocks=0 [ 1144.740849][T26279] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28 [ 1144.753619][T26279] EXT4-fs (loop6): This should not happen!! Data will be lost [ 1144.753619][T26279] [ 1145.065753][T26297] 9pnet_fd: Insufficient options for proto=fd [ 1145.476987][T26313] loop0: detected capacity change from 0 to 128 [ 1145.506768][ T3374] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 1145.514254][ T3374] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 1145.521743][ T3374] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 1145.529244][ T3374] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 1145.536717][ T3374] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 1145.544304][ T3374] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 1145.552170][ T3374] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 1145.559658][ T3374] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 1145.568297][ T3374] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 1145.575734][ T3374] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 1145.583538][ T3374] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 1145.591005][ T3374] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 1145.598466][ T3374] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 1145.606425][ T3374] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 1145.614030][ T3374] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 1145.621487][ T3374] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 1145.628982][ T3374] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 1145.636448][ T3374] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 1145.643934][ T3374] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 1145.647327][T26318] netlink: 24 bytes leftover after parsing attributes in process `syz.6.20180'. [ 1145.651350][ T3374] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 1145.667880][ T3374] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 1145.675432][ T3374] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 1145.682878][ T3374] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 1145.690408][ T3374] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 1145.697854][ T3374] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 1145.705303][ T3374] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 1145.712793][ T3374] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 1145.720393][ T3374] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 1145.728049][ T3374] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 1145.735519][ T3374] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 1145.743079][ T3374] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 1145.750650][ T3374] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 1145.758087][ T3374] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 1145.765534][ T3374] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 1145.773078][ T3374] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 1145.780499][ T3374] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 1145.787981][ T3374] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 1145.796230][ T3374] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.03 Device [syz0] on syz0 [ 1145.869545][T26318] loop6: detected capacity change from 0 to 1024 [ 1146.134571][T26318] EXT4-fs warning (device loop6): ext4_enable_quotas:7156: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 1146.222715][T26318] EXT4-fs (loop6): mount failed [ 1147.147331][T26317] bond16: entered promiscuous mode [ 1147.152559][T26317] bond16: entered allmulticast mode [ 1147.186778][T26317] 8021q: adding VLAN 0 to HW filter on device bond16 [ 1147.221981][T26344] netlink: 24 bytes leftover after parsing attributes in process `syz.6.20198'. [ 1147.261151][T26344] loop6: detected capacity change from 0 to 1024 [ 1147.311267][T26344] EXT4-fs warning (device loop6): ext4_enable_quotas:7156: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 1147.338293][T26354] loop3: detected capacity change from 0 to 2048 [ 1147.357019][T26344] EXT4-fs (loop6): mount failed [ 1147.503667][T26354] netlink: 4 bytes leftover after parsing attributes in process `syz.3.20201'. [ 1147.703656][T26373] netlink: 24 bytes leftover after parsing attributes in process `syz.6.20207'. [ 1147.719832][T26371] netlink: 24 bytes leftover after parsing attributes in process `syz.0.20206'. [ 1147.790293][T26371] loop0: detected capacity change from 0 to 1024 [ 1147.814905][T26371] EXT4-fs warning (device loop0): ext4_enable_quotas:7156: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 1147.837113][T26371] EXT4-fs (loop0): mount failed [ 1147.882757][T26383] loop3: detected capacity change from 0 to 128 [ 1147.941756][T26383] syz.3.20211: attempt to access beyond end of device [ 1147.941756][T26383] loop3: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 1148.050194][T26389] IPv6: Can't replace route, no match found [ 1148.086703][T26385] netlink: 12 bytes leftover after parsing attributes in process `syz.0.20212'. [ 1148.145009][T26389] netlink: 4 bytes leftover after parsing attributes in process `syz.3.20213'. [ 1148.211400][T26398] loop0: detected capacity change from 0 to 2048 [ 1148.292082][T26407] loop2: detected capacity change from 0 to 2048 [ 1148.555460][T26434] loop3: detected capacity change from 0 to 2048 [ 1148.646962][T26445] loop3: detected capacity change from 0 to 128 [ 1148.767240][T26451] loop2: detected capacity change from 0 to 128 [ 1148.798307][T26453] loop0: detected capacity change from 0 to 2048 [ 1149.214754][T26465] __nla_validate_parse: 1 callbacks suppressed [ 1149.214770][T26465] netlink: 24 bytes leftover after parsing attributes in process `syz.0.20239'. [ 1149.238599][T26463] loop3: detected capacity change from 0 to 2048 [ 1149.242743][T26465] loop0: detected capacity change from 0 to 1024 [ 1149.258391][T26465] EXT4-fs warning (device loop0): ext4_enable_quotas:7156: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 1149.273419][T26465] EXT4-fs (loop0): mount failed [ 1149.412626][T26480] netlink: 24 bytes leftover after parsing attributes in process `syz.3.20245'. [ 1149.425646][ T29] kauditd_printk_skb: 444 callbacks suppressed [ 1149.425664][ T29] audit: type=1326 audit(1106.632:157994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26479 comm="syz.3.20245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad75815d29 code=0x7ffc0000 [ 1149.456996][T26480] loop3: detected capacity change from 0 to 1024 [ 1149.459267][ T29] audit: type=1326 audit(1106.632:157995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26479 comm="syz.3.20245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad75815d29 code=0x7ffc0000 [ 1149.486754][ T29] audit: type=1326 audit(1106.632:157996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26479 comm="syz.3.20245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fad75815d29 code=0x7ffc0000 [ 1149.506460][T26480] EXT4-fs warning (device loop3): ext4_enable_quotas:7156: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 1149.510100][ T29] audit: type=1326 audit(1106.632:157997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26479 comm="syz.3.20245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad75815d29 code=0x7ffc0000 [ 1149.529276][T26480] EXT4-fs (loop3): mount failed [ 1149.548629][ T29] audit: type=1326 audit(1106.632:157998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26479 comm="syz.3.20245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fad75815d29 code=0x7ffc0000 [ 1149.577097][ T29] audit: type=1326 audit(1106.632:157999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26479 comm="syz.3.20245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad75815d29 code=0x7ffc0000 [ 1149.600558][ T29] audit: type=1326 audit(1106.632:158000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26479 comm="syz.3.20245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fad75815d29 code=0x7ffc0000 [ 1149.623885][ T29] audit: type=1326 audit(1106.632:158001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26479 comm="syz.3.20245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad75815d29 code=0x7ffc0000 [ 1149.647192][ T29] audit: type=1326 audit(1106.632:158002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26479 comm="syz.3.20245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fad75815d29 code=0x7ffc0000 [ 1149.670554][ T29] audit: type=1326 audit(1106.632:158003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26479 comm="syz.3.20245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad75815d29 code=0x7ffc0000 [ 1149.804781][T26498] netlink: 24 bytes leftover after parsing attributes in process `syz.0.20253'. [ 1149.825322][T26498] loop0: detected capacity change from 0 to 1024 [ 1149.843759][T26498] EXT4-fs warning (device loop0): ext4_enable_quotas:7156: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 1149.858803][T26498] EXT4-fs (loop0): mount failed [ 1150.102333][T26510] loop6: detected capacity change from 0 to 128 [ 1150.370985][T26518] IPv6: Can't replace route, no match found [ 1150.469003][T26518] netlink: 4 bytes leftover after parsing attributes in process `syz.3.20258'. [ 1150.895259][T26553] syz.7.20271[26553] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1150.895405][T26553] syz.7.20271[26553] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1150.907189][T26553] syz.7.20271[26553] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1150.948822][T26555] loop7: detected capacity change from 0 to 2048 [ 1150.979362][T26555] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 18 with error 28 [ 1150.991783][T26555] EXT4-fs (loop7): This should not happen!! Data will be lost [ 1150.991783][T26555] [ 1151.001553][T26555] EXT4-fs (loop7): Total free blocks count 0 [ 1151.007646][T26555] EXT4-fs (loop7): Free/Dirty block details [ 1151.013552][T26555] EXT4-fs (loop7): free_blocks=0 [ 1151.018547][T26555] EXT4-fs (loop7): dirty_blocks=0 [ 1151.023573][T26555] EXT4-fs (loop7): Block reservation details [ 1151.029639][T26555] EXT4-fs (loop7): i_reserved_data_blocks=0 [ 1151.037623][T26559] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28 [ 1151.050006][T26559] EXT4-fs (loop7): This should not happen!! Data will be lost [ 1151.050006][T26559] [ 1151.085367][T26561] netlink: 24 bytes leftover after parsing attributes in process `syz.7.20273'. [ 1151.103833][T26561] loop7: detected capacity change from 0 to 1024 [ 1151.113905][T26561] EXT4-fs warning (device loop7): ext4_enable_quotas:7156: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 1151.128744][T26561] EXT4-fs (loop7): mount failed [ 1151.181004][T26566] netlink: 24 bytes leftover after parsing attributes in process `syz.7.20275'. [ 1151.379122][T26574] loop7: detected capacity change from 0 to 128 [ 