last executing test programs: 3.261793157s ago: executing program 4 (id=196): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x103400, 0x0) ioctl$TIOCVHANGUP(r2, 0x5437, 0x300) openat$binfmt_register(0xffffffffffffff9c, 0x0, 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x801}, 0x1c) listen(r4, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r6 = accept(r3, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000240)=ANY=[], 0xfffffdef}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x2000a804) ioctl$ifreq_SIOCGIFINDEX_wireguard(r6, 0x8933, 0x0) r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r7, 0x0, 0x4804}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f0000000840)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000800)={&(0x7f0000000d40)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="000129bd7000ffdbdf25010000", @ANYRES16=r0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="800102803c00010024000100757365725f6c696e6bbb4700000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRESOCT, @ANYBLOB="3c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYBLOB="f600f1eb34a875aef53b778c303fee5ca52060b50b6b5af0791cbd669f8a25f38f6bf55f3b2f7892c721412bd1ef7ee76d8e11e01108877388cb8a21927e3180d3f5b513d3ce08a185cb932cc01c82e32a9d6310e1a169e41a5d53d5951a911fcb00b0b75e5ad34af7d86f52081bde3c6db5c6191ff78b92716424827f4a3e11770d5a0817a840a01f07434acc540d72590e8636f37585b77a08d8e6b84cd78a7fa2af3f0c74eccd9f2f162ba85947b99efe4ea9857d9239e2711a693f00717963ed7a9ed2c07e90b750e935a0504303c6b0938bf48f6b1696c361be9d7eca1c3a6179da362e7d8cfc105e70af8f69511f42", @ANYBLOB="3c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="3c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32, @ANYBLOB="38000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004002cad000054000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b000000", @ANYRESOCT=r4, @ANYRESDEC=r1, @ANYRES8, @ANYRESOCT, @ANYRESOCT], 0x1e8}, 0x1, 0x0, 0x0, 0x20000000}, 0x1c004) 2.367875054s ago: executing program 4 (id=202): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0, 0x0, 0xd76}, 0x18) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newtfilter={0x40, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xf}, {}, {0x7, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x10, 0x2, [@TCA_FLOW_EMATCHES={0xc, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}]}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x2008c014) 2.347976745s ago: executing program 4 (id=203): open(&(0x7f0000000080)='./file0\x00', 0x108242, 0x124) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x101, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="070000000400000000010000"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r4, 0x0, 0x7}, 0x18) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) open(&(0x7f00000001c0)='./file0\x00', 0x300, 0x40) 2.314048385s ago: executing program 4 (id=205): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000001480)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r0, 0x0, 0x4804}, 0x18) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000500)={0x1, &(0x7f00000004c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) set_mempolicy_home_node(&(0x7f0000146000/0x1000)=nil, 0x1000, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="190000000400000004000000"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) close(0xffffffffffffffff) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x7}, 0x18) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="d8000000180081054e81f783db4cb9040a1d080006007c09e8fc55a10a0015000600142603600e1208000f00fff00401a80008000800104004080000055c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb71b14d6d930dfe144ecc447c65e206d25b4084121d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300fc0d15", 0xd8}], 0x1}, 0x4000000) socket$nl_generic(0x10, 0x3, 0x10) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) getpgrp(0x0) (fail_nth: 4) 2.299749296s ago: executing program 3 (id=206): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000000)='./file2\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='nodots,dmask=00000000000000000000003,usefree,nodots,flush,dots,dots,gid=', @ANYRESHEX=0x0, @ANYBLOB], 0x1, 0x214, &(0x7f0000000840)="$eJzs3D1rW1cYB/AjWa6tlhZPhXbpoV3a5bb10qVDS3GhVNCSRCEv0zWWEyFFAl8NksmgOVM+RwhkCWQL+QL+DFmymYDx5Ck3OJKs2NixE0dy4vx+ix6e/z1X5+jARVy9bP5+91ZjNUtW004ozRdC8Y/QDzuFsBCKYaQffnpwZfvOxavX/v2zUlm6MDvsx/jVd4+v377//ZPOF5cf7nYKIYStxWcbX298s/ni0s16FutZbLU7MY3L7XYnXW7W4ko9ayQx/t+spVkt1ltZbW1fvtpsj5861LIspq1ebNR6sdOOnbVeTG+k9VZMkiTOB06lem8nz8NWnuf5XD/kef62JyhMZl5Myyn3n4/c3kU97l5Nn/e71W518DjI//6nsvRLfGVhPGq7263O7OW/DvK4P58Nnw/zxUPzz8KPPwzy3eyv/yoH8nJYmfzyAQAAAADgXErinkPv7yfJUfmgeu3zgQP370vh29K4MzP5pQAAAABHyHrrjbS5Mrs2KJq1Myvmwv7Ob4+GUzxu+M9Pjz9mQsWXwyK843nKIYSjjymGM9+U6RSj75EPO6PfF5xseOl9TaP8gbwao2I+HBaVw3pjbjqbAgAAnC/jN/0nHlKc6IQAAAAAAAAAAAAAAAAAAADgEzSNPzM76zUCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALzJywAAAP//ixdW4w==") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000004c0), 0x208e24b) ftruncate(r0, 0xf4ff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000940)=@newqdisc={0x288, 0x24, 0x3fe3aa0262d8c783, 0x4, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x258, 0x2, [@TCA_CHOKE_PARMS={0xffffffffffffff12, 0x1, {0xc596, 0x2, 0x0, 0x0, 0x2}}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x65, 0x2, 0x3, 0x17, 0xd, 0x8, 0x1}}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x2}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x6}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x1f, 0x0, 0x4}}]}}]}, 0x288}, 0x1, 0x0, 0x0, 0x4040055}, 0x0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f0000003080)={0x20, 0x0, 0xe6e964277ae08d57, 0x70bd2a, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x8040000}, 0x90) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000100)={'ip6tnl0\x00', 0x0, 0x0, 0x1, 0x8, 0x9, 0x20, @empty, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x721, 0x1, 0x8, 0x4}}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x13) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000b00)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000040)={'lo\x00'}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000200100000102"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bc00551a000000000000000018120000", @ANYRES32=r4, @ANYBLOB], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) setsockopt$inet_mreqn(r2, 0x0, 0x27, &(0x7f0000000180)={@multicast1, @loopback}, 0xc) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) writev(r7, &(0x7f0000000840)=[{&(0x7f0000000540)="2e9b3d0007e03dd65193dfb6c575963f86dd", 0x12}], 0x12) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000240)={&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000000c0)="59d88d1974148ab0142203554e9576855513a9641174be4bbb4c79f32270edadefd31581b12389f4113fef8d07fad6a5b1dc069d3e88611a46", 0x39}, 0x68) 2.241414057s ago: executing program 2 (id=207): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0xffffffff, 0xfd}, 0x0, 0x0, 0x800000, 0x6, 0x2, 0xcb, 0xffff, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x1) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x2, 0x3, 0x0, 0x3, 0xe, 0x0, 0x70bd2c, 0x25dfdbfc, [@sadb_key={0x2, 0x9, 0x8, 0x0, "1c"}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback, 0x2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback, 0x7}}]}, 0x70}, 0x1, 0x7}, 0x0) perf_event_open(&(0x7f0000001180)={0xa, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x440, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb7, 0x2, @perf_config_ext={0x80, 0xffffffffffffffff}, 0x10000, 0x3, 0x5, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000d}, 0x0, 0xffffff8000000000, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x11, 0x2, 0x4}, 0x0, 0x0) syz_io_uring_setup(0x6d3b, &(0x7f0000000340)={0x0, 0x8f71, 0x10100, 0x3, 0x3cd}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x1, &(0x7f0000000780)=[{0x200000000006, 0xf, 0x6, 0x7ffc1ffb}]}) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000000c0)=ANY=[@ANYRESHEX=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x0, 0x0}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) r5 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x30046, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r5) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000040), 0x81}, 0x38) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r6, 0x0, 0x6}, 0x18) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r7, &(0x7f0000000500)="a4", 0x34000, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x2000000, @loopback, 0xffffffff}, 0x1c) r8 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r8, 0x80, &(0x7f0000000100)=@vsock={0x28, 0x0, 0x4e22}, 0x0, 0x0, 0x1}) 2.08782291s ago: executing program 4 (id=209): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, 0x0}, 0x94) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x400) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480), 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) futex(&(0x7f000000cffc)=0x1, 0xd, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0xd, 0x0, &(0x7f0000000000)={0x77359400}, 0x0, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={r0, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0], 0x0, 0xde, &(0x7f0000000200)=[{}], 0x8, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0x98, 0x8, 0x8, &(0x7f00000004c0)}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="1b00000000000000000000000080e0c96b4772fb666a1e8280c71f143cfa5e7d7a7a83386f0103d63ca2d675d81366788c686cd9fc6229300b79efb43fa75c2b69ae029eb8d6e27336b541b024ce3d6e9e20f49c58bf155ce512dcf663fbe08c987ce78a4eb4a73096281e06788514014569c623957a5f37f38621f27e4d9899570f5d48711a010134c3c82a8645b01949d833682880fff336733e38eb823188eab2"], 0x48) 2.07346707s ago: executing program 1 (id=210): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = socket(0xa, 0x3, 0xff) connect$inet6(r0, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) ioctl$BTRFS_IOC_LOGICAL_INO(r1, 0xc0389424, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffffc}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000030000850000001b000000b7000000f7ba000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000180)={0x0, 'batadv_slave_1\x00', {0x3}, 0x8}) getpid() bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000700000000000000000000850000"], &(0x7f00000001c0)='GPL\x00', 0x4}, 0x94) mount_setattr(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x9900, &(0x7f0000000300)={0x4, 0x0, 0x100000}, 0x20) 2.0602348s ago: executing program 3 (id=211): ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x24, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001500)=ANY=[], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000000000070a0f0018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000300850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x18) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x3, 0x801, 0x0, &(0x7f0000000040), 0xfffffffc) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) mlock2(&(0x7f0000495000/0x2000)=nil, 0x2000, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000380)={0x1d, 0x0, 0x1, {0x0, 0x1, 0x3}, 0xfe}, 0x18) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) statfs(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000780)=""/73) sendmmsg$sock(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, 0x0, &(0x7f0000000380)='$\x00', 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_DISALLOCATE(r6, 0x5608) 1.848908154s ago: executing program 1 (id=212): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x103400, 0x0) ioctl$TIOCVHANGUP(r2, 0x5437, 0x300) openat$binfmt_register(0xffffffffffffff9c, 0x0, 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x801}, 0x1c) listen(r4, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r6 = accept(r3, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000240)=ANY=[], 0xfffffdef}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x2000a804) ioctl$ifreq_SIOCGIFINDEX_wireguard(r6, 0x8933, 0x0) r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r7, 0x0, 0x4804}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f0000000840)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000800)={&(0x7f0000000d40)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="000129bd7000ffdbdf25010000", @ANYRES16=r0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="800102803c00010024000100757365725f6c696e6bbb4700000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRESOCT, @ANYBLOB="3c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYBLOB="f600f1eb34a875aef53b778c303fee5ca52060b50b6b5af0791cbd669f8a25f38f6bf55f3b2f7892c721412bd1ef7ee76d8e11e01108877388cb8a21927e3180d3f5b513d3ce08a185cb932cc01c82e32a9d6310e1a169e41a5d53d5951a911fcb00b0b75e5ad34af7d86f52081bde3c6db5c6191ff78b92716424827f4a3e11770d5a0817a840a01f07434acc540d72590e8636f37585b77a08d8e6b84cd78a7fa2af3f0c74eccd9f2f162ba85947b99efe4ea9857d9239e2711a693f00717963ed7a9ed2c07e90b750e935a0504303c6b0938bf48f6b1696c361be9d7eca1c3a6179da362e7d8cfc105e70af8f69511f42", @ANYBLOB="3c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="3c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32, @ANYBLOB="38000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004002cad000054000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b000000", @ANYRESOCT=r4, @ANYRESDEC=r1, @ANYRES8, @ANYRESOCT, @ANYRESOCT], 0x1e8}, 0x1, 0x0, 0x0, 0x20000000}, 0x1c004) 1.679800017s ago: executing program 2 (id=213): ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) gettid() timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001500)=ANY=[@ANYBLOB="07000000040000008000000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000000000070a0f0018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000300850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x18) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x3, 0x801, 0x0, &(0x7f0000000040), 0xfffffffc) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) mlock2(&(0x7f0000495000/0x2000)=nil, 0x2000, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000380)={0x1d, 0x0, 0x1, {0x0, 0x1, 0x3}, 0xfe}, 0x18) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) statfs(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000780)=""/73) fsopen(0x0, 0x0) 1.664127848s ago: executing program 0 (id=214): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0, 0x0, 0xd76}, 0x18) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newtfilter={0x44, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xf}, {}, {0x7, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_EMATCHES={0x10, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x4}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x2008c014) 1.520498461s ago: executing program 0 (id=215): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0xffffffff, 0xfd}, 0x0, 0x0, 0x800000, 0x6, 0x2, 0xcb, 0xffff, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x1) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x2, 0x3, 0x0, 0x3, 0x10, 0x0, 0x70bd2c, 0x25dfdbfc, [@sadb_key={0x2, 0x9, 0x8, 0x0, "1c"}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback, 0x2}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x7, 0xc}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback, 0x7}}]}, 0x80}, 0x1, 0x7}, 0x0) perf_event_open(&(0x7f0000001180)={0xa, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x440, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb7, 0x2, @perf_config_ext={0x80, 0xffffffffffffffff}, 0x10000, 0x3, 0x5, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000d}, 0x0, 0xffffff8000000000, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x11, 0x2, 0x4}, 0x0, 0x0) syz_io_uring_setup(0x6d3b, &(0x7f0000000340)={0x0, 0x8f71, 0x10100, 0x3, 0x3cd}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x1, &(0x7f0000000780)=[{0x200000000006, 0xf, 0x6, 0x7ffc1ffb}]}) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) r6 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x30046, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r6) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000040), 0x81, r7}, 0x38) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r8, 0x0, 0x6}, 0x18) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r9, &(0x7f0000000500)="a4", 0x34000, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x2000000, @loopback, 0xffffffff}, 0x1c) r10 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r10, 