last executing test programs: 11m55.987003499s ago: executing program 32 (id=310): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='mm_page_alloc\x00', r0}, 0x18) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000be630027935de00704200000000000"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000000000008d000000860000009500000000000000d841f609f80b2ea78f2462807c756015d6184f317139bbe8ddfea6aba1ade147811d80826dd67d00a47e44fa28dc25ab07"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f00000005c0)='kmem_cache_free\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r6, 0x560a, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x4, 0x4}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_getnexthop={0x20, 0x6a, 0x323, 0x0, 0x0, {0x2, 0x0, 0x0, 0x2}, [@NHA_ID={0x8}]}, 0x20}}, 0x0) r8 = socket(0x8000000010, 0x2, 0x0) write(r8, &(0x7f00000002c0)="fc0000001c000704ab5b2509b868030002ab087a0100000001481093210001c0f0030584050060100000000000039815fa2c53c28648000000b9d95662537a00bc000c00f0ff7f0000b400600033d44000040560916a0033f436313012dafd5a32e273fc83ab82d710f74cec184406f90d435ef8b29d3ef3d92c94170e5bba2e177312e081bea05d3a021e8ca062914a46ccfc510bb73c9455cdc8363ae4f5df77bc4cfd6239ec2a0f0d1bcae5fa0f5f9dcdd51af51af8502943283f4bb102b2b8f5566791cf190201ded815b2ccd243f395ed94e0ad91bd6433802e0784f2013cd1890058a10000c880ac801fe4af000049f0d4796f000009", 0xf9) r9 = socket$inet_tcp(0x2, 0x1, 0x0) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r10, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r10, 0x84, 0x17, &(0x7f0000000080)={0x0, 0x5, 0x1, "fd"}, 0x9) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r10, 0x84, 0x17, &(0x7f0000000140)={0x0, 0xb, 0x1, "ff"}, 0x9) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r10, 0x84, 0x23, &(0x7f0000000340)={0x0, 0x5}, 0x8) r11 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$inet(r11, &(0x7f0000000040)='\f\x00', 0xffeb, 0x0, &(0x7f0000000340), 0x10) ioctl$sock_inet_SIOCSARP(r9, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @empty}, {}, 0x0, {0x2, 0x0, @multicast1=0xe000cc02}}) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) 6m58.773589946s ago: executing program 33 (id=5734): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0x2}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) setpriority(0x3, 0x0, 0xfffffffd) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) syz_open_dev$tty20(0xc, 0x4, 0x0) r3 = socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_int(r3, 0x29, 0x16, &(0x7f00000001c0)=0x7f, 0x4) close(r3) 6m56.9420664s ago: executing program 34 (id=5759): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1500000010"], 0x48) setsockopt$inet_buf(r1, 0x0, 0x27, &(0x7f0000000340)="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", 0x1000) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newlink={0x4c, 0x10, 0x401, 0x70bd2d, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @gre={{0x8}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e20}, @IFLA_GRE_REMOTE={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x23}}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x4c}}, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={@ifindex=r2, 0x12, 0x1, 0xe499, &(0x7f0000000140)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r3) sendmsg$IEEE802154_LLSEC_ADD_DEV(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001340)={0x30, r4, 0x852dd6c070cd7e4d, 0xffffffff, 0x0, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xffff}]}, 0x30}, 0x4, 0xfd}, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040)='devtmpfs\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x3e44a9, &(0x7f0000000100)=ANY=[@ANYBLOB="6d706f6c3d6c6f63616c3d726598d8746976652c00"]) keyctl$restrict_keyring(0xf, 0xfffffffffffffffc, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x8, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f00000004c0)='kfree\x00', r6}, 0x10) socket$inet_icmp(0x2, 0x2, 0x1) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/mem_sleep', 0x102, 0x0) sendfile(r7, r7, &(0x7f0000000000)=0x8, 0x4) socket$inet6_mptcp(0xa, 0x1, 0x106) 6m55.40568821s ago: executing program 35 (id=5770): r0 = socket$rds(0x15, 0x5, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000030000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2, 0x0, 0x8000000000000000}, 0x18) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'bond_slave_0\x00', &(0x7f0000000180)=@ethtool_dump={0x40, 0xffff8001, 0x2, 0x89, "f423963584f91e8b5002e0be03afe81566f48c56c121f2ba92d7be50d4b5d150ac92575af349c0b4bdbcf487c89211f5d5440b0e925f1e2468c42ab6088c6875f42d303e098d8463ac7d1370efcb83d1b1f2ea9635d751d968ea4bbb1dfb15f581451bb4708fc63faa9fc2d047d4b9e3ee2bffbe8b70c27e1d4242a341244890e7c1fff3e7d9d588cd"}}) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x3, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x10bb40, 0x0) ftruncate(0xffffffffffffffff, 0xc17a) openat$autofs(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c80)={{r3}, &(0x7f0000001c00), &(0x7f0000001c40)=r4}, 0x20) sendmsg$ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, 0x0, 0x4000000) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_buf(r5, 0x29, 0x6, &(0x7f0000000040)=""/19, &(0x7f0000000240)=0x13) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 6m41.765063822s ago: executing program 36 (id=6132): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeec, 0x8031, 0xffffffffffffffff, 0x0) 3m3.350430699s ago: executing program 2 (id=11911): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0}, 0x18) r0 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa"], 0x0) sendmsg(r0, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x11000000}, 0x0) mq_open(&(0x7f0000000380)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\x00\x17\xc0\xa3\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbb\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\v\x00\x86\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8,XVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8\xbf\xe6\xb2M\b/\rp\xa5\x00\x00\x00\x00', 0x40, 0x9, 0x0) mq_unlink(&(0x7f0000000340)='eth0\x00') prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000600)=[{0x200000000006, 0x1, 0x0, 0x7ffc1bfb}]}) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0202000311000000000000000000000005000500000000000a00000000000000fe8000000000000000000000000000bb000000000000000002000100000007000000000b000000000200090000000000000000000000000005000600000000000a00000000000000fe8800000000000000000000000000010000000000000000010018"], 0x88}}, 0x0) iopl(0x3) syz_emit_ethernet(0x0, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000a00)=ANY=[@ANYRES8], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x100) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$can_j1939(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000180)={0x1d, r3, 0x1, {0xb4d92c3c1588cfd3, 0x1, 0x2}, 0x2}, 0x18, &(0x7f00000002c0)={&(0x7f00000001c0)="4dddc4d6ea503c6b4b223bff1b5066ca5658d723e6b40440703017f846c8925897a97d05bbbbfdf0910e8f679692cce2115b4574096449a2404056129e9340c9cb9f2fedb72cac9bed2534107714c2a02f7ad5198b78b513266511f2a48b6ff7a62feb08703b318c6dacf311819d4879cf5caa03eb27c8d60b7d5f827df68c8a174aeab7b70d2ad05a1576bf782f82bf534d30cfe5ad1d60a6f5151bd844a48c93e548651449b4e3e1dd068ac212343c08e962fa23554bc0fce60ec7ad2fa4842bb7de4bfc021e553173d0bb1b9a6c012401a2e83934e851f9592b1430aad8e8498abe32", 0xe4}, 0x1, 0x0, 0x0, 0x8000}, 0x41) r4 = timerfd_create(0x0, 0x0) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, 0x0, 0x0) readv(r4, &(0x7f0000000640)=[{&(0x7f0000000200)=""/190, 0xbe}], 0x1) 3m2.546931879s ago: executing program 2 (id=11924): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000300)={[{@resgid}, {@bh}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4}}, {@resuid}]}, 0x1, 0x553, &(0x7f0000001080)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x22) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x5e, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, @void, @value}, 0x94) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed"], 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f00000000c0)=@ccm_128={{0x305}, '\x00', "bcbd13b603e0f7b3bfa8909ef43c0ae1", "0000fd9f", "b08068ebce17ab00"}, 0x28) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x4000, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000000), 0x4) syz_emit_ethernet(0x52, &(0x7f0000000180)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00\x00)', 0x1c, 0x6, 0x0, @private1, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0x2, 0x0, 0x0, 0x0, {[@fastopen={0x22, 0x2}, @exp_smc={0xfe, 0x6}]}}}}}}}}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000600)='sys_enter\x00', r4}, 0x10) timerfd_settime(0xffffffffffffffff, 0x0, 0x0, 0x0) clock_nanosleep(0x1, 0x0, &(0x7f0000000180), 0x0) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) utimes(&(0x7f0000000000)='./file0\x00', &(0x7f0000000240)={{0x0, 0x2710}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x1, 0x7fff0000}]}) readlink(0x0, 0x0, 0x0) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xfecc) 3m1.878681508s ago: executing program 2 (id=11932): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r0}, 0x18) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x30410, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30c3a0e4, 0x1, @perf_config_ext={0x20000000000000, 0x1}, 0x11d08, 0x2, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000002c0)={'ip6tnl0\x00', &(0x7f0000000240)={'syztnl1\x00', 0x0, 0x2f, 0x6, 0x81, 0x1, 0x43, @private2, @rand_addr=' \x01\x00', 0x7800, 0x7800, 0x8, 0x5de}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000300)) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f0000000380), &(0x7f00000003c0)=0x4) getsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f0000000440)={@initdev}, &(0x7f0000000480)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000500)={'batadv_slave_1\x00'}) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newtfilter={0x24, 0x11, 0x1, 0x691522eb, 0x0, {0x0, 0x0, 0x74, r3, {0x10, 0x4}, {}, {0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 3m0.623833585s ago: executing program 2 (id=11957): r0 = syz_genetlink_get_family_id$gtp(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x2c, r0, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_NET_NS_FD={0x8}, @GTPA_LINK={0x8}]}, 0x2c}}, 0x20004944) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0xc0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0/file0/file0\x00', &(0x7f0000000140)={0x800, 0x100, 0x21}, 0x18) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x18d811, 0x0) umount2(&(0x7f0000000080)='./file0/file0\x00', 0x1) 3m0.569479746s ago: executing program 2 (id=11958): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x103, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001380), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_SERVICE(r3, 0x0, 0x40000) sendmsg$IPVS_CMD_SET_SERVICE(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x24, r4, 0x20, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x40488c0}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r0}, 0x10) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) r6 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x8844) 3m0.367181928s ago: executing program 2 (id=11964): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01080000000000000000020000000900020073797a2a0000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0x74}}, 0x0) 3m0.351527309s ago: executing program 37 (id=11964): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01080000000000000000020000000900020073797a2a0000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0x74}}, 0x0) 2m54.940515101s ago: executing program 9 (id=12069): bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x4, 0x7fe4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x18, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x18) r2 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) listen(r2, 0x80080400) r3 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r3, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10) 2m54.930412311s ago: executing program 9 (id=12071): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000180)=ANY=[@ANYBLOB="680000001000030400"/20, @ANYRES32, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e0030000280080001"], 0x68}}, 0x64000004) (fail_nth: 5) 2m54.901114621s ago: executing program 9 (id=12072): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001380)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum64={0x5, 0x0, 0x0, 0x13, 0x0, 0x4}]}}, 0x0, 0x26, 0x0, 0x1, 0xfe6e, 0x0, @void, @value}, 0x28) 2m54.827099072s ago: executing program 9 (id=12074): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x8, &(0x7f0000000000), 0x1, 0x51a, &(0x7f0000001200)="$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") syz_clone(0x80000000, 0x0, 0x0, &(0x7f0000000040), &(0x7f00000001c0), &(0x7f00000003c0)) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 2m54.772138103s ago: executing program 9 (id=12076): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0}, 0x18) r0 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa"], 0x0) sendmsg(r0, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x11000000}, 0x0) mq_open(&(0x7f0000000380)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\x00\x17\xc0\xa3\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbb\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\v\x00\x86\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8,XVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8\xbf\xe6\xb2M\b/\rp\xa5\x00\x00\x00\x00', 0x40, 0x9, 0x0) mq_unlink(&(0x7f0000000340)='eth0\x00') prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000600)=[{0x200000000006, 0x1, 0x0, 0x7ffc1bfb}]}) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0202000311000000000000000000000005000500000000000a00000000000000fe8000000000000000000000000000bb000000000000000002000100000007000000000b000000000200090000000000000000000000000005000600000000000a00000000000000fe8800000000000000000000000000010000000000000000010018"], 0x88}}, 0x0) iopl(0x3) syz_emit_ethernet(0x0, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000a00)=ANY=[@ANYRES8], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x100) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$can_j1939(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000180)={0x1d, r3, 