1151.590209][T26587] syz.3.20282[26587] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1151.590279][T26587] syz.3.20282[26587] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1151.602322][T26587] syz.3.20282[26587] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1152.255700][T26616] syz.2.20295[26616] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1152.312844][T26616] syz.2.20295[26616] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1152.403907][T26616] syz.2.20295[26616] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1152.495905][T26619] loop7: detected capacity change from 0 to 2048 [ 1152.618698][T26613] bond4: entered promiscuous mode [ 1152.623940][T26613] bond4: entered allmulticast mode [ 1152.629489][T26613] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1152.773384][T26641] netlink: 24 bytes leftover after parsing attributes in process `syz.7.20301'. [ 1152.797978][T26641] loop7: detected capacity change from 0 to 1024 [ 1152.831405][T26641] EXT4-fs warning (device loop7): ext4_enable_quotas:7156: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 1152.851548][T26641] EXT4-fs (loop7): mount failed [ 1153.098780][T26671] loop7: detected capacity change from 0 to 128 [ 1153.602214][T26682] 9pnet_fd: Insufficient options for proto=fd [ 1153.684627][T26687] loop6: detected capacity change from 0 to 128 [ 1154.139691][T26713] 9pnet_fd: Insufficient options for proto=fd [ 1154.603761][T26735] loop3: detected capacity change from 0 to 2048 [ 1154.699247][T26739] loop3: detected capacity change from 0 to 128 [ 1154.788900][ T29] kauditd_printk_skb: 795 callbacks suppressed [ 1154.788919][ T29] audit: type=1326 audit(1111.639:158799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26738 comm="syz.3.20335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fad75815d29 code=0x7ffc0000 [ 1154.818775][ T29] audit: type=1326 audit(1111.639:158800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26738 comm="syz.3.20335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad75815d29 code=0x7ffc0000 [ 1154.842176][ T29] audit: type=1326 audit(1111.639:158801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26738 comm="syz.3.20335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7fad75815d29 code=0x7ffc0000 [ 1154.865759][ T29] audit: type=1326 audit(1111.639:158802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26738 comm="syz.3.20335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad75815d29 code=0x7ffc0000 [ 1154.943069][T26748] netlink: 4 bytes leftover after parsing attributes in process `syz.2.20339'. [ 1154.979508][ T29] audit: type=1326 audit(1111.826:158803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26744 comm="syz.3.20337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad75815d29 code=0x7ffc0000 [ 1155.026194][ T29] audit: type=1326 audit(1111.826:158804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26744 comm="syz.3.20337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=274 compat=0 ip=0x7fad75815d29 code=0x7ffc0000 [ 1155.035432][T26752] syz.7.20340[26752] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1155.049664][ T29] audit: type=1326 audit(1111.826:158805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26744 comm="syz.3.20337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad75815d29 code=0x7ffc0000 [ 1155.049710][ T29] audit: type=1326 audit(1111.826:158806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26744 comm="syz.3.20337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fad75815d29 code=0x7ffc0000 [ 1155.049743][ T29] audit: type=1326 audit(1111.826:158807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26744 comm="syz.3.20337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad75815d29 code=0x7ffc0000 [ 1155.132065][ T29] audit: type=1326 audit(1111.826:158808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26744 comm="syz.3.20337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fad75815d29 code=0x7ffc0000 [ 1155.190334][T26754] IPv6: Can't replace route, no match found [ 1155.306531][T26764] netlink: 4 bytes leftover after parsing attributes in process `syz.3.20341'. [ 1155.321275][T26724] bond5: entered promiscuous mode [ 1155.326435][T26724] bond5: entered allmulticast mode [ 1155.353692][T26724] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1155.385310][T26772] loop7: detected capacity change from 0 to 2048 [ 1155.466343][T26773] netlink: 12 bytes leftover after parsing attributes in process `syz.2.20346'. [ 1155.575927][T26783] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 1155.584926][T26783] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 1155.593855][T26783] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 1155.602696][T26783] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 1155.611605][T26783] geneve2: entered promiscuous mode [ 1155.616942][T26783] geneve2: entered allmulticast mode [ 1155.703734][T26801] netlink: 4 bytes leftover after parsing attributes in process `syz.3.20354'. [ 1155.764740][T26807] FAULT_INJECTION: forcing a failure. [ 1155.764740][T26807] name failslab, interval 1, probability 0, space 0, times 0 [ 1155.768078][T26805] loop6: detected capacity change from 0 to 2048 [ 1155.777395][T26807] CPU: 0 UID: 0 PID: 26807 Comm: syz.7.20360 Not tainted 6.13.0-rc3-syzkaller-00209-g499551201b5f #0 [ 1155.794582][T26807] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 1155.804653][T26807] Call Trace: [ 1155.807940][T26807] [ 1155.810880][T26807] dump_stack_lvl+0xf2/0x150 [ 1155.815501][T26807] dump_stack+0x15/0x1a [ 1155.819725][T26807] should_fail_ex+0x223/0x230 [ 1155.824476][T26807] should_failslab+0x8f/0xb0 [ 1155.829119][T26807] kmem_cache_alloc_noprof+0x52/0x320 [ 1155.834499][T26807] ? getname_flags+0x81/0x3b0 [ 1155.839209][T26807] getname_flags+0x81/0x3b0 [ 1155.843818][T26807] __x64_sys_unlink+0x21/0x40 [ 1155.848572][T26807] x64_sys_call+0x2329/0x2dc0 [ 1155.853315][T26807] do_syscall_64+0xc9/0x1c0 [ 1155.857890][T26807] ? clear_bhb_loop+0x55/0xb0 [ 1155.862577][T26807] ? clear_bhb_loop+0x55/0xb0 [ 1155.867318][T26807] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1155.873356][T26807] RIP: 0033:0x7f1670d75d29 [ 1155.877780][T26807] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1155.897501][T26807] RSP: 002b:00007f166f3e1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000057 [ 1155.906014][T26807] RAX: ffffffffffffffda RBX: 00007f1670f65fa0 RCX: 00007f1670d75d29 [ 1155.914164][T26807] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000200003c0 [ 1155.922182][T26807] RBP: 00007f166f3e1090 R08: 0000000000000000 R09: 0000000000000000 [ 1155.930162][T26807] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1155.938266][T26807] R13: 0000000000000000 R14: 00007f1670f65fa0 R15: 00007fffd2af93b8 [ 1155.946252][T26807] [ 1155.968209][T26813] netlink: 24 bytes leftover after parsing attributes in process `syz.0.20357'. [ 1155.988949][T26813] loop0: detected capacity change from 0 to 1024 [ 1156.017498][T26813] EXT4-fs warning (device loop0): ext4_enable_quotas:7156: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 1156.043177][T26813] EXT4-fs (loop0): mount failed [ 1156.055845][T26809] netlink: 12 bytes leftover after parsing attributes in process `syz.3.20361'. [ 1156.107978][T26819] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1156.115165][ T6647] IPVS: starting estimator thread 0... [ 1156.195137][T26825] loop7: detected capacity change from 0 to 2048 [ 1156.231034][T26832] IPv6: Can't replace route, no match found [ 1156.242362][T26821] IPVS: using max 2112 ests per chain, 105600 per kthread [ 1156.377469][T26847] loop3: detected capacity change from 0 to 2048 [ 1156.399188][T26847] netlink: 4 bytes leftover after parsing attributes in process `syz.3.20373'. [ 1156.438528][T26853] loop6: detected capacity change from 0 to 2048 [ 1156.474962][T26853] netlink: 4 bytes leftover after parsing attributes in process `syz.6.20375'. [ 1156.528818][T26855] netlink: 12 bytes leftover after parsing attributes in process `syz.7.20376'. [ 1156.539482][T26860] FAULT_INJECTION: forcing a failure. [ 1156.539482][T26860] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1156.553127][T26860] CPU: 1 UID: 0 PID: 26860 Comm: syz.3.20377 Not tainted 6.13.0-rc3-syzkaller-00209-g499551201b5f #0 [ 1156.564001][T26860] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 1156.574118][T26860] Call Trace: [ 1156.577411][T26860] [ 1156.580399][T26860] dump_stack_lvl+0xf2/0x150 [ 1156.585051][T26860] dump_stack+0x15/0x1a [ 1156.589338][T26860] should_fail_ex+0x223/0x230 [ 1156.594095][T26860] should_fail+0xb/0x10 [ 1156.598350][T26860] should_fail_usercopy+0x1a/0x20 [ 1156.603418][T26860] _copy_from_user+0x1e/0xb0 [ 1156.608112][T26860] __se_sys_io_uring_setup+0xf3/0x1e0 [ 1156.613522][T26860] __x64_sys_io_uring_setup+0x31/0x40 [ 1156.618955][T26860] x64_sys_call+0x270c/0x2dc0 [ 1156.623732][T26860] do_syscall_64+0xc9/0x1c0 [ 1156.628263][T26860] ? clear_bhb_loop+0x55/0xb0 [ 1156.633004][T26860] ? clear_bhb_loop+0x55/0xb0 [ 1156.637727][T26860] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1156.643668][T26860] RIP: 0033:0x7fad75815d29 [ 1156.648115][T26860] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1156.667754][T26860] RSP: 002b:00007fad73e86fc8 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 1156.676319][T26860] RAX: ffffffffffffffda RBX: 00007fad75a05fa0 RCX: 00007fad75815d29 [ 1156.684354][T26860] RDX: 0000000020000280 RSI: 0000000020000140 RDI: 000000000000010b [ 1156.692341][T26860] RBP: 0000000020000140 R08: 0000000000000000 R09: 0000000020000280 [ 1156.700406][T26860] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1156.708444][T26860] R13: 00000000200003c0 R14: 000000000000010b R15: 0000000020000280 [ 1156.716488][T26860] [ 1156.775779][T26868] Cannot find set identified by id 0 to match [ 1156.997599][T26878] lo speed is unknown, defaulting to 1000 [ 1157.031348][T26878] lo speed is unknown, defaulting to 1000 [ 1157.037659][T26878] lo speed is unknown, defaulting to 1000 [ 1157.043893][T26878] lo speed is unknown, defaulting to 1000 [ 1157.163415][T26873] loop6: detected capacity change from 0 to 2048 [ 1157.495926][T26893] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1157.544109][T26893] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1157.595680][T26898] loop0: detected capacity change from 0 to 2048 [ 1157.806755][T26904] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1157.833870][T26904] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1157.901657][T26908] blktrace: Concurrent blktraces are not allowed on loop5 [ 1158.052246][T26918] FAULT_INJECTION: forcing a failure. [ 1158.052246][T26918] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1158.065437][T26918] CPU: 0 UID: 0 PID: 26918 Comm: syz.6.20401 Not tainted 6.13.0-rc3-syzkaller-00209-g499551201b5f #0 [ 