0x80, &(0x7f0000000100)=@vsock={0x28, 0x0, 0x4e22}, 0x0, 0x0, 0x1}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 1.253650936s ago: executing program 0 (id=216): open(&(0x7f0000000080)='./file0\x00', 0x108242, 0x124) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x101, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="070000000400000000010000"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r4, 0x0, 0x7}, 0x18) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) open(&(0x7f00000001c0)='./file0\x00', 0x300, 0x40) 1.171962047s ago: executing program 0 (id=217): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0xffffffff, 0xfd}, 0x0, 0x0, 0x800000, 0x6, 0x2, 0xcb, 0xffff, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x2, 0x3, 0x0, 0x3, 0x10, 0x0, 0x70bd2c, 0x25dfdbfc, [@sadb_key={0x2, 0x9, 0x8, 0x0, "1c"}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback, 0x2}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x7, 0xc}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback, 0x7}}]}, 0x80}, 0x1, 0x7}, 0x0) perf_event_open(&(0x7f0000001180)={0xa, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x440, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb7, 0x2, @perf_config_ext={0x80, 0xffffffffffffffff}, 0x10000, 0x3, 0x5, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000d}, 0x0, 0xffffff8000000000, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x11, 0x2, 0x4}, 0x0, 0x0) syz_io_uring_setup(0x6d3b, &(0x7f0000000340)={0x0, 0x8f71, 0x10100, 0x3, 0x3cd}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x1, &(0x7f0000000780)=[{0x200000000006, 0xf, 0x6, 0x7ffc1ffb}]}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000000c0)=ANY=[@ANYRESHEX, @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x0, 0x0}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) r4 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x30046, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r4) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000040), 0x81}, 0x38) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r5, 0x0, 0x6}, 0x18) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r6, &(0x7f0000000500)="a4", 0x34000, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x2000000, @loopback, 0xffffffff}, 0x1c) r7 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000100)=@vsock={0x28, 0x0, 0x4e22}, 0x0, 0x0, 0x1}) 935.672872ms ago: executing program 1 (id=218): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r0, 0x0, 0x8}, 0x18) r1 = socket$inet_sctp(0x2, 0x5, 0x84) close(r1) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000280)=[@in={0x2, 0x4e23, @private=0xa010100}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) sendmsg$inet_sctp(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000380)="de99effe3e0d", 0x6}], 0x1, &(0x7f00000000c0)=[@sndinfo={0x20, 0x84, 0x2, {0x6, 0x5, 0x28, 0x200000b, r3}}], 0x20, 0x2400e044}, 0x0) 902.065483ms ago: executing program 1 (id=219): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001140)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELRULE={0x160, 0x8, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFTA_RULE_EXPRESSIONS={0xcc, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_FIB_RESULT={0x8}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0xd}]}}}, {0x28, 0x1, 0x0, 0x1, @objref={{0xb}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_OBJREF_IMM_TYPE={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_OBJREF_IMM_NAME={0x9, 0x2, 'syz2\x00'}]}}}, {0x28, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x200}]}}}, {0x3c, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_MASQ_REG_PROTO_MAX={0x8, 0x3, 0x1, 0x0, 0x12}, @NFTA_MASQ_FLAGS={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_MASQ_FLAGS={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_MASQ_REG_PROTO_MAX={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_MASQ_REG_PROTO_MAX={0x8, 0x3, 0x1, 0x0, 0x3}]}}}, {0xc, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @void}}]}, @NFTA_RULE_USERDATA={0x60, 0x7, 0x1, 0x0, "afa2c312c0aedf1105ac11df87eaf697c1a6edc6a50cb7b770a7c75567d6541915b097b2e17eb26815aece4aa2e16d3723cb440d460eb3da121d26ed4cb78be1896ec23844c0a0823ee195fd10ab35d3d1cf0056ece76161dda74aaf"}, @NFTA_RULE_ID={0x8}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x188}, 0x1, 0x0, 0x0, 0x94}, 0x24000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0x64}, 0x1, 0x0, 0x0, 0x4044050}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000340)='system.posix_acl_default\x00', &(0x7f0000000340)=ANY=[], 0xfe44, 0x2) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, &(0x7f0000001100)={0x77359400}, 0x1) 771.658195ms ago: executing program 2 (id=220): r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000340), 0x210000, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000003c0)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc2, 0x0, 0x0, 0x0}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x2, &(0x7f0000000240)={0x3, &(0x7f0000000140)=[{0x5, 0xd9, 0x9, 0x7fff}, {0xf7, 0xb, 0x81}, {0x1, 0x42, 0x5, 0x3}]}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010025bd7000ffdbdf250b0000000c0005800800000000000000"], 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x844) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x18, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r5}, 0x10) move_mount(0xffffffffffffff9c, 0x0, 0xffffffffffffffff, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$tipc(0x1e, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) r8 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x0, 0x0, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10) close_range(r6, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000380)={{0x1, 0x1, 0x18, r1, {0x4}}, './file0\x00'}) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r9, @ANYRESOCT=r0], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r10, 0x0, 0x2}, 0x18) quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000080)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c000000100001002abd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="014004000042010008002800d04d0000a2000e00fdffffffffffffff1202ffffffffffff2100000000000000f8ff011000000000"], 0x4c}, 0x1, 0x0, 0x0, 0x48000}, 0x8) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="f4eaf60150bea65d9456ce03c5471bb0bf10a0d41222f93dcf194123a1c1e8611fa97fc111ae9d7f1598c4307ee66afd90dea2606642dffbfe87ccb91e3262e98a72514b69f965d34e0c280e4ee565b8875eb1c39f9a955bfb04659b1dedf1cfa8eb7164898d4bedc8b259955404d6fde10871f0d8b3ac324c694a54f9e7b35119ba48ee1da9311a74063cde6b3674fb5f0ebee39c4238a6baf739b88a5a05af4e66e004998e9a7045d992a4348ba7f82e4147fe361f032f0ac04972411e6d"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 716.861266ms ago: executing program 0 (id=221): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000000)='./file2\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='nodots,dmask=00000000000000000000003,usefree,nodots,flush,dots,dots,gid=', @ANYRESHEX=0x0, @ANYBLOB], 0x1, 0x214, &(0x7f0000000840)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000004c0), 0x208e24b) ftruncate(r0, 0xf4ff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000940)=@newqdisc={0x288, 0x24, 0x3fe3aa0262d8c783, 0x4, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x258, 0x2, [@TCA_CHOKE_PARMS={0xffffffffffffff12, 0x1, {0xc596, 0x2, 0x0, 0x0, 0x2}}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x65, 0x2, 0x3, 0x17, 0xd, 0x8, 0x1}}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x2}, @TCA_CHOKE_STAB={0x104, 0x2, "4ea5d6d92761fecea7aa7d992e9705ce2f7193bbd545bff87e6f0ce0f6e1d1d24148fdb33871b609f1081530d33cb44e1ce2fd5f427a4ab027c6d6281f12939d5808fe1c8dfdffbe56d2470de63a1c6356a48d3ce3ffcb6d0f78912c3ea6bcd108aec1fe753d6b6a3d9ae71d1038ccc31772049fbd6f1ad92546ee199afd8fd077c072623fa3c1761be4c90cf20464b08f186e15247e37b81be1f56b27721e6b6e8481c97ccdc66fbe4f388262edb2581c7480dad9c737a83f22f0fe2128a9c2980d5fcf9ce33157d879cc64dbc60edbe4cfb65c47e2438e00b32561364865215333af75a703ccfad4a30ef2537be8f7aecd1e1bcf8702b604e51cbaa387985e"}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x6}, @TCA_CHOKE_STAB={0x104, 0x2, "a2a88faa7ec665a571a9ad3d1f9512e3c591df4a4554c6c2e2cc6cb4d9aee4579684743ad4888f1522a47ddaff3d4f9450d288e8559bc4f795aa0d1bc74d926038adb808cba6e90535b2eb8ba3e8ff927207d17a86b10d604e77a459df67e7f0c842d463ca5977b7e2eb55fbb9881d15633717817c735da52a1da7d64bb22e58550d8ee20883e41ec2f119a6a6364d68900c1cce4a3b3225a9ce9e1e00b444e9e7bcd10e1dec202ce7786aa7cf10d4dd6bbcee586d7903a6239ff90b49cd7fddb0c67ddab326cdb2d0fa48a783f691be9ebaa1243b21afd04a372650aa7eb46a2675cc67ae12d3b99c9acb4d9fb7c78081d269b443affd86eededd4867311221"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x1f, 0x0, 0x4}}]}}]}, 0x288}, 0x1, 0x0, 0x0, 0x4040055}, 0x0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f0000003080)={0x20, 0x0, 0xe6e964277ae08d57, 0x70bd2a, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x8040000}, 0x90) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000100)={'ip6tnl0\x00', 0x0, 0x0, 0x1, 0x8, 0x9, 0x20, @empty, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x721, 0x1, 0x8, 0x4}}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x13) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000b00)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000040)={'lo\x00'}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000200100000102"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bc00551a000000000000000018120000", @ANYRES32=r4, @ANYBLOB], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) setsockopt$inet_mreqn(r2, 0x0, 0x27, &(0x7f0000000180)={@multicast1, @loopback}, 0xc) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) writev(r7, &(0x7f0000000840)=[{&(0x7f0000000540)="2e9b3d0007e03dd65193dfb6c575963f86dd", 0x12}], 0x12) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000240)={&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000000c0)="59d88d1974148ab0142203554e9576855513a9641174be4bbb4c79f32270edadefd31581b12389f4113fef8d07fad6a5b1dc069d3e88611a46", 0x39}, 0x68) 714.430296ms ago: executing program 3 (id=222): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kmem_cache_free\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) fsync(0xffffffffffffffff) 688.698627ms ago: executing program 3 (id=223): openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_async', 0x242, 0x2e0) prctl$PR_SET_MM_AUXV(0x23, 0xc, 0x0, 0x1) r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000000000000000000006dfeff00850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x10) rt_sigtimedwait(0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB], 0x48) r2 = inotify_init() inotify_add_watch(r2, &(0x7f00000007c0)='./cgroup.cpu/cgroup.procs\x00', 0x402) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00'}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000800)='ext4_request_blocks\x00', r3}, 0x18) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/input/devices\x00', 0x0, 0x0) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000001600)=""/4094, 0xffe}], 0x1, 0xf0, 0xd215) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', 0xffffffffffffffff, 0x0, 0x2}, 0x18) r5 = syz_open_dev$usbfs(&(0x7f0000000040), 0x400000001fb, 0x101301) ioctl$USBDEVFS_SUBMITURB(r5, 0x8038550a, &(0x7f0000000080)=@urb_type_control={0x2, {}, 0xfffffff8, 0x40, &(0x7f0000000000)={0x20, 0xc, 0xb, 0xfffd, 0xfffc}, 0x8, 0x3, 0x8, 0x0, 0x2, 0x20000, 0x0}) epoll_create1(0x80000) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x408e, &(0x7f0000000240)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@min_batch_time={'min_batch_time', 0x3d, 0xfff}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x100}}, {@stripe={'stripe', 0x3d, 0x4000}}, {@sysvgroups}, {@minixdf}]}, 0x3, 0x43a, &(0x7f0000000340)="$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") r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000e00)='./file0\x00', 0x9001) renameat2(r6, &(0x7f0000000480)='./file0\x00', r6, &(0x7f0000000040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1a, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xeb, '\x00', 0x0, @tracing=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000640)='kfree\x00', r7}, 0x18) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, 0x0, 0xf00) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/cgroup.procs\x00', 0x2c0182, 0x20) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r8, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 502.55977ms ago: executing program 2 (id=224): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0xffffffff, 0xfd}, 0x0, 0x0, 0x800000, 0x6, 0x2, 0xcb, 0xffff, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x1) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x2, 0x3, 0x0, 0x3, 0xe, 0x0, 0x70bd2c, 0x25dfdbfc, [@sadb_key={0x2, 0x9, 0x8, 0x0, "1c"}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback, 0x2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback, 0x7}}]}, 0x70}, 0x1, 0x7}, 0x0) perf_event_open(&(0x7f0000001180)={0xa, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x440, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb7, 0x2, @perf_config_ext={0x80, 0xffffffffffffffff}, 0x10000, 0x3, 0x5, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000d}, 0x0, 0xffffff8000000000, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x11, 0x2, 0x4}, 0x0, 0x0) syz_io_uring_setup(0x6d3b, &(0x7f0000000340)={0x0, 0x8f71, 0x10100, 0x3, 0x3cd}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x1, &(0x7f0000000780)=[{0x200000000006, 0xf, 0x6, 0x7ffc1ffb}]}) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000000c0)=ANY=[@ANYRESHEX=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x0, 0x0}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) r5 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x30046, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r5) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000040), 0x81}, 0x38) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r6, 0x0, 0x6}, 0x18) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r7, &(0x7f0000000500)="a4", 0x34000, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x2000000, @loopback, 0xffffffff}, 0x1c) r8 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r8, 0x80, &(0x7f0000000100)=@vsock={0x28, 0x0, 0x4e22}, 0x0, 0x0, 0x1}) 501.01145ms ago: executing program 3 (id=225): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x5, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff9}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000100), 0x2, 0x4fd, &(0x7f0000000b00)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101042, 0x45) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000140)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x8041, 0x1c3) pwrite64(r2, &(0x7f0000000140)="f6", 0xffffff07, 0x8000c61) creat(&(0x7f00000000c0)='./bus\x00', 0x1a2) ioctl$EXT4_IOC_MIGRATE(r2, 0x6609) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r0}, 0x18) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16, @ANYBLOB="0180000000000b00000004000000400001"], 0x54}}, 0x0) 473.368751ms ago: executing program 4 (id=226): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, 0x0}, 0x94) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x400) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="b7020000ff0d0000bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000006f6400000000000045040400010000001704000001000a00b7040000ff0100006a0a00fe0000000085000000bd000000b70000000000000095000000000000009e17f199a68b06d83298a8cdc21ce784909b849d5550ad857d0454d8877a6db61d69f2ffcaa10350e11cb97c8adf1bc9a0c4eeceb9971e43405d621ffbc9ce000000d8ca56b50d0c010d631f6dde53a9a53608c10556e5734eb84049761451ce540c772e2d9f8004e26f7fcc059c062234d5595f6fbaa187b81d1106000000000fd60000fd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7e43c5cbd80450f859ce8122a79c3e40000b59b0fc46d6cec3c0802882add4e3179bd4a44f231b6d753a7be428ba953df4aece69311687f4122073a236c3a32efa04137d4524847d2638da3261c8162bb7c7824be6195a66d2e17e122040e1100000000928612a29fc691e4f1f7bd053abb885f39381f1759410b1059f05684261f332d606834669b49ec99320ca7712d7e79bd5bf5ed818ecc7640917f6a559a47db608fcf9f6c131b84e41c354c66838f72b9e12d36e996f316f0812ca83efb30c7f6c6d57c4a64590401eec22523dd712c680013e87f649a1ede7142ca9d5d8a8c9f9b440fe4331ad5532c74d9a31a5d737537f7a2caa30581253d14dd3e92af7dc836686365ae01bdec561c0402b67801267a8df97d2f85426a5963d4fa3e26cc05972c162f223f000000d999e80de00fcbcc02d0aed7bb8f7ba337d59c14f39dcd4aad4139ef6425a9367f1bd1467fc6b95a4df7669839771ce9d5788029901e5a79d8b9990ace8f74087f25ad50c46088000000008000"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480), 