0x1, {0xb4d92c3c1588cfd3, 0x1, 0x2}, 0x2}, 0x18, &(0x7f00000002c0)={&(0x7f00000001c0)="4dddc4d6ea503c6b4b223bff1b5066ca5658d723e6b40440703017f846c8925897a97d05bbbbfdf0910e8f679692cce2115b4574096449a2404056129e9340c9cb9f2fedb72cac9bed2534107714c2a02f7ad5198b78b513266511f2a48b6ff7a62feb08703b318c6dacf311819d4879cf5caa03eb27c8d60b7d5f827df68c8a174aeab7b70d2ad05a1576bf782f82bf534d30cfe5ad1d60a6f5151bd844a48c93e548651449b4e3e1dd068ac212343c08e962fa23554bc0fce60ec7ad2fa4842bb7de4bfc021e553173d0bb1b9a6c012401a2e83934e851f9592b1430aad8e8498abe32", 0xe4}, 0x1, 0x0, 0x0, 0x8000}, 0x41) r4 = timerfd_create(0x0, 0x0) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) readv(r4, &(0x7f0000000640)=[{0x0}], 0x1) 2m54.24705023s ago: executing program 9 (id=12084): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0xfffffffb, 0x0, 0x0, 0x40f00, 0x42, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r4, 0x0, 0xffffffffffffffff}, 0x13) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f0000000140)) pwritev(r5, &(0x7f0000000040)=[{0x0}], 0x1, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r3, 0x0, 0x0, 0xfffffffe, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000c00)={&(0x7f0000000100)='kmem_cache_free\x00', r7}, 0x10) write$cgroup_subtree(r2, &(0x7f0000000200)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce81ea033300fe08000000000200875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) 2m54.24686689s ago: executing program 38 (id=12084): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0xfffffffb, 0x0, 0x0, 0x40f00, 0x42, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r4, 0x0, 0xffffffffffffffff}, 0x13) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f0000000140)) pwritev(r5, &(0x7f0000000040)=[{0x0}], 0x1, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r3, 0x0, 0x0, 0xfffffffe, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000c00)={&(0x7f0000000100)='kmem_cache_free\x00', r7}, 0x10) write$cgroup_subtree(r2, &(0x7f0000000200)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce81ea033300fe08000000000200875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) 2m7.147430947s ago: executing program 6 (id=13106): mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='mm_page_free\x00', r0, 0x0, 0x5}, 0x18) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) fchmodat(0xffffffffffffff9c, 0x0, 0xffffffd3) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00'}, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) 2m6.95700832s ago: executing program 6 (id=13111): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x6, 0xe) fchdir(0xffffffffffffffff) ioctl$TCGETA(r0, 0x5405, &(0x7f0000000200)) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd8fdb, 0x103) getpid() bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f0000000400)="b9f273ea4d318a00dcb4f8f54fddc0db162cd417c2f61aca93f4a74b6f83620fd8f41f2c85d6d97d14edc6c4e900f01d20ebc727e5264598829a75f1cf021197bb50a6ee412d1c4ddd78d1979f77d66e6dc38fe4ea17b34db9fa274a83eba9704888a77a96f571ea133d539557e3300c3dcd0dc86ebbfc4cb91a083d2e4fb6ca7f48fd0e5fe851be69a6908e4bdac354cbe99ec4ddb964c488"}, 0x20) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000001080)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r3 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) fallocate(r3, 0x3, 0xf00, 0x10000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00'}, 0x10) ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0f85403, &(0x7f0000000040)={{0x0, 0x2, 0x1d9, 0x3, 0x3}, 0xd, 0x18fe, 'id0\x00', 'timer1\x00', 0x0, 0x8000, 0x8, 0x884b, 0x627}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000780)={'dummy0\x00', 0x0}) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r4, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010026bd6000000000002d9300000c00018008000100", @ANYRES32=r6], 0x20}, 0x1, 0x0, 0x0, 0xd4}, 0x24008000) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r7, 0x0, 0x10000000000ac6}, 0x18) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000500)={r3, 0xffffffffffffffff}, 0x4) r10 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000680)='blkio.bfq.io_merged_recursive\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0xe, 0x12, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000080000000000000010000000186700000f00000000000000080e0000b708000000000000648af8ff00000000b7000000bfa100000000000007010000f8ffffffbfa40000000000000a013a94f0ffffffb70200000800000018230000", @ANYRES32=r9, @ANYBLOB="0000000000000000b70500000800000085000000a50000009500000000000000"], &(0x7f0000000600)='syzkaller\x00', 0x1ff, 0xa7, &(0x7f00000009c0)=""/167, 0x41000, 0x24, '\x00', r6, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x6, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000007c0)=[r2, r2, 0x1, 0xffffffffffffffff, r3, r3, r10, r3], 0x0, 0x10, 0x9, @void, @value}, 0x94) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000000380)=[{{0x1, 0x1, 0x1, 0x1}, {0x2}}, {{}, {0x0, 0x1, 0x0, 0x1}}, {{0x3, 0x0, 0x0, 0x1}, {0x3, 0x1, 0x1, 0x1}}, {{0x4, 0x1, 0x0, 0x1}, {0x3, 0x0, 0x1}}], 0x20) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a310000000014000780050015000c00000008001240000000000500050002000000050004000000000010000300686173683a69702c6d6163", @ANYRESDEC=r2], 0x5c}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c0000000306010200000000000000000a0000010500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x4004810}, 0x840) 2m6.789664412s ago: executing program 6 (id=13113): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000880)='kfree\x00', r1}, 0x18) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) r3 = fspick(r2, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r3, 0x7, 0x0, 0x0, 0x0) 2m6.767974212s ago: executing program 6 (id=13115): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = io_uring_setup(0x5237, &(0x7f00000002c0)) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="6800000010000100"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000480012800e0001006970366772657461700000003400028008000100", @ANYRES32, @ANYBLOB="14000600fe800000000000000000000000000015140007"], 0x68}}, 0x0) sendto$packet(r0, &(0x7f0000000180)="a6bea8a120e5f8320c30ce5086dda5e986f34c10d8c39c3002de8ec445ae083a4b7fc08a086fc691", 0x28, 0x0, &(0x7f0000000140)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x13, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000a98b179bfe350000000000bf24131c0100002020732500000000002c20207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000200008385000000710000001801000002696c2500000000002020207b1af8ff00000000bfa100001900000007010000f8ffffffb702000008000000b703000000000000850000000600"], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, @void, @value}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f0000000740)='kmem_cache_free\x00', r4}, 0x18) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x30, 0x0, 0x0, 0xfffff034}, {0x80000006}]}, 0x10) r8 = socket(0x2, 0x3, 0x6) bind$inet(r8, &(0x7f0000000080)={0x2, 0xfffa, @local}, 0x10) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18, r4, {0x66e}}, './file0\x00'}) openat$cgroup_int(r9, &(0x7f00000001c0)='cpu.weight\x00', 0x2, 0x0) setsockopt$sock_int(r8, 0x1, 0x6, &(0x7f00000000c0)=0x2, 0x4) ioctl$TIOCPKT(r9, 0x5420, &(0x7f0000000200)=0xb7) sendto$inet(r8, &(0x7f0000000e00)="490000800081a8fba96f00ef95", 0xd, 0x4840, &(0x7f0000002400)={0x2, 0x4e20, @multicast2}, 0x10) unshare(0x8000000) unshare(0x2c040000) 2m6.637583574s ago: executing program 6 (id=13119): bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x18, 0xb, &(0x7f0000000a00)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000d520256b1d01bf9800000000000007010000f8ffefffb702000008000000b70300004000000085000f3aef0000060000009599000000efddfc27cd41b4e0caeb613ee17af98e725186e9d38e4697bb6893130905a8894f0d0fb95f05e948195beeab329cca9c0bebc26de3fa716788552260db97bea2729f5d0374734703ceec1a01926991e2db6c74ca6f271c43461bae34fe7b5ebbb1cb6bdc75d4cf0ca7fe1111066e1225d71eb3883a1bfd80cd64662a661ccde5c51231c435cc2423bf7e64dcd77d2c1580c66fa8c72899a37e0507db3e69bd3db82eb47788abd46739954b80a9f7c756e6b1255eac7809f39a6edd5bff501ffcd8805264c2f8accb5819bccf75943a5fb1ccb6935305627927639319ddb4"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, @void, @value}, 0x94) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080)=0xffffffffffffffff, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x20000009, 0x0, &(0x7f0000000240)={0x0, 0x0, 0xfffc, 0x360}, 0x8, 0x9, 0x80, 0x0, 0x0, 0x101, 0x0}) 2m6.410371837s ago: executing program 6 (id=13125): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00', r0}, 0x18) getpgid(0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYRESDEC=r1], 0x48) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x33, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x1}]}, 0x10) 2m6.410058167s ago: executing program 39 (id=13125): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00', r0}, 0x18) getpgid(0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYRESDEC=r1], 0x48) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x33, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x1}]}, 0x10) 35.356124319s ago: executing program 3 (id=15085): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) r0 = socket(0x5, 0x80000, 0xca) utimes(&(0x7f00000005c0)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xb, &(0x7f0000000740)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000200), 0x25, 0x4be, &(0x7f0000001080)="$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") bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000740)=ANY=[@ANYRES16=0x0, @ANYRES16=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095", @ANYRES32=r0], 0x0, 0x28000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e22, 0x5ccc6e75}, 0x1f) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r4 = getpgrp(0xffffffffffffffff) kcmp(r4, r4, 0x3, 0xffffffffffffffff, 0xffffffffffffffff) listen(r3, 0x3) mount$9p_tcp(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=tcp,port=0x00000000']) close_range(r3, r3, 0xf00000000000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) r5 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r5, &(0x7f0000001000)={&(0x7f0000000080)={0x2, 0x29, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x14}, @loopback}}}], 0x20}, 0x4) 35.036920753s ago: executing program 3 (id=15086): socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='mm_page_free\x00', r1, 0x0, 0x4}, 0x18) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0x2000018, &(0x7f00000005c0)=ANY=[], 0x1, 0x728, &(0x7f0000000b80)="$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") r2 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$inet6_IPV6_RTHDR(r2, 0x29, 0x39, &(0x7f0000000f00)=ANY=[@ANYBLOB="00020201"], 0x18) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x1d, &(0x7f0000000040)=0x7, 0x4) 34.775466186s ago: executing program 3 (id=15089): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010076657468305f746f5f6873720000000058000000160a0101000b000000000000010000000900020073797a32000000000900010073797a30000000002c000380180003801400010076657468305f746f5f6873720000"], 0xf8}, 0x1, 0x0, 0x0, 0xc000}, 0x40) 34.663583938s ago: executing program 3 (id=15092): pwritev2(0xffffffffffffffff, 0x0, 0x0, 0xe7b, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x600000000000000, 0x0, 0x48) mbind(&(0x7f0000bdc000/0x3000)=nil, 0x3000, 0x1, &(0x7f0000000140)=0x3ff, 0x3, 0x0) mbind(&(0x7f0000bdd000/0x1000)=nil, 0x1000, 0x1, &(0x7f0000000080)=0x9, 0x5, 0x2) unshare(0x42000000) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$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") r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001880)={0x18, 0x31, &(0x7f0000001580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@call={0x85, 0x0, 0x0, 0xae}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @call={0x85, 0x0, 0x0, 0x74}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @map_fd={0x18, 0xb, 0x1, 0x0, r0}, @ringbuf_query, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000140)='syzkaller\x00', 0x7, 0xba, &(0x7f0000001740)=""/186, 0x41000, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x5, 0x2}, 0x8, 0x10, &(0x7f00000014c0)={0x4, 0xe, 0x10001, 0x54}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000001500)=[r0, r0], &(0x7f0000001800)=[{0x3, 0x4, 0x6, 0x4}, {0x0, 0x5, 0xf, 0x6}, {0x4, 0x2, 0x10, 0x1}, {0x0, 0x4, 0x5, 0x6}, {0x1, 0x4}], 0x10, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001940)={&(0x7f0000000000)='svc_authenticate\x00', r2, 0x0, 0xb}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001540)={&(0x7f0000000040)='ext4_ext_show_extent\x00', r1, 0x0, 0x20}, 0x18) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) open_by_handle_at(r3, &(0x7f00000004c0)=ANY=[@ANYBLOB="08000000020000000b00000000000000"], 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$getregset(0x4205, r4, 0x202, &(0x7f0000000240)={&(0x7f0000000180)=""/120, 0xffffffffffffff28}) 34.194361434s ago: executing program 3 (id=15100): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r1}, &(0x7f0000000000), 0x0}, 0x20) r3 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r3, 0x101) r4 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r4, &(0x7f0000e5c000)={0x2, 0x4e20, @dev}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 32.529265966s ago: executing program 3 (id=15111): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x8000000000000c, &(0x7f0000000600), 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_PAN_ID(r0, &(0x7f00000008c0)={0x0, 0x0, 0x0}, 0x800) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000540), 0x84) bpf$MAP_CREATE(0x1900000000000000, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) 32.494491057s ago: executing program 40 (id=15111): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x8000000000000c, &(0x7f0000000600), 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_PAN_ID(r0, &(0x7f00000008c0)={0x0, 0x0, 0x0}, 0x800) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000540), 0x84) bpf$MAP_CREATE(0x1900000000000000, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) 12.075548899s ago: executing program 1 (id=15420): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, 