1158.076371][T26918] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 1158.086542][T26918] Call Trace: [ 1158.089847][T26918] [ 1158.092783][T26918] dump_stack_lvl+0xf2/0x150 [ 1158.097400][T26918] dump_stack+0x15/0x1a [ 1158.101588][T26918] should_fail_ex+0x223/0x230 [ 1158.106332][T26918] should_fail+0xb/0x10 [ 1158.110559][T26918] should_fail_usercopy+0x1a/0x20 [ 1158.115680][T26918] _copy_from_user+0x1e/0xb0 [ 1158.120534][T26918] do_ipv6_setsockopt+0x1ef/0x2250 [ 1158.125682][T26918] ? __rcu_read_unlock+0x4e/0x70 [ 1158.130702][T26918] ? avc_has_perm_noaudit+0x1cc/0x210 [ 1158.136174][T26918] ? selinux_netlbl_socket_setsockopt+0xe5/0x2d0 [ 1158.142514][T26918] ipv6_setsockopt+0x57/0x130 [ 1158.147246][T26918] rawv6_setsockopt+0x21e/0x410 [ 1158.152149][T26918] sock_common_setsockopt+0x64/0x80 [ 1158.157416][T26918] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1158.163350][T26918] __sys_setsockopt+0x187/0x200 [ 1158.168262][T26918] __x64_sys_setsockopt+0x66/0x80 [ 1158.173304][T26918] x64_sys_call+0x282e/0x2dc0 [ 1158.178017][T26918] do_syscall_64+0xc9/0x1c0 [ 1158.182594][T26918] ? clear_bhb_loop+0x55/0xb0 [ 1158.187331][T26918] ? clear_bhb_loop+0x55/0xb0 [ 1158.192010][T26918] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1158.197926][T26918] RIP: 0033:0x7fb0f9545d29 [ 1158.202340][T26918] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1158.221985][T26918] RSP: 002b:00007fb0f7bb1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1158.230431][T26918] RAX: ffffffffffffffda RBX: 00007fb0f9735fa0 RCX: 00007fb0f9545d29 [ 1158.238546][T26918] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 1158.246548][T26918] RBP: 00007fb0f7bb1090 R08: 0000000000000450 R09: 0000000000000000 [ 1158.254552][T26918] R10: 0000000020000480 R11: 0000000000000246 R12: 0000000000000001 [ 1158.262556][T26918] R13: 0000000000000000 R14: 00007fb0f9735fa0 R15: 00007ffeb1e1eb38 [ 1158.270623][T26918] [ 1158.553209][T26932] loop6: detected capacity change from 0 to 2048 [ 1158.863950][T26939] IPv6: Can't replace route, no match found [ 1159.021340][T26939] netlink: 4 bytes leftover after parsing attributes in process `syz.3.20409'. [ 1159.088225][T26947] loop0: detected capacity change from 0 to 2048 [ 1159.129034][T26953] loop3: detected capacity change from 0 to 2048 [ 1159.168216][T26947] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 18 with error 28 [ 1159.181358][T26947] EXT4-fs (loop0): This should not happen!! Data will be lost [ 1159.181358][T26947] [ 1159.191013][T26947] EXT4-fs (loop0): Total free blocks count 0 [ 1159.197037][T26947] EXT4-fs (loop0): Free/Dirty block details [ 1159.202977][T26947] EXT4-fs (loop0): free_blocks=0 [ 1159.207927][T26947] EXT4-fs (loop0): dirty_blocks=0 [ 1159.213149][T26947] EXT4-fs (loop0): Block reservation details [ 1159.219149][T26947] EXT4-fs (loop0): i_reserved_data_blocks=0 [ 1159.236436][T26963] loop2: detected capacity change from 0 to 128 [ 1159.285045][T26947] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28 [ 1159.297599][T26947] EXT4-fs (loop0): This should not happen!! Data will be lost [ 1159.297599][T26947] [ 1159.312387][T26968] 9pnet_fd: Insufficient options for proto=fd [ 1159.356109][T26971] IPv6: Can't replace route, no match found [ 1159.363653][T26971] bridge0: entered promiscuous mode [ 1159.373680][T26971] bridge_slave_1: left allmulticast mode [ 1159.379422][T26971] bridge_slave_1: left promiscuous mode [ 1159.385325][T26971] bridge0: port 2(bridge_slave_1) entered disabled state [ 1159.422691][T26971] bridge_slave_0: left allmulticast mode [ 1159.428533][T26971] bridge_slave_0: left promiscuous mode [ 1159.434613][T26971] bridge0: port 1(bridge_slave_0) entered disabled state [ 1159.453659][T26971] bridge0 (unregistering): left promiscuous mode [ 1159.492118][T26975] IPv6: Can't replace route, no match found [ 1159.502747][T26984] loop0: detected capacity change from 0 to 2048 [ 1159.551005][T26984] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 18 with error 28 [ 1159.563584][T26984] EXT4-fs (loop0): This should not happen!! Data will be lost [ 1159.563584][T26984] [ 1159.573291][T26984] EXT4-fs (loop0): Total free blocks count 0 [ 1159.580079][T26984] EXT4-fs (loop0): Free/Dirty block details [ 1159.585997][T26984] EXT4-fs (loop0): free_blocks=0 [ 1159.591017][T26984] EXT4-fs (loop0): dirty_blocks=0 [ 1159.596068][T26984] EXT4-fs (loop0): Block reservation details [ 1159.602109][T26984] EXT4-fs (loop0): i_reserved_data_blocks=0 [ 1159.620677][T26994] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28 [ 1159.633163][T26994] EXT4-fs (loop0): This should not happen!! Data will be lost [ 1159.633163][T26994] [ 1159.698635][T18287] EXT4-fs unmount: 93 callbacks suppressed [ 1159.701073][T27000] 9pnet_fd: Insufficient options for proto=fd [ 1159.891214][T16912] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1159.954003][T27019] netlink: 'syz.3.20432': attribute type 4 has an invalid length. [ 1160.104760][T27031] 9pnet_fd: Insufficient options for proto=fd [ 1160.164148][T27034] bpf_get_probe_write_proto: 2 callbacks suppressed [ 1160.164170][T27034] syz.7.20442[27034] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1160.176710][T27034] syz.7.20442[27034] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1160.202284][T27034] syz.7.20442[27034] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1160.304255][T27044] loop7: detected capacity change from 0 to 128 [ 1160.318102][T27046] loop6: detected capacity change from 0 to 1024 [ 1160.322164][ T29] kauditd_printk_skb: 310 callbacks suppressed [ 1160.322182][ T29] audit: type=1326 audit(1116.805:159119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27045 comm="syz.6.20444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0f9545d29 code=0x7ffc0000 [ 1160.358130][ T29] audit: type=1326 audit(1116.805:159120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27045 comm="syz.6.20444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0f9545d29 code=0x7ffc0000 [ 1160.381506][ T29] audit: type=1326 audit(1116.815:159121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27045 comm="syz.6.20444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fb0f9545d29 code=0x7ffc0000 [ 1160.385959][T27046] EXT4-fs warning (device loop6): ext4_enable_quotas:7156: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 1160.404797][ T29] audit: type=1326 audit(1116.815:159122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27045 comm="syz.6.20444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0f9545d29 code=0x7ffc0000 [ 1160.422265][T27046] EXT4-fs (loop6): mount failed [ 1160.442597][ T29] audit: type=1326 audit(1116.815:159123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27045 comm="syz.6.20444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0f9545d29 code=0x7ffc0000 [ 1160.470765][ T29] audit: type=1326 audit(1116.815:159124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27045 comm="syz.6.20444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb0f9545d29 code=0x7ffc0000 [ 1160.486187][T27044] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1160.494132][ T29] audit: type=1326 audit(1116.815:159125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27045 comm="syz.6.20444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0f9545d29 code=0x7ffc0000 [ 1160.529398][ T29] audit: type=1326 audit(1116.815:159126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27045 comm="syz.6.20444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0f9545d29 code=0x7ffc0000 [ 1160.552964][ T29] audit: type=1326 audit(1116.815:159127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27045 comm="syz.6.20444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb0f9545d29 code=0x7ffc0000 [ 1160.576527][ T29] audit: type=1326 audit(1116.815:159128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27045 comm="syz.6.20444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0f9545d29 code=0x7ffc0000 [ 1160.659320][T20095] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1160.671222][T10017] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1160.697474][T27061] loop3: detected capacity change from 0 to 2048 [ 1160.711138][T27037] lo speed is unknown, defaulting to 1000 [ 1160.711930][T27061] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1160.745445][T27061] __nla_validate_parse: 2 callbacks suppressed [ 1160.745464][T27061] netlink: 4 bytes leftover after parsing attributes in process `syz.3.20449'. [ 1160.770630][T10017] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1160.807213][T27037] lo speed is unknown, defaulting to 1000 [ 1160.813209][T27074] IPv6: Can't replace route, no match found [ 1160.819211][T27037] lo speed is unknown, defaulting to 1000 [ 1160.820044][T27074] bridge0: entered promiscuous mode [ 1160.830553][T27037] lo speed is unknown, defaulting to 1000 [ 1160.836609][T27074] netlink: 4 bytes leftover after parsing attributes in process `syz.6.20454'. [ 1160.847974][T10017] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1160.863558][T27074] bridge_slave_1: left allmulticast mode [ 1160.869303][T27074] bridge_slave_1: left promiscuous mode [ 1160.874964][T27074] bridge0: port 2(bridge_slave_1) entered disabled state [ 1160.883917][T27074] bridge_slave_0: left allmulticast mode [ 1160.889664][T27074] bridge_slave_0: left promiscuous mode [ 1160.895428][T27074] bridge0: port 1(bridge_slave_0) entered disabled state [ 1160.905922][T19522] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1160.917019][T27074] bridge0 (unregistering): left promiscuous mode [ 1160.957044][T27081] syz.3.20455[27081] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1160.957185][T27081] syz.3.20455[27081] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1160.985915][T27085] loop0: detected capacity change from 0 to 512 [ 1160.997422][T27081] syz.3.20455[27081] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1161.022990][T27085] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 1161.051287][T10017] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1161.065376][T27085] EXT4-fs error (device loop0): ext4_acquire_dquot:6938: comm syz.0.20458: Failed to acquire dquot type 0 [ 1161.121195][T18287] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 1161.165118][T27037] chnl_net:caif_netlink_parms(): no params data found [ 1161.185836][T27098] IPv6: Can't replace route, no match found [ 1161.208662][T27100] loop0: detected capacity change from 0 to 128 [ 1161.253006][T27100] syz.0.20463: attempt to access beyond end of device [ 1161.253006][T27100] loop0: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 1161.254218][T27103] loop6: detected capacity change from 0 to 2048 [ 1161.313718][T27103] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1161.334133][T27103] netlink: 4 bytes leftover after parsing attributes in process `syz.6.20464'. [ 