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) futex(&(0x7f000000cffc)=0x1, 0xd, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0xd, 0x0, &(0x7f0000000000)={0x77359400}, 0x0, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000001000)={0xffffffffffffffff, 0x0, 0x25, 0x0, @val=@uprobe_multi={&(0x7f0000000e40)='./file0\x00', &(0x7f0000001040)=[0x800, 0x2, 0x9, 0x681d, 0x2c0a, 0x7, 0x7], &(0x7f0000000ec0)=[0x2, 0x2, 0x5, 0x4, 0x3, 0x0, 0x0], 0x7, 0x7, 0x1}}, 0x40) syz_emit_ethernet(0xffe, &(0x7f00000029c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa202b25cac47d88a809008100210086dd619440010fc02cffff010000000000000000000000000001fe8000000000000000000000000000127c8f971b09bd236c2670d104c4924a41d8dd248957bf0083a494b36647b120d3af1947e818b1dcf8745a6e5dbf1b406e41721ea5cca5e33e4f671007d4e8ea378d522e24e4791220d7cc04a5f794cc8df56364de9fcc72045e1d07c08bd6c99be45e98edd8bc3aa8c1e4ed0fb7ba953e185a8a2a8c4559c76ce2dda9107fc12d2c9dafa37a4ac05c6c8bf57e74a35358d01f85eb82d72acb4d0791d3815369e33975d8bdaf4756ab5c7cf02a9255b8e1e5c35e0eea79d8946123da1a29f6d66a2c492974367427c90da58da20451925fc585361793ffa1d80399bf4367231b390a642de2a10f1584b328abdb66f6920f8d6874eb3417daa63c4791231f7bb077792c3eb0310b643dee86ce5225fcadf54874805d79218f32729918c3c0a58098f6564611132835aeb5ddb076da81358ee22cf43c90c3340c408edf90b9c094d93bf79beb5dbebf2aecef469a12417304b6cbdf5f9784b9bd58f65b1fe942ed045667e10c5dc43cbdfd81109b008c8e17f537c2cb51443baaf7fef3601f51eeb0dbd383a6a17b8d8b3137454900c6b2fcd5d9f66ac7c8beefe3aa6ad3d447ef7255675152f8f44c8fb817a07269d4bad19889fec6699164d1ac495a402255edd8c9cf6700d91a064f70b862b9d137e3b17e70cc3b0529ce133c575538e86802e3d62758088303003fc4241350042393a9e9b4eeb817b4e25fb279619d5832b5f142cde59ae8bf3b4e447e53056a18d18b30a83435dfe571fa726b3b0d7fe21034d59fe79a1c210cb7216837f8de0c0347e0fa9fddde564adaf4704bf5383dcf18f0b917133f487a7831424c392b339207e92868b95fd83437efc83367cd154af0934ee6e91cbbf0e02d29fb1fb13483c6e27af038cc5e47e051b1e8584d20603e303c1fda7d2e3daf05655cb37b60bf3022f9794f4c85baddf3423e1932eafe3f4f03fedbe4dae896bce8506267a0d5e5d6ba46f11f6bf9abadbfd82b4832709e2f3077d683a43926b6995811fbb893053354faf44633e273324e6272399265104f2d144786c5863a9f31d6cadc3bc1d2035b12dadfadcf4d4755f894a36d07cc1fc2729dff6d5f3fdba2a4f3f210149bb5a1dccf13c0539d711e987dfc4083fdd55a1c6aaa06af7fa0000e405f1141d6ba0cb67a99bef91050e1ac9f1bfa460eac0edd41ecf4dbfd03a04cb1ebca4d5c8164a54c2b19eeb640c3656bb4dcaa0b3327d999c4c31523bdbe1b58647a0a926414ac5f0aaced637a46ecbcc532cc791c298b0361010dfdbe0227c2d982ae426b2579b09eb13b7e3ee4f615731039fb27bde4d60d0bafa7cc39dc505aa6efb40b2f63965f9d97408d180739a455a52b4cb7c7a4b55b28f72cbd5bd8b8d74a65d6f1fcc91bbe4e3024a9f97763ea686ed9b6fa9b6fd3bf14aa78976239eb8f3aea4597dc0f45b56ae40904aa11cbae163a54ae0acf2c3d8765e8c862695e3ea0561d89db2e643e0b8835e3c749dfe9dd6a1ca1b5e91a10c355d3d869b4dff2016da1962194781aebd6f538f6a961f417fd1214397e9afdbd346331b0c3afa42fc39ac6f4f5cf538e77643da4e3a1bc8f2a66fe8d0b6668333594c8cf848667dbb3675db87e35be888ef9cb9a3b75aedf324baec98117630fcbb13ecbc9c979ad74bb066a5aabdc016d09f860ffa99b9efc8339b9f918296cc08b1e2248051723248f7643ae42429f6fffa1aa66a5968203f21880514f7ec56a8838b96e281b88a53df09403fd3b79a81415a9f918157aa2f6cb79f7596e5496805c75d7221a8a675205472029b0b256e992ca4d372bde3ee8207cb6f8db7152356c6c4be7b084d18146cd76c9d7ea473e131095d9fd6dd1cef40c7f688af4a4e047df7fdce41c316511e8e9cc8d4311b84611fc1af0412e82e81ce71bb2b91dacc014326a34f8730fedf4e74de845132df8d51eca7cc3f23538c662540f2e301b5830b4f83c71310635114e5f03d951cd11c41008833c35d0d207bf2db55e889d392aab7c4b68ebe8c648877a27b4f078515ac50fd726bb51fcf35e35a9dfa1b9bae42b4d061c02a1cf64d3e8cf6a3025f7d2fef2114b4afd283b07c465005d8b5806247038fa96af52232c3eb2f80b5644fdeb3aa237b13141529510fbf97cd0d7ef2ba85a80a01ca7692a33d7ad398c96d085111d42484c281353d0d07deb323aec703cec370da17f801a4e39698a596f10c1f012fc3c9825fb289ec004a7a316cbe7df3fd45fcd9710cbce98af9e9e58aacae74abed22c0080bca8e037bba91a7ffd8b54da87c65ef8629c8597c22257d1e0e0816e4c211abc2024d54e2ddb8f62345d6bd3e17b11672ba15f976414e3a10f9dd6a78ed3bb1f2b5e2259ac2937c6a40209f1ddcbf2677fd9198b54c193e38ca094487b002245e385385c182229140a693f9ac08246f1c2b1c42044df5e9e85e7dc3083002fdacb3b1b04fef8f57b5965cdc5b3a8b6a771c54cf4f92825937bd3506a464578d33a8f4e7eaa49210dc665e816f3b79b9bfe721269037431d798c7475703dad6a08254a0973857aeded69d3441d2bf90d6559570407c8ddda09207bff0292621d0d09813a3f1c212dd39dc79b83a2c2c29f963186919bd4c10e4fc5ae2ca2a478f693a232e2ffa132fcde472b210d87321aa6d5a36214d7367b7296993c3a84214f03d0ed7cc2e8ea2b8906552f093ee9086f80e1d8c41eb243b31cb3ca1d58891cfb5960478acf4627ef4ba070c9fbba5ebb8a13411f33a33e094443873c6e8d9823292363814d6c54ec098075768f40992cbca4b8910f848df862d31d0f948a845d1dff53c9d0f1297c2580e36b8127d3acf146cd210bd0683dca2039686af76d52623d5913353d110c63c3c530d8e004d62443ef7fba4e71c9e8ba367f0abf9d1a752b422be585c249ee34af9d23ea98951bed0bd2f29add1e8e97f3ffbfa979bba96cdccd5930110cb01569f7b4a4d0f83901ff936c0fe18db142ae97b7ec23af55d943af1ad78b83e7dfaff729471c240e75cbbc5cb9941eb27bbff38ebc6f27bea46695b3ae4a4a460773443285c6329a798303c3f5093cb8da1ea158f162e46fcb6c1a30cd3037b052a0939e65460676434a2d056be4ac9b38d340d1f784dcbf05cde2c7338bf356fcbffd2be4a7607ca55598fe5b6a6cf2fe5287225142e681af82718732ca64a5a0eade1607349a56944091f3f1fb06d69e7e1f2d83ddc5c28c19609d661088dcd7fce89ed2f4feeb277962417e072a40fb73c7552718586be5c61210fae515c394c25ade16daa95c89693815cdd4301cf664b28ad0ae4a455bdc9b3ab82129ead9c27f6a26c5de7ae90f6f2690fd56035489c184e85dd5d013a691b44876300f107e285167c344c5e60086bc8463f009680d4d51316c662d820b36aa4a137752df97a8f0f405c62bc67d346fbcceb6394899e5514f8f576cd985b431a792c0c83c7ce173f887a47b016740eb4f1d05d5dd05550c84f8e8396942fb60024a3bd7cc365a82fcae5a80212aa52932a6129c8337442e7af8884de9784e8319e460b211f781702ab0d3c85a639133cae5e7186fce436732f29dfa9e2f0fd82bd146a7576869c97c3f67d913ab4d03db7f64dc64146b7637062e225ea8c6cea65a00bac6620307fe53d50d2476d5969ee347e8d09456e56273f8a8a0433a394f49f9c0f051f5da6e7d9f91127ce86b92f5fb4a24423d76c789281bc40c34ac379d6119c89562a189ce7219cf9360d036125efa459f78d7ee8248600811e61c7ede4234a8f53137e9c678532954fdd17758920f56df57527aafbf330883c67480b98edb93404e8a3237b8595c7ce1b41325441366d424cda797dd7dbea0721866d304d585c42eac28a9076df525afa4f410fca787bfb516f2245d0ee6c6de43637cfc1a0fc769c9e4ad82f1d0fd3c438c469d3ad0c35082e31f209f3464a46e6402a639c9035ca8ad3978d144cb347bccd87c7f8a983a614e58fe7da6f662709fcec6619c5140401d9772c387f7971239034d0f1d4d94645ad4d5848f95fe0860f388f8d3beba5e29fcda9cf942473c344610983f0f7f79b824402bba731a4e8c2bc2d3470cd1007bc6744f95364da2a361ee5c8d9fea99c9e23a67efd1b45bb54bd5e3cc906d9fb297eec1d94027b3f0befb38a95b8011e6341bd43fc49fb602a1437bd1c6398e18492aa83267aa5771d6bcd36554c536d81817dc0fee213a3a533454918f259c90ec6db38e455cf67c66dc6ce2d32560089ec699692bcfe9b86b73dc4f30a0b91cc850137c2b268b1219b644a3e528a9494c1a6c87953ed3d65d0ed9a7b247490a878a2206754fe37b79d8733f1e1fd1a19562e224303b36b5f8a038a5d52b370fa8d91f984c1fa526a26b59a8d07fbb48a5e56c3bc67aa10699c56ef6aecdcf252ead3fe810c9c8fe481bf8b71715ed50b7f768bbf92a630d7afd67f098d8fbb9100d53d6f786e5cde0f826f7b283080699f8d2e85c04e40cb41ca4ce90a7d8fdaeff5edeb578434f0d24b6881385c013ab309f05138966fdfa7feb9aaf25fe9f85d52e41182022abfdfb67be0f4d01074054fea47703e1f4d2e08578c8065ef55a31e77f60ce674c895d79e41a67142ed95c65d57461cbd4ceab7552241b0f2680e1fffe66fd37325a7acaab96931b58dbfb589742afb74490f55984f27f6ae101a566d9794952091a6065bddc8feee0e80548c2789db6b6705f6e476dba487ab8f35807c3d52f57b29037e86aec1d6b6cb7cfe6668f732222bc7b2112aa6458dba7b6696809f6e7a3d4a6225721a0ee45cdd1a49c8f3dcb9481d4fc03cfc326c9993c33e064e74b89fa78003b0a2744a79db45a397816b4945294883802a09f895d70ca8f7e3df749b339f252f4f2bdd3238ef4dcbde946d7f608654271afccee3839d15c4fbdad1e92aefb1a28de22dfa18f915b66ac4e7ed132748f0fb8d77b9fea24e229b743d32f7e155361d0412fb211b923cc73a3127d1a1a51aa19ac0dab35b5fd38527ac00744d0e235f143326511b48e2cffe885c64c90d524bb6483742dc041aa118e01745abe5a39477308dda5550aa373b53d7ef1f4d37910db4eab938e2f7f1a1d82dd42316ccdc2d741426c83c7ad9d9acb8eef78892408d5bb7023eb1cf1919cd867606059cbf3a063382f4b984bd043f68d8c5869a03c287877c456e47ffab7a417c0f31bd5715889bbcd6c6f272adfebb2a05d2b7209d02dc725f069eeaeb92fedfb64f7e34b4684e59937352074d7cca8b9d8b0122a215b031b9fbea5bc2162c0ad2f8b2fc267b456f4230bbf5d38aa769347d405d1fe203378771841249d46a5c8e4f7971652c04e884639d6266b6087ee1ebd3"], 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={r0, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0], 0x0, 0xde, &(0x7f0000000200)=[{}], 0x8, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0x98, 0x8, 0x8, &(0x7f00000004c0)}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="1b00000000000000000000000080e0c96b4772fb666a1e8280c71f143cfa5e7d7a7a83386f0103d63ca2d675d81366788c686cd9fc6229300b79efb43fa75c2b69ae029eb8d6e27336b541b024ce3d6e9e20f49c58bf155ce512dcf663fbe08c987ce78a4eb4a73096281e06788514014569c623957a5f37f38621f27e4d9899570f5d48711a010134c3c82a8645b01949d833682880fff336733e38eb823188eab2"], 0x48) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000280), 0x802, 0x0) 215.645016ms ago: executing program 2 (id=227): openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_async', 0x242, 0x2e0) prctl$PR_SET_MM_AUXV(0x23, 0xc, 0x0, 0x1) r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000000000000000000006dfeff00850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x10) rt_sigtimedwait(0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = inotify_init() inotify_add_watch(r2, &(0x7f00000007c0)='./cgroup.cpu/cgroup.procs\x00', 0x402) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00'}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000800)='ext4_request_blocks\x00', r3}, 0x18) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/input/devices\x00', 0x0, 0x0) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000001600)=""/4094, 0xffe}], 0x1, 0xf0, 0xd215) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', 0xffffffffffffffff, 0x0, 0x2}, 0x18) r5 = syz_open_dev$usbfs(0x0, 0x400000001fb, 0x101301) ioctl$USBDEVFS_SUBMITURB(r5, 0x8038550a, &(0x7f0000000080)=@urb_type_control={0x2, {}, 0xfffffff8, 0x40, &(0x7f0000000000)={0x20, 0xc, 0xb, 0xfffd, 0xfffc}, 0x8, 0x3, 0x8, 0x0, 0x2, 0x20000, 0x0}) epoll_create1(0x80000) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x408e, &(0x7f0000000240)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@min_batch_time={'min_batch_time', 0x3d, 0xfff}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x100}}, {@stripe={'stripe', 0x3d, 0x4000}}, {@sysvgroups}, {@minixdf}]}, 0x3, 0x43a, &(0x7f0000000340)="$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") r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000e00)='./file0\x00', 0x9001) renameat2(r6, &(0x7f0000000480)='./file0\x00', r6, &(0x7f0000000040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1a, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xeb, '\x00', 0x0, @tracing=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000640)='kfree\x00', r7}, 0x18) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, 0x0, 0xf00) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/cgroup.procs\x00', 0x2c0182, 0x20) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r8, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 144.168217ms ago: executing program 0 (id=228): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000000)='./file2\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='nodots,dmask=00000000000000000000003,usefree,nodots,flush,dots,dots,gid=', @ANYRESHEX=0x0, @ANYBLOB], 0x1, 0x214, &(0x7f0000000840)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000004c0), 0x208e24b) ftruncate(r0, 0xf4ff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000940)=@newqdisc={0x288, 0x24, 0x3fe3aa0262d8c783, 0x4, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x258, 0x2, [@TCA_CHOKE_PARMS={0xffffffffffffff12, 0x1, {0xc596, 0x2, 0x0, 0x0, 0x2}}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x65, 0x2, 0x3, 0x17, 0xd, 0x8, 0x1}}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x2}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x6}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x1f, 0x0, 0x4}}]}}]}, 0x288}, 0x1, 0x0, 0x0, 0x4040055}, 0x0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f0000003080)={0x20, 0x0, 0xe6e964277ae08d57, 0x70bd2a, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x8040000}, 0x90) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000100)={'ip6tnl0\x00', 0x0, 0x0, 0x1, 0x8, 0x9, 0x20, @empty, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x721, 0x1, 0x8, 0x4}}) socket$inet_tcp(0x2, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x13) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000b00)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'lo\x00'}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000200100000102"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bc00551a000000000000000018120000", @ANYRES32=r3], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) truncate(&(0x7f0000000040)='./file0\x00', 0x7) r5 = socket$netlink(0x10, 0x3, 0x0) writev(r5, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001d80)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000850000002300000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) writev(r6, &(0x7f0000000840)=[{&(0x7f0000000540)="2e9b3d0007e03dd65193dfb6c575963f86dd", 0x12}], 0x12) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000240)={&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000000c0)="59d88d1974148ab0142203554e9576855513a9641174be4bbb4c79f32270edadefd31581b12389f4113fef8d07fad6a5b1dc069d3e88611a46", 0x39}, 0x68) 125.898878ms ago: executing program 3 (id=229): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='\v\x00\x00\x00\a\x00\x00\x00\b\x00\x00\x00\b\x00\x00'], 0x48) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x1e, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xffffffff}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ldst={0x3, 0x1, 0x1, 0xa, 0x8, 0xfffffffffffffffc, 0xfffffffffffffffc}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x81}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000000c0)='syzkaller\x00', 0x5, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x1, 0x2}, 0x8, 0x10, &(0x7f0000000140)={0x5, 0x8, 0x1, 0x2}, 0x10, 0x0, 0x0, 0x8, &(0x7f0000000440)=[r0, r0, r0, r0, r0, r0, r0, r0, r0, r0], &(0x7f0000000480)=[{0x1, 0x2, 0x8, 0xc}, {0x3, 0x2, 0x7, 0x7}, {0x1, 0x3, 0x7, 0x6}, {0x5, 0x2, 0x6, 0xa}, {0x1, 0x3, 0x4}, {0x1, 0x3, 0x95f, 0xa}, {0x4, 0x4, 0x2, 0x7}, {0x2, 0x4, 0xf, 0xa}], 0x10, 0x8000}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{r0, 0xffffffffffffffff}, &(0x7f00000005c0), &(0x7f0000000600)=r1}, 0x20) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000800), 0x4) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="0000000000000000b7020000111e6ca5b70300000000b1098500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x59, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f00000009c0)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r5}, 0x10) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000042c0)=@bpf_ext={0x1c, 0x4, &(0x7f00000043c0)=ANY=[@ANYBLOB="1800000000000000000000000000000000000081c8336256ce9bdde873a1b33d1892276fbfd22a7d0000000000000000000000000054ea7846514d1e1e772dd195241ff445a59931136c32fda8a4ef0055f466162d81f9d69b065f"], &(0x7f0000004100)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000, 0x54, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000004200)={0x1, 0xd, 0x8001, 0xffffffff}, 0x10, 0x27f4, r5, 0x2, &(0x7f0000004240)=[r4], &(0x7f0000004280)=[{0x1, 0x2, 0x3, 0x1}, {0x4, 0x2, 0xf, 0x7}]}, 