0x0, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x20c006, &(0x7f00000000c0)={[{@grpjquota}, {@mblk_io_submit}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@block_validity}, {@discard}, {@grpquota}], [{@seclabel}]}, 0x1, 0x446, &(0x7f0000000d40)="$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") r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00'}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) fsetxattr$system_posix_acl(r2, &(0x7f0000000600)='system.posix_acl_access\x00', &(0x7f0000000400)={{}, {0x1, 0x7}, [], {0x4, 0x3}, [], {0x10, 0x3}}, 0x24, 0x1) 12.036935359s ago: executing program 1 (id=15421): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000008c0)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) pipe2(&(0x7f0000000040), 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b00000007000000010001000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000002c7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x200c840, &(0x7f0000000240), 0x64, 0x537, &(0x7f0000000f80)="$eJzs3c9vI1cdAPDvOHZIdrN1Chygh1JoUXYFaycNbSMObREITpWAcl9C4kRRnDhKnHYTVTQRfwAXBEic4MIFif8AVeLCsUIqgjOIIhCCLRw4wA4ae5zNZu04G5w4JJ+PNDvvza/ve/bOjzfzMg7gynomIl6NiPtpmt6KiHI+vZAPsdcesuU+uPfWQjYkkaav/y2JJJ/W2VaSj6/nq41FxNe/EvGt5NG4Wzu7q/P1em0zz1ebaxvVrZ3d2ytr88u15dr67OzMi3Mvzb0wNz2Qet6IiJe/9Kfvf/enX375F5998w93/nLz21mxvpjPP1yPx1Q8bma76qXWZ3F4hc2IV04Z78IptmqYGz/ZOvtnWB4AAHrLrvE/HBGfiohbUY6R4y9nAQAAgP9D6SsT8e8kIu1utNvEsei5PAAAAHABFSJiIpJCJe8LMBGFQqXS7sP70biWvh3R/MxSY3t9MZsXMRmlwtJKvTad9xWejFKS5Wda6Qf559v5/fcjWvnZiHgyIr5XHm/lKwuN+uKwb34AAADAFXH9SPv/n+V2+x8AAAC4ZCaHXQAAAADgzGn/AwAAwOWn/Q8AAACX2ldfey0b0s7vXy++sbO92njj9mJta7Wytr1QWWhsblSWG43l1jv71vptr95obHwu1rfvVpu1rWZ1a2f3zlpje715Z+Whn8AGAAAAztGTn3jnd0lE7H1+vDVkRnssO3KuJQPOWvEgleTjLnv/759oj98/p0IB56LfOf035XMqCHDuisMuADA0pcdZ2N8JwKWU9Jnfs/POu/n4k4MtDwAAMHhTH+/9/L9w7Jp7x88GLjw7MVxdnef/TxzJA5df6/l/rw6/R7lYgEul5IwPV17f5/+9OgC8e9IIafp4JQIAAAZtojUkhUp+e28iCoVKJeJGq7t/KVlaqdem8+cDvy2XPpTlZ1prJn3bDAAAAAAAAAAAAAAAAAAAAAAAAABAW5omkQIAAACXWkThz8kv2+/ynyo/N3H0/sBo8q9y5D8R+uaPXv/B3flmc3Mmm/73g+nNH+bTnx/GHQwAAADgqE47vdOOBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBB+uDeWwudoTMtLZ993L9+ISImu8UvxlhrPBaliLj2jySKh9ZLImJkAPH39iPiY93iJ1mxDkJ2iz9+9vFjMv8UusW/PoD4cJW9kx1/Xs32v9GIOLz/FeKZ1rj7/leMeCh/Wq3jX3aA63L87Rz/Rnrs/zeObGuyR4yn3vt5tWf8/Yinit2PP534SY/4z56wjt/8xu5ur3npjyOmup5/kodiVZtrG9Wtnd3bK2vzy7Xl2vrs7MyLcy/NvTA3XV1aqdfyfx/ZfqlP2bL6X+sRf7JP/Z87Yf3/897dex/pUZws/s1nu8T/1U/yJR6NX8jPfZ/O09n8qU56r50+7Omf/frp4+q/2KP+/b7/myes/62vfeePEXH/0FcKAAzR1s7u6ny9Xts8NpFdtvRb5qImslb6BSiGxOkSJ/0veqrE2wPdYJqmafxve0oSQ//AO4lhH5kAAIBBe3DRP+ySAAAAAAAAAAAAAAAAAAAAwNV1Hq8TOxpz7yCVDOIV2gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/HfAAAA///xwNLS") getdents64(0xffffffffffffffff, 0x0, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) 11.962495271s ago: executing program 1 (id=15423): getdents64(0xffffffffffffffff, 0x0, 0x0) 11.903757181s ago: executing program 1 (id=15425): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0xc0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0200000004000000baed000001"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000600)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3477, 0x0, 0x0, 0x0, 0x8}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7535}}]}, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2688ca4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$nci(r5, 0x0, 0xfffffeea) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffe3, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r6}, 0x10) mknod$loop(0x0, 0x1000, 0x1) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) sendmsg$can_raw(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@canfd={{0x1, 0x0, 0x1, 0x1}, 0x11, 0x2, 0x0, 0x0, "96a6731c288e4f5b28d0e1d29b3d1f0eb29c05fec54e5f81d27a82ce67bd68f6cb48d985740d93bc7d6ba7dce78048c8b289b3020956f86ff808eab1645497c0"}, 0x48}, 0x1, 0x0, 0x0, 0x4080}, 0x48000) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x18d811, 0x0) r7 = creat(&(0x7f0000000040)='./file0\x00', 0x81) close(r7) socket$caif_stream(0x25, 0x1, 0x1) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r7, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x800) umount2(&(0x7f0000000080)='./file0/file0\x00', 0x1) 11.282879879s ago: executing program 1 (id=15432): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000001180)=[{{&(0x7f0000000140)={0xa, 0x0, 0x9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4}, 0x1c, &(0x7f00000005c0)=[{&(0x7f0000000240)="81", 0x1}], 0x1}}, {{&(0x7f0000000080)={0xa, 0x4e22, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x5}, 0x1c, &(0x7f0000000780)=[{&(0x7f0000000300)="8c", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000440)=[{0x0}], 0x1}}], 0x3, 0x4004851) 10.48717926s ago: executing program 1 (id=15452): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) modify_ldt$write(0x1, &(0x7f0000000640)={0x1, 0x0, 0x4000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1}, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x1, 0x3}, 0x10) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000300)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0xffffffffffffffff, 0x408c5333, &(0x7f0000000580)={0x0, 0x0, 0x0, 'queue0\x00'}) 10.434897931s ago: executing program 41 (id=15452): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) modify_ldt$write(0x1, &(0x7f0000000640)={0x1, 0x0, 0x4000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1}, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x1, 0x3}, 0x10) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000300)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0xffffffffffffffff, 0x408c5333, &(0x7f0000000580)={0x0, 0x0, 0x0, 'queue0\x00'}) 2.98669535s ago: executing program 8 (id=15587): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000001180)=[{{&(0x7f0000000140)={0xa, 0x0, 0x9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4}, 0x1c, &(0x7f00000005c0)=[{&(0x7f0000000240)="81", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000440)}}], 0x2, 0x4004851) openat$incfs(0xffffffffffffffff, &(0x7f0000000380)='.pending_reads\x00', 0x40, 0x100) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) 2.763241513s ago: executing program 8 (id=15589): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) bind$inet(r0, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000015000000"], 0x48) r1 = socket$inet6(0xa, 0x3, 0xff) r2 = dup2(r1, r1) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) sendmmsg$unix(r2, &(0x7f0000002480), 0x0, 0x4008890) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x10103, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc0000000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0207a20802"], 0x10}}, 0x0) 1.622833958s ago: executing program 8 (id=15625): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000008c0)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) getdents64(0xffffffffffffffff, 0x0, 0x0) 1.556396699s ago: executing program 8 (id=15626): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r0 = socket(0x10, 0x3, 0x9) connect$netlink(r0, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x25dfdc00}, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f0000000b00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x28}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) sendmsg$BATADV_CMD_TP_METER(r1, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, 0x0, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r2}, 0x10) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) sendmmsg$inet6(r3, &(0x7f0000000640)=[{{&(0x7f0000000300)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000080)='k', 0x1}], 0x1}}], 0x1, 0x0) shutdown(r3, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="5400000010000104000000000000000100000000", @ANYRES32=0x0, @ANYBLOB="fff00000000000002c0012800e00010069703667726574617000000018000280140007002001001000000000000000000000000208000a00f0"], 0x54}}, 0x0) 1.46117846s ago: executing program 8 (id=15634): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000100000000000000000850000007d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x1, 0x0, 0x7ffc1ffb}]}) setfsuid(0x0) 1.370987481s ago: executing program 8 (id=15635): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) bind$inet(r0, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000015000000"], 0x48) r1 = socket$inet6(0xa, 0x3, 0xff) r2 = dup2(r1, r1) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) sendmmsg$unix(r2, &(0x7f0000002480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[@rights={{0x10}}, @cred={{0x1c}}], 0x30, 0x4004801}}], 0x1, 0x4008890) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x10103, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc0000000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0207a20802"], 0x10}}, 0x0) 955.955877ms ago: executing program 0 (id=15644): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r0 = socket(0x10, 0x3, 0x9) connect$netlink(r0, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x25dfdc00}, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f0000000b00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x28}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) sendmsg$BATADV_CMD_TP_METER(r1, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, 0x0, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r2}, 0x10) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) sendmmsg$inet6(r3, &(0x7f0000000640)=[{{&(0x7f0000000300)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000080)='k', 0x1}], 0x1}}], 0x1, 0x0) shutdown(r3, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="5400000010000104000000000000000100000000", @ANYRES32=0x0, @ANYBLOB="fff00000000000002c0012800e00010069703667726574617000000018000280140007002001001000000000000000000000000208000a00f0"], 0x54}}, 0x0) 895.390508ms ago: executing program 0 (id=15647): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCFLSH(r0, 0x80045430, 0x7ffffffffffffffe) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={0x1, 0x58, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f00000003c0)=@newqdisc={0x414, 0x24, 0x8, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0xc, 0xfff2}, {0x4, 0xe}, {0x8, 0x6}}, [@qdisc_kind_options=@q_cbq={{0x8}, {0xdc, 0x2, [@TCA_CBS_PARMS={0x18, 0x1, {0x8, '\x00', 0x2, 0x2, 0x0, 0x5}}, @TCA_CBS_PARMS={0x18, 0x1, {0xc4, '\x00', 0xe, 0x7f, 0x1, 0xe}}, @TCA_CBS_PARMS={0x18, 0x1, {0x8, '\x00', 0x8, 0xc, 0x2, 0x80000000}}, @TCA_CBS_PARMS={0x18, 0x1, {0x9, '\x00', 0x5057, 0xf, 0x1, 0xac86}}, @TCA_CBS_PARMS={0x18, 0x1, {0x4, '\x00', 0xd4bf, 0x3, 0x8, 0x5}}, @TCA_CBS_PARMS={0x18, 0x1, {0x3, '\x00', 0x1, 0x400, 0x9, 0x1ff}}, @TCA_CBS_PARMS={0x18, 0x1, {0x7f, '\x00', 0x4, 0xfffffffb, 0x1, 0xfa0d}}, @TCA_CBS_PARMS={0x18, 0x1, {0x7, '\x00', 0x26e, 0x1, 0x0, 0x5}}, @TCA_CBS_PARMS={0x18, 0x1, {0x7, '\x00', 0x4, 0x3, 0x5, 0x7}}]}}, @TCA_STAB={0xd0, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x1, 0x6, 0x9, 0x8, 0x1, 0x3ff, 0x0, 0x4}}, {0xc, 0x2, [0x1, 0xd6, 0x1, 0x9]}}, {{0x1c, 0x1, {0x4, 0x6, 0xfff9, 0x1, 0x1, 0x81, 0x8c0423a, 0x4}}, {0xc, 0x2, [0x0, 0xfc00, 0x4, 0x0]}}, {{0x1c, 0x1, {0x2, 0xd4, 0x7f, 0x7, 0x0, 0x8, 0x7, 0x6}}, {0x10, 0x2, [0x823, 0x620, 0x0, 0x1, 0x7f, 0x8]}}, {{0x1c, 0x1, {0xd, 0x7, 0x8000, 0x9, 0x2, 0xf, 0x8, 0x3}}, {0xa, 0x2, [0x3, 0x493, 0x94]}}, {{0x1c, 0x1, {0x0, 0x5, 0xfc00, 0x8000, 0x1, 0x1, 0x9, 0x4}}, {0xc, 0x2, [0x7, 0xa64d, 0x0, 0xfff]}}]}, @qdisc_kind_options=@q_netem={{0xa}, {0x70, 0x2, {{0xffff, 0x5, 0x8, 0x9, 0x2, 0x5}, [@TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_RATE={0x14, 0x6, {0x7, 0x8, 0x7, 0x7}}, @TCA_NETEM_CORRUPT={0xc, 0x4, {0x1, 0x6}}, @TCA_NETEM_JITTER64={0xc, 0xb, 0x10001}, @TCA_NETEM_RATE64={0xc, 0x8, 0x2cac4d8dc09de641}, @TCA_NETEM_RATE={0x14, 0x6, {0x8, 0xfffffeff, 0x7, 0x3}}]}}}, @qdisc_kind_options=@q_pfifo_fast={0xf}, @TCA_RATE={0x6, 0x5, {0x4, 0x1}}, @qdisc_kind_options=@q_red={{0x8}, {0x15c, 0x2, [@TCA_RED_STAB={0x104, 0x2, "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"}, @TCA_RED_MAX_P={0x8}, @TCA_RED_MARK_BLOCK={0x8, 0x6, 0x8001}, @TCA_RED_FLAGS={0xc, 0x4, {0xf, 0x8}}, @TCA_RED_MAX_P={0x8, 0x3, 0x1}, @TCA_RED_PARMS={0x14, 0x1, {0x1ff, 0xd, 0x9, 0x8, 0x4, 0x1e, 0x7}}, @TCA_RED_FLAGS={0xc, 0x4, {0x7, 0x8}}, @TCA_RED_MAX_P={0x8, 0x3, 0x86}, @TCA_RED_EARLY_DROP_BLOCK={0x8, 0x5, 0x3d1089a2}]}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x8, 0x1, 0xfffc, 0x8001, 0x1, 0x3, 0x0, 0x2}}, {0x8, 0x2, [0x2, 0x1]}}]}, @qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0xd}}]}, 0x414}}, 0x20000000) r3 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r3, &(0x7f0000000380)={0x2a, 0xffffffff00000002, 0x7ffe}, 0xc) bind$qrtr(r3, &(0x7f0000000500)={0x2a, 0x1, 0x1}, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b1380070080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000020000000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000b0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002002000850000008200000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200000800"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001880)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8b, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='kfree\x00', r6}, 0x10) syz_read_part_table(0x5c8, &(0x7f0000000600)="$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") r7 = creat(&(0x7f0000000140)='./file0\x00', 0x2) openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r8 = syz_open_dev$usbfs(0x0, 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r8, 0x0) ioctl$USBDEVFS_SUBMITURB(r8, 0x8038550a, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000002c0)='thermal_zone_trip\x00', r5}, 0x18) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) r9 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_inet6_SIOCADDRT(r9, 0x890b, &(0x7f00000005c0)={@dev={0xfe, 0x80, '\x00', 0x40}, @remote, @remote, 0x3, 0x2, 0x5, 0x400, 0xb7, 0xc20022}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r7, 0x8933, &(0x7f0000000cc0)={'wg2\x00'}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'lo\x00'}) 855.316658ms ago: executing program 4 (id=15648): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000380)={{0x0, 0x1}, 0x1000000, 0x1, 0x0, {}, 0x2, 0x3}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r1, &(0x7f0000001180)=[{{&(0x7f0000000140)={0xa, 