1161.375910][T10017] bond0 (unregistering): Released all slaves [ 1161.385717][T10017] bond1 (unregistering): Released all slaves [ 1161.394529][T10017] bond2 (unregistering): Released all slaves [ 1161.404545][T10017] bond3 (unregistering): Released all slaves [ 1161.410005][T27113] netlink: 24 bytes leftover after parsing attributes in process `syz.0.20467'. [ 1161.413304][T10017] bond4 (unregistering): Released all slaves [ 1161.428903][T10017] bond5 (unregistering): Released all slaves [ 1161.437773][T10017] bond6 (unregistering): Released all slaves [ 1161.440184][T27113] loop0: detected capacity change from 0 to 1024 [ 1161.446946][T10017] bond7 (unregistering): Released all slaves [ 1161.458903][T10017] bond8 (unregistering): Released all slaves [ 1161.461706][T27113] EXT4-fs warning (device loop0): ext4_enable_quotas:7156: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 1161.468144][T10017] bond9 (unregistering): Released all slaves [ 1161.487752][T27113] EXT4-fs (loop0): mount failed [ 1161.489426][T10017] bond10 (unregistering): Released all slaves [ 1161.501960][T10017] bond11 (unregistering): Released all slaves [ 1161.516412][T10017] bond12 (unregistering): Released all slaves [ 1161.532556][T10017] bond13 (unregistering): Released all slaves [ 1161.541878][T10017] bond14 (unregistering): Released all slaves [ 1161.550940][T10017] bond15 (unregistering): Released all slaves [ 1161.559888][T10017] bond16 (unregistering): Released all slaves [ 1161.569776][T10017] bond17 (unregistering): Released all slaves [ 1161.580505][T10017] bond18 (unregistering): Released all slaves [ 1161.642510][T27037] bridge0: port 1(bridge_slave_0) entered blocking state [ 1161.649806][T27037] bridge0: port 1(bridge_slave_0) entered disabled state [ 1161.665553][T27037] bridge_slave_0: entered allmulticast mode [ 1161.675482][T27037] bridge_slave_0: entered promiscuous mode [ 1161.690979][T24350] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1161.693382][T27037] bridge0: port 2(bridge_slave_1) entered blocking state [ 1161.707101][T27037] bridge0: port 2(bridge_slave_1) entered disabled state [ 1161.714860][T27037] bridge_slave_1: entered allmulticast mode [ 1161.722075][T27037] bridge_slave_1: entered promiscuous mode [ 1161.774703][T27135] IPv6: Can't replace route, no match found [ 1161.784625][T27134] loop0: detected capacity change from 0 to 2048 [ 1161.785152][T27037] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1161.803106][T10017] hsr_slave_0: left promiscuous mode [ 1161.814884][T10017] hsr_slave_1: left promiscuous mode [ 1161.826743][T10017] veth1_vlan: left promiscuous mode [ 1161.832155][T10017] veth0_vlan: left promiscuous mode [ 1161.842107][T27134] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1161.876966][T27144] loop6: detected capacity change from 0 to 128 [ 1161.889456][T27134] netlink: 4 bytes leftover after parsing attributes in process `syz.0.20472'. [ 1161.900699][T27144] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1161.952072][T24350] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1162.029326][T27155] netlink: 24 bytes leftover after parsing attributes in process `syz.3.20477'. [ 1162.040634][T27037] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1162.049314][T27155] loop3: detected capacity change from 0 to 1024 [ 1162.084322][T27037] team0: Port device team_slave_0 added [ 1162.099060][T27037] team0: Port device team_slave_1 added [ 1162.116043][T27159] netlink: 16 bytes leftover after parsing attributes in process `syz.7.20479'. [ 1162.121479][T27155] EXT4-fs warning (device loop3): ext4_enable_quotas:7156: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 1162.151511][T18287] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1162.174050][T27037] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1162.181152][T27037] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1162.181651][T27155] EXT4-fs (loop3): mount failed [ 1162.207261][T27037] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1162.224272][T27037] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1162.231335][T27037] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1162.257996][T27037] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1162.335776][T27037] hsr_slave_0: entered promiscuous mode [ 1162.374453][T27037] hsr_slave_1: entered promiscuous mode [ 1162.382556][T27037] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1162.390391][T27037] Cannot create hsr debugfs directory [ 1162.399849][T27182] loop6: detected capacity change from 0 to 128 [ 1162.438556][T27182] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1162.499387][T10017] IPVS: stop unused estimator thread 0... [ 1162.530110][T27195] IPv6: Can't replace route, no match found [ 1162.610917][T24350] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1162.730632][T27214] loop6: detected capacity change from 0 to 2048 [ 1162.778407][T27214] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1162.805657][T27214] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 18 with error 28 [ 1162.818163][T27214] EXT4-fs (loop6): This should not happen!! Data will be lost [ 1162.818163][T27214] [ 1162.827869][T27214] EXT4-fs (loop6): Total free blocks count 0 [ 1162.833935][T27214] EXT4-fs (loop6): Free/Dirty block details [ 1162.839945][T27214] EXT4-fs (loop6): free_blocks=0 [ 1162.844906][T27214] EXT4-fs (loop6): dirty_blocks=0 [ 1162.850066][T27214] EXT4-fs (loop6): Block reservation details [ 1162.856072][T27214] EXT4-fs (loop6): i_reserved_data_blocks=0 [ 1162.908114][T27214] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28 [ 1162.920974][T27037] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1162.933067][T27037] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1162.946892][T27037] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1162.956252][T27037] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1163.045564][T27037] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1163.079084][T27247] loop7: detected capacity change from 0 to 128 [ 1163.098502][T27037] 8021q: adding VLAN 0 to HW filter on device team0 [ 1163.109143][T27247] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1163.136625][T27251] IPv6: Can't replace route, no match found [ 1163.153987][T10037] bridge0: port 1(bridge_slave_0) entered blocking state [ 1163.161239][T10037] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1163.178625][T10037] bridge0: port 2(bridge_slave_1) entered blocking state [ 1163.185820][T10037] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1163.297459][T27266] loop3: detected capacity change from 0 to 2048 [ 1163.339068][T20095] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1163.382811][T27037] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1163.401717][T27266] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1163.493582][T27266] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 18 with error 28 [ 1163.506050][T27266] EXT4-fs (loop3): This should not happen!! Data will be lost [ 1163.506050][T27266] [ 1163.515786][T27266] EXT4-fs (loop3): Total free blocks count 0 [ 1163.521922][T27266] EXT4-fs (loop3): Free/Dirty block details [ 1163.527889][T27266] EXT4-fs (loop3): free_blocks=0 [ 1163.532892][T27266] EXT4-fs (loop3): dirty_blocks=0 [ 1163.537952][T27266] EXT4-fs (loop3): Block reservation details [ 1163.544068][T27266] EXT4-fs (loop3): i_reserved_data_blocks=0 [ 1164.362679][T19522] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1164.532365][T27037] veth0_vlan: entered promiscuous mode [ 1164.579431][T27037] veth1_vlan: entered promiscuous mode [ 1164.611666][T27037] veth0_macvtap: entered promiscuous mode [ 1164.612277][T27309] loop3: detected capacity change from 0 to 128 [ 1164.629457][T27037] veth1_macvtap: entered promiscuous mode [ 1164.653935][T27037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1164.664560][T27037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1164.674854][T27037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1164.685336][T27037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1164.710217][T27309] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1164.713435][T27037] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1164.731254][T27037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1164.741826][T27037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1164.751814][T27037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1164.762310][T27037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1164.773393][T27037] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1164.789057][T27037] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1164.798091][T27037] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1164.806839][T27037] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1164.815697][T27037] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1164.909878][T19522] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1165.102848][T27337] loop2: detected capacity change from 0 to 128 [ 1165.103531][T27339] loop3: detected capacity change from 0 to 128 [ 1165.221644][T27337] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1165.228823][T27339] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1165.421308][T27355] syz.7.20510[27355] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1165.421384][T27355] syz.7.20510[27355] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1165.482096][T27355] syz.7.20510[27355] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1165.573995][T27363] loop7: detected capacity change from 0 to 16384 [ 1165.635940][T19522] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1165.682986][T27314] bond10: entered promiscuous mode [ 1165.688249][T27314] bond10: entered allmulticast mode [ 1165.693771][T27314] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1165.749776][T27037] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1165.755497][ T29] kauditd_printk_skb: 834 callbacks suppressed [ 1165.755514][ T29] audit: type=1400 audit(1121.906:159961): avc: denied { relabelfrom } for pid=27356 comm="syz.6.20517" name="TCPv6" dev="sockfs" ino=172875 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 1165.766569][T27370] SELinux: Context system_u:object_r:fonts_t:s0 is not valid (left unmapped). [ 1165.788695][ T29] audit: type=1326 audit(1121.925:159962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27312 comm="syz.0.20511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51502e5d29 code=0x7ffc0000 [ 1165.845509][ T29] audit: type=1400 audit(1121.953:159963): avc: denied { relabelto } for pid=27356 comm="syz.6.20517" name="TCPv6" dev="sockfs" ino=172875 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=tcp_socket permissive=1 trawcon="system_u:object_r:fonts_t:s0" [ 1165.872372][ T29] audit: type=1326 