0x94) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000a00)=ANY=[@ANYBLOB="180100000700002c0000000000000004850000"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80001}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x59, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5e8, &(0x7f0000001200)="$eJzs3c9vFdUeAPDv3P6gpbzXQl7ee7iQJsZAorS0gCHGBWwNafBH3Lix0oJIgYbWaNGEkuDGxLgxxsSVC/G/UCJbVrpy4caVISFqWJp4zdzOlP6Y2x+X207T+XySS2fOmeGc4fLtOXPuOXMDqKzB9I9axMGImE4i+pP5xbzOyDIHF4579OdH59NXEvX6a78nkWRp+fFJ9rMvO7knIn78IYkDHavLnZm7cXl8amryerY/PHtlenhm7sbRS1fGL05enLw6+sLoqZMnTp4aOdbSdd0sSDt7+933+z8Ze/Obr/5KRr79ZSyJ0/FyduDS62iXwRhs/Jskq7P6TrW7sJJ0ZP9Plr7FSWeJFWJT8vevKyL+F/3REY/fvP74+JVSKwdsqXoSUQcqKhH/UFF5PyC/t195H1wrpVcCbIeHZxYGAFbHf+fC2GD0NMYG9j5KYumwThIRrY3MLbcvIu7fG7t94d7Y7diicTig2PytiPh/UfwnjfgfiJ4YaMR/bVn8p/2Cc9nPNP3VFstfOVQs/mH7LMR/z5rxH03i/60l8f92i+UPPt58p3dZ/Pe2ekkAAAAAAABQWXfPRMTzRZ//1xbn/0TB/J++iDjdhvIHV+yv/vy/9qANxQAFHp6JeKlw/m8tn/070JFt/asxH6AruXBpavJYRPw7Io5E1550f2SNMo5+euDLZnmD2fy//JWWfz+bC5jV40HnnuXnTIzPjj/pdQMRD29FPFU4/zdZbP+TgvY//X0wvcEyDjx751yzvPXjH9gq9a8jDhe2/4+fWpGs/XyO4UZ/YDjvFaz29Ieffdes/Fbj3yMm4Mml7f/eteN/IFn6vJ6ZzZdxfK6z3iyv1f5/d/J645Ez3VnaB+Ozs9dHIrqTsx1p6rL00c3XGXajPB7yeEnj/8gza4//FfX/eyNifsXfnfyxfE1x7r9/9/3arD76/1CeNP4nNtX+b35j9M7A983K31j7f6LR1h/JUoz/wYIv8jDtXp5eEI6dRVnbXV8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA2A1qEbEvktrQ4natNjQU0RcR/4m9talrM7PPXbj23tWJNK/x/f+1/Jt++xf2k/z7/weW7I+u2D8eEfsj4vOO3sb+0PlrUxNlXzwAAAAAAAAAAAAAAAAAAADsEH1N1v+nfusou3bAlussuwJAaQri/6cy6gFsP+0/VJf4h+oS/1Bd4h+qq8X472p3PYDtp/2H6hL/UF3iHwAAAAAAdpX9h+7+nETE/Iu9jVeqO8szvwd2t1rZFQBK4xE/UF2m/kB1uccHknXye5qetN6Za5k+/wQnAwAAAAAAAAAAAEDlHD5o/T9UlfX/UF3W/0N15ev/D5VcD2D7uccHYp2V/IXr/9c9CwAAAAAAAAAAAABop5m5G5fHp6Ymr9t4Y2dUox0b6Tu7kYPr9frNxrEtlbVnB1zpjtrIp8LvlPqs2MjX+m3srNJ+JQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACv8EwAA//8IGSKz") r8 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x1) r9 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r9, &(0x7f0000004200)='t', 0x1) sendfile(r9, r8, 0x0, 0x3ffff) sendfile(r9, r8, 0x0, 0x7ffff000) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f60000008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r10], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r11}, 0x10) r12 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000004440)=ANY=[@ANYBLOB="9feb010018000000004000000c0000000c000000020000000000ea3053bccd50fc110000000080b61e34988a833085f2eefb4f8e4503614c06c85d8d0eaec3ee429f34e3f4963ebf6e76c618daf04cab22733695ae6f27d0bacbd945682ff71f6dc284048f72f0477d394c69e9d0cc97b66ad44c87e740ccb911d843607ad6ac9e18be46a028692fe28d59367b4063a72662cf59667a6aca71d8d90565873edb029fb012c9d3239de9b3ab4a23b56df739c4b98c7a8374"], 0x0, 0x26}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r12, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x2, 0x2, &(0x7f0000000000)=@raw=[@btf_id={0x18, 0x6, 0x3, 0x0, 0x3}], 0x0, 0x7, 0x0, 0x0, 0x41100, 0x11, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r13, r7, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000004380)={r6, 0xffffffffffffffff, 0x16, 0x0, @val=@target_btf_id=r13}, 0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x17, 0x24, &(0x7f0000000680)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x8}, [@cb_func={0x18, 0xa, 0x4, 0x0, 0xfffffffffffffffe}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x400}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x2}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffff800}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f00000007c0)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x3e, '\x00', 0x0, @fallback=0x13, r3, 0x8, &(0x7f0000000840)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000880)={0x1, 0xa, 0x2, 0x10000}, 0x10, r13, r1, 0x9, 0x0, &(0x7f00000008c0)=[{0x2, 0x4, 0xd, 0x8}, {0x0, 0x4, 0x0, 0x4}, {0x2, 0x2, 0x4, 0x8}, {0x2, 0x5, 0x1, 0xb}, {0x0, 0x4, 0xf, 0x6}, {0x5, 0x3, 0x1000}, {0x1, 0x2, 0xa, 0x2}, {0x0, 0x4, 0x9, 0x1}, {0x3, 0x3, 0x4, 0xc}], 0x10, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRES8=r0, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) 39.927569ms ago: executing program 1 (id=230): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kmem_cache_free\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) fsync(0xffffffffffffffff) 682.619µs ago: executing program 2 (id=231): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r0, 0x0, 0x8}, 0x18) r1 = socket$inet_sctp(0x2, 0x5, 0x84) close(r1) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000280)=[@in={0x2, 0x4e23, @private=0xa010100}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) sendmsg$inet_sctp(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000380)="de99effe3e0d", 0x6}], 0x1, &(0x7f00000000c0)=[@sndinfo={0x20, 0x84, 0x2, {0x6, 0x5, 0x28, 0x200000b, r3}}], 0x20, 0x2400e044}, 0x0) 0s ago: executing program 1 (id=232): ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) gettid() timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001500)=ANY=[@ANYBLOB="07000000040000008000000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000000000070a0f0018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000300850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x18) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x3, 0x801, 0x0, &(0x7f0000000040), 0xfffffffc) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) mlock2(&(0x7f0000495000/0x2000)=nil, 0x2000, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000380)={0x1d, 0x0, 0x1, {0x0, 0x1, 0x3}, 0xfe}, 0x18) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) fsopen(0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.118' (ED25519) to the list of known hosts. [ 34.092556][ T29] audit: type=1400 audit(1759218134.696:62): avc: denied { mounton } for pid=3291 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 34.093921][ T3291] cgroup: Unknown subsys name 'net' [ 34.115924][ T29] audit: type=1400 audit(1759218134.696:63): avc: denied { mount } for pid=3291 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 34.143386][ T29] audit: type=1400 audit(1759218134.726:64): avc: denied { unmount } for pid=3291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 34.245880][ T3291] cgroup: Unknown subsys name 'cpuset' [ 34.252328][ T3291] cgroup: Unknown subsys name 'rlimit' [ 34.393799][ T29] audit: type=1400 audit(1759218134.996:65): avc: denied { setattr } for pid=3291 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 34.419835][ T29] audit: type=1400 audit(1759218135.006:66): avc: denied { create } for pid=3291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 34.440355][ T29] audit: type=1400 audit(1759218135.006:67): avc: denied { write } for pid=3291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 34.461756][ T29] audit: type=1400 audit(1759218135.006:68): avc: denied { read } for pid=3291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 34.482675][ T29] audit: type=1400 audit(1759218135.006:69): avc: denied { mounton } for pid=3291 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 34.492765][ T3293] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 34.507913][ T29] audit: type=1400 audit(1759218135.006:70): avc: denied { mount } for pid=3291 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 34.540359][ T29] audit: type=1400 audit(1759218135.126:71): avc: denied { relabelto } for pid=3293 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 34.552829][ T3291] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 36.399262][ T3300] chnl_net:caif_netlink_parms(): no params data found [ 36.491979][ T3300] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.499583][ T3300] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.507385][ T3300] bridge_slave_0: entered allmulticast mode [ 36.514002][ T3300] bridge_slave_0: entered promiscuous mode [ 36.520890][ T3300] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.528190][ T3300] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.535856][ T3300] bridge_slave_1: entered allmulticast mode [ 36.542555][ T3300] bridge_slave_1: entered promiscuous mode [ 36.559024][ T3306] chnl_net:caif_netlink_parms(): no params data found [ 36.583939][ T3300] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.610019][ T3300] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.650512][ T3306] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.657880][ T3306] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.665524][ T3306] bridge_slave_0: entered allmulticast mode [ 36.672371][ T3306] bridge_slave_0: entered promiscuous mode [ 36.687346][ T3300] team0: Port device team_slave_0 added [ 36.698697][ T3306] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.706296][ T3306] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.713713][ T3306] bridge_slave_1: entered allmulticast mode [ 36.720267][ T3306] bridge_slave_1: entered promiscuous mode [ 36.734110][ T3300] team0: Port device team_slave_1 added [ 36.764767][ T3306] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.781660][ T3300] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.788702][ T3300] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.814740][ T3300] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.827388][ T3300] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.834391][ T3300] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.860610][ T3300] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.872364][ T3306] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.886833][ T3309] chnl_net:caif_netlink_parms(): no params data found [ 36.924527][ T3306] team0: Port device team_slave_0 added [ 36.933965][ T3306] team0: Port device team_slave_1 added [ 36.940001][ T3303] chnl_net:caif_netlink_parms(): no params data found [ 36.960084][ T3300] hsr_slave_0: entered promiscuous mode [ 36.966197][ T3300] hsr_slave_1: entered promiscuous mode [ 36.992081][ T3312] chnl_net:caif_netlink_parms(): no params data found [ 37.004204][ T3306] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.011220][ T3306] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.037916][ T3306] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.051989][ T3306] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.059272][ T3306] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.085577][ T3306] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.151553][ T3306] hsr_slave_0: entered promiscuous mode [ 37.157767][ T3306] hsr_slave_1: entered promiscuous mode [ 37.163831][ T3306] debugfs: 'hsr0' already exists in 'hsr' [ 37.170256][ T3306] Cannot create hsr debugfs directory [ 37.196979][ T3309] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.204164][ T3309] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.212784][ T3309] bridge_slave_0: entered allmulticast mode [ 37.219250][ T3309] bridge_slave_0: entered promiscuous mode [ 37.226099][ T3309] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.233171][ T3309] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.240654][ T3309] bridge_slave_1: entered allmulticast mode [ 37.247271][ T3309] bridge_slave_1: entered promiscuous mode [ 37.282170][ T3309] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.317348][ T3309] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.329261][ T3303] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.336747][ T3303] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.344151][ T3303] bridge_slave_0: entered allmulticast mode [ 37.350843][ T3303] bridge_slave_0: entered promiscuous mode [ 37.360655][ T3303] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.367793][ T3303] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.375100][ T3303] bridge_slave_1: entered allmulticast mode [ 37.382200][ T3303] bridge_slave_1: entered promiscuous mode [ 37.388749][ T3312] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.396078][ T3312] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.403466][ T3312] bridge_slave_0: entered allmulticast mode [ 37.410162][ T3312] bridge_slave_0: entered promiscuous mode [ 37.429637][ T3309] team0: Port device team_slave_0 added [ 37.452551][ T3312] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.459750][ T3312] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.468108][ T3312] bridge_slave_1: entered allmulticast mode [ 37.474698][ T3312] bridge_slave_1: entered promiscuous mode [ 37.484064][ T3309] team0: Port device team_slave_1 added [ 37.525118][ T3303] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.538070][ T3312] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.547591][ T3309] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.554651][ T3309] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.581327][ T3309] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.595568][ T3303] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.616604][ T3312] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.626427][ T3309] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.633605][ T3309] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.659707][ T3309] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.693683][ T3303] team0: Port device team_slave_0 added [ 37.702533][ T3303] team0: Port device team_slave_1 added [ 37.730761][ T3309] hsr_slave_0: entered promiscuous mode [ 37.736894][ T3309] hsr_slave_1: entered promiscuous mode [ 37.742754][ T3309] debugfs: 'hsr0' already exists in 'hsr' [ 37.748507][ T3309] Cannot create hsr debugfs directory [ 37.759434][ T3312] team0: Port device team_slave_0 added [ 37.777389][ T3312] team0: Port device team_slave_1 added [ 37.793642][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.800709][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.826883][ T3303] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.838151][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.845162][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.871325][ T3303] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.890331][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.897460][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.923822][ T3312] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.939762][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.946782][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.973564][ T3312] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.009621][ T3300] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 38.018343][ T3300] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 38.046210][ T3300] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 38.057337][ T3300] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 38.068968][ T3312] hsr_slave_0: entered promiscuous mode [ 38.075420][ T3312] hsr_slave_1: entered promiscuous mode [ 38.081491][ T3312] debugfs: 'hsr0' already exists in 'hsr' [ 38.087304][ T3312] Cannot create hsr debugfs directory [ 38.097224][ T3303] hsr_slave_0: entered promiscuous mode [ 38.103363][ T3303] hsr_slave_1: entered promiscuous mode [ 38.109405][ T3303] debugfs: 'hsr0' already exists in 'hsr' [ 38.115174][ T3303] Cannot create hsr debugfs directory [ 38.181272][ T3306] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 38.192173][ T3306] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 38.216191][ T3306] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 38.225504][ T3306] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 38.301811][ T3309] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 38.311219][ T3309] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 38.320800][ T3309] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 38.342763][ T3309] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 38.353536][ T3312] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 38.369185][ T3312] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 38.378718][ T3312] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 38.389506][ T3312] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 38.419500][ T3300] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.436187][ T3303] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 38.449523][ T3303] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 38.463125][ T3303] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 38.476044][ T3300] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.491867][ T3303] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 38.506156][ T151] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.513583][ T151] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.529914][ T151] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.537204][ T151] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.589186][ T3306] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.620378][ T3306] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.637364][ T3309] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.656846][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.664015][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.678578][ T3309] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.693764][ T3312] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.702250][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.709388][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.738585][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.745812][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.754373][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.761594][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.778498][ T3303] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.789614][ T3312] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.804841][ T3303] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.816375][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.823558][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.834506][ T3300] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.854894][ T151] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.862076][ T151] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.882650][ T151] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.889831][ T151] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.900995][ T151] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.908284][ T151] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.995558][ T3303] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 39.044044][ T3306] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.096153][ T3300] veth0_vlan: entered promiscuous mode [ 39.107222][ T3300] veth1_vlan: entered promiscuous mode [ 39.137759][ T3312] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.149427][ T3309] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.161955][ T3300] veth0_macvtap: entered promiscuous mode [ 39.176861][ T3303] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.201323][ T3300] veth1_macvtap: entered promiscuous mode [ 39.234109][ T3300] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.256111][ T3300] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.275603][ T31] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.301495][ T3306] veth0_vlan: entered promiscuous mode [ 39.309382][ T31] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.337266][ T3306] veth1_vlan: entered promiscuous mode [ 39.348700][ T31] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.360611][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 39.360628][ T29] audit: type=1400 audit(1759218139.966:81): avc: denied { mounton } for pid=3300 comm="syz-executor" path="/root/syzkaller.kMHI21/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 39.400096][ T3306] veth0_macvtap: entered promiscuous mode [ 39.400400][ T29] audit: type=1400 audit(1759218139.996:82): avc: denied { mount } for pid=3300 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 39.409813][ T3303] veth0_vlan: entered promiscuous mode [ 39.428253][ T29] audit: type=1400 audit(1759218139.996:83): avc: denied { mounton } for pid=3300 comm="syz-executor" path="/root/syzkaller.kMHI21/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 39.442274][ T135] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.460152][ T29] audit: type=1400 audit(1759218139.996:84): avc: denied { mount } for pid=3300 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 39.472064][ T3306] veth1_macvtap: entered promiscuous mode [ 39.490857][ T29] audit: type=1400 audit(1759218139.996:85): avc: denied { mounton } for pid=3300 comm="syz-executor" path="/root/syzkaller.kMHI21/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 39.514046][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.523600][ T29] audit: type=1400 audit(1759218140.006:86): avc: denied { mounton } for pid=3300 comm="syz-executor" path="/root/syzkaller.kMHI21/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=4297 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 39.546050][ T3303] veth1_vlan: entered promiscuous mode [ 39.559405][ T29] audit: type=1400 audit(1759218140.006:87): avc: denied { unmount } for pid=3300 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 39.573755][ T3309] veth0_vlan: entered promiscuous mode [ 39.599995][ T29] audit: type=1400 audit(1759218140.086:88): avc: denied { mounton } for pid=3300 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 39.609341][ T3309] veth1_vlan: entered promiscuous mode [ 39.623425][ T29] audit: type=1400 audit(1759218140.086:89): avc: denied { mount } for pid=3300 comm="syz-executor" name="/" dev="gadgetfs" ino=5140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 39.640471][ T3309] veth0_macvtap: entered promiscuous mode [ 39.664316][ T3300] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 39.670589][ T3309] veth1_macvtap: entered promiscuous mode [ 39.692423][ T29] audit: type=1400 audit(1759218140.296:90): avc: denied { read write } for pid=3300 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 39.736868][ T3309] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.747328][ T3303] veth0_macvtap: entered promiscuous mode [ 39.767426][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.783693][ T3309] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.792658][ T3303] veth1_macvtap: entered promiscuous mode [ 39.816404][ T135] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.843606][ T3312] veth0_vlan: entered promiscuous mode [ 39.852113][ T3312] veth1_vlan: entered promiscuous mode [ 39.866915][ T3312] veth0_macvtap: entered promiscuous mode [ 39.874708][ T3312] veth1_macvtap: entered promiscuous mode [ 39.885783][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.894765][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.908871][ T135] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.924065][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.970181][ T135] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.979692][ T135] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.988872][ T135] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.999283][ T135] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.008547][ T135] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.027990][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.080996][ T135] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.113953][ T135] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.130095][ T3478] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 40.148375][ T3476] process 'syz.3.6' launched '/dev/fd/9' with NULL argv: empty string added [ 40.162766][ T135] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.189497][ T3483] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3'. [ 40.213126][ T135] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.249161][ T3486] netlink: 'syz.3.6': attribute type 1 has an invalid length. [ 40.256842][ T3486] netlink: 224 bytes leftover after parsing attributes in process `syz.3.6'. [ 40.287758][ T3485] loop0: detected capacity change from 0 to 1024 [ 40.296224][ T135] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.307146][ T135] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.319658][ T3485] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 40.331308][ T3485] EXT4-fs (loop0): group descriptors corrupted! [ 40.338318][ T135] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.393687][ T135] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.433814][ T135] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.447680][ T3495] netlink: 14 bytes leftover after parsing attributes in process `syz.0.8'. [ 40.520575][ T3500] loop1: detected capacity change from 0 to 512 [ 40.535599][ T3500] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 40.548999][ T3500] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 40.613362][ T3500] EXT4-fs (loop1): 1 truncate cleaned up [ 40.620109][ T3500] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.672968][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.763900][ T3507] loop1: detected capacity change from 0 to 1024 [ 40.771532][ T3507] EXT4-fs: Ignoring removed orlov option [ 40.804105][ T3507] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.168303][ T3522] syz.1.10 (3522) used greatest stack depth: 10736 bytes left [ 41.229265][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.242399][ T3536] loop2: detected capacity change from 0 to 128 [ 41.275667][ T3535] loop0: detected capacity change from 0 to 512 [ 41.300773][ T3539] loop1: detected capacity change from 0 to 1024 [ 41.316497][ T3535] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.317471][ T3536] syz.2.13: attempt to access beyond end of device [ 41.317471][ T3536] loop2: rw=2049, sector=154, nr_sectors = 6 limit=128 [ 41.336676][ T3541] loop4: detected capacity change from 0 to 2048 [ 41.349637][ T3535] ext4 filesystem being mounted at /2/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 41.363448][ T3539] ======================================================= [ 41.363448][ T3539] WARNING: The mand mount option has been deprecated and [ 41.363448][ T3539] and is ignored by this kernel. Remove the mand [ 41.363448][ T3539] option from the mount to silence this warning. [ 41.363448][ T3539] ======================================================= [ 41.381848][ T3535] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #2: comm syz.0.16: corrupted inode contents [ 41.399787][ T3536] syz.2.13: attempt to access beyond end of device [ 41.399787][ T3536] loop2: rw=2049, sector=158, nr_sectors = 2 limit=128 [ 41.423765][ T3536] Buffer I/O error on dev loop2, logical block 79, lost async page write [ 41.444169][ T3536] syz.2.13: attempt to access beyond end of device [ 41.444169][ T3536] loop2: rw=2049, sector=160, nr_sectors = 2 limit=128 [ 41.457972][ T3536] Buffer I/O error on dev loop2, logical block 80, lost async page write [ 41.470270][ T3536] syz.2.13: attempt to access beyond end of device [ 41.470270][ T3536] loop2: rw=2049, sector=162, nr_sectors = 6 limit=128 [ 41.486946][ T3535] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #2: comm syz.0.16: mark_inode_dirty error [ 41.499308][ T3539] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 41.513573][ T3541] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 41.528839][ T3547] loop3: detected capacity change from 0 to 128 [ 41.532921][ T3535] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #2: comm syz.0.16: corrupted inode contents [ 41.549793][ T3539] ext4 filesystem being mounted at /4/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 41.560580][ T3535] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #2: comm syz.0.16: mark_inode_dirty error [ 41.572045][ T3536] syz.2.13: attempt to access beyond end of device [ 41.572045][ T3536] loop2: rw=2049, sector=166, nr_sectors = 2 limit=128 [ 41.575557][ T3555] netlink: 28 bytes leftover after parsing attributes in process `syz.0.16'. [ 41.585645][ T3536] Buffer I/O error on dev loop2, logical block 83, lost async page write [ 41.603762][ T3547] syz.3.18: attempt to access beyond end of device [ 41.603762][ T3547] loop3: rw=2049, sector=154, nr_sectors = 6 limit=128 [ 41.613234][ T3539] EXT4-fs error (device loop1): ext4_map_blocks:814: inode #15: comm syz.1.15: lblock 0 mapped to illegal pblock 0 (length 6) [ 41.631436][ T3547] syz.3.18: attempt to access beyond end of device [ 41.631436][ T3547] loop3: rw=2049, sector=158, nr_sectors = 2 limit=128 [ 41.644955][ T3547] Buffer I/O error on dev loop3, logical block 79, lost async page write [ 41.657412][ T3536] syz.2.13: attempt to access beyond end of device [ 41.657412][ T3536] loop2: rw=2049, sector=168, nr_sectors = 2 limit=128 [ 41.671178][ T3536] Buffer I/O error on dev loop2, logical block 84, lost async page write [ 41.680462][ T3547] syz.3.18: attempt to access beyond end of device [ 41.680462][ T3547] loop3: rw=2049, sector=160, nr_sectors = 2 limit=128 [ 41.693817][ T3547] Buffer I/O error on dev loop3, logical block 80, lost async page write [ 41.702447][ T3539] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117 [ 41.704584][ T3547] syz.3.18: attempt to access beyond end of device [ 41.704584][ T3547] loop3: rw=2049, sector=162, nr_sectors = 6 limit=128 [ 41.715032][ T3539] EXT4-fs (loop1): This should not happen!! Data will be lost [ 41.715032][ T3539] [ 41.739866][ T3556] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 41.749722][ T3536] Buffer I/O error on dev loop2, logical block 91, lost async page write [ 41.767679][ T3536] Buffer I/O error on dev loop2, logical block 92, lost async page write [ 41.772739][ T3561] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 41.779382][ T3547] Buffer I/O error on dev loop3, logical block 83, lost async page write [ 41.792490][ T3556] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 594 with error 28 [ 41.802446][ T3536] Buffer I/O error on dev loop2, logical block 103, lost async page write [ 41.813103][ T3556] EXT4-fs (loop4): This should not happen!! Data will be lost [ 41.813103][ T3556] [ 41.813124][ T3556] EXT4-fs (loop4): Total free blocks count 0 [ 41.837445][ T3558] netlink: 'syz.3.18': attribute type 4 has an invalid length. [ 41.837741][ T3556] EXT4-fs (loop4): Free/Dirty block details [ 41.851526][ T3556] EXT4-fs (loop4): free_blocks=2415919104 [ 41.857308][ T3556] EXT4-fs (loop4): dirty_blocks=608 [ 41.862685][ T3556] EXT4-fs (loop4): Block reservation details [ 41.868761][ T3556] EXT4-fs (loop4): i_reserved_data_blocks=38 [ 41.870724][ T3561] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 60 with max blocks 4 with error 28 [ 41.887776][ T3561] EXT4-fs (loop1): This should not happen!! Data will be lost [ 41.887776][ T3561] [ 41.887798][ T3561] EXT4-fs (loop1): Total free blocks count 0 [ 41.887815][ T3561] EXT4-fs (loop1): Free/Dirty block details [ 41.887831][ T3561] EXT4-fs (loop1): free_blocks=4293918720 [ 41.887848][ T3561] EXT4-fs (loop1): dirty_blocks=48 [ 41.887862][ T3561] EXT4-fs (loop1): Block reservation details [ 41.937745][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.973706][ T3566] loop0: detected capacity change from 0 to 128 [ 42.027515][ T3561] syz.1.15 (3561) used greatest stack depth: 10024 bytes left [ 42.028348][ T409] EXT4-fs error (device loop1): ext4_map_blocks:814: inode #15: block 8: comm kworker/u8:7: lblock 8 mapped to illegal pblock 8 (length 8) [ 42.051228][ T3556] sctp: [Deprecated]: syz.4.17 (pid 3556) Use of int in maxseg socket option. [ 42.051228][ T3556] Use struct sctp_assoc_value instead [ 42.136939][ T3572] loop2: detected capacity change from 0 to 1024 [ 42.137354][ T3572] EXT4-fs: Ignoring removed orlov option [ 42.152177][ T3572] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.154104][ T3574] loop3: detected capacity change from 0 to 128 [ 42.203628][ T151] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 28 [ 42.248821][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.265892][ T3574] netlink: 'syz.3.22': attribute type 4 has an invalid length. [ 42.280974][ T3584] loop1: detected capacity change from 0 to 1024 [ 42.288053][ T3584] EXT4-fs: Ignoring removed orlov option [ 42.328850][ T3584] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.351326][ T3593] loop2: detected capacity change from 0 to 1024 [ 42.359521][ T3593] EXT4-fs: Ignoring removed orlov option [ 42.375776][ T3593] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.401150][ T3596] syz.0.29 uses obsolete (PF_INET,SOCK_PACKET) [ 42.418679][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.439584][ T3598] loop3: detected capacity change from 0 to 512 [ 42.466603][ T3598] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 42.471771][ T3599] loop0: detected capacity change from 0 to 1024 [ 42.487295][ T3599] EXT4-fs: Ignoring removed nomblk_io_submit option [ 42.496579][ T3599] ext4: Unknown parameter 'smackfshat' [ 42.503172][ T3598] EXT4-fs (loop3): 1 truncate cleaned up [ 42.517199][ T3599] netlink: zone id is out of range [ 42.522483][ T3599] netlink: zone id is out of range [ 42.527821][ T3599] netlink: zone id is out of range [ 42.532966][ T3599] netlink: zone id is out of range [ 42.538138][ T3599] netlink: zone id is out of range [ 42.543272][ T3599] netlink: zone id is out of range [ 42.548441][ T3599] netlink: zone id is out of range [ 42.553567][ T3599] netlink: zone id is out of range [ 42.558806][ T3599] netlink: zone id is out of range [ 42.564052][ T3599] netlink: zone id is out of range [ 42.572029][ T3598] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.611036][ T3300] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.706774][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.881604][ T3624] netlink: 'syz.3.34': attribute type 5 has an invalid length. [ 42.937382][ T3628] bond1: entered promiscuous mode [ 42.942528][ T3628] bond1: entered allmulticast mode [ 42.950694][ T3628] 8021q: adding VLAN 0 to HW filter on device bond1 [ 42.961732][ T3628] bond1 (unregistering): Released