0x0, 0x9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4}, 0x1c, &(0x7f00000005c0)=[{&(0x7f0000000240)}], 0x1}}, {{&(0x7f0000000080)={0xa, 0x4e22, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x5}, 0x1c, &(0x7f0000000780)=[{&(0x7f0000000300)="8c", 0x1}], 0x1}}, {{&(0x7f00000001c0)={0xa, 0x4e24, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8}, 0x1c, &(0x7f0000000440)}}], 0x3, 0x4004851) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) 854.102378ms ago: executing program 7 (id=15649): r0 = socket$inet6_dccp(0xa, 0x6, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000cc0)=@newqdisc={0x64, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0x2}, {0xffff, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x34, 0x2, {{0x10, 0x3, 0x1, 0x3, 0x400, 0x8}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x2}, @TCA_NETEM_JITTER64={0xc, 0xb, 0x8}]}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x40001d4}, 0x8840) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e21, 0x9, @empty}, 0x1c) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000000d40)={0x0, 0x9, 0x1, [0x400, 0x2, 0x8001, 0x0, 0x68], [0x4, 0x96, 0x3, 0x9, 0x7, 0x80000000, 0x100, 0x1, 0x40, 0x2, 0x400000000000, 0xee, 0x5, 0x2e60, 0x5bb9, 0xff, 0x4, 0x9, 0x7, 0x2, 0x6, 0x101, 0x7f, 0x3, 0xa8f, 0x80000000, 0x5, 0x22, 0x1c1, 0x9, 0xfffffffffffffff7, 0x2, 0x4, 0xffff, 0x1, 0x952, 0x101, 0x4d8, 0x7fff, 0x7, 0x4, 0x6, 0x4, 0x8, 0x5, 0x82, 0x5, 0x3, 0x5, 0x80000000, 0x3ff, 0x10, 0x7f, 0x0, 0x9, 0xd01, 0x40, 0x5, 0x3, 0x1000, 0xb, 0xd468, 0x7, 0x21, 0x1, 0xfffffffffffff8dd, 0x0, 0x7f, 0xfffffffffffffbff, 0x8001, 0x8, 0x5, 0x2, 0x7, 0x6e3, 0x4, 0x6, 0x1, 0xede7, 0x9, 0x40000000000000, 0x8, 0x1, 0xee8, 0x0, 0x79800000000, 0x10000, 0x7, 0xe, 0x3, 0x5d1, 0xffffffffffffffff, 0xfb0e, 0x6, 0x9, 0x2, 0x6, 0x7, 0x1, 0x7f, 0xff, 0x5, 0x2, 0x3, 0x8, 0x9, 0xf00, 0x5, 0x1, 0x7ff, 0x10000, 0xb1, 0x3, 0x6, 0x8, 0x2, 0xd3bf, 0x9, 0x5, 0xca, 0x4]}) ioctl$BTRFS_IOC_DEV_INFO(r1, 0xd000941e, &(0x7f0000001180)={r3, "23a44ce807eaf54a6e0afecbbf3a02a3"}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x48) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2={0xff, 0x3}}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r4, 0x29, 0x36, &(0x7f0000000180)=ANY=[], 0x8) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) write(r4, &(0x7f0000000400)="c3f676f676c4c52a", 0x3bb) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x52, &(0x7f0000000080)={0x0, 0x8b48, 0x2, 0x10, 0x3d8}, &(0x7f0000ff0000), 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000030000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r7}, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(r8, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x6f, r9, 0x1, 0x0, 0x0, {{}, {0x0, 0x6}}}, 0xfd53}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000600000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00400000bfa200000000000007020000f8ffffffb703000008000000b70400009500"/72], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r11}, 0x10) 821.051659ms ago: executing program 7 (id=15651): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000008c0)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x20c006, &(0x7f00000000c0)={[{@grpjquota}, {@mblk_io_submit}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@block_validity}, {@discard}, {@grpquota}], [{@seclabel}]}, 0x1, 0x446, &(0x7f0000000d40)="$eJzs28tvG8UfAPDv2kn6/P1qqvLoAwgURMQjadJSeuACAokDSEhwKMeQpFWo26AmSLSKICBUjqgSd8QRib+AE1wQcELiCndUqUK5tMDFaOPdxHbttA5ONtSfj7TJzO44M1/vjj07kw2gbw2nP5KIvRHxa0Tsq2ebCwzXf91cXpz6c3lxKola7Y0/kpVyN5YXp/Ki+ev25JmBiNInSRxuU+/8pcvnJqvVmYtZfmzh/Ltj85cuPzN7fvLszNmZCxOnTp04Pv7cyYlnexJnGteNQx/MHTn4yltXX5s6ffXtH79O8vhb4uiR4fUOPl6r9bi6Yv2vIZ0MFNgQulKud9MYXOn/+6IcaydvX7z8caGNAzZVrVar3df58FINuIslUXQLgGLkX/Tp/W++bdHQY1u4/kL9BiiN+2a21Y8MRCkrM9hyf9tLwxFxeumvL9ItNmceAgCgybfp+OfpbPzXtPBTisZ5of9nayiViLgnIvZHxMmIOBAR90aslL0/Ih7osv7WRZJbxz+la13+ya6k47/ns7Wt5vFfPvqLSjni73y4XInB5MxsdeZY9p6MxOCOND++Th3fvfTLZ52ONY7/0i2tPx8LZu24NrCj+TXTkwuT/ybmRtc/ijg00C7+ZHUlIL0sDkbEoQ3WMfvkV0c6Hbt9/M2GGjM9WGeqfRnxRP38L0VL/Llk/fXJsZ1RnTk2ll8Vt/rp5yuvd6q/2/h7LT3/u9te/6vxV5LG9dr57uu48tunHe9pNnr9DyVvNu17f3Jh4eJ4xFDyar3RjfsnWspNrJVP4x852r7/74+1d+JwRKQX8YMR8VBEPJy1/ZGIeDQijq4T/w8vPvZO856ki/g3Vxr/dFfnfy0xFK172ifK577/pqnSSnQRf3r+T6ykRrI9d/L5dyft2tjVDAAAAP89pYjYG0lpdDVdKo2O1v+H/0DsLlXn5heeOjP33oXp+jMClRgs5TNd9fng+nzoeHZbn+cnWvLHs3njz8u7VvKjU3PV6aKDhz63p0P/T/1eLrp1wKbzvBb0L/0f+pf+D/1L/4f+1ab/7yqiHcDWa/f9/2EB7QC2Xkv/t+wHfcT9P/Qv/R/6l/4PfWl+V9z+Ifntmti5PZrRn4koFVd7PkNV+JtwFycK/mACAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADokX8CAAD//2Ts5lU=") r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00'}) r2 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) fsetxattr$system_posix_acl(r2, &(0x7f0000000600)='system.posix_acl_access\x00', &(0x7f0000000400)={{}, {0x1, 0x7}, [], {0x4, 0x3}, [], {0x10, 0x3}}, 0x24, 0x1) 726.85229ms ago: executing program 4 (id=15652): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000001180)=[{{&(0x7f0000000140)={0xa, 0x0, 0x9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4}, 0x1c, &(0x7f00000005c0)=[{&(0x7f0000000240)="81", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000200)}], 0x1}}], 0x2, 0x4004851) 700.84388ms ago: executing program 4 (id=15653): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x103400, 0x0) readv(r1, &(0x7f00000002c0)=[{&(0x7f0000000540)=""/35, 0x23}, {&(0x7f0000000c00)=""/146, 0x92}], 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r2 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000000), 0x49) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000040)="2703022b590200c90000002f1eafbcf706e105000000894f000f1102ee1680ca82973d2bd4b8bf4a8291a14b8a34f90186cee844000000080000000019b0fb0bba", 0x41}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b7d050139bf7ada33cc9e37eed1153ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d3333ce2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb0000000000000000", 0x87}, {&(0x7f0000000280)="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", 0x1a1}, {&(0x7f0000000180)="6fe4dd9eeba3271dc700b581440284", 0xc6a3}], 0x4}, 0x0) r3 = io_uring_setup(0x78c4, &(0x7f0000000a40)={0x0, 0x0, 0x2, 0xfffffffe, 0x3bd}) r4 = socket$rxrpc(0x21, 0x2, 0xa) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0b0000000c000000040000004f0c000001000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000100), 0x6c7, r5}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180), &(0x7f0000000440), 0x23, r5}, 0x38) bind$rxrpc(r4, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0xfffe, @empty}}, 0x24) listen(r4, 0x4) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001240)=ANY=[@ANYBLOB="0b00000007000000080000000800000015"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000013c0)=ANY=[@ANYBLOB="1800000004000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000090000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r7}, 0x10) close_range(r3, r4, 0x0) 658.536961ms ago: executing program 4 (id=15654): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000000a0a01"], 0x20}, 0x1, 0x0, 0x0, 0x2000c801}, 0x0) 658.193661ms ago: executing program 7 (id=15655): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000008c0)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x20c006, &(0x7f00000000c0)={[{@grpjquota}, {@mblk_io_submit}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@block_validity}, {@discard}, {@grpquota}], [{@seclabel}]}, 0x1, 0x446, &(0x7f0000000d40)="$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") r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00'}) r2 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) fsetxattr$system_posix_acl(r2, &(0x7f0000000600)='system.posix_acl_access\x00', &(0x7f0000000400)={{}, {0x1, 0x7}, [], {0x4, 0x3}, [], {0x10, 0x3}}, 0x24, 0x1) 618.735031ms ago: executing program 5 (id=15656): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000100000000000000000850000007d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={0x0, r0}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x1, 0x0, 0x7ffc1ffb}]}) setfsuid(0x0) 590.775551ms ago: executing program 5 (id=15657): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r0 = socket(0x10, 0x3, 0x9) connect$netlink(r0, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x25dfdc00}, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f0000000b00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x28}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) sendmsg$BATADV_CMD_TP_METER(r1, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, 0x0, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r2}, 0x10) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) sendmmsg$inet6(r3, &(0x7f0000000640)=[{{&(0x7f0000000300)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000080)='k', 0x1}], 0x1}}], 0x1, 0x0) shutdown(r3, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="5400000010000104000000000000000100000000", @ANYRES32=0x0, @ANYBLOB="fff00000000000002c0012800e00010069703667726574617000000018000280140007002001001000000000000000000000000208000a00f0"], 0x54}}, 0x0) 551.209752ms ago: executing program 4 (id=15658): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b00000007000000010001000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000002c7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) getdents(0xffffffffffffffff, 0x0, 0x0) 523.616402ms ago: executing program 0 (id=15659): ioctl$TCFLSH(0xffffffffffffffff, 0x80045430, 0x7ffffffffffffffe) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={0x1, 0x58, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f00000003c0)=@newqdisc={0x414, 0x24, 0x8, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, {0xc, 0xfff2}, {0x4, 0xe}, {0x8, 0x6}}, [@qdisc_kind_options=@q_cbq={{0x8}, {0xdc, 0x2, [@TCA_CBS_PARMS={0x18, 0x1, {0x8, '\x00', 0x2, 0x2, 0x0, 0x5}}, @TCA_CBS_PARMS={0x18, 0x1, {0xc4, '\x00', 0xe, 0x7f, 0x1, 0xe}}, @TCA_CBS_PARMS={0x18, 0x1, {0x8, '\x00', 0x8, 0xc, 0x2, 0x80000000}}, @TCA_CBS_PARMS={0x18, 0x1, {0x9, '\x00', 0x5057, 0xf, 0x1, 0xac86}}, @TCA_CBS_PARMS={0x18, 0x1, {0x4, '\x00', 0xd4bf, 0x3, 0x8, 0x5}}, @TCA_CBS_PARMS={0x18, 0x1, {0x3, '\x00', 0x1, 0x400, 0x9, 0x1ff}}, @TCA_CBS_PARMS={0x18, 0x1, {0x7f, '\x00', 0x4, 0xfffffffb, 0x1, 0xfa0d}}, @TCA_CBS_PARMS={0x18, 0x1, {0x7, '\x00', 0x26e, 0x1, 0x0, 0x5}}, @TCA_CBS_PARMS={0x18, 0x1, {0x7, '\x00', 0x4, 0x3, 0x5, 0x7}}]}}, @TCA_STAB={0xd0, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x1, 0x6, 0x9, 0x8, 0x1, 0x3ff, 0x0, 0x4}}, {0xc, 0x2, [0x1, 0xd6, 0x1, 0x9]}}, {{0x1c, 0x1, {0x4, 0x6, 0xfff9, 0x1, 0x1, 0x81, 0x8c0423a, 0x4}}, {0xc, 0x2, [0x0, 0xfc00, 0x4, 0x0]}}, {{0x1c, 0x1, {0x2, 0xd4, 0x7f, 0x7, 0x0, 0x8, 0x7, 0x6}}, {0x10, 0x2, [0x823, 0x620, 0x0, 0x1, 0x7f, 0x8]}}, {{0x1c, 0x1, {0xd, 0x7, 0x8000, 0x9, 0x2, 0xf, 0x8, 0x3}}, {0xa, 0x2, [0x3, 0x493, 0x94]}}, {{0x1c, 0x1, {0x0, 0x5, 0xfc00, 0x8000, 0x1, 0x1, 0x9, 0x4}}, {0xc, 0x2, [0x7, 0xa64d, 0x0, 0xfff]}}]}, @qdisc_kind_options=@q_netem={{0xa}, {0x70, 0x2, {{0xffff, 0x5, 0x8, 0x9, 0x2, 0x5}, [@TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_RATE={0x14, 0x6, {0x7, 0x8, 0x7, 0x7}}, @TCA_NETEM_CORRUPT={0xc, 0x4, {0x1, 0x6}}, @TCA_NETEM_JITTER64={0xc, 0xb, 0x10001}, @TCA_NETEM_RATE64={0xc, 0x8, 0x2cac4d8dc09de641}, @TCA_NETEM_RATE={0x14, 0x6, {0x8, 0xfffffeff, 0x7, 0x3}}]}}}, @qdisc_kind_options=@q_pfifo_fast={0xf}, @TCA_RATE={0x6, 0x5, {0x4, 0x1}}, @qdisc_kind_options=@q_red={{0x8}, {0x15c, 0x2, [@TCA_RED_STAB={0x104, 0x2, "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"}, @TCA_RED_MAX_P={0x8}, @TCA_RED_MARK_BLOCK={0x8, 0x6, 0x8001}, @TCA_RED_FLAGS={0xc, 0x4, {0xf, 0x8}}, @TCA_RED_MAX_P={0x8, 0x3, 0x1}, @TCA_RED_PARMS={0x14, 0x1, {0x1ff, 0xd, 0x9, 0x8, 0x4, 0x1e, 0x7}}, @TCA_RED_FLAGS={0xc, 0x4, {0x7, 0x8}}, @TCA_RED_MAX_P={0x8, 0x3, 0x86}, @TCA_RED_EARLY_DROP_BLOCK={0x8, 0x5, 0x3d1089a2}]}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x8, 0x1, 0xfffc, 0x8001, 0x1, 0x3, 0x0, 0x2}}, {0x8, 0x2, [0x2, 0x1]}}]}, @qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0xd}}]}, 0x414}}, 0x20000000) r2 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r2, &(0x7f0000000380)={0x2a, 0xffffffff00000002, 0x7ffe}, 0xc) bind$qrtr(r2, &(0x7f0000000500)={0x2a, 0x1, 0x1}, 0xc) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b1380070080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000020000000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000b0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002002000850000008200000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300006346000085000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='kfree\x00'}, 0x10) r5 = creat(&(0x7f0000000140)='./file0\x00', 0x2) openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r6 = syz_open_dev$usbfs(0x0, 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r6, 0x0) ioctl$USBDEVFS_SUBMITURB(r6, 0x8038550a, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000002c0)='thermal_zone_trip\x00', r4}, 0x18) getsockname$packet(r5, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000580)=0x14) r7 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r7, 0x890b, &(0x7f00000005c0)={@dev={0xfe, 0x80, '\x00', 0x40}, @remote, @remote, 0x3, 0x2, 0x5, 0x400, 0xb7, 0xc20022, r8}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000000cc0)={'wg2\x00'}) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'lo\x00'}) 522.895662ms ago: executing program 4 (id=15660): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) clock_gettime(0x0, &(0x7f00000002c0)={0x0, 0x0}) clock_settime(0x0, &(0x7f0000000380)={r2, r3+60000000}) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000019600)='blkio.bfq.empty_time\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000200), 0xfffffd9d) sendfile(r4, r5, 0x0, 0x8000002b) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) r8 = syz_open_dev$evdev(&(0x7f0000000700), 0x3, 0x0) ioctl$EVIOCGRAB(r8, 0x40044590, &(0x7f0000000040)) close_range(r6, 0xffffffffffffffff, 0x0) 505.200623ms ago: executing program 5 (id=15661): r0 = socket$inet6_dccp(0xa, 0x6, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000cc0)=@newqdisc={0x64, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0x2}, {0xffff, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x34, 