audit(1121.990:159964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27312 comm="syz.0.20511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51502e5d29 code=0x7ffc0000 [ 1165.890010][T27363] I/O error, dev loop7, sector 7176 op 0x0:(READ) flags 0x80700 phys_seg 9 prio class 0 [ 1165.970256][T27363] I/O error, dev loop7, sector 7432 op 0x0:(READ) flags 0x80700 phys_seg 23 prio class 0 [ 1165.984425][ T29] audit: type=1326 audit(1122.121:159965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27376 comm="syz.0.20521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51502e5d29 code=0x7ffc0000 [ 1166.007850][ T29] audit: type=1326 audit(1122.121:159966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27376 comm="syz.0.20521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51502e5d29 code=0x7ffc0000 [ 1166.031552][T27363] I/O error, dev loop7, sector 7176 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1166.041074][T27363] buffer_io_error: 2 callbacks suppressed [ 1166.041090][T27363] Buffer I/O error on dev loop7, logical block 897, async page read [ 1166.055308][ T29] audit: type=1326 audit(1122.130:159967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27376 comm="syz.0.20521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f51502e5d29 code=0x7ffc0000 [ 1166.078655][ T29] audit: type=1326 audit(1122.130:159968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27376 comm="syz.0.20521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51502e5d29 code=0x7ffc0000 [ 1166.102036][ T29] audit: type=1326 audit(1122.130:159969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27376 comm="syz.0.20521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51502e5d29 code=0x7ffc0000 [ 1166.123567][T27363] I/O error, dev loop7, sector 7176 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1166.125279][ T29] audit: type=1326 audit(1122.130:159970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27376 comm="syz.0.20521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f51502e5d29 code=0x7ffc0000 [ 1166.149156][T27357] lo speed is unknown, defaulting to 1000 [ 1166.158562][T27363] Buffer I/O error on dev loop7, logical block 897, async page read [ 1166.188608][T27382] IPv6: Can't replace route, no match found [ 1166.202354][T27363] I/O error, dev loop7, sector 7176 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1166.211880][T27363] Buffer I/O error on dev loop7, logical block 897, async page read [ 1166.220666][T27382] bridge0: entered promiscuous mode [ 1166.269873][T27382] netlink: 4 bytes leftover after parsing attributes in process `syz.0.20523'. [ 1166.332701][T27382] bridge_slave_1: left allmulticast mode [ 1166.338402][T27382] bridge_slave_1: left promiscuous mode [ 1166.344158][T27382] bridge0: port 2(bridge_slave_1) entered disabled state [ 1166.356171][T27382] bridge_slave_0: left allmulticast mode [ 1166.361950][T27382] bridge_slave_0: left promiscuous mode [ 1166.367721][T27382] bridge0: port 1(bridge_slave_0) entered disabled state [ 1166.383871][T27382] bridge0 (unregistering): left promiscuous mode [ 1166.502204][T27357] lo speed is unknown, defaulting to 1000 [ 1166.505720][T27358] lo speed is unknown, defaulting to 1000 [ 1166.514249][T27357] lo speed is unknown, defaulting to 1000 [ 1166.539654][T27357] lo speed is unknown, defaulting to 1000 [ 1166.642591][T27358] lo speed is unknown, defaulting to 1000 [ 1166.655607][T27358] lo speed is unknown, defaulting to 1000 [ 1166.666850][T27358] lo speed is unknown, defaulting to 1000 [ 1166.679829][T27357] I/O error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 1166.689670][T27357] Buffer I/O error on dev loop7, logical block 0, lost async page write [ 1166.698075][T27357] Buffer I/O error on dev loop7, logical block 1, lost async page write [ 1166.706451][T27357] Buffer I/O error on dev loop7, logical block 2, lost async page write [ 1166.714914][T27357] Buffer I/O error on dev loop7, logical block 3, lost async page write [ 1166.723774][T27357] Buffer I/O error on dev loop7, logical block 4, lost async page write [ 1166.732224][T27357] Buffer I/O error on dev loop7, logical block 5, lost async page write [ 1166.740860][T27357] Buffer I/O error on dev loop7, logical block 6, lost async page write [ 1166.753467][T27357] I/O error, dev loop7, sector 1024 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 1166.777570][T27357] I/O error, dev loop7, sector 2048 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 1166.812635][T27357] I/O error, dev loop7, sector 3072 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 1166.825480][T27401] syz.3.20529[27401] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1166.825589][T27401] syz.3.20529[27401] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1166.851850][T27357] I/O error, dev loop7, sector 4096 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 1166.880186][T27401] syz.3.20529[27401] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1167.221167][T27419] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1167.249967][T27419] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1167.323533][T27405] bond17: entered promiscuous mode [ 1167.328734][T27405] bond17: entered allmulticast mode [ 1167.338648][T27405] 8021q: adding VLAN 0 to HW filter on device bond17 [ 1167.352142][T27425] netdevsim netdevsim6 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 1167.361202][T27425] netdevsim netdevsim6 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 1167.370154][T27425] netdevsim netdevsim6 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 1167.379709][T27425] netdevsim netdevsim6 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 1167.388589][T27425] geneve2: entered promiscuous mode [ 1167.393806][T27425] geneve2: entered allmulticast mode [ 1167.974564][T27448] loop6: detected capacity change from 0 to 2048 [ 1168.053242][T27453] IPv6: Can't replace route, no match found [ 1168.072014][T27448] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1168.122596][T27448] netlink: 4 bytes leftover after parsing attributes in process `syz.6.20547'. [ 1168.196553][T27462] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 1168.205787][T27462] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 1168.214653][T27462] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 1168.223490][T27462] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 1168.277483][T27462] geneve2: entered promiscuous mode [ 1168.282839][T27462] geneve2: entered allmulticast mode [ 1168.350943][T24350] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1168.451833][T27472] loop0: detected capacity change from 0 to 2048 [ 1168.509258][T27472] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1168.512851][T27460] bond1: entered promiscuous mode [ 1168.526441][T27460] bond1: entered allmulticast mode [ 1168.541001][T27460] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1168.571699][T27481] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1168.580396][T27481] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1168.602074][T27474] bond6: entered promiscuous mode [ 1168.607257][T27474] bond6: entered allmulticast mode [ 1168.623574][T27474] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1168.638970][T27472] netlink: 4 bytes leftover after parsing attributes in process `syz.0.20556'. [ 1168.655391][T27484] 9pnet: Unknown protocol version 9p20 [ 1168.683434][T27486] IPv6: Can't replace route, no match found [ 1168.694190][T27486] bridge0: entered promiscuous mode [ 1168.701303][T27486] netlink: 4 bytes leftover after parsing attributes in process `syz.2.20560'. [ 1168.710943][T27486] bridge_slave_1: left allmulticast mode [ 1168.716904][T27486] bridge_slave_1: left promiscuous mode [ 1168.722665][T27486] bridge0: port 2(bridge_slave_1) entered disabled state [ 1168.754600][T18287] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1168.785337][T27486] bridge_slave_0: left allmulticast mode [ 1168.791163][T27486] bridge_slave_0: left promiscuous mode [ 1168.797011][T27486] bridge0: port 1(bridge_slave_0) entered disabled state [ 1168.830166][T27486] bridge0 (unregistering): left promiscuous mode [ 1168.873037][T27488] IPv6: Can't replace route, no match found [ 1168.923839][T27505] loop7: detected capacity change from 0 to 2048 [ 1168.958852][T27505] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1168.997540][T27505] netlink: 4 bytes leftover after parsing attributes in process `syz.7.20564'. [ 1169.006921][T27513] loop2: detected capacity change from 0 to 2048 [ 1169.034416][T27496] lo speed is unknown, defaulting to 1000 [ 1169.035309][T27513] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1169.060024][T10042] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1169.070443][T10042] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1169.082208][T27496] lo speed is unknown, defaulting to 1000 [ 1169.084789][T27513] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 18 with error 28 [ 1169.088651][T27496] lo speed is unknown, defaulting to 1000 [ 1169.100752][T27513] EXT4-fs (loop2): This should not happen!! Data will be lost [ 1169.100752][T27513] [ 1169.115918][T27513] EXT4-fs (loop2): Total free blocks count 0 [ 1169.119670][T27496] lo speed is unknown, defaulting to 1000 [ 1169.121943][T27513] EXT4-fs (loop2): Free/Dirty block details [ 1169.133760][T27513] EXT4-fs (loop2): free_blocks=0 [ 1169.138722][T27513] EXT4-fs (loop2): dirty_blocks=0 [ 1169.144154][T27513] EXT4-fs (loop2): Block reservation details [ 1169.150398][T27513] EXT4-fs (loop2): i_reserved_data_blocks=0 [ 1169.158095][T27516] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28 [ 1169.167842][T20095] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1169.204495][T10042] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1169.214890][T10042] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1169.261207][T10042] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1169.271692][T10042] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1169.304572][T27496] chnl_net:caif_netlink_parms(): no params data found [ 1169.337811][T10042] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1169.348275][T10042] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1169.418866][T27496] bridge0: port 1(bridge_slave_0) entered blocking state [ 1169.425994][T27496] bridge0: port 1(bridge_slave_0) entered disabled state [ 1169.433514][T27496] bridge_slave_0: entered allmulticast mode [ 1169.440196][T27496] bridge_slave_0: entered promiscuous mode [ 1169.443653][T27535] 9pnet: Unknown protocol version 9p20 [ 1169.447356][T27496] bridge0: port 2(bridge_slave_1) entered blocking state [ 1169.458790][T27496] bridge0: port 2(bridge_slave_1) entered disabled state [ 1169.466497][T27496] bridge_slave_1: entered allmulticast mode [ 1169.473152][T27496] bridge_slave_1: entered promiscuous mode [ 