all slaves [ 43.171647][ T3640] loop4: detected capacity change from 0 to 1024 [ 43.178959][ T3640] EXT4-fs: Ignoring removed orlov option [ 43.196340][ T3640] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.241412][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.278051][ T3646] loop4: detected capacity change from 0 to 1024 [ 43.284806][ T3645] loop0: detected capacity change from 0 to 1024 [ 43.292146][ T3645] EXT4-fs: Ignoring removed orlov option [ 43.301806][ T3645] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.323113][ T3646] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.337441][ T3646] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.374656][ T3651] loop1: detected capacity change from 0 to 512 [ 43.384703][ T3651] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 43.403923][ T3651] EXT4-fs (loop1): 1 truncate cleaned up [ 43.410409][ T3651] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.490058][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.541257][ T3662] loop4: detected capacity change from 0 to 128 [ 43.628326][ T3662] netlink: 'syz.4.47': attribute type 4 has an invalid length. [ 43.702370][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.726169][ T3678] netlink: 8 bytes leftover after parsing attributes in process `syz.3.53'. [ 43.736356][ T3678] FAULT_INJECTION: forcing a failure. [ 43.736356][ T3678] name failslab, interval 1, probability 0, space 0, times 0 [ 43.749495][ T3678] CPU: 0 UID: 0 PID: 3678 Comm: syz.3.53 Not tainted syzkaller #0 PREEMPT(voluntary) [ 43.749533][ T3678] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 43.749545][ T3678] Call Trace: [ 43.749553][ T3678] [ 43.749561][ T3678] __dump_stack+0x1d/0x30 [ 43.749607][ T3678] dump_stack_lvl+0xe8/0x140 [ 43.749632][ T3678] dump_stack+0x15/0x1b [ 43.749816][ T3678] should_fail_ex+0x265/0x280 [ 43.749862][ T3678] ? netlbl_mgmt_add_common+0x3cd/0x960 [ 43.749899][ T3678] should_failslab+0x8c/0xb0 [ 43.749926][ T3678] __kmalloc_cache_noprof+0x4c/0x320 [ 43.750031][ T3678] netlbl_mgmt_add_common+0x3cd/0x960 [ 43.750077][ T3678] netlbl_mgmt_adddef+0x183/0x1b0 [ 43.750117][ T3678] genl_family_rcv_msg_doit+0x140/0x1b0 [ 43.750201][ T3678] genl_rcv_msg+0x422/0x460 [ 43.750226][ T3678] ? __pfx_netlbl_mgmt_adddef+0x10/0x10 [ 43.750267][ T3678] netlink_rcv_skb+0x123/0x220 [ 43.750305][ T3678] ? __pfx_genl_rcv_msg+0x10/0x10 [ 43.750414][ T3678] genl_rcv+0x28/0x40 [ 43.750449][ T3678] netlink_unicast+0x5bd/0x690 [ 43.750483][ T3678] netlink_sendmsg+0x58b/0x6b0 [ 43.750586][ T3678] ? __pfx_netlink_sendmsg+0x10/0x10 [ 43.750624][ T3678] __sock_sendmsg+0x145/0x180 [ 43.750652][ T3678] ____sys_sendmsg+0x31e/0x4e0 [ 43.750704][ T3678] ___sys_sendmsg+0x17b/0x1d0 [ 43.750764][ T3678] __x64_sys_sendmsg+0xd4/0x160 [ 43.750806][ T3678] x64_sys_call+0x191e/0x2ff0 [ 43.750889][ T3678] do_syscall_64+0xd2/0x200 [ 43.750908][ T3678] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 43.751022][ T3678] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 43.751140][ T3678] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 43.751168][ T3678] RIP: 0033:0x7f2e82aeeec9 [ 43.751197][ T3678] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 43.751217][ T3678] RSP: 002b:00007f2e81557038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 43.751242][ T3678] RAX: ffffffffffffffda RBX: 00007f2e82d45fa0 RCX: 00007f2e82aeeec9 [ 43.751258][ T3678] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000007 [ 43.751274][ T3678] RBP: 00007f2e81557090 R08: 0000000000000000 R09: 0000000000000000 [ 43.751290][ T3678] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 43.751305][ T3678] R13: 00007f2e82d46038 R14: 00007f2e82d45fa0 R15: 00007ffcdf0d1618 [ 43.751338][ T3678] [ 44.037120][ T3689] netlink: 'syz.1.56': attribute type 1 has an invalid length. [ 44.044786][ T3689] netlink: 161700 bytes leftover after parsing attributes in process `syz.1.56'. [ 44.078558][ T3689] loop1: detected capacity change from 0 to 128 [ 44.091945][ T3689] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 44.106457][ T3689] ext4 filesystem being mounted at /17/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 44.159912][ T3309] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 44.961240][ T3706] netlink: 60 bytes leftover after parsing attributes in process `syz.0.60'. [ 44.987050][ T3706] loop0: detected capacity change from 0 to 2048 [ 45.027249][ T3706] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 45.082036][ T3711] loop2: detected capacity change from 0 to 1024 [ 45.088945][ T3711] EXT4-fs: Ignoring removed nomblk_io_submit option [ 45.115915][ T3713] loop1: detected capacity change from 0 to 128 [ 45.145531][ T3711] ext4: Unknown parameter 'smackfshat' [ 45.199615][ T3714] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 45.215298][ T3715] sctp: [Deprecated]: syz.0.60 (pid 3715) Use of int in maxseg socket option. [ 45.215298][ T3715] Use struct sctp_assoc_value instead [ 45.259873][ T3714] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 432 with error 28 [ 45.261519][ T3713] netlink: 'syz.1.62': attribute type 4 has an invalid length. [ 45.272509][ T3714] EXT4-fs (loop0): This should not happen!! Data will be lost [ 45.272509][ T3714] [ 45.280092][ T29] kauditd_printk_skb: 500 callbacks suppressed [ 45.280111][ T29] audit: type=1326 audit(1759218145.866:591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3712 comm="syz.1.62" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf1e36eec9 code=0x7ffc0000 [ 45.290302][ T3714] EXT4-fs (loop0): Total free blocks count 0 [ 45.296420][ T29] audit: type=1326 audit(1759218145.866:592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3712 comm="syz.1.62" exe="/root/syz-executor" sig=0 arch=c000003e syscall=76 compat=0 ip=0x7faf1e36eec9 code=0x7ffc0000 [ 45.296491][ T29] audit: type=1326 audit(1759218145.866:593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3712 comm="syz.1.62" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf1e36eec9 code=0x7ffc0000 [ 45.296521][ T29] audit: type=1326 audit(1759218145.866:594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3712 comm="syz.1.62" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7faf1e36eec9 code=0x7ffc0000 [ 45.296550][ T29] audit: type=1326 audit(1759218145.866:595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3712 comm="syz.1.62" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf1e36eec9 code=0x7ffc0000 [ 45.296582][ T29] audit: type=1326 audit(1759218145.866:596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3712 comm="syz.1.62" exe="/root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7faf1e36eec9 code=0x7ffc0000 [ 45.299164][ T29] audit: type=1326 audit(1759218145.906:597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3712 comm="syz.1.62" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf1e36eec9 code=0x7ffc0000 [ 45.320441][ T3714] EXT4-fs (loop0): Free/Dirty block details [ 45.360019][ T3719] loop3: detected capacity change from 0 to 2048 [ 45.373859][ T3714] EXT4-fs (loop0): free_blocks=2415919104 [ 45.398932][ T29] audit: type=1326 audit(1759218145.936:598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3712 comm="syz.1.62" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7faf1e36eec9 code=0x7ffc0000 [ 45.420988][ T3714] EXT4-fs (loop0): dirty_blocks=448 [ 45.421010][ T3714] EXT4-fs (loop0): Block reservation details [ 45.421025][ T3714] EXT4-fs (loop0): i_reserved_data_blocks=28 [ 45.444336][ T29] audit: type=1326 audit(1759218145.936:599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3712 comm="syz.1.62" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf1e36eec9 code=0x7ffc0000 [ 45.552275][ T29] audit: type=1326 audit(1759218145.936:600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3712 comm="syz.1.62" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf1e36eec9 code=0x7ffc0000 [ 45.624608][ T3719] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 45.669744][ T3726] loop1: detected capacity change from 0 to 128 [ 45.713547][ T3726] netlink: 'syz.1.65': attribute type 4 has an invalid length. [ 45.775699][ T3730] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 45.791205][ T3730] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1558 with error 28 [ 45.803844][ T3730] EXT4-fs (loop3): This should not happen!! Data will be lost [ 45.803844][ T3730] [ 45.813642][ T3730] EXT4-fs (loop3): Total free blocks count 0 [ 45.819690][ T3730] EXT4-fs (loop3): Free/Dirty block details [ 45.825860][ T3730] EXT4-fs (loop3): free_blocks=2415919104 [ 45.831613][ T3730] EXT4-fs (loop3): dirty_blocks=1568 [ 45.837156][ T3730] EXT4-fs (loop3): Block reservation details [ 45.843450][ T3730] EXT4-fs (loop3): i_reserved_data_blocks=98 [ 45.859256][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 45.874281][ T3736] netlink: 'syz.1.70': attribute type 1 has an invalid length. [ 45.874302][ T3736] netlink: 161700 bytes leftover after parsing attributes in process `syz.1.70'. [ 45.876348][ T3736] loop1: detected capacity change from 0 to 128 [ 45.917860][ T3736] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 45.920731][ T3736] ext4 filesystem being mounted at /22/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 45.973911][ T3730] sctp: [Deprecated]: syz.3.63 (pid 3730) Use of int in maxseg socket option. [ 45.973911][ T3730] Use struct sctp_assoc_value instead [ 46.024493][ T3309] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 46.090141][ T3730] syz.3.63 (3730) used greatest stack depth: 9984 bytes left [ 46.100916][ T3754] loop4: detected capacity change from 0 to 128 [ 46.118835][ T37] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 28 [ 46.149587][ T3754] netlink: 'syz.4.75': attribute type 4 has an invalid length. [ 46.316301][ T3768] netlink: 60 bytes leftover after parsing attributes in process `syz.4.79'. [ 46.336011][ T3768] loop4: detected capacity change from 0 to 2048 [ 46.357943][ T3768] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 46.494745][ T3773] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 46.514624][ T3773] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1572 with error 28 [ 46.527574][ T3773] EXT4-fs (loop4): This should not happen!! Data will be lost [ 46.527574][ T3773] [ 46.537353][ T3773] EXT4-fs (loop4): Total free blocks count 0 [ 46.543469][ T3773] EXT4-fs (loop4): Free/Dirty block details [ 46.546221][ T3778] loop3: detected capacity change from 0 to 128 [ 46.549531][ T3773] EXT4-fs (loop4): free_blocks=2415919104 [ 46.561731][ T3773] EXT4-fs (loop4): dirty_blocks=1584 [ 46.566426][ T3778] bio_check_eod: 327 callbacks suppressed [ 46.566447][ T3778] syz.3.82: attempt to access beyond end of device [ 46.566447][ T3778] loop3: rw=2049, sector=154, nr_sectors = 6 limit=128 [ 46.567343][ T3773] EXT4-fs (loop4): Block reservation details [ 46.577453][ T3778] syz.3.82: attempt to access beyond end of device [ 46.577453][ T3778] loop3: rw=2049, sector=158, nr_sectors = 2 limit=128 [ 46.586312][ T3773] EXT4-fs (loop4): i_reserved_data_blocks=99 [ 46.592663][ T3779] loop0: detected capacity change from 0 to 1024 [ 46.605881][ T3778] buffer_io_error: 215 callbacks suppressed [ 46.605900][ T3778] Buffer I/O error on dev loop3, logical block 79, lost async page write [ 46.609645][ T3778] syz.3.82: attempt to access beyond end of device [ 46.609645][ T3778] loop3: rw=2049, sector=160, nr_sectors = 2 limit=128 [ 46.623212][ T3779] EXT4-fs: Ignoring removed nomblk_io_submit option [ 46.624728][ T3778] Buffer I/O error on dev loop3, logical block 80, lost async page write [ 46.633977][ T3779] ext4: Unknown parameter 'smackfshat' [ 46.653932][ T3778] syz.3.82: attempt to access beyond end of device [ 46.653932][ T3778] loop3: rw=2049, sector=162, nr_sectors = 6 limit=128 [ 46.683992][ T3778] syz.3.82: attempt to access beyond end of device [ 46.683992][ T3778] loop3: rw=2049, sector=166, nr_sectors = 2 limit=128 [ 46.697431][ T3778] Buffer I/O error on dev loop3, logical block 83, lost async page write [ 46.710060][ T3778] syz.3.82: attempt to access beyond end of device [ 46.710060][ T3778] loop3: rw=2049, sector=168, nr_sectors = 2 limit=128 [ 46.723645][ T3778] Buffer I/O error on dev loop3, logical block 84, lost async page write [ 46.740011][ T3773] sctp: [Deprecated]: syz.4.79 (pid 3773) Use of int in maxseg socket option. [ 46.740011][ T3773] Use struct sctp_assoc_value instead [ 46.756465][ T3778] syz.3.82: attempt to access beyond end of device [ 46.756465][ T3778] loop3: rw=2049, sector=186, nr_sectors = 6 limit=128 [ 46.776183][ T3785] netlink: 'syz.3.82': attribute type 4 has an invalid length. [ 46.789226][ T3778] syz.3.82: attempt to access beyond end of device [ 46.789226][ T3778] loop3: rw=2049, sector=190, nr_sectors = 2 limit=128 [ 46.802695][ T3778] Buffer I/O error on dev loop3, logical block 95, lost async page write [ 46.811782][ T3778] syz.3.82: attempt to access beyond end of device [ 46.811782][ T3778] loop3: rw=2049, sector=192, nr_sectors = 2 limit=128 [ 46.825230][ T3778] Buffer I/O error on dev loop3, logical block 96, lost async page write [ 46.834677][ T3778] syz.3.82: attempt to access beyond end of device [ 46.834677][ T3778] loop3: rw=2049, sector=194, nr_sectors = 6 limit=128 [ 46.855522][ T3778] Buffer I/O error on dev loop3, logical block 99, lost async page write [ 46.864455][ T3778] Buffer I/O error on dev loop3, logical block 100, lost async page write [ 46.874925][ T3790] netlink: 'syz.1.84': attribute type 1 has an invalid length. [ 46.880756][ T3778] Buffer I/O error on dev loop3, logical block 111, lost async page write [ 46.882798][ T3790] netlink: 161700 bytes leftover after parsing attributes in process `syz.1.84'. [ 46.893105][ T3778] Buffer I/O error on dev loop3, logical block 112, lost async page write [ 46.917620][ T3790] loop1: detected capacity change from 0 to 128 [ 46.934673][ T3790] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 46.949254][ T3790] ext4 filesystem being mounted at /26/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 46.988055][ T3309] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 46.999881][ T3797] netlink: 120 bytes leftover after parsing attributes in process `syz.2.88'. [ 47.016466][ T3797] loop2: detected capacity change from 0 to 2048 [ 47.026696][ T3797] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 47.068762][ T3803] loop3: detected capacity change from 0 to 128 [ 47.106869][ T3803] netlink: 'syz.3.90': attribute type 4 has an invalid length. [ 47.154825][ T409] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 28 [ 47.201401][ T3804] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 47.218968][ T3804] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 47.231628][ T3804] EXT4-fs (loop2): This should not happen!! Data will be lost [ 47.231628][ T3804] [ 47.241425][ T3804] EXT4-fs (loop2): Total free blocks count 0 [ 47.247813][ T3804] EXT4-fs (loop2): Free/Dirty block details [ 47.253883][ T3804] EXT4-fs (loop2): free_blocks=2415919104 [ 47.259748][ T3804] EXT4-fs (loop2): dirty_blocks=2384 [ 47.265082][ T3804] EXT4-fs (loop2): Block reservation details [ 47.271157][ T3804] EXT4-fs (loop2): i_reserved_data_blocks=149 [ 47.326418][ T3804] sctp: [Deprecated]: syz.2.88 (pid 3804) Use of int in maxseg socket option. [ 47.326418][ T3804] Use struct sctp_assoc_value instead [ 47.589831][ T3828] loop1: detected capacity change from 0 to 512 [ 47.600020][ T3828] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 47.621021][ T3828] EXT4-fs (loop1): 1 truncate cleaned up [ 47.628305][ T3828] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.656174][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.722951][ T3838] loop1: detected capacity change from 0 to 512 [ 47.730133][ T3838] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 47.741849][ T3838] EXT4-fs (loop1): 1 truncate cleaned up [ 47.748768][ T3838] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.800878][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.851779][ T37] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 28 [ 47.887902][ T3847] loop3: detected capacity change from 0 to 128 [ 47.943577][ T3851] loop1: detected capacity change from 0 to 1024 [ 47.952379][ T3847] netlink: 'syz.3.105': attribute type 4 has an invalid length. [ 47.968514][ T3851] EXT4-fs: Ignoring removed nomblk_io_submit option [ 47.970280][ T3853] netlink: 60 bytes leftover after parsing attributes in process `syz.2.104'. [ 47.976890][ T3851] ext4: Unknown parameter 'smackfshat' [ 