0x2, {{0x10, 0x3, 0x1, 0x3, 0x400, 0x8}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x2}, @TCA_NETEM_JITTER64={0xc, 0xb, 0x8}]}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x40001d4}, 0x8840) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e21, 0x9, @empty}, 0x1c) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000000d40)={0x0, 0x9, 0x1, [0x400, 0x2, 0x8001, 0x0, 0x68], [0x4, 0x96, 0x3, 0x9, 0x7, 0x80000000, 0x100, 0x1, 0x40, 0x2, 0x400000000000, 0xee, 0x5, 0x2e60, 0x5bb9, 0xff, 0x4, 0x9, 0x7, 0x2, 0x6, 0x101, 0x7f, 0x3, 0xa8f, 0x80000000, 0x5, 0x22, 0x1c1, 0x9, 0xfffffffffffffff7, 0x2, 0x4, 0xffff, 0x1, 0x952, 0x101, 0x4d8, 0x7fff, 0x7, 0x4, 0x6, 0x4, 0x8, 0x5, 0x82, 0x5, 0x3, 0x5, 0x80000000, 0x3ff, 0x10, 0x7f, 0x0, 0x9, 0xd01, 0x40, 0x5, 0x3, 0x1000, 0xb, 0xd468, 0x7, 0x21, 0x1, 0xfffffffffffff8dd, 0x0, 0x7f, 0xfffffffffffffbff, 0x8001, 0x8, 0x5, 0x2, 0x7, 0x6e3, 0x4, 0x6, 0x1, 0xede7, 0x9, 0x40000000000000, 0x8, 0x1, 0xee8, 0x0, 0x79800000000, 0x10000, 0x7, 0xe, 0x3, 0x5d1, 0xffffffffffffffff, 0xfb0e, 0x6, 0x9, 0x2, 0x6, 0x7, 0x1, 0x7f, 0xff, 0x5, 0x2, 0x3, 0x8, 0x9, 0xf00, 0x5, 0x1, 0x7ff, 0x10000, 0xb1, 0x3, 0x6, 0x8, 0x2, 0xd3bf, 0x9, 0x5, 0xca, 0x4]}) ioctl$BTRFS_IOC_DEV_INFO(r1, 0xd000941e, &(0x7f0000001180)={r3, "23a44ce807eaf54a6e0afecbbf3a02a3"}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x48) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2={0xff, 0x3}}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r4, 0x29, 0x36, &(0x7f0000000180)=ANY=[], 0x8) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) write(r4, &(0x7f0000000400)="c3f676f676c4c52a", 0x3bb) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x52, &(0x7f0000000080)={0x0, 0x8b48, 0x2, 0x10, 0x3d8}, &(0x7f0000ff0000), 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000030000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r7}, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(r8, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x6f, r9, 0x1, 0x0, 0x0, {{}, {0x0, 0x6}}}, 0xfd53}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000600000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00400000bfa200000000000007020000f8ffffffb703000008000000b70400009500"/72], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r11}, 0x10) 493.230883ms ago: executing program 7 (id=15662): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) read$nci(r1, 0x0, 0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="0100000000000000000002000000080001"], 0x1c}}, 0x0) close(0xffffffffffffffff) syz_io_uring_setup(0x3067, &(0x7f00000001c0)={0x0, 0x985d, 0x4, 0x3, 0x25c}, &(0x7f0000000000)=0x0, &(0x7f0000000280)) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_io_uring_setup(0x48f1, &(0x7f00000002c0)={0x0, 0xf25d, 0x20, 0x2, 0x10f}, &(0x7f0000000340), &(0x7f00000003c0)=0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000800)=@IORING_OP_RECVMSG={0xa, 0x60, 0x12, r5, 0x0, &(0x7f00000007c0)={&(0x7f0000000500)=@pptp={0x18, 0x2, {0x0, @loopback}}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000400)=""/9, 0x9}, {&(0x7f0000000580)=""/112, 0x70}, {&(0x7f0000000600)=""/137, 0x89}, {&(0x7f00000006c0)=""/140, 0x8c}], 0x4}, 0x0, 0x42, 0x1, {0x2}}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a0b040000000000000000020000004c000480240001800b000100736f636b657400001400028008000240000000030800014000000002240001800b0001007470726f7879000014000280080001400000000208000240000000030900010073797a30000000000900020073797a32"], 0xa0}}, 0x40880) socketpair(0x1, 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) unshare(0x24040000) 468.177803ms ago: executing program 0 (id=15663): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket(0x5, 0x80000, 0xca) utimes(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xb, &(0x7f0000000740)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000200), 0x25, 0x4be, &(0x7f0000001080)="$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") r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22, 0x5ccc6e75}, 0x1f) kcmp(0x0, 0x0, 0x3, 0xffffffffffffffff, 0xffffffffffffffff) listen(r1, 0x3) mount$9p_tcp(&(0x7f0000000100), 0x0, &(0x7f0000000180), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000004e22']) 467.568473ms ago: executing program 5 (id=15664): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000008c0)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x20c006, &(0x7f00000000c0)={[{@grpjquota}, {@mblk_io_submit}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@block_validity}, {@discard}, {@grpquota}], [{@seclabel}]}, 0x1, 0x446, &(0x7f0000000d40)="$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") lsetxattr$security_selinux(&(0x7f00000001c0)='.\x00', &(0x7f0000000240), &(0x7f0000000280)='system_u:object_r:fsadm_exec_t:s0\x00', 0x1001, 0x0) socket(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) fsetxattr$system_posix_acl(r1, &(0x7f0000000600)='system.posix_acl_access\x00', &(0x7f0000000400)={{}, {0x1, 0x7}, [], {0x4, 0x3}, [], {0x10, 0x3}}, 0x24, 0x1) 280.577806ms ago: executing program 7 (id=15665): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000008c0)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x20c006, &(0x7f00000000c0)={[{@grpjquota}, {@mblk_io_submit}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@block_validity}, {@discard}, {@grpquota}], [{@seclabel}]}, 0x1, 0x446, &(0x7f0000000d40)="$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") r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00'}) r2 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) fsetxattr$system_posix_acl(r2, &(0x7f0000000600)='system.posix_acl_access\x00', &(0x7f0000000400)={{}, {0x1, 0x7}, [], {0x4, 0x3}, [], {0x10, 0x3}}, 0x24, 0x1) 245.816686ms ago: executing program 0 (id=15666): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) r2 = mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\x00\x00\x00\x00\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6\xc3\x85\xf79k\x90\x88\v8I$\xfdY\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2\x01\x04\x00\x00\x00\x00\x00\x00\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3+\x04\x00\x00:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x72, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x18, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="1846000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000018110000", @ANYRES32=r1, @ANYRES16=r2], &(0x7f0000000600)='GPL\x00', 0x6, 0x0, &(0x7f0000000680), 0x40f00, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000006c0)={0x5, 0x2, 0x800}, 0x10, 0x0, 0x0, 0x8, &(0x7f0000000700)=[r1, r0, r1, r1, r1], &(0x7f0000000740)=[{0x5, 0x4, 0x0, 0x7}, {0x3, 0x2, 0xa, 0x7}, {0x4, 0x3, 0x7}, {0x3, 0x1, 0x1, 0x2}, {0x0, 0x5, 0x10, 0xa}, {0x4, 0x4, 0xf, 0xa}, {0x3, 0x1, 0x4, 0x6}, {0x7ff, 0x4, 0xc, 0x3}], 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000240)='io_uring_fail_link\x00', r3, 0x0, 0x2}, 0x18) mq_timedsend(r2, 0x0, 0x0, 0x6, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000080000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="12000000010000000b3beabfe867c67b3914b5d53d0800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) mq_timedreceive(r2, &(0x7f0000004600)=""/102381, 0xfffffceb, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$EBT_SO_SET_ENTRIES(r5, 0x0, 0x80, &(0x7f0000000340)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000080], 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000a1130000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff000000000000000000000000000000eff08a1b000000000000552d1d937f3fdd090c003b767a00"/144]}, 0x108) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001440)={0x11, 0xb, &(0x7f0000000880)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r6}, 0x10) mount$9p_rdma(&(0x7f00000001c0), &(0x7f0000000240)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=rdma']) r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000540), 0x84) r8 = socket$packet(0x11, 0x2, 0x300) r9 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$packet_add_memb(r8, 0x107, 0x1, &(0x7f0000000040)={0x0, 0x1, 0x6, @local}, 0x10) sendmsg$nl_route_sched(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xc}, {0xfffc, 0x8}, {0x6}}}, 0x24}}, 0x20040000) 245.043006ms ago: executing program 5 (id=15667): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000100000000000000000850000007d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={0x0, r0}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x1, 0x0, 0x7ffc1ffb}]}) setfsuid(0x0) 156.421377ms ago: executing program 5 (id=15668): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x3f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$inet_udp(0x2, 0x2, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) msgsnd(0x0, &(0x7f0000000180)=ANY=[], 0x2000, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x65, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_emit_ethernet(0x6e, &(0x7f0000000600)=ANY=[@ANYBLOB="0180c2000003aaaaaaaaaaaa86dd8000000000383a00fe880000000000000000000000000101ff02000000000000000000000000000102009078000005dc608cb02b00042f0000000000000000000000000000000001fe8000000000000000000000000000aa2b0004ec3f032697b779a1305a5accacca1e74e4407ef14e179de84ab9545d7986637e0000000000100000"], 0x0) socketpair(0x28, 0xa, 0x8, &(0x7f0000000040)) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="440000001000090600"/20, @ANYRES32=0x0, @ANYBLOB="adffa888000000001c00128009000100626f6e64000000000c000280050001000600000008000a0079"], 0x44}}, 0x0) 130.128858ms ago: executing program 0 (id=15669): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCFLSH(r0, 0x80045430, 0x7ffffffffffffffe) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={0x1, 0x58, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f00000003c0)=@newqdisc={0x414, 0x24, 0x8, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0xc, 0xfff2}, {0x4, 0xe}, {0x8, 0x6}}, [@qdisc_kind_options=@q_cbq={{0x8}, {0xdc, 0x2, [@TCA_CBS_PARMS={0x18, 0x1, {0x8, '\x00', 0x2, 0x2, 0x0, 0x5}}, @TCA_CBS_PARMS={0x18, 0x1, {0xc4, '\x00', 0xe, 0x7f, 0x1, 0xe}}, @TCA_CBS_PARMS={0x18, 0x1, {0x8, '\x00', 0x8, 0xc, 0x2, 0x80000000}}, @TCA_CBS_PARMS={0x18, 0x1, {0x9, '\x00', 0x5057, 0xf, 0x1, 0xac86}}, @TCA_CBS_PARMS={0x18, 0x1, {0x4, '\x00', 0xd4bf, 0x3, 0x8, 0x5}}, @TCA_CBS_PARMS={0x18, 0x1, {0x3, '\x00', 0x1, 0x400, 0x9, 0x1ff}}, @TCA_CBS_PARMS={0x18, 0x1, {0x7f, '\x00', 0x4, 0xfffffffb, 0x1, 0xfa0d}}, @TCA_CBS_PARMS={0x18, 0x1, {0x7, '\x00', 0x26e, 0x1, 0x0, 0x5}}, @TCA_CBS_PARMS={0x18, 0x1, {0x7, '\x00', 0x4, 0x3, 0x5, 0x7}}]}}, @TCA_STAB={0xd0, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x1, 0x6, 0x9, 0x8, 0x1, 0x3ff, 0x0, 0x4}}, {0xc, 0x2, [0x1, 0xd6, 0x1, 0x9]}}, {{0x1c, 0x1, {0x4, 0x6, 0xfff9, 0x1, 0x1, 0x81, 0x8c0423a, 0x4}}, {0xc, 0x2, [0x0, 0xfc00, 0x4, 0x0]}}, {{0x1c, 0x1, {0x2, 0xd4, 0x7f, 0x7, 0x0, 0x8, 0x7, 0x6}}, {0x10, 0x2, [0x823, 0x620, 0x0, 0x1, 0x7f, 0x8]}}, {{0x1c, 0x1, {0xd, 0x7, 0x8000, 0x9, 0x2, 0xf, 0x8, 0x3}}, {0xa, 0x2, [0x3, 0x493, 0x94]}}, {{0x1c, 0x1, {0x0, 0x5, 0xfc00, 0x8000, 0x1, 0x1, 0x9, 0x4}}, {0xc, 0x2, [0x7, 0xa64d, 0x0, 0xfff]}}]}, @qdisc_kind_options=@q_netem={{0xa}, {0x70, 0x2, {{0xffff, 0x5, 0x8, 0x9, 0x2, 0x5}, [@TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_RATE={0x14, 0x6, {0x7, 0x8, 0x7, 0x7}}, @TCA_NETEM_CORRUPT={0xc, 0x4, {0x1, 0x6}}, @TCA_NETEM_JITTER64={0xc, 0xb, 0x10001}, @TCA_NETEM_RATE64={0xc, 0x8, 0x2cac4d8dc09de641}, @TCA_NETEM_RATE={0x14, 0x6, {0x8, 0xfffffeff, 0x7, 0x3}}]}}}, @qdisc_kind_options=@q_pfifo_fast={0xf}, @TCA_RATE={0x6, 0x5, {0x4, 0x1}}, @qdisc_kind_options=@q_red={{0x8}, {0x15c, 0x2, [@TCA_RED_STAB={0x104, 0x2, "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"}, @TCA_RED_MAX_P={0x8}, @TCA_RED_MARK_BLOCK={0x8, 0x6, 0x8001}, @TCA_RED_FLAGS={0xc, 0x4, {0xf, 0x8}}, @TCA_RED_MAX_P={0x8, 0x3, 0x1}, @TCA_RED_PARMS={0x14, 0x1, {0x1ff, 0xd, 0x9, 0x8, 0x4, 0x1e, 0x7}}, @TCA_RED_FLAGS={0xc, 0x4, {0x7, 0x8}}, @TCA_RED_MAX_P={0x8, 0x3, 0x86}, @TCA_RED_EARLY_DROP_BLOCK={0x8, 0x5, 0x3d1089a2}]}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x8, 0x1, 0xfffc, 0x8001, 0x1, 0x3, 0x0, 0x2}}, {0x8, 0x2, [0x2, 0x1]}}]}, @qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0xd}}]}, 0x414}}, 0x20000000) r3 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r3, &(0x7f0000000380)={0x2a, 0xffffffff00000002, 0x7ffe}, 0xc) bind$qrtr(r3, &(0x7f0000000500)={0x2a, 0x1, 0x1}, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b1380070080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000020000000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000b0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002002000850000008200000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300006346"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001880)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8b, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='kfree\x00', r6}, 0x10) syz_read_part_table(0x5c8, &(0x7f0000000600)="$eJzs2z1oE2gYB/Anaq6Hwrk4ORzWwclFcTSDlSQqCiHaRRwUFBEzRRAiBAQdbIaWZigdu5RCln5MTcPR4WhpoXMpHXoUOnQ62qXQpTl6fY+7sXdtD4TfD17er3/y5BkyvsF37Vz83u12MxHR7fn3n+5v5QsPr5XulZ9FZOJFRPT++tP04U0mJf761utpv5H242MXOwO7D7Kt9ad7N14uNM6l+89pXJpo95+4Oc7cZG7x8pev1eJgLfdurVjf+ra68mRqJ19uP240px9l779OuaU0X0jzh6jFp3gfr6ISlXgT1VOqP9ravHVwtdiafXt3v9AZmr+dcqUT9nnc+h97h5836303Z66M3KnNLZe3zx/lKv/h3wUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwP9vMrd4+cvXanGwlnu3VqxvfVtdeTK1ky+3Hzea04+y91/HLz2HuaWUv5DmD1GLT/E+XkUlKvEmqqdUf7S1eevgarE1+/bufqEzNH875Uonb/VY9T/2Dj9v1vtuzlwZuVObWy5vnz/KVXrO6AcAAAAAAAAAAAAAAAAAAABAROQLD6+V7pWfRWTiRUS0f+7786l/N713z6Tc9bTYSOfjYxc7A7sPsq31p3s3Xi40fkvnn9O4NNHu/2edH/5e/nj2XXFcfwQAAP//HQGWmQ==") r7 = creat(&(0x7f0000000140)='./file0\x00', 0x2) openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r8 = syz_open_dev$usbfs(0x0, 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r8, 0x0) ioctl$USBDEVFS_SUBMITURB(r8, 0x8038550a, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000002c0)='thermal_zone_trip\x00', r5}, 0x18) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) r9 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_inet6_SIOCADDRT(r9, 0x890b, &(0x7f00000005c0)={@dev={0xfe, 0x80, '\x00', 0x40}, @remote, @remote, 0x3, 0x2, 0x5, 0x400, 0xb7, 0xc20022}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r7, 