1169.501466][T27496] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1169.532831][T27496] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1169.601282][T27496] team0: Port device team_slave_0 added [ 1169.608354][T27496] team0: Port device team_slave_1 added [ 1169.766267][T10042] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1169.798021][T10042] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1169.815288][T10042] bond0 (unregistering): Released all slaves [ 1169.824623][T10042] bond1 (unregistering): Released all slaves [ 1169.835615][T10042] bond2 (unregistering): Released all slaves [ 1169.845349][T10042] bond3 (unregistering): Released all slaves [ 1169.854196][T10042] bond4 (unregistering): Released all slaves [ 1169.867280][T10042] bond5 (unregistering): Released all slaves [ 1169.878299][T10042] bond6 (unregistering): Released all slaves [ 1169.887949][T10042] bond7 (unregistering): Released all slaves [ 1169.896723][T10042] bond8 (unregistering): Released all slaves [ 1169.905950][T10042] bond9 (unregistering): Released all slaves [ 1169.916303][T10042] bond10 (unregistering): Released all slaves [ 1169.938419][T27549] loop6: detected capacity change from 0 to 128 [ 1169.962477][T27551] loop3: detected capacity change from 0 to 2048 [ 1169.975047][T27549] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1170.040811][T27541] IPv6: Can't replace route, no match found [ 1170.042859][T24350] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1170.056472][T27496] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1170.063524][T27496] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1170.089486][T27496] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1170.101417][T27496] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1170.108401][T27496] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1170.115396][T27551] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1170.134419][T27496] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1170.227561][T27551] netlink: 4 bytes leftover after parsing attributes in process `syz.3.20575'. [ 1170.249901][T27496] hsr_slave_0: entered promiscuous mode [ 1170.259313][T27496] hsr_slave_1: entered promiscuous mode [ 1170.305336][T27496] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1170.312936][T27496] Cannot create hsr debugfs directory [ 1170.328506][T27567] netlink: 16 bytes leftover after parsing attributes in process `syz.6.20577'. [ 1170.348513][T27569] 9pnet: Unknown protocol version 9p20 [ 1170.393849][T10042] hsr_slave_0: left promiscuous mode [ 1170.404501][T10042] hsr_slave_1: left promiscuous mode [ 1170.436721][T10042] veth1_vlan: left promiscuous mode [ 1170.442078][T10042] veth0_vlan: left promiscuous mode [ 1170.538554][T10042] team0 (unregistering): Port device team_slave_1 removed [ 1170.550605][T10042] team0 (unregistering): Port device team_slave_0 removed [ 1170.592292][T27573] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 1170.601318][T27573] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 1170.610216][T27573] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 1170.619040][T27573] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 1170.631433][T27573] geneve2: entered promiscuous mode [ 1170.636793][T27573] geneve2: entered allmulticast mode [ 1170.744658][T19522] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1170.958858][T27612] loop3: detected capacity change from 0 to 128 [ 1170.977504][T27612] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1171.064719][T19522] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1171.095829][ T29] kauditd_printk_skb: 965 callbacks suppressed [ 1171.095847][ T29] audit: type=1326 audit(1126.913:160936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27561 comm="syz.6.20577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb0f953cce7 code=0x7ffc0000 [ 1171.098900][T27496] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1171.102346][ T29] audit: type=1326 audit(1126.913:160937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27561 comm="syz.6.20577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb0f94e1f29 code=0x7ffc0000 [ 1171.155612][ T29] audit: type=1326 audit(1126.913:160938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27561 comm="syz.6.20577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0f9545d29 code=0x7ffc0000 [ 1171.190221][T27622] loop3: detected capacity change from 0 to 128 [ 1171.212787][T27496] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1171.238407][ T29] audit: type=1326 audit(1126.969:160939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27620 comm="syz.2.20587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ba20b5d29 code=0x7ffc0000 [ 1171.262035][ T29] audit: type=1326 audit(1126.969:160940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27620 comm="syz.2.20587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ba20b5d29 code=0x7ffc0000 [ 1171.285316][ T29] audit: type=1326 audit(1126.969:160941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27620 comm="syz.2.20587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4ba20b5d29 code=0x7ffc0000 [ 1171.308701][ T29] audit: type=1326 audit(1126.969:160942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27620 comm="syz.2.20587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ba20b5d29 code=0x7ffc0000 [ 1171.332521][ T29] audit: type=1326 audit(1126.969:160943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27620 comm="syz.2.20587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4ba20b5d29 code=0x7ffc0000 [ 1171.355871][ T29] audit: type=1326 audit(1126.969:160944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27620 comm="syz.2.20587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ba20b5d29 code=0x7ffc0000 [ 1171.357547][T27619] syz.3.20588: attempt to access beyond end of device [ 1171.357547][T27619] loop3: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 1171.379184][ T29] audit: type=1326 audit(1126.969:160945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27620 comm="syz.2.20587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4ba20b5d29 code=0x7ffc0000 [ 1171.478475][T27496] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1171.504732][T27496] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1171.611807][T27496] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1171.648999][T27496] 8021q: adding VLAN 0 to HW filter on device team0 [ 1171.689303][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 1171.696422][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1171.731009][T10037] bridge0: port 2(bridge_slave_1) entered blocking state [ 1171.738160][T10037] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1171.808183][T27496] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1171.896789][T27496] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1172.080022][T27496] veth0_vlan: entered promiscuous mode [ 1172.110469][T27496] veth1_vlan: entered promiscuous mode [ 1172.136722][T27496] veth0_macvtap: entered promiscuous mode [ 1172.159831][T27496] veth1_macvtap: entered promiscuous mode [ 1172.181302][T27496] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1172.192018][T27496] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1172.201903][T27496] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1172.212614][T27496] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1172.222824][T27496] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1172.233478][T27496] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1172.286043][T27496] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1172.325342][T27496] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1172.335880][T27496] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1172.345745][T27496] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1172.356270][T27496] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1172.366196][T27496] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1172.376793][T27496] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1172.387765][T27496] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1172.396307][T27496] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1172.405198][T27496] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1172.414167][T27496] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1172.422930][T27496] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1172.588529][T27695] 9pnet_fd: Insufficient options for proto=fd [ 1173.308040][T27712] loop2: detected capacity change from 0 to 128 [ 1173.381525][T27712] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1173.520811][T27698] bond7: entered promiscuous mode [ 1173.525982][T27698] bond7: entered allmulticast mode [ 1173.551956][T27698] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1173.619190][T27037] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1174.084337][T27735] netlink: 12 bytes leftover after parsing attributes in process `syz.2.20615'. [ 1174.285204][T27757] loop6: detected capacity change from 0 to 128 [ 1174.312914][T27760] loop0: detected capacity change from 0 to 128 [ 1174.364125][T27740] lo speed is unknown, defaulting to 1000 [ 1174.397717][T27760] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1174.416386][T27757] syz.6.20620: attempt to access beyond end of device [ 1174.416386][T27757] loop6: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 1174.479076][T27740] lo speed is unknown, defaulting to 1000 [ 1174.485354][T27740] lo speed is unknown, defaulting to 1000 [ 1174.491330][T27740] lo speed is unknown, defaulting to 1000 [ 1174.587484][T27754] bond2: entered promiscuous mode [ 1174.588517][T27496] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1174.592611][T27754] bond2: entered allmulticast mode [ 1174.607052][T27754] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1174.739187][T27740] chnl_net:caif_netlink_parms(): no params data found [ 1174.840897][T27770] 9pnet_fd: Insufficient options for proto=fd [ 1175.172768][T27740] bridge0: port 1(bridge_slave_0) entered blocking state [ 1175.180478][T27740] bridge0: port 1(bridge_slave_0) entered disabled state [ 1175.223368][T27779] loop2: detected capacity change from 0 to 2048 [ 1175.253793][T27740] bridge_slave_0: entered allmulticast mode [ 1175.298243][T27779] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1175.321589][T27740] bridge_slave_0: entered promiscuous mode [ 1175.350638][T27740] bridge0: port 2(bridge_slave_1) entered blocking state [ 1175.357785][T27740] bridge0: port 2(bridge_slave_1) entered disabled state [ 1175.392112][T27779] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 18 with error 28 [ 1175.404569][T27779] EXT4-fs (loop2): This should not happen!! Data will be lost [ 1175.404569][T27779] [ 1175.414361][T27779] EXT4-fs (loop2): Total free blocks count 0 [ 1175.420361][T27779] EXT4-fs (loop2): Free/Dirty block details [ 1175.426730][T27779] EXT4-fs (loop2): free_blocks=0 [ 1175.431797][T27779] EXT4-fs (loop2): dirty_blocks=0 [ 1175.437180][T27779] EXT4-fs (loop2): Block reservation details [ 1175.443321][T27779] EXT4-fs (loop2): i_reserved_data_blocks=0 [ 1175.462655][T27740] bridge_slave_1: entered allmulticast mode [ 1175.482681][T27740] bridge_slave_1: entered promiscuous mode [ 1175.530599][T27740] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1175.550369][T27740] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1175.573417][T27789] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28 [ 1175.610586][T27740] team0: Port device team_slave_0 added [ 1175.617764][T27740] team0: Port device team_slave_1 added [ 1175.646368][T27740] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1175.647691][T27788] netlink: 12 bytes leftover after parsing attributes in process `syz.0.20628'. [ 1175.653368][T27740] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1175.688815][T27740] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1175.700503][T27740] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1175.707462][T27740] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1175.733904][T27740] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1175.771188][T27740] hsr_slave_0: entered promiscuous mode [ 1175.781003][T27740] hsr_slave_1: entered promiscuous mode [ 1175.811269][T27740] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1175.819321][T27740] Cannot create hsr debugfs directory [ 1176.060507][T27817] loop6: detected capacity change from 0 to 128 [ 1176.068057][T27740] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1176.078567][T27740] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1176.099304][T27819] netlink: 12 bytes leftover after parsing attributes in process `syz.0.20639'. [ 1176.117530][T27817] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1176.186890][T27740] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1176.197395][T27740] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1176.219940][T24350] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1176.258165][T27740] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1176.267806][T27829] loop6: detected capacity change from 0 to 256 [ 1176.268631][T27740] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1176.322785][T27834] loop0: detected capacity change from 0 to 128 [ 1176.344257][T27740] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1176.354763][T27740] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1176.370467][T27834] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1176.432988][T27496] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1176.444735][T27847] loop2: detected capacity change from 0 to 128 [ 1176.450818][T27740] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1176.461595][T27740] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1176.471408][T27740] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1176.478964][T27847] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1176.481414][T27740] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1176.520820][ T29] kauditd_printk_skb: 398 callbacks suppressed [ 1176.520838][ T29] audit: type=1326 audit(1131.986:161344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27846 comm="syz.2.20654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ba20b5d29 code=0x7ffc0000 [ 1176.550944][ T29] audit: type=1326 audit(1131.986:161345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27846 comm="syz.2.20654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f4ba20b5d29 code=0x7ffc0000 [ 1176.574518][ T29] audit: type=1326 audit(1131.986:161346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27846 comm="syz.2.20654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ba20b5d29 code=0x7ffc0000 [ 1176.597913][ T29] audit: type=1326 audit(1131.986:161347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27846 comm="syz.2.20654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=311 compat=0 ip=0x7f4ba20b5d29 code=0x7ffc0000 [ 1176.621366][ T29] audit: type=1326 audit(1132.023:161348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27846 comm="syz.2.20654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ba20b5d29 code=0x7ffc0000 [ 1176.644726][ T29] audit: type=1326 audit(1132.023:161349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27846 comm="syz.2.20654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f4ba20b5d29 code=0x7ffc0000 [ 1176.645870][T27740] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1176.668120][ T29] audit: type=1326 audit(1132.042:161350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27846 comm="syz.2.20654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f4ba20b5d63 code=0x7ffc0000 [ 1176.681042][T27740] 8021q: adding VLAN 0 to HW filter on device team0 [ 1176.697889][ T29] audit: type=1326 audit(1132.042:161351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27846 comm="syz.2.20654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ba20b5d29 code=0x7ffc0000 [ 1176.721407][T27740] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1176.727659][ T29] audit: type=1326 audit(1132.042:161352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27846 comm="syz.2.20654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ba20b5d29 code=0x7ffc0000 [ 1176.727695][ T29] audit: type=1326 audit(1132.042:161353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27846 comm="syz.2.20654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4ba20b5d29 code=0x7ffc0000 [ 1176.785005][T27740] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1176.802527][T10001] bridge0: port 1(bridge_slave_0) entered blocking state [ 1176.809677][T10001] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1176.810744][T27037] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1176.819683][T10001] bridge0: port 2(bridge_slave_1) entered blocking state [ 1176.832945][T10001] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1176.919172][T27740] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1177.035668][T27863] syz.0.20659[27863] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1177.035793][T27863] syz.0.20659[27863] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1177.055847][T27863] syz.0.20659[27863] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1177.151521][T27740] veth0_vlan: entered promiscuous mode [ 1177.172871][T27740] veth1_vlan: entered promiscuous mode [ 1177.191014][T27740] veth0_macvtap: entered promiscuous mode [ 1177.201800][T27740] veth1_macvtap: entered promiscuous mode [ 1177.236301][T27740] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1177.246859][T27740] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1177.256761][T27740] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1177.267448][T27740] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1177.277322][T27740] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1177.287800][T27740] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1177.297695][T27740] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1177.308196][T27740] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1177.327755][T27740] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1177.335556][T27879] IPv6: Can't replace route, no match found [ 1177.355278][T27740] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1177.365885][T27740] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1177.375860][T27740] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1177.386435][T27740] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1177.396416][T27740] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1177.406919][T27740] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1177.416780][T27740] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1177.427259][T27740] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1177.563791][T27740] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1177.586721][T27740] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1177.595509][T27740] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1177.604553][T27740] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1177.613382][T27740] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1177.851238][T27897] 9pnet_fd: Insufficient options for proto=fd [ 1177.865430][T27894] loop6: detected capacity change from 0 to 2048 [ 1177.917292][T27894] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1177.966327][T27894] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 18 with error 28 [ 1177.978876][T27894] EXT4-fs (loop6): This should not happen!! Data will be lost [ 1177.978876][T27894] [ 1177.979283][T27884] bond3: entered promiscuous mode [ 1177.988998][T27894] EXT4-fs (loop6): Total free blocks count 0 [ 1177.993590][T27884] bond3: entered allmulticast mode [ 1178.004868][T27894] EXT4-fs (loop6): Free/Dirty block details [ 1178.006251][T27884] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1178.010844][T27894] EXT4-fs (loop6): free_blocks=0 [ 1178.022504][T27894] EXT4-fs (loop6): dirty_blocks=0 [ 1178.027778][T27894] EXT4-fs (loop6): Block reservation details [ 1178.034315][T27894] EXT4-fs (loop6): i_reserved_data_blocks=0 [ 1178.059086][T24350] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1178.086352][T27911] IPv6: Can't replace route, no match found [ 1178.145971][T27916] 9pnet_fd: Insufficient options for proto=fd [ 1178.353564][T27920] bond4: entered promiscuous mode [ 1178.358653][T27920] bond4: entered allmulticast mode [ 1178.364281][T27920] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1178.411220][T27928] loop2: detected capacity change from 0 to 128 [ 1178.433954][T27928] syz.2.20678: attempt to access beyond end of device [ 1178.433954][T27928] loop2: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 1178.597047][T27934] 9pnet_fd: Insufficient options for proto=fd [ 1178.621792][T27939] IPv6: Can't replace route, no match found [ 1178.698156][T27945] loop7: detected capacity change from 0 to 2048 [ 1178.701600][T27948] IPv6: Can't replace route, no match found [ 1178.717341][T27945] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1178.748655][T27952] 9pnet_fd: Insufficient options for proto=fd [ 1178.801866][T27956] loop2: detected capacity change from 0 to 256 [ 1178.835569][T20095] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1179.246249][T27999] loop6: detected capacity change from 0 to 2048 [ 1179.292319][T27999] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1179.373131][T27999] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28 [ 1179.385616][T27999] EXT4-fs (loop6): This should not happen!! Data will be lost [ 1179.385616][T27999] [ 1179.395391][T27999] EXT4-fs (loop6): Total free blocks count 0 [ 1179.401580][T27999] EXT4-fs (loop6): Free/Dirty block