47.991424][ T3851] net_ratelimit: 293 callbacks suppressed [ 47.991442][ T3851] netlink: zone id is out of range [ 48.002526][ T3851] netlink: zone id is out of range [ 48.008052][ T3851] netlink: zone id is out of range [ 48.013358][ T3851] netlink: zone id is out of range [ 48.018538][ T3851] netlink: zone id is out of range [ 48.023744][ T3851] netlink: zone id is out of range [ 48.028990][ T3851] netlink: zone id is out of range [ 48.034157][ T3851] netlink: zone id is out of range [ 48.039339][ T3851] netlink: zone id is out of range [ 48.044670][ T3851] netlink: zone id is out of range [ 48.060230][ T3853] loop2: detected capacity change from 0 to 2048 [ 48.119269][ T3853] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 48.131689][ T3855] loop3: detected capacity change from 0 to 1024 [ 48.151717][ T3855] EXT4-fs: Ignoring removed orlov option [ 48.171560][ T3855] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.254301][ T3859] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 48.270735][ T3859] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 420 with error 28 [ 48.279541][ T3861] sctp: [Deprecated]: syz.2.104 (pid 3861) Use of int in maxseg socket option. [ 48.279541][ T3861] Use struct sctp_assoc_value instead [ 48.283468][ T3859] EXT4-fs (loop2): This should not happen!! Data will be lost [ 48.283468][ T3859] [ 48.307669][ T3859] EXT4-fs (loop2): Total free blocks count 0 [ 48.313869][ T3859] EXT4-fs (loop2): Free/Dirty block details [ 48.320012][ T3859] EXT4-fs (loop2): free_blocks=2415919104 [ 48.325939][ T3859] EXT4-fs (loop2): dirty_blocks=432 [ 48.331162][ T3859] EXT4-fs (loop2): Block reservation details [ 48.337205][ T3859] EXT4-fs (loop2): i_reserved_data_blocks=27 [ 48.402086][ T3866] loop0: detected capacity change from 0 to 1024 [ 48.431680][ T3866] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.445797][ T3866] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.538008][ T3300] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.565317][ T3873] loop3: detected capacity change from 0 to 512 [ 48.573315][ T3873] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 48.587119][ T3873] EXT4-fs (loop3): 1 truncate cleaned up [ 48.593502][ T3873] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.624075][ T3300] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.710724][ T3883] loop4: detected capacity change from 0 to 512 [ 48.717811][ T3883] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 48.731498][ T3883] EXT4-fs (loop4): 1 truncate cleaned up [ 48.752276][ T3883] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.752956][ T3887] netlink: 120 bytes leftover after parsing attributes in process `syz.3.115'. [ 48.788995][ T3887] loop3: detected capacity change from 0 to 2048 [ 48.809306][ T3891] loop0: detected capacity change from 0 to 128 [ 48.844337][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.863417][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 48.884936][ T3887] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 48.911594][ T3891] netlink: 'syz.0.117': attribute type 4 has an invalid length. [ 48.943007][ T3896] loop4: detected capacity change from 0 to 512 [ 48.957210][ T3898] loop2: detected capacity change from 0 to 512 [ 48.987720][ T3898] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 49.011165][ T3896] EXT4-fs error (device loop4): ext4_orphan_get:1418: comm syz.4.118: bad orphan inode 11862016 [ 49.025375][ T3899] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 49.051219][ T3898] EXT4-fs (loop2): 1 truncate cleaned up [ 49.061140][ T3896] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 49.074125][ T3899] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 394 with error 28 [ 49.086612][ T3899] EXT4-fs (loop3): This should not happen!! Data will be lost [ 49.086612][ T3899] [ 49.087339][ T3898] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.096292][ T3899] EXT4-fs (loop3): Total free blocks count 0 [ 49.096313][ T3899] EXT4-fs (loop3): Free/Dirty block details [ 49.096327][ T3899] EXT4-fs (loop3): free_blocks=2415919104 [ 49.126447][ T3899] EXT4-fs (loop3): dirty_blocks=400 [ 49.131900][ T3899] EXT4-fs (loop3): Block reservation details [ 49.134982][ T3896] ext4 filesystem being mounted at /23/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 49.138287][ T3899] EXT4-fs (loop3): i_reserved_data_blocks=25 [ 49.212306][ T3899] sctp: [Deprecated]: syz.3.115 (pid 3899) Use of int in maxseg socket option. [ 49.212306][ T3899] Use struct sctp_assoc_value instead [ 49.238519][ T3911] loop1: detected capacity change from 0 to 1024 [ 49.250844][ T3907] loop0: detected capacity change from 0 to 1024 [ 49.252231][ T3911] EXT4-fs: Ignoring removed orlov option [ 49.283689][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.295164][ T3907] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.311188][ T3911] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.332526][ T3907] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.353571][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 49.378964][ T3916] loop2: detected capacity change from 0 to 512 [ 49.390217][ T3916] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 49.413290][ T3916] EXT4-fs (loop2): 1 truncate cleaned up [ 49.424496][ T3916] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.473712][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.496413][ T3923] netlink: 'syz.4.123': attribute type 1 has an invalid length. [ 49.504479][ T3923] netlink: 161700 bytes leftover after parsing attributes in process `syz.4.123'. [ 49.518890][ T3923] loop4: detected capacity change from 0 to 128 [ 49.547432][ T3923] ext4 filesystem being mounted at /24/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 49.612094][ T31] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 28 [ 49.720315][ T3932] loop2: detected capacity change from 0 to 512 [ 49.727830][ T3932] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 49.768599][ T3932] EXT4-fs (loop2): 1 truncate cleaned up [ 49.786729][ T3938] loop3: detected capacity change from 0 to 1024 [ 49.837810][ T3940] loop4: detected capacity change from 0 to 128 [ 49.848555][ T3938] EXT4-fs: Ignoring removed nomblk_io_submit option [ 49.878819][ T3938] ext4: Unknown parameter 'smackfshat' [ 50.016053][ T3948] loop2: detected capacity change from 0 to 512 [ 50.043495][ T3948] EXT4-fs error (device loop2): ext4_orphan_get:1418: comm syz.2.133: bad orphan inode 11862016 [ 50.077984][ T3948] ext4 filesystem being mounted at /20/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 50.232053][ T3956] loop4: detected capacity change from 0 to 1024 [ 50.258533][ T3954] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #20: comm syz.2.133: corrupted inode contents [ 50.286209][ T3958] loop0: detected capacity change from 0 to 512 [ 50.301096][ T3958] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 50.311965][ T3954] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #20: comm syz.2.133: mark_inode_dirty error [ 50.326971][ T3958] EXT4-fs (loop0): 1 truncate cleaned up [ 50.340846][ T3954] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #20: comm syz.2.133: corrupted inode contents [ 50.354507][ T3954] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2991: inode #20: comm syz.2.133: mark_inode_dirty error [ 50.367647][ T3954] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2994: inode #20: comm syz.2.133: mark inode dirty (error -117) [ 50.372821][ T29] kauditd_printk_skb: 608 callbacks suppressed [ 50.372849][ T29] audit: type=1326 audit(1759218150.976:1209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3941 comm="syz.1.131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf1e36eec9 code=0x7ffc0000 [ 50.413083][ T29] audit: type=1326 audit(1759218151.026:1210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3941 comm="syz.1.131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf1e36eec9 code=0x7ffc0000 [ 50.447991][ T3954] EXT4-fs warning (device loop2): ext4_evict_inode:274: xattr delete (err -117) [ 50.523311][ T29] audit: type=1326 audit(1759218151.126:1211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3967 comm="syz.0.139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ddfd7eec9 code=0x7ffc0000 [ 50.547132][ T29] audit: type=1326 audit(1759218151.126:1212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3967 comm="syz.0.139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ddfd7eec9 code=0x7ffc0000 [ 50.607169][ T29] audit: type=1326 audit(1759218151.136:1213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3967 comm="syz.0.139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1ddfd7eec9 code=0x7ffc0000 [ 50.630939][ T29] audit: type=1326 audit(1759218151.136:1214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3967 comm="syz.0.139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ddfd7eec9 code=0x7ffc0000 [ 50.655128][ T29] audit: type=1326 audit(1759218151.136:1215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3967 comm="syz.0.139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ddfd7eec9 code=0x7ffc0000 [ 50.678583][ T29] audit: type=1326 audit(1759218151.176:1216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3967 comm="syz.0.139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f1ddfd7eec9 code=0x7ffc0000 [ 50.702704][ T29] audit: type=1326 audit(1759218151.176:1217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3967 comm="syz.0.139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ddfd7eec9 code=0x7ffc0000 [ 50.726367][ T29] audit: type=1326 audit(1759218151.176:1218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3967 comm="syz.0.139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f1ddfd7d97f code=0x7ffc0000 [ 50.859274][ T3987] loop0: detected capacity change from 0 to 128 [ 50.919341][ T3987] validate_nla: 1 callbacks suppressed [ 50.919359][ T3987] netlink: 'syz.0.145': attribute type 4 has an invalid length. [ 51.203464][ T3996] loop2: detected capacity change from 0 to 1024 [ 51.388914][ T4003] loop2: detected capacity change from 0 to 512 [ 51.397849][ T4003] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 51.417128][ T4003] EXT4-fs (loop2): 1 truncate cleaned up [ 51.577443][ T4012] loop1: detected capacity change from 0 to 1024 [ 51.584570][ T4012] EXT4-fs: Ignoring removed nomblk_io_submit option [ 51.593131][ T4012] ext4: Unknown parameter 'smackfshat' [ 52.059102][ T4023] loop4: detected capacity change from 0 to 128 [ 52.096087][ T4023] bio_check_eod: 248 callbacks suppressed [ 52.096103][ T4023] syz.4.156: attempt to access beyond end of device [ 52.096103][ T4023] loop4: rw=2049, sector=154, nr_sectors = 6 limit=128 [ 52.140488][ T4023] syz.4.156: attempt to access beyond end of device [ 52.140488][ T4023] loop4: rw=2049, sector=158, nr_sectors = 2 limit=128 [ 52.154127][ T4023] buffer_io_error: 164 callbacks suppressed [ 52.154145][ T4023] Buffer I/O error on dev loop4, logical block 79, lost async page write [ 52.220328][ T4023] syz.4.156: attempt to access beyond end of device [ 52.220328][ T4023] loop4: rw=2049, sector=160, nr_sectors = 2 limit=128 [ 52.233934][ T4023] Buffer I/O error on dev loop4, logical block 80, lost async page write [ 52.264578][ T4030] netlink: 'syz.4.156': attribute type 4 has an invalid length. [ 52.285543][ T4023] syz.4.156: attempt to access beyond end of device [ 52.285543][ T4023] loop4: rw=2049, sector=162, nr_sectors = 6 limit=128 [ 52.309771][ T4023] syz.4.156: attempt to access beyond end of device [ 52.309771][ T4023] loop4: rw=2049, sector=166, nr_sectors = 2 limit=128 [ 52.323264][ T4023] Buffer I/O error on dev loop4, logical block 83, lost async page write [ 52.345531][ T4023] syz.4.156: attempt to access beyond end of device [ 52.345531][ T4023] loop4: rw=2049, sector=168, nr_sectors = 2 limit=128 [ 52.359258][ T4023] Buffer I/O error on dev loop4, logical block 84, lost async page write [ 52.369313][ T4034] netlink: 60 bytes leftover after parsing attributes in process `syz.0.159'. [ 52.369563][ T4023] syz.4.156: attempt to access beyond end of device [ 52.369563][ T4023] loop4: rw=2049, sector=170, nr_sectors = 8 limit=128 [ 52.394241][ T4023] syz.4.156: attempt to access beyond end of device [ 52.394241][ T4023] loop4: rw=2049, sector=178, nr_sectors = 6 limit=128 [ 52.409864][ T4023] syz.4.156: attempt to access beyond end of device [ 52.409864][ T4023] loop4: rw=2049, sector=182, nr_sectors = 2 limit=128 [ 52.423470][ T4023] Buffer I/O error on dev loop4, logical block 91, lost async page write [ 52.433918][ T4023] syz.4.156: attempt to access beyond end of device [ 52.433918][ T4023] loop4: rw=2049, sector=184, nr_sectors = 2 limit=128 [ 52.436652][ T4034] loop0: detected capacity change from 0 to 2048 [ 52.447737][ T4023] Buffer I/O error on dev loop4, logical block 92, lost async page write [ 52.483968][ T4023] Buffer I/O error on dev loop4, logical block 103, lost async page write [ 52.493259][ T4023] Buffer I/O error on dev loop4, logical block 104, lost async page write [ 52.505721][ T4023] Buffer I/O error on dev loop4, logical block 107, lost async page write [ 52.514451][ T4023] Buffer I/O error on dev loop4, logical block 108, lost async page write [ 52.565733][ T4045] loop3: detected capacity change from 0 to 512 [ 52.572364][ T4047] loop2: detected capacity change from 0 to 128 [ 52.584287][ T4045] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 52.602560][ T4045] EXT4-fs (loop3): 1 truncate cleaned up [ 52.646477][ T4047] netlink: 'syz.2.163': attribute type 4 has an invalid length. [ 52.650900][ T4048] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 52.659632][ T4048] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 784 with error 28 [ 52.659668][ T4048] EXT4-fs (loop0): This should not happen!! Data will be lost [ 52.659668][ T4048] [ 52.659684][ T4048] EXT4-fs (loop0): Total free blocks count 0 [ 52.659700][ T4048] EXT4-fs (loop0): Free/Dirty block details [ 52.659715][ T4048] EXT4-fs (loop0): free_blocks=2415919104 [ 52.659730][ T4048] EXT4-fs (loop0): dirty_blocks=800 [ 52.659744][ T4048] EXT4-fs (loop0): Block reservation details [ 52.659755][ T4048] EXT4-fs (loop0): i_reserved_data_blocks=50 [ 52.722190][ T4048] sctp: [Deprecated]: syz.0.159 (pid 4048) Use of int in maxseg socket option. [ 52.722190][ T4048] Use struct sctp_assoc_value instead [ 52.736560][ T4056] loop4: detected capacity change from 0 to 512 [ 52.781786][ T4058] loop1: detected capacity change from 0 to 512 [ 52.791178][ T4058] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 52.818743][ T4058] EXT4-fs (loop1): 1 truncate cleaned up [ 52.835955][ T4062] loop2: detected capacity change from 0 to 1024 [ 52.883086][ T4056] EXT4-fs error (device loop4): ext4_orphan_get:1418: comm syz.4.165: bad orphan inode 11862016 [ 52.922467][ T4072] loop1: detected capacity change from 0 to 1024 [ 52.923064][ T4056] ext4 filesystem being mounted at /33/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 52.931690][ T4072] EXT4-fs: Ignoring removed orlov option [ 53.020743][ T4078] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #20: comm syz.4.165: corrupted inode contents [ 53.193019][ T4078] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #20: comm syz.4.165: mark_inode_dirty error [ 53.207451][ T12] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 28 [ 53.220212][ T12] EXT4-fs (loop0): This should not happen!! Data will be lost [ 53.220212][ T12] [ 53.227821][ T4078] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #20: comm syz.4.165: corrupted inode contents [ 53.243845][ T4078] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2991: inode #20: comm syz.4.165: mark_inode_dirty error [ 53.256517][ T4078] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2994: inode #20: comm syz.4.165: mark inode dirty (error -117) [ 53.271385][ T4078] EXT4-fs warning (device loop4): ext4_evict_inode:274: xattr delete (err -117) [ 53.366752][ T4089] netlink: 'syz.0.174': attribute type 13 has an invalid length. [ 53.383252][ T4090] loop4: detected capacity change from 0 to 128 [ 53.427500][ T4092] loop0: detected capacity change from 0 to 512 [ 53.450381][ T4092] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 53.500784][ T4092] EXT4-fs (loop0): 1 truncate cleaned up [ 53.514206][ T4090] netlink: 'syz.4.175': attribute type 4 has an invalid length. [ 54.284567][ T4111] loop1: detected capacity change from 0 to 1024 [ 54.462429][ T4117] loop1: detected capacity change from 0 to 1024 [ 54.469412][ T4117] EXT4-fs: Ignoring removed orlov option [ 54.537497][ T4119] loop3: detected capacity change from 0 to 1024 [ 54.579408][ T4119] EXT4-fs: Ignoring removed nomblk_io_submit option [ 54.613864][ T4119] ext4: Unknown parameter 'smackfshat' [ 54.637389][ T4119] net_ratelimit: 293 callbacks suppressed [ 54.637404][ T4119] netlink: zone id is out of range [ 54.648405][ T4119] netlink: zone id is out of range [ 54.653533][ T4119] netlink: zone id is out of range [ 54.658683][ T4119] netlink: zone id is out of range [ 54.663836][ T4119] netlink: zone id is out of range [ 54.669009][ T4119] netlink: zone id is out of range [ 54.674235][ T4119] netlink: zone id is out of range [ 54.679496][ T4119] netlink: zone id is out of range [ 54.684760][ T4119] netlink: zone id is out of range [ 54.689996][ T4119] netlink: zone id is out of range [ 54.807839][ T4127] loop3: detected capacity change from 0 to 512 [ 54.830323][ T4127] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 54.853538][ T4127] EXT4-fs (loop3): 1 truncate cleaned up [ 54.996930][ T4132] loop4: detected capacity change from 0 to 128 [ 55.033633][ T4133] loop3: detected capacity change from 0 to 512 [ 55.094655][ T4135] loop1: detected capacity change from 0 to 512 [ 55.101071][ T4132] netlink: 'syz.4.189': attribute type 4 has an invalid length. [ 55.131351][ T4135] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 55.152038][ T4133] EXT4-fs error (device loop3): ext4_orphan_get:1418: comm syz.3.188: bad orphan inode 11862016 [ 55.165708][ T4135] EXT4-fs (loop1): 1 truncate cleaned up [ 55.172609][ T4133] ext4 filesystem being mounted at /35/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 55.370613][ T4146] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #20: comm syz.3.188: corrupted inode contents [ 55.406374][ T4146] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #20: comm syz.3.188: mark_inode_dirty error [ 55.419120][ T4146] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #20: comm syz.3.188: corrupted inode contents [ 55.431730][ T4146] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2991: inode #20: comm syz.3.188: mark_inode_dirty error [ 55.445081][ T4146] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2994: inode #20: comm syz.3.188: mark inode dirty (error -117) [ 55.470072][ T4153] loop0: detected capacity change from 0 to 1024 [ 55.495494][ T4146] EXT4-fs warning (device loop3): ext4_evict_inode:274: xattr delete (err -117) [ 55.565882][ T4159] netlink: 60 bytes leftover after parsing attributes in process `syz.0.198'. [ 55.591440][ T29] kauditd_printk_skb: 418 callbacks suppressed [ 55.591457][ T29] audit: type=1326 audit(1759218156.196:1637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4162 comm="syz.3.197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e82aeeec9 code=0x7ffc0000 [ 55.630286][ T4159] loop0: detected capacity change from 0 to 2048 [ 55.639555][ T29] audit: type=1326 audit(1759218156.236:1638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4162 comm="syz.3.197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2e82aeeec9 code=0x7ffc0000 [ 55.663640][ T29] audit: type=1326 audit(1759218156.236:1639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4162 comm="syz.3.197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e82aeeec9 code=0x7ffc0000 [ 55.687824][ T29] audit: type=1326 audit(1759218156.236:1640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4162 comm="syz.3.197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e82aeeec9 code=0x7ffc0000 [ 55.711824][ T29] audit: type=1326 audit(1759218156.246:1641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4162 comm="syz.3.197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f2e82aeeec9 code=0x7ffc0000 [ 55.735544][ T29] audit: type=1326 audit(1759218156.246:1642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4162 comm="syz.3.197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e82aeeec9 code=0x7ffc0000 [ 55.759163][ T29] audit: type=1326 audit(1759218156.246:1643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4162 comm="syz.3.197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f2e82aed97f code=0x7ffc0000 [ 55.782667][ T29] audit: type=1326 audit(1759218156.246:1644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4162 comm="syz.3.197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e82aeeec9 code=0x7ffc0000 [ 55.806663][ T29] audit: type=1326 audit(1759218156.246:1645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4162 comm="syz.3.197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2e82aeeec9 code=0x7ffc0000 [ 55.830793][ T29] audit: type=1326 audit(1759218156.246:1646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4162 comm="syz.3.197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e82aeeec9 code=0x7ffc0000 [ 55.963788][ T4172] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 55.981146][ T4172] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 778 with error 28 [ 55.994055][ T4172] EXT4-fs (loop0): This should not happen!! Data will be lost [ 55.994055][ T4172] [ 56.004046][ T4172] EXT4-fs (loop0): Total free blocks count 0 [ 56.010143][ T4172] EXT4-fs (loop0): Free/Dirty block details [ 56.016189][ T4172] EXT4-fs (loop0): free_blocks=2415919104 [ 56.021948][ T4172] EXT4-fs (loop0): dirty_blocks=784 [ 56.021969][ T4172] EXT4-fs (loop0): Block reservation details [ 56.021983][ T4172] EXT4-fs (loop0): i_reserved_data_blocks=49 [ 56.060162][ T4172] sctp: [Deprecated]: syz.0.198 (pid 4172) Use of int in maxseg socket option. [ 56.060162][ T4172] Use struct sctp_assoc_value instead [ 56.226377][ T4179] loop1: detected capacity change from 0 to 1024 [ 56.233283][ T4179] EXT4-fs: Ignoring removed orlov option [ 56.364691][ T4189] loop3: detected capacity change from 0 to 128 [ 56.397900][ T4192] loop4: detected capacity change from 0 to 1024 [ 56.428938][ T4189] netlink: 'syz.3.206': attribute type 4 has an invalid length. [ 56.436665][ T4192] EXT4-fs: Ignoring removed orlov option [ 56.443021][ T135] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 28 [ 56.455621][ T135] EXT4-fs (loop0): This should not happen!! Data will be lost [ 56.455621][ T135] [ 56.473347][ T4192] netlink: 'syz.4.205': attribute type 21 has an invalid length. [ 56.492705][ T4192] FAULT_INJECTION: forcing a failure. [ 56.492705][ T4192] name failslab, interval 1, probability 0, space 0, times 0 [ 56.505546][ T4192] CPU: 1 UID: 0 PID: 4192 Comm: syz.4.205 Not tainted syzkaller #0 PREEMPT(voluntary) [ 56.505574][ T4192] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 56.505612][ T4192] Call Trace: [ 56.505621][ T4192] [ 56.505629][ T4192] __dump_stack+0x1d/0x30 [ 56.505654][ T4192] dump_stack_lvl+0xe8/0x140 [ 56.505685][ T4192] dump_stack+0x15/0x1b [ 56.505745][ T4192] should_fail_ex+0x265/0x280 [ 56.505821][ T4192] should_failslab+0x8c/0xb0 [ 56.505855][ T4192] __kmalloc_node_track_caller_noprof+0xa4/0x410 [ 56.505898][ T4192] ? sidtab_sid2str_get+0xa0/0x130 [ 56.505931][ T4192] kmemdup_noprof+0x2b/0x70 [ 56.505964][ T4192] sidtab_sid2str_get+0xa0/0x130 [ 56.505988][ T4192] security_sid_to_context_core+0x1eb/0x2e0 [ 56.506012][ T4192] security_sid_to_context+0x27/0x40 [ 56.506089][ T4192] selinux_lsmprop_to_secctx+0x67/0xf0 [ 56.506117][ T4192] security_lsmprop_to_secctx+0x43/0x80 [ 56.506148][ T4192] audit_log_task_context+0x77/0x190 [ 56.506255][ T4192] audit_log_task+0xf4/0x250 [ 56.506376][ T4192] audit_seccomp+0x61/0x100 [ 56.506403][ T4192] ? __seccomp_filter+0x68c/0x10d0 [ 56.506426][ T4192] __seccomp_filter+0x69d/0x10d0 [ 56.506464][ T4192] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 56.506521][ T4192] ? vfs_write+0x7e8/0x960 [ 56.506557][ T4192] __secure_computing+0x82/0x150 [ 56.506585][ T4192] syscall_trace_enter+0xcf/0x1e0 [ 56.506617][ T4192] do_syscall_64+0xac/0x200 [ 56.506658][ T4192] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 56.506693][ T4192] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 56.506756][ T4192] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 56.506878][ T4192] RIP: 0033:0x7f5dd3b6eec9 [ 56.506899][ T4192] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 56.506931][ T4192] RSP: 002b:00007f5dd25cf038 EFLAGS: 00000246 ORIG_RAX: 000000000000006f [ 56.506950][ T4192] RAX: ffffffffffffffda RBX: 00007f5dd3dc5fa0 RCX: 00007f5dd3b6eec9 [ 56.506962][ T4192] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 56.507002][ T4192] RBP: 00007f5dd25cf090 R08: 0000000000000000 R09: 0000000000000000 [ 56.507014][ T4192] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 56.507026][ T4192] R13: 00007f5dd3dc6038 R14: 00007f5dd3dc5fa0 R15: 00007ffdbf8bdd38 [ 56.507105][ T4192] [ 56.513976][ T4201] loop0: detected capacity change from 0 to 512 [ 56.777729][ T4201] EXT4-fs error (device loop0): ext4_orphan_get:1418: comm syz.0.208: bad orphan inode 11862016 [ 56.790213][ T4201] ext4 filesystem being mounted at /32/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 56.853933][ T4201] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #20: comm syz.0.208: corrupted inode contents [ 56.866050][ T4201] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #20: comm syz.0.208: mark_inode_dirty error [ 56.877814][ T4201] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #20: comm syz.0.208: corrupted inode contents [ 56.904688][ T4201] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2991: inode #20: comm syz.0.208: mark_inode_dirty error [ 56.938241][ T4201] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2994: inode #20: comm syz.0.208: mark inode dirty (error -117) [ 56.968195][ T4201] EXT4-fs warning (device loop0): ext4_evict_inode:274: xattr delete (err -117) [ 57.956251][ T4247] loop0: detected capacity change from 0 to 128 [ 57.965109][ T4243] netlink: 36 bytes leftover after parsing attributes in process `syz.2.220'. [ 57.989433][ T4247] bio_check_eod: 202 callbacks suppressed [ 57.989450][ T4247] syz.0.221: attempt to access beyond end of device [ 57.989450][ T4247] loop0: rw=2049, sector=154, nr_sectors = 6 limit=128 [ 57.996003][ T4249] loop3: detected capacity change from 0 to 512 [ 58.014629][ T4247] syz.0.221: attempt to access beyond end of device [ 58.014629][ T4247] loop0: rw=2049, sector=158, nr_sectors = 2 limit=128 [ 58.025760][ T4249] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 58.029528][ T4247] buffer_io_error: 132 callbacks suppressed [ 58.029546][ T4247] Buffer I/O error on dev loop0, logical block 79, lost async page write [ 58.065081][ T4247] syz.0.221: attempt to access beyond end of device [ 58.065081][ T4247] loop0: rw=2049, sector=160, nr_sectors = 2 limit=128 [ 58.078573][ T4247] Buffer I/O error on dev loop0, logical block 80, lost async page write [ 58.087899][ T4249] EXT4-fs (loop3): 1 truncate cleaned up [ 58.097941][ T4247] syz.0.221: attempt to access beyond end of device [ 58.097941][ T4247] loop0: rw=2049, sector=162, nr_sectors = 6 limit=128 [ 58.122955][ T4253] netlink: 'syz.0.221': attribute type 4 has an invalid length. [ 58.161713][ T4247] syz.0.221: attempt to access beyond end of device [ 58.161713][ T4247] loop0: rw=2049, sector=166, nr_sectors = 2 limit=128 [ 58.175320][ T4247] Buffer I/O error on dev loop0, logical block 83, lost async page write [ 58.185705][ T4247] syz.0.221: attempt to access beyond end of device [ 58.185705][ T4247] loop0: rw=2049, sector=168, nr_sectors = 2 limit=128 [ 58.199410][ T4247] Buffer I/O error on dev loop0, logical block 84, lost async page write [ 58.211096][ T4247] syz.0.221: attempt to access beyond end of device [ 58.211096][ T4247] loop0: rw=2049, sector=170, nr_sectors = 8 limit=128 [ 58.214832][ T4260] loop3: detected capacity change from 0 to 512 [ 58.227381][ T4247] syz.0.221: attempt to access beyond end of device [ 58.227381][ T4247] loop0: rw=2049, sector=178, nr_sectors = 6 limit=128 [ 58.245639][ T4247] syz.0.221: attempt to access beyond end of device [ 58.245639][ T4247] loop0: rw=2049, sector=182, nr_sectors = 2 limit=128 [ 58.259104][ T4247] Buffer I/O error on dev loop0, logical block 91, lost async page write [ 58.268049][ T4247] syz.0.221: attempt to access beyond end of device [ 58.268049][ T4247] loop0: rw=2049, sector=184, nr_sectors = 2 limit=128 [ 58.275787][ T4260] EXT4-fs error (device loop3): ext4_orphan_get:1418: comm syz.3.225: bad orphan inode 11862016 [ 58.281814][ T4247] Buffer I/O error on dev loop0, logical block 92, lost async page write [ 58.295525][ T4260] ext4 filesystem being mounted at /42/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 58.302918][ T4247] Buffer I/O error on dev loop0, logical block 103, lost async page write [ 58.320442][ T4247] Buffer I/O error on dev loop0, logical block 104, lost async page write [ 58.330039][ T4247] Buffer I/O error on dev loop0, logical block 107, lost async page write [ 58.338971][ T4247] Buffer I/O error on dev loop0, logical block 108, lost async page write [ 58.390923][ T4260] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #20: comm syz.3.225: corrupted inode contents [ 58.415317][ T4260] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #20: comm syz.3.225: mark_inode_dirty error [ 58.429150][ T4260] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #20: comm syz.3.225: corrupted inode contents [ 58.450542][ T4260] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2991: inode #20: comm syz.3.225: mark_inode_dirty error [ 58.463235][ T4260] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2994: inode #20: comm syz.3.225: mark inode dirty (error -117) [ 58.478372][ T4260] EXT4-fs warning (device loop3): ext4_evict_inode:274: xattr delete (err -117) [ 58.518483][ T4269] loop2: detected capacity change from 0 to 512 [ 58.538635][ T4269] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 58.553615][ T4271] loop0: detected capacity change from 0 to 128 [ 58.563767][ T4269] EXT4-fs (loop2): 1 truncate cleaned up [ 58.588317][ T4273] loop3: detected capacity change from 0 to 1024 [ 58.596305][ T4271] netlink: 'syz.0.228': attribute type 4 has an invalid length. [ 58.625053][ T4273] EXT4-fs: Ignoring removed orlov option [ 58.716431][ T4273] ================================================================== [ 58.725015][ T4273] BUG: KCSAN: data-race in generic_buffers_fsync_noflush / writeback_single_inode [ 58.734335][ T4273] [ 58.736670][ T4273] write to 0xffff88811ac00ea8 of 4 bytes by task 4283 on cpu 1: [ 58.744481][ T4273] writeback_single_inode+0x150/0x3f0 [ 58.749878][ T4273] sync_inode_metadata+0x5b/0x90 [ 58.755014][ T4273] generic_buffers_fsync_noflush+0xd9/0x120 [ 58.761017][ T4273] ext4_sync_file+0x1ab/0x690 [ 58.765880][ T4273] vfs_fsync_range+0x10d/0x130 [ 58.770660][ T4273] ext4_buffered_write_iter+0x34f/0x3c0 [ 58.776340][ T4273] ext4_file_write_iter+0x383/0xf00 [ 58.781600][ T4273] iter_file_splice_write+0x663/0xa60 [ 58.787171][ T4273] direct_splice_actor+0x153/0x2a0 [ 58.792298][ T4273] splice_direct_to_actor+0x30f/0x680 [ 58.797779][ T4273] do_splice_direct+0xda/0x150 [ 58.802566][ T4273] do_sendfile+0x380/0x650 [ 58.807012][ T4273] __x64_sys_sendfile64+0x105/0x150 [ 58.812420][ T4273] x64_sys_call+0x2bb0/0x2ff0 [ 58.817193][ T4273] do_syscall_64+0xd2/0x200 [ 58.821801][ T4273] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 58.828009][ T4273] [ 58.830389][ T4273] read to 0xffff88811ac00ea8 of 4 bytes by task 4273 on cpu 0: [ 58.838025][ T4273] generic_buffers_fsync_noflush+0x80/0x120 [ 58.844029][ T4273] ext4_sync_file+0x1ab/0x690 [ 58.848854][ T4273] vfs_fsync_range+0x10d/0x130 [ 58.853723][ T4273] ext4_buffered_write_iter+0x34f/0x3c0 [ 58.859293][ T4273] ext4_file_write_iter+0x383/0xf00 [ 58.864620][ T4273] iter_file_splice_write+0x663/0xa60 [ 58.870390][ T4273] direct_splice_actor+0x153/0x2a0 [ 58.875814][ T4273] splice_direct_to_actor+0x30f/0x680 [ 58.881303][ T4273] do_splice_direct+0xda/0x150 [ 58.886123][ T4273] do_sendfile+0x380/0x650 [ 58.890574][ T4273] __x64_sys_sendfile64+0x105/0x150 [ 58.895884][ T4273] x64_sys_call+0x2bb0/0x2ff0 [ 58.900749][ T4273] do_syscall_64+0xd2/0x200 [ 58.905510][ T4273] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 58.911615][ T4273] [ 58.913967][ T4273] value changed: 0x00000070 -> 0x00000002 [ 58.919774][ T4273] [ 58.922204][ T4273] Reported by Kernel Concurrency Sanitizer on: [ 58.928504][ T4273] CPU: 0 UID: 0 PID: 4273 Comm: syz.3.229 Not tainted syzkaller #0 PREEMPT(voluntary) [ 58.938689][ T4273] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 58.948850][ T4273] ==================================================================