0x8933, &(0x7f0000000cc0)={'wg2\x00'}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'lo\x00'}) 0s ago: executing program 7 (id=15670): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b00000007000000010001000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000002c7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x200c840, &(0x7f0000000240), 0x64, 0x537, &(0x7f0000000f80)="$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") getdents64(0xffffffffffffffff, 0x0, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): m 00000000-0000-0000-0000-000000000000. [ 752.094563][T21533] team0: Port device team_slave_0 added [ 752.115077][T21533] team0: Port device team_slave_1 added [ 752.153842][T21533] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 752.160910][T21533] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 752.186952][T21533] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 752.273327][T21533] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 752.273342][T21533] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 752.273371][T21533] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 752.301889][T21533] hsr_slave_0: entered promiscuous mode [ 752.302411][T21533] hsr_slave_1: entered promiscuous mode [ 752.302617][T21533] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 752.302631][T21533] Cannot create hsr debugfs directory [ 752.318511][T21623] loop3: detected capacity change from 0 to 764 [ 752.383192][T21627] loop3: detected capacity change from 0 to 512 [ 752.438268][T21631] netlink: 20 bytes leftover after parsing attributes in process `syz.8.15065'. [ 752.459131][T21627] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 752.459269][T21627] ext4 filesystem being mounted at /383/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 752.466315][T21627] 9pnet_fd: p9_fd_create_tcp (21627): problem connecting socket to 127.0.0.1 [ 752.518485][T14694] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 752.787564][T21533] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 752.790119][T21533] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 752.793392][T21533] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 752.797708][T21533] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 752.863330][T21651] xt_hashlimit: max too large, truncated to 1048576 [ 752.917237][T21533] 8021q: adding VLAN 0 to HW filter on device bond0 [ 752.976079][T21533] 8021q: adding VLAN 0 to HW filter on device team0 [ 752.982421][T20339] bridge0: port 1(bridge_slave_0) entered blocking state [ 752.982448][T20339] bridge0: port 1(bridge_slave_0) entered forwarding state [ 752.987285][T13761] bridge0: port 2(bridge_slave_1) entered blocking state [ 752.987369][T13761] bridge0: port 2(bridge_slave_1) entered forwarding state [ 753.068216][T21657] loop5: detected capacity change from 0 to 764 [ 753.103037][T21533] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 753.133241][T21665] bond1: entered promiscuous mode [ 753.133255][T21665] bond1: entered allmulticast mode [ 753.133628][T21665] 8021q: adding VLAN 0 to HW filter on device bond1 [ 753.200866][T21665] bond1 (unregistering): Released all slaves [ 753.235244][T21673] netlink: 20 bytes leftover after parsing attributes in process `syz.8.15075'. [ 753.398377][T21681] netlink: 'syz.0.15079': attribute type 13 has an invalid length. [ 753.407270][T21690] xt_hashlimit: max too large, truncated to 1048576 [ 753.686376][T21700] vhci_hcd: invalid port number 96 [ 753.691548][T21700] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 753.937056][T21681] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 753.949416][T21681] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 753.961690][T21714] loop3: detected capacity change from 0 to 512 [ 753.995995][T21714] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 754.135403][T21714] ext4 filesystem being mounted at /389/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 754.153529][T21681] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 754.162047][T21681] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 754.170640][T21681] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 754.179056][T21681] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 754.203078][T21714] 9pnet_fd: p9_fd_create_tcp (21714): problem connecting socket to 127.0.0.1 [ 754.231573][T14694] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 754.240721][ T29] kauditd_printk_skb: 66 callbacks suppressed [ 754.240738][ T29] audit: type=1326 audit(2000000186.276:108916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21680 comm="syz.0.15079" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc464fe969 code=0x7ffc0000 [ 754.255856][T21533] veth0_vlan: entered promiscuous mode [ 754.270826][ T29] audit: type=1326 audit(2000000186.276:108917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21680 comm="syz.0.15079" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc464fe969 code=0x7ffc0000 [ 754.305481][T21698] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 754.323551][T21533] veth1_vlan: entered promiscuous mode [ 754.367531][T21533] veth0_macvtap: entered promiscuous mode [ 754.383818][T21533] veth1_macvtap: entered promiscuous mode [ 754.405980][T21726] loop3: detected capacity change from 0 to 764 [ 754.425755][T21533] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 754.436241][T21533] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 754.446118][T21533] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 754.456595][T21533] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 754.466395][T21533] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 754.476828][T21533] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 754.489832][T21533] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 754.503634][T21733] netlink: 16 bytes leftover after parsing attributes in process `syz.3.15089'. [ 754.517092][T21533] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 754.527561][T21533] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 754.537445][T21533] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 754.547883][T21533] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 754.557760][T21533] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 754.568225][T21533] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 754.579127][T21533] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 754.624497][T21533] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 754.633411][T21533] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 754.642117][T21533] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 754.650861][T21533] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 754.660931][T21740] loop3: detected capacity change from 0 to 128 [ 754.676282][T21740] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 754.691847][T21745] netlink: 16 bytes leftover after parsing attributes in process `syz.8.15094'. [ 754.751341][T21740] ext4 filesystem being mounted at /392/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 754.970546][ T29] audit: type=1326 audit(2000000187.053:108918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21751 comm="syz.0.15096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc464fe969 code=0x7ffc0000 [ 754.994361][ T29] audit: type=1326 audit(2000000187.053:108919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21751 comm="syz.0.15096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=69 compat=0 ip=0x7efc464fe969 code=0x7ffc0000 [ 755.033486][T21765] loop4: detected capacity change from 0 to 128 [ 755.053203][T21763] bond1: entered promiscuous mode [ 755.058328][T21763] bond1: entered allmulticast mode [ 755.066824][T21763] 8021q: adding VLAN 0 to HW filter on device bond1 [ 755.082915][T21763] bond1 (unregistering): Released all slaves [ 755.133339][T14694] EXT4-fs error (device loop3): ext4_readdir:224: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024 [ 755.183643][T14694] EXT4-fs error (device loop3): ext4_readdir:224: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 8192 [ 755.241259][T14694] EXT4-fs error (device loop3): ext4_empty_dir:3107: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 755.286974][T14694] EXT4-fs error (device loop3): ext4_readdir:224: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024 [ 755.304421][T21765] bio_check_eod: 28141 callbacks suppressed [ 755.304452][T21765] syz.4.15098: attempt to access beyond end of device [ 755.304452][T21765] loop4: rw=0, sector=145, nr_sectors = 8 limit=128 [ 755.323619][T21772] syz.4.15098: attempt to access beyond end of device [ 755.323619][T21772] loop4: rw=0, sector=145, nr_sectors = 8 limit=128 [ 755.351523][T14694] EXT4-fs error (device loop3): ext4_readdir:224: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 8192 [ 755.362966][T21765] syz.4.15098: attempt to access beyond end of device [ 755.362966][T21765] loop4: rw=0, sector=145, nr_sectors = 8 limit=128 [ 755.381587][T14694] EXT4-fs error (device loop3): ext4_empty_dir:3107: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 755.390727][T21772] syz.4.15098: attempt to access beyond end of device [ 755.390727][T21772] loop4: rw=0, sector=145, nr_sectors = 8 limit=128 [ 755.405606][T14694] EXT4-fs error (device loop3): ext4_readdir:224: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024 [ 755.428506][T21765] syz.4.15098: attempt to access beyond end of device [ 755.428506][T21765] loop4: rw=0, sector=145, nr_sectors = 8 limit=128 [ 755.447622][T14694] EXT4-fs error (device loop3): ext4_readdir:224: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 8192 [ 755.468053][T21772] syz.4.15098: attempt to access beyond end of device [ 755.468053][T21772] loop4: rw=0, sector=145, nr_sectors = 8 limit=128 [ 755.471242][T21755] chnl_net:caif_netlink_parms(): no params data found [ 755.481511][T21772] syz.4.15098: attempt to access beyond end of device [ 755.481511][T21772] loop4: rw=0, sector=145, nr_sectors = 8 limit=128 [ 755.501524][T21772] syz.4.15098: attempt to access beyond end of device [ 755.501524][T21772] loop4: rw=0, sector=145, nr_sectors = 8 limit=128 [ 755.504626][T14694] EXT4-fs error (device loop3): ext4_empty_dir:3107: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 755.514937][T21772] syz.4.15098: attempt to access beyond end of device [ 755.514937][T21772] loop4: rw=0, sector=145, nr_sectors = 8 limit=128 [ 755.550350][T21765] syz.4.15098: attempt to access beyond end of device [ 755.550350][T21765] loop4: rw=0, sector=145, nr_sectors = 8 limit=128 [ 755.593556][T14694] EXT4-fs error (device loop3): ext4_readdir:224: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024 [ 755.770867][T21789] netlink: 36 bytes leftover after parsing attributes in process `syz.0.15105'. [ 755.805484][T21755] bridge0: port 1(bridge_slave_0) entered blocking state [ 755.812582][T21755] bridge0: port 1(bridge_slave_0) entered disabled state [ 755.828793][T21755] bridge_slave_0: entered allmulticast mode [ 755.835364][T21755] bridge_slave_0: entered promiscuous mode [ 755.846780][T21755] bridge0: port 2(bridge_slave_1) entered blocking state [ 755.854050][T21755] bridge0: port 2(bridge_slave_1) entered disabled state [ 755.861443][T21755] bridge_slave_1: entered allmulticast mode [ 755.867847][T21755] bridge_slave_1: entered promiscuous mode [ 755.908859][T21755] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 755.927968][T21755] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 755.938772][ T7065] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 755.972681][T21755] team0: Port device team_slave_0 added [ 755.979398][T21755] team0: Port device team_slave_1 added [ 755.996027][T21787] Cannot find add_set index 0 as target [ 756.004766][ T7065] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 756.017578][T21755] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 756.024559][T21755] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 756.050522][T21755] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 756.096329][T21755] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 756.103326][T21755] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 756.129392][T21755] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 756.514923][ T7065] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 756.591440][ T7065] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 756.621469][T21755] hsr_slave_0: entered promiscuous mode [ 756.627559][T21755] hsr_slave_1: entered promiscuous mode [ 756.634844][T21755] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 756.658609][T21755] Cannot create hsr debugfs directory [ 756.716098][T21753] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 756.731609][ T7065] team0: left allmulticast mode [ 756.736607][ T7065] team_slave_0: left allmulticast mode [ 756.742149][ T7065] team_slave_1: left allmulticast mode [ 756.747897][ T7065] bridge0: port 3(team0) entered disabled state [ 756.778475][ T7065] bridge_slave_1: left allmulticast mode [ 756.784192][ T7065] bridge_slave_1: left promiscuous mode [ 756.789957][ T7065] bridge0: port 2(bridge_slave_1) entered disabled state [ 756.811105][ T7065] bridge_slave_0: left allmulticast mode [ 756.816765][ T7065] bridge_slave_0: left promiscuous mode [ 756.822470][ T7065] bridge0: port 1(bridge_slave_0) entered disabled state [ 756.993875][ T7065]  (unregistering): (slave bond_slave_0): Releasing backup interface [ 757.006644][ T7065]  (unregistering): (slave bond_slave_1): Releasing backup interface [ 757.029347][ T7065]  (unregistering): Released all slaves [ 757.090089][ T7065] IPVS: stopping master sync thread 12378 ... [ 757.240072][ T7065] hsr_slave_0: left promiscuous mode [ 757.247180][ T7065] hsr_slave_1: left promiscuous mode [ 757.253027][ T7065] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 757.260519][ T7065] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 757.286166][ T7065] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 757.293588][ T7065] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 757.314636][T21828] netlink: 36 bytes leftover after parsing attributes in process `syz.8.15115'. [ 757.314866][ T7065] veth1_macvtap: left promiscuous mode [ 757.329278][ T7065] veth0_macvtap: left promiscuous mode [ 757.338743][ T7065] veth1_vlan: left