details [ 1179.407531][T27999] EXT4-fs (loop6): free_blocks=0 [ 1179.412542][T27999] EXT4-fs (loop6): dirty_blocks=0 [ 1179.417618][T27999] EXT4-fs (loop6): Block reservation details [ 1179.423655][T27999] EXT4-fs (loop6): i_reserved_data_blocks=0 [ 1179.463661][T28018] loop2: detected capacity change from 0 to 128 [ 1179.505965][T28027] IPv6: Can't replace route, no match found [ 1179.534525][T28018] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1179.568509][T24350] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1179.594517][T27037] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1179.699639][T28038] loop6: detected capacity change from 0 to 2048 [ 1179.721940][T28048] netdevsim netdevsim7 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 1179.730842][T28048] netdevsim netdevsim7 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 1179.739925][T28048] netdevsim netdevsim7 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 1179.748887][T28048] netdevsim netdevsim7 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 1179.760116][T28048] geneve2: entered promiscuous mode [ 1179.765182][T28038] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1179.765360][T28048] geneve2: entered allmulticast mode [ 1179.787927][T28038] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 18 with error 28 [ 1179.800424][T28038] EXT4-fs (loop6): This should not happen!! Data will be lost [ 1179.800424][T28038] [ 1179.810310][T28038] EXT4-fs (loop6): Total free blocks count 0 [ 1179.816483][T28038] EXT4-fs (loop6): Free/Dirty block details [ 1179.822511][T28038] EXT4-fs (loop6): free_blocks=0 [ 1179.827685][T28038] EXT4-fs (loop6): dirty_blocks=0 [ 1179.832735][T28038] EXT4-fs (loop6): Block reservation details [ 1179.838762][T28038] EXT4-fs (loop6): i_reserved_data_blocks=0 [ 1179.892599][T24350] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1179.907327][T28056] IPv6: Can't replace route, no match found [ 1180.020226][T28056] netlink: 4 bytes leftover after parsing attributes in process `syz.7.20731'. [ 1180.156415][T28065] loop6: detected capacity change from 0 to 128 [ 1180.230054][T28044] bond1: entered promiscuous mode [ 1180.235327][T28044] bond1: entered allmulticast mode [ 1180.247541][T28044] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1180.289320][T28078] loop3: detected capacity change from 0 to 128 [ 1180.389625][T28083] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 1180.398521][T28083] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 1180.407483][T28083] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 1180.416362][T28083] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 1180.425675][T28083] geneve2: entered promiscuous mode [ 1180.430902][T28083] geneve2: entered allmulticast mode [ 1180.437140][T28086] syz.3.20740[28086] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1180.437215][T28086] syz.3.20740[28086] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1180.462673][T28086] syz.3.20740[28086] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1180.511809][T28089] loop0: detected capacity change from 0 to 2048 [ 1180.544121][T28067] bond11: entered promiscuous mode [ 1180.549307][T28067] bond11: entered allmulticast mode [ 1180.556021][T28067] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1180.565768][T28089] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 18 with error 28 [ 1180.578250][T28089] EXT4-fs (loop0): This should not happen!! Data will be lost [ 1180.578250][T28089] [ 1180.587954][T28089] EXT4-fs (loop0): Total free blocks count 0 [ 1180.594097][T28089] EXT4-fs (loop0): Free/Dirty block details [ 1180.600071][T28089] EXT4-fs (loop0): free_blocks=0 [ 1180.605070][T28089] EXT4-fs (loop0): dirty_blocks=0 [ 1180.610126][T28089] EXT4-fs (loop0): Block reservation details [ 1180.616281][T28089] EXT4-fs (loop0): i_reserved_data_blocks=0 [ 1180.626943][T28096] IPv6: Can't replace route, no match found [ 1180.713467][T28107] loop7: detected capacity change from 0 to 128 [ 1180.723416][T28109] netlink: 4 bytes leftover after parsing attributes in process `syz.2.20743'. [ 1180.768167][T28114] loop0: detected capacity change from 0 to 2048 [ 1180.816039][T28114] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 18 with error 28 [ 1180.828510][T28114] EXT4-fs (loop0): This should not happen!! Data will be lost [ 1180.828510][T28114] [ 1180.838332][T28114] EXT4-fs (loop0): Total free blocks count 0 [ 1180.844445][T28114] EXT4-fs (loop0): Free/Dirty block details [ 1180.850602][T28114] EXT4-fs (loop0): free_blocks=0 [ 1180.855572][T28114] EXT4-fs (loop0): dirty_blocks=0 [ 1180.860792][T28114] EXT4-fs (loop0): Block reservation details [ 1180.866907][T28114] EXT4-fs (loop0): i_reserved_data_blocks=0 [ 1180.963531][T28126] netlink: 16 bytes leftover after parsing attributes in process `syz.3.20755'. [ 1180.963718][T28122] netlink: 12 bytes leftover after parsing attributes in process `syz.2.20752'. [ 1181.009321][T28133] IPv6: Can't replace route, no match found [ 1181.016544][T28133] bridge0: entered promiscuous mode [ 1181.022669][T28133] netlink: 4 bytes leftover after parsing attributes in process `syz.0.20756'. [ 1181.031744][T28133] bridge_slave_1: left allmulticast mode [ 1181.037404][T28133] bridge_slave_1: left promiscuous mode [ 1181.043244][T28133] bridge0: port 2(bridge_slave_1) entered disabled state [ 1181.054348][T28133] bridge_slave_0: left allmulticast mode [ 1181.060088][T28133] bridge_slave_0: left promiscuous mode [ 1181.065866][T28133] bridge0: port 1(bridge_slave_0) entered disabled state [ 1181.068782][T28136] loop2: detected capacity change from 0 to 128 [ 1181.084361][T28133] bridge0 (unregistering): left promiscuous mode [ 1181.442650][T28162] bond5: entered promiscuous mode [ 1181.447778][T28162] bond5: entered allmulticast mode [ 1181.466317][T28162] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1181.524878][T28162] bond5 (unregistering): Released all slaves [ 1181.564834][T28169] netlink: 12 bytes leftover after parsing attributes in process `syz.6.20767'. [ 1181.832278][T28177] loop0: detected capacity change from 0 to 1024 [ 1181.864756][ T29] kauditd_printk_skb: 1074 callbacks suppressed [ 1181.864775][ T29] audit: type=1326 audit(1136.993:162428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28176 comm="syz.0.20772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f6ddd0b74ca code=0x7ffc0000 [ 1181.917811][T28177] EXT4-fs warning (device loop0): ext4_enable_quotas:7156: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 1181.969746][ T29] audit: type=1326 audit(1137.021:162429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28125 comm="syz.3.20755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f16e16ecce7 code=0x7ffc0000 [ 1181.993120][ T29] audit: type=1326 audit(1137.021:162430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28125 comm="syz.3.20755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f16e1691f29 code=0x7ffc0000 [ 1182.016723][ T29] audit: type=1326 audit(1137.021:162431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28125 comm="syz.3.20755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16e16f5d29 code=0x7ffc0000 [ 1182.040858][ T29] audit: type=1326 audit(1137.021:162432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28125 comm="syz.3.20755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f16e16ecce7 code=0x7ffc0000 [ 1182.055501][T28177] EXT4-fs (loop0): mount failed [ 1182.064050][ T29] audit: type=1326 audit(1137.021:162433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28125 comm="syz.3.20755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f16e1691f29 code=0x7ffc0000 [ 1182.092887][ T29] audit: type=1326 audit(1137.021:162434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28125 comm="syz.3.20755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16e16f5d29 code=0x7ffc0000 [ 1182.116607][ T29] audit: type=1326 audit(1137.208:162435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28176 comm="syz.0.20772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6ddd0b4690 code=0x7ffc0000 [ 1182.129985][T28190] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1182.140425][ T29] audit: type=1326 audit(1137.208:162436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28176 comm="syz.0.20772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6ddd0b592b code=0x7ffc0000 [ 1182.171579][ T29] audit: type=1326 audit(1137.208:162437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28176 comm="syz.0.20772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f6ddd0b498a code=0x7ffc0000 [ 1182.194835][T28190] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1182.212491][T28192] netlink: 68 bytes leftover after parsing attributes in process `syz.0.20779'. [ 1182.367492][T28196] netlink: 12 bytes leftover after parsing attributes in process `syz.6.20781'. [ 1182.415125][T28209] loop3: detected capacity change from 0 to 128 [ 1182.468509][T28204] ================================================================== [ 1182.476647][T28204] BUG: KCSAN: data-race in shmem_fallocate / shmem_fault [ 1182.483697][T28204] [ 1182.486027][T28204] write to 0xffff88811f12d730 of 8 bytes by task 28207 on cpu 1: [ 1182.493753][T28204] shmem_fallocate+0x22e/0x860 [ 1182.498547][T28204] vfs_fallocate+0x368/0x3b0 [ 1182.503156][T28204] do_madvise+0x14bd/0x2a70 [ 1182.507668][T28204] __x64_sys_madvise+0x61/0x70 [ 1182.512442][T28204] x64_sys_call+0x23ab/0x2dc0 [ 1182.517129][T28204] do_syscall_64+0xc9/0x1c0 [ 1182.521638][T28204] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1182.527560][T28204] [ 1182.529885][T28204] read to 0xffff88811f12d730 of 8 bytes by task 28204 on cpu 0: [ 1182.537523][T28204] shmem_fault+0x97/0x250 [ 1182.541862][T28204] __do_fault+0xb6/0x200 [ 1182.546114][T28204] handle_mm_fault+0xe98/0x2ac0 [ 1182.550972][T28204] __get_user_pages+0xf2c/0x2670 [ 1182.555996][T28204] __mm_populate+0x25b/0x3b0 [ 1182.560598][T28204] vm_mmap_pgoff+0x1d6/0x290 [ 1182.565205][T28204] ksys_mmap_pgoff+0xd0/0x330 [ 1182.569903][T28204] x64_sys_call+0x1940/0x2dc0 [ 1182.574589][T28204] do_syscall_64+0xc9/0x1c0 [ 1182.579096][T28204] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1182.585010][T28204] [ 1182.587333][T28204] value changed: 0x0000000000000000 -> 0xffffc90002b17ca8 [ 1182.594531][T28204] [ 1182.596854][T28204] Reported by Kernel Concurrency Sanitizer on: [ 1182.603003][T28204] CPU: 0 UID: 0 PID: 28204 Comm: syz.0.20785 Not tainted 6.13.0-rc3-syzkaller-00209-g499551201b5f #0 [ 1182.613899][T28204] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 1182.624234][T28204] ================================================================== [ 1182.681211][T28207] bond2: entered promiscuous mode [ 1182.686299][T28207] bond2: entered allmulticast mode [ 1182.692033][T28207] 8021q: adding VLAN 0 to HW filter on device bond2