promiscuous mode [ 757.344186][ T7065] veth0_vlan: left promiscuous mode [ 757.393282][T21830] loop4: detected capacity change from 0 to 128 [ 757.438532][ T7065] team_slave_1 (unregistering): left promiscuous mode [ 757.447894][ T7065] team0 (unregistering): Port device team_slave_1 removed [ 757.458513][ T7065] team_slave_0 (unregistering): left promiscuous mode [ 757.465891][ T7065] team0 (unregistering): Port device team_slave_0 removed [ 757.511332][T21832] loop4: detected capacity change from 0 to 512 [ 757.548064][T21832] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 757.579205][T21832] ext4 filesystem being mounted at /6/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 757.644075][T21837] loop8: detected capacity change from 0 to 128 [ 757.673834][T21812] chnl_net:caif_netlink_parms(): no params data found [ 757.702522][ T29] audit: type=1400 audit(2000000189.919:108920): avc: denied { listen } for pid=21845 comm="syz.0.15121" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 757.741604][T21755] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 757.761531][T21755] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 757.762855][T21847] netlink: 52 bytes leftover after parsing attributes in process `syz.0.15121'. [ 757.777400][ T29] audit: type=1400 audit(2000000189.982:108921): avc: denied { append } for pid=21845 comm="syz.0.15121" name="vsock" dev="devtmpfs" ino=257 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 757.782756][T21755] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 757.842976][T21755] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 757.874233][T21812] bridge0: port 1(bridge_slave_0) entered blocking state [ 757.881436][T21812] bridge0: port 1(bridge_slave_0) entered disabled state [ 757.912369][T21812] bridge_slave_0: entered allmulticast mode [ 757.923933][T21812] bridge_slave_0: entered promiscuous mode [ 757.959157][T21812] bridge0: port 2(bridge_slave_1) entered blocking state [ 757.966452][T21812] bridge0: port 2(bridge_slave_1) entered disabled state [ 758.012381][T21812] bridge_slave_1: entered allmulticast mode [ 758.022111][T21812] bridge_slave_1: entered promiscuous mode [ 758.051902][T21812] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 758.062814][ T7065] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 758.075716][T21812] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 758.102901][T21812] team0: Port device team_slave_0 added [ 758.113869][ T7065] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 758.129269][T21812] team0: Port device team_slave_1 added [ 758.140212][T21755] 8021q: adding VLAN 0 to HW filter on device bond0 [ 758.163548][ T7065] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 758.175835][T21755] 8021q: adding VLAN 0 to HW filter on device team0 [ 758.192587][T13764] bridge0: port 1(bridge_slave_0) entered blocking state [ 758.199699][T13764] bridge0: port 1(bridge_slave_0) entered forwarding state [ 758.211334][T21812] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 758.218288][T21812] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 758.244195][T21812] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 758.269607][ T7065] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 758.284840][T21812] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 758.291862][T21812] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 758.317793][T21812] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 758.329821][T13765] bridge0: port 2(bridge_slave_1) entered blocking state [ 758.330504][T21533] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 758.336928][T13765] bridge0: port 2(bridge_slave_1) entered forwarding state [ 758.357909][T21755] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 758.368394][T21755] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 758.419360][T21812] hsr_slave_0: entered promiscuous mode [ 758.423383][ T29] audit: type=1326 audit(2000000190.675:108922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21855 comm="syz.4.15123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e59e8e969 code=0x7ffc0000 [ 758.425546][T21812] hsr_slave_1: entered promiscuous mode [ 758.448696][ T29] audit: type=1326 audit(2000000190.675:108923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21855 comm="syz.4.15123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6e59e8e969 code=0x7ffc0000 [ 758.464744][T21812] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 758.477963][ T29] audit: type=1326 audit(2000000190.675:108924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21855 comm="syz.4.15123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e59e8e969 code=0x7ffc0000 [ 758.515746][T21812] Cannot create hsr debugfs directory [ 758.521479][ T7065] bridge_slave_1: left allmulticast mode [ 758.527166][ T7065] bridge_slave_1: left promiscuous mode [ 758.532861][ T7065] bridge0: port 2(bridge_slave_1) entered disabled state [ 758.567752][T21862] loop4: detected capacity change from 0 to 512 [ 758.581961][T21862] EXT4-fs: Ignoring removed mblk_io_submit option [ 758.588777][ T7065] bridge_slave_0: left allmulticast mode [ 758.591277][T21862] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 758.594511][ T7065] bridge_slave_0: left promiscuous mode [ 758.609990][ T7065] bridge0: port 1(bridge_slave_0) entered disabled state [ 758.618273][T21862] EXT4-fs (loop4): 1 truncate cleaned up [ 758.624361][T21862] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 758.656963][ T29] audit: type=1326 audit(2000000190.780:108925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21855 comm="syz.4.15123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6e59e8e969 code=0x7ffc0000 [ 758.815434][T21867] netlink: 36 bytes leftover after parsing attributes in process `syz.8.15126'. [ 758.841606][ T7065]  (unregistering): (slave bond_slave_0): Releasing backup interface [ 758.851145][ T7065]  (unregistering): (slave bond_slave_1): Releasing backup interface [ 758.861528][ T7065]  (unregistering): Released all slaves [ 758.869753][ T7065] bond0 (unregistering): Released all slaves [ 758.944237][T21533] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 758.958230][T21755] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 759.156202][ T7065] hsr_slave_0: left promiscuous mode [ 759.164285][ T7065] hsr_slave_1: left promiscuous mode [ 759.172332][ T7065] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 759.179775][ T7065] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 759.199029][ T7065] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 759.201729][T21891] loop4: detected capacity change from 0 to 764 [ 759.206494][ T7065] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 759.227677][ T7065] veth1_macvtap: left promiscuous mode [ 759.233700][ T7065] veth0_macvtap: left promiscuous mode [ 759.239558][ T7065] veth1_vlan: left promiscuous mode [ 759.245011][ T7065] veth0_vlan: left promiscuous mode [ 759.307095][ T7065] team0 (unregistering): Port device team_slave_1 removed [ 759.316934][ T7065] team0 (unregistering): Port device team_slave_0 removed [ 759.414977][T21907] FAULT_INJECTION: forcing a failure. [ 759.414977][T21907] name failslab, interval 1, probability 0, space 0, times 0 [ 759.427693][T21907] CPU: 0 UID: 0 PID: 21907 Comm: syz.0.15136 Not tainted 6.15.0-rc4-syzkaller-00189-g2bfcee565c3a #0 PREEMPT(voluntary) [ 759.427716][T21907] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 759.427799][T21907] Call Trace: [ 759.427806][T21907] [ 759.427881][T21907] __dump_stack+0x1d/0x30 [ 759.427906][T21907] dump_stack_lvl+0xe8/0x140 [ 759.427928][T21907] dump_stack+0x15/0x1b [ 759.427963][T21907] should_fail_ex+0x265/0x280 [ 759.427999][T21907] should_failslab+0x8c/0xb0 [ 759.428036][T21907] kmem_cache_alloc_node_noprof+0x57/0x320 [ 759.428139][T21907] ? __alloc_skb+0x101/0x320 [ 759.428173][T21907] __alloc_skb+0x101/0x320 [ 759.428203][T21907] ? audit_log_start+0x365/0x6c0 [ 759.428364][T21907] audit_log_start+0x380/0x6c0 [ 759.428399][T21907] audit_seccomp+0x48/0x100 [ 759.428420][T21907] ? __seccomp_filter+0x68c/0x10d0 [ 759.428443][T21907] __seccomp_filter+0x69d/0x10d0 [ 759.428566][T21907] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 759.428587][T21907] ? vfs_write+0x75e/0x8d0 [ 759.428675][T21907] ? __rcu_read_unlock+0x4f/0x70 [ 759.428696][T21907] ? __fget_files+0x184/0x1c0 [ 759.428727][T21907] __secure_computing+0x82/0x150 [ 759.428744][T21907] syscall_trace_enter+0xcf/0x1e0 [ 759.428814][T21907] do_syscall_64+0xaa/0x1a0 [ 759.428838][T21907] ? clear_bhb_loop+0x25/0x80 [ 759.428863][T21907] ? clear_bhb_loop+0x25/0x80 [ 759.428886][T21907] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 759.428939][T21907] RIP: 0033:0x7efc464fe969 [ 759.428955][T21907] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 759.428975][T21907] RSP: 002b:00007efc44b67038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 759.429070][T21907] RAX: ffffffffffffffda RBX: 00007efc46725fa0 RCX: 00007efc464fe969 [ 759.429084][T21907] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000200000000100 [ 759.429098][T21907] RBP: 00007efc44b67090 R08: fffffffffffffffe R09: 0000000000000000 [ 759.429108][T21907] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 759.429118][T21907] R13: 0000000000000000 R14: 00007efc46725fa0 R15: 00007ffda1bea5a8 [ 759.429133][T21907] [ 759.451005][T21755] veth0_vlan: entered promiscuous mode [ 759.451844][T21907] audit_log_lost: 15 callbacks suppressed [ 759.451860][T21907] audit: audit_lost=27 audit_rate_limit=0 audit_backlog_limit=64 [ 759.459118][T21755] veth1_vlan: entered promiscuous mode [ 759.462314][T21907] audit: out of memory in audit_log_start [ 759.462798][ T29] audit: type=1326 audit(2000000191.724:108941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21905 comm="syz.0.15136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc464fe969 code=0x7ffc0000 [ 759.698452][ T29] audit: type=1326 audit(2000000191.724:108942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21905 comm="syz.0.15136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efc464fe969 code=0x7ffc0000 [ 759.722312][ T29] audit: type=1326 audit(2000000191.724:108943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21905 comm="syz.0.15136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc464fe969 code=0x7ffc0000 [ 759.746124][ T29] audit: type=1326 audit(2000000191.724:108944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21905 comm="syz.0.15136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7efc464fd2d0 code=0x7ffc0000 [ 759.769848][ T29] audit: type=1326 audit(2000000191.724:108945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21905 comm="syz.0.15136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7efc464fd41f code=0x7ffc0000 [ 759.794006][ T29] audit: type=1326 audit(2000000191.798:108946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21905 comm="syz.0.15136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7efc464fd37c code=0x7ffc0000 [ 759.817632][ T29] audit: type=1326 audit(2000000191.798:108947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21905 comm="syz.0.15136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7efc464fd41f code=0x7ffc0000 [ 759.841375][ T29] audit: type=1326 audit(2000000191.798:108948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21905 comm="syz.0.15136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7efc464fd5ca code=0x7ffc0000 [ 759.890592][T21918] can0: slcan on ttyS3. [ 759.906886][T21755] veth0_macvtap: entered promiscuous mode [ 759.918175][T21755] veth1_macvtap: entered promiscuous mode [ 759.928399][T21755] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 759.938968][T21755] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 759.948855][T21755] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 759.959286][T21755] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 759.970258][T21755] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 759.991463][T21918] can0 (unregistered): slcan off ttyS3. [ 759.997257][T21755] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 760.007827][T21755] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 760.017659][T21755] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 760.028193][T21755] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 760.068542][T21755] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 760.076620][T21755] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 760.085450][T21755] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 760.094176][T21755] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 760.102949][T21755] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 760.155332][T21812] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 760.172477][T21812] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 760.199986][T21812] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 760.208029][T21934] loop8: detected capacity change from 0 to 512 [ 760.233699][T21812] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 760.242528][T21934] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 760.269147][T21934] ext4 filesystem being mounted at /153/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 760.305252][T21812] 8021q: adding VLAN 0 to HW filter on device bond0 [ 760.331425][T18762] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 760.429992][T21949] loop8: detected capacity change from 0 to 128 [ 760.432235][T21943] bond1: entered promiscuous mode [ 760.441427][T21943] bond1: entered allmulticast mode [ 760.446758][T21943] 8021q: adding VLAN 0 to HW filter on device bond1 [ 760.460939][T21949] bio_check_eod: 17052 callbacks suppressed [ 760.460957][T21949] syz.8.15151: attempt to access beyond end of device [ 760.460957][T21949] loop8: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 760.485965][T21943] bond1 (unregistering): Released all slaves [ 760.535121][T21949] syz.8.15151: attempt to access beyond end of device [ 760.535121][T21949] loop8: rw=524288, sector=145, nr_sectors = 224 limit=128 [ 760.580283][T21949] syz.8.15151: attempt to access beyond end of device [ 760.580283][T21949] loop8: rw=0, sector=145, nr_sectors = 8 limit=128 [ 760.600999][T21957] syz.8.15151: attempt to access beyond end of device [ 760.600999][T21957] loop8: rw=0, sector=145, nr_sectors = 8 limit=128 [ 760.609378][T21812] 8021q: adding VLAN 0 to HW filter on device team0 [ 760.623296][T21949] syz.8.15151: attempt to access beyond end of device [ 760.623296][T21949] loop8: rw=0, sector=145, nr_sectors = 8 limit=128 [ 760.640160][T21957] syz.8.15151: attempt to access beyond end of device [ 760.640160][T21957] loop8: rw=0, sector=145, nr_sectors = 8 limit=128 [ 760.674059][ T121] bridge0: port 1(bridge_slave_0) entered blocking state [ 760.681150][ T121] bridge0: port 1(bridge_slave_0) entered forwarding state [ 760.709929][ T121] bridge0: port 2(bridge_slave_1) entered blocking state [ 760.717053][ T121] bridge0: port 2(bridge_slave_1) entered forwarding state [ 760.725833][T21957] syz.8.15151: attempt to access beyond end of device [ 760.725833][T21957] loop8: rw=0, sector=145, nr_sectors = 8 limit=128 [ 760.762724][T21949] syz.8.15151: attempt to access beyond end of device [ 760.762724][T21949] loop8: rw=0, sector=145, nr_sectors = 8 limit=128 [ 760.768176][T21812] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 760.786419][T21812] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 760.814269][T21957] syz.8.15151: attempt to access beyond end of device [ 760.814269][T21957] loop8: rw=0, sector=145, nr_sectors = 8 limit=128 [ 760.827997][T21949] syz.8.15151: attempt to access beyond end of device [ 760.827997][T21949] loop8: rw=0, sector=145, nr_sectors = 8 limit=128 [ 760.901098][T21812] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 761.053203][T21812] veth0_vlan: entered promiscuous mode [ 761.068822][T21812] veth1_vlan: entered promiscuous mode [ 761.084452][T21812] veth0_macvtap: entered promiscuous mode [ 761.106711][T21812] veth1_macvtap: entered promiscuous mode [ 761.135118][T21812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 761.145617][T21812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 761.155590][T21812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 761.166113][T21812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 761.176067][T21812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 761.186523][T21812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 761.200177][T21812] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 761.225315][T21812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 761.235911][T21812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 761.245773][T21812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 761.256213][T21812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 761.266104][T21812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 761.276548][T21812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 761.293677][T21812] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 761.303482][T21812] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 761.312239][T21812] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 761.321048][T21812] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 761.329824][T21812] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 761.504698][T22047] bond1: entered promiscuous mode [ 761.509780][T22047] bond1: entered allmulticast mode [ 761.518465][T22047] 8021q: adding VLAN 0 to HW filter on device bond1 [ 761.537515][T22047] bond1 (unregistering): Released all slaves [ 761.705494][T22076] netlink: 16 bytes leftover after parsing attributes in process `syz.8.15167'. [ 761.931061][T22114] netlink: 'syz.8.15171': attribute type 4 has an invalid length. [ 761.938980][T22114] netlink: 152 bytes leftover after parsing attributes in process `syz.8.15171'. [ 761.964104][T22112] netlink: 28 bytes leftover after parsing attributes in process `syz.4.15170'. [ 761.973195][T22112] netlink: 28 bytes leftover after parsing attributes in process `syz.4.15170'. [ 761.982239][T22112] netlink: 48 bytes leftover after parsing attributes in process `syz.4.15170'. [ 762.054845][T22129] netem: change failed [ 762.226965][T22151] program syz.1.15177 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 762.236420][T22151] FAULT_INJECTION: forcing a failure. [ 762.236420][T22151] name failslab, interval 1, probability 0, space 0, times 0 [ 762.249136][T22151] CPU: 1 UID: 0 PID: 22151 Comm: syz.1.15177 Not tainted 6.15.0-rc4-syzkaller-00189-g2bfcee565c3a #0 PREEMPT(voluntary) [ 762.249167][T22151] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 762.249181][T22151] Call Trace: [ 762.249187][T22151] [ 762.249194][T22151] __dump_stack+0x1d/0x30 [ 762.249211][T22151] dump_stack_lvl+0xe8/0x140 [ 762.249260][T22151] dump_stack+0x15/0x1b [ 762.249278][T22151] should_fail_ex+0x265/0x280 [ 762.249313][T22151] should_failslab+0x8c/0xb0 [ 762.249343][T22151] __kmalloc_noprof+0xa5/0x3e0 [ 762.249357][T22151] ? bio_kmalloc+0x41/0x50 [ 762.249391][T22151] bio_kmalloc+0x41/0x50 [ 762.249422][T22151] blk_rq_map_kern+0x248/0x7e0 [ 762.249474][T22151] scsi_ioctl+0x12e1/0x1500 [ 762.249497][T22151] ? avc_has_perm+0xd3/0x150 [ 762.249548][T22151] ? file_has_perm+0x324/0x370 [ 762.249645][T22151] ? do_vfs_ioctl+0x993/0x15b0 [ 762.249670][T22151] sg_ioctl+0xdf6/0x1360 [ 762.249706][T22151] ? __pfx_sg_ioctl+0x10/0x10 [ 762.249730][T22151] __se_sys_ioctl+0xcb/0x140 [ 762.249747][T22151] __x64_sys_ioctl+0x43/0x50 [ 762.249764][T22151] x64_sys_call+0x19a8/0x2fb0 [ 762.249782][T22151] do_syscall_64+0xd0/0x1a0 [ 762.249867][T22151] ? clear_bhb_loop+0x25/0x80 [ 762.249890][T22151] ? clear_bhb_loop+0x25/0x80 [ 762.249911][T22151] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 762.249931][T22151] RIP: 0033:0x7f58ce38e969 [ 762.249947][T22151] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 762.249966][T22151] RSP: 002b:00007f58cc9f7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 762.250042][T22151] RAX: ffffffffffffffda RBX: 00007f58ce5b5fa0 RCX: 00007f58ce38e969 [ 762.250057][T22151] RDX: 0000200000000040 RSI: 0000000000000001 RDI: 0000000000000008 [ 762.250069][T22151] RBP: 00007f58cc9f7090 R08: 0000000000000000 R09: 0000000000000000 [ 762.250080][T22151] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 762.250092][T22151] R13: 0000000000000000 R14: 00007f58ce5b5fa0 R15: 00007ffdfe03eaa8 [ 762.250114][T22151] [ 762.708881][T22166] FAULT_INJECTION: forcing a failure. [ 762.708881][T22166] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 762.722292][T22166] CPU: 1 UID: 0 PID: 22166 Comm: syz.0.15185 Not tainted 6.15.0-rc4-syzkaller-00189-g2bfcee565c3a #0 PREEMPT(voluntary) [ 762.722388][T22166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 762.722452][T22166] Call Trace: [ 762.722465][T22166] [ 762.722473][T22166] __dump_stack+0x1d/0x30 [ 762.722576][T22166] dump_stack_lvl+0xe8/0x140 [ 762.722684][T22166] dump_stack+0x15/0x1b [ 762.722697][T22166] should_fail_ex+0x265/0x280 [ 762.722867][T22166] should_fail_alloc_page+0xf2/0x100 [ 762.722898][T22166] __alloc_frozen_pages_noprof+0xff/0x360 [ 762.722922][T22166] alloc_pages_mpol+0xb3/0x250 [ 762.722939][T22166] ? anon_pipe_write+0x71/0xaa0 [ 762.723017][T22166] alloc_pages_noprof+0x90/0x130 [ 762.723036][T22166] anon_pipe_write+0x674/0xaa0 [ 762.723116][T22166] ? anon_pipe_write+0x71/0xaa0 [ 762.723154][T22166] ? __pfx_anon_pipe_write+0x10/0x10 [ 762.723184][T22166] vfs_write+0x49d/0x8d0 [ 762.723216][T22166] ksys_write+0xda/0x1a0 [ 762.723325][T22166] __x64_sys_write+0x40/0x50 [ 762.723353][T22166] x64_sys_call+0x2cdd/0x2fb0 [ 762.723373][T22166] do_syscall_64+0xd0/0x1a0 [ 762.723404][T22166] ? clear_bhb_loop+0x25/0x80 [ 762.723422][T22166] ? clear_bhb_loop+0x25/0x80 [ 762.723500][T22166] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 762.723521][T22166] RIP: 0033:0x7efc464fe969 [ 762.723536][T22166] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 762.723614][T22166] RSP: 002b:00007efc44b67038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 762.723631][T22166] RAX: ffffffffffffffda RBX: 00007efc46725fa0 RCX: 00007efc464fe969 [ 762.723642][T22166] RDX: 00000000fffffdef RSI: 00002000000001c0 RDI: 0000000000000000 [ 762.723655][T22166] RBP: 00007efc44b67090 R08: 0000000000000000 R09: 0000000000000000 [ 762.723739][T22166] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 762.723750][T22166] R13: 0000000000000000 R14: 00007efc46725fa0 R15: 00007ffda1bea5a8 [ 762.723767][T22166] [ 762.727604][T22168] FAULT_INJECTION: forcing a failure. [ 762.727604][T22168] name failslab, interval 1, probability 0, space 0, times 0 [ 762.936920][T22168] CPU: 0 UID: 0 PID: 22168 Comm: syz.4.15183 Not tainted 6.15.0-rc4-syzkaller-00189-g2bfcee565c3a #0 PREEMPT(voluntary) [ 762.936947][T22168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 762.936960][T22168] Call Trace: [ 762.936965][T22168] [ 762.936971][T22168] __dump_stack+0x1d/0x30 [ 762.936991][T22168] dump_stack_lvl+0xe8/0x140 [ 762.937062][T22168] dump_stack+0x15/0x1b [ 762.937080][T22168] should_fail_ex+0x265/0x280 [ 762.937116][T22168] should_failslab+0x8c/0xb0 [ 762.937178][T22168] kmem_cache_alloc_noprof+0x50/0x310 [ 762.937211][T22168] ? getname_flags+0x80/0x3b0 [ 762.937241][T22168] getname_flags+0x80/0x3b0 [ 762.937335][T22168] path_setxattrat+0x223/0x310 [ 762.937380][T22168] __x64_sys_lsetxattr+0x71/0x90 [ 762.937469][T22168] x64_sys_call+0x1e36/0x2fb0 [ 762.937491][T22168] do_syscall_64+0xd0/0x1a0 [ 762.937525][T22168] ? clear_bhb_loop+0x25/0x80 [ 762.937619][T22168] ? clear_bhb_loop+0x25/0x80 [ 762.937637][T22168] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 762.937679][T22168] RIP: 0033:0x7f6e59e8e969 [ 762.937716][T22168] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 762.937735][T22168] RSP: 002b:00007f6e584f7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd [ 762.937755][T22168] RAX: ffffffffffffffda RBX: 00007f6e5a0b5fa0 RCX: 00007f6e59e8e969 [ 762.937768][T22168] RDX: 0000200000000180 RSI: 0000200000000140 RDI: 0000200000000100 [ 762.937781][T22168] RBP: 00007f6e584f7090 R08: 0000000000000000 R09: 0000000000000000 [ 762.937802][T22168] R10: 000000000000000c R11: 0000000000000246 R12: 0000000000000001 [ 762.937865][T22168] R13: 0000000000000000 R14: 00007f6e5a0b5fa0 R15: 00007ffe53366408 [ 762.937881][T22168] [ 763.127592][T22179] loop5: detected capacity change from 0 to 512 [ 763.164790][T22181] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=22181 comm=syz.4.15188 [ 763.177572][T22181] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=22181 comm=syz.4.15188 [ 763.188015][T22176] Cannot find add_set index 0 as target [ 763.217748][T22179] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 763.230684][T22179] ext4 filesystem being mounted at /6/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 763.291113][T22189] netlink: 12 bytes leftover after parsing attributes in process `syz.8.15190'. [ 763.350844][T22189] FAULT_INJECTION: forcing a failure. [ 763.350844][T22189] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 763.364135][T22189] CPU: 0 UID: 0 PID: 22189 Comm: syz.8.15190 Not tainted 6.15.0-rc4-syzkaller-00189-g2bfcee565c3a #0 PREEMPT(voluntary) [ 763.364165][T22189] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 763.364205][T22189] Call Trace: [ 763.364209][T22189] [ 763.364215][T22189] __dump_stack+0x1d/0x30 [ 763.364239][T22189] dump_stack_lvl+0xe8/0x140 [ 763.364286][T22189] dump_stack+0x15/0x1b [ 763.364303][T22189] should_fail_ex+0x265/0x280 [ 763.364331][T22189] should_fail+0xb/0x20 [ 763.364370][T22189] should_fail_usercopy+0x1a/0x20 [ 763.364385][T22189] _copy_from_iter+0xcf/0xdd0 [ 763.364410][T22189] packet_sendmsg+0x2075/0x32d0 [ 763.364502][T22189] ? __rcu_read_unlock+0x4f/0x70 [ 763.364531][T22189] ? avc_has_perm_noaudit+0x1b1/0x200 [ 763.364566][T22189] ? avc_has_perm+0xd3/0x150 [ 763.364664][T22189] ? selinux_socket_sendmsg+0x175/0x1b0 [ 763.364693][T22189] ? __pfx_packet_sendmsg+0x10/0x10 [ 763.364714][T22189] __sock_sendmsg+0x142/0x180 [ 763.364742][T22189] __sys_sendto+0x268/0x330 [ 763.364804][T22189] __x64_sys_sendto+0x76/0x90 [ 763.364829][T22189] x64_sys_call+0x2eb6/0x2fb0 [ 763.364880][T22189] do_syscall_64+0xd0/0x1a0 [ 763.364903][T22189] ? clear_bhb_loop+0x25/0x80 [ 763.364930][T22189] ? clear_bhb_loop+0x25/0x80 [ 763.364994][T22189] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 763.365017][T22189] RIP: 0033:0x7f4e5820e969 [ 763.365032][T22189] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 763.365046][T22189] RSP: 002b:00007f4e56877038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 763.365126][T22189] RAX: ffffffffffffffda RBX: 00007f4e58435fa0 RCX: 00007f4e5820e969 [ 763.365140][T22189] RDX: 000000000000fc13 RSI: 0000200000000800 RDI: 0000000000000003 [ 763.365153][T22189] RBP: 00007f4e56877090 R08: 0000000000000000 R09: fffffffffffffef0 [ 763.365164][T22189] R10: 0000000000000880 R11: 0000000000000246 R12: 0000000000000001 [ 763.365174][T22189] R13: 0000000000000000 R14: 00007f4e58435fa0 R15: 00007fffac99f1a8 [ 763.365243][T22189] [ 763.650452][T21755] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 763.773702][T22203] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 763.788110][T22207] netlink: 28 bytes leftover after parsing attributes in process `syz.4.15194'. [ 763.797243][T22207] netlink: 28 bytes leftover after parsing attributes in process `syz.4.15194'. [ 763.806344][T22207] netlink: 48 bytes leftover after parsing attributes in process `syz.4.15194'. [ 764.312028][ T29] kauditd_printk_skb: 80 callbacks suppressed [ 764.312042][ T29] audit: type=1326 audit(2000000196.858:109029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22288 comm="syz.1.15203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58ce38e969 code=0x7ffc0000 [ 764.342044][ T29] audit: type=1326 audit(2000000196.858:109030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22288 comm="syz.1.15203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58ce38e969 code=0x7ffc0000 [ 764.380507][T22289] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15203'. [ 764.406223][ T29] audit: type=1326 audit(2000000196.858:109031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22288 comm="syz.1.15203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f58ce38e969 code=0x7ffc0000 [ 764.430120][ T29] audit: type=1326 audit(2000000196.858:109032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22288 comm="syz.1.15203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58ce38e969 code=0x7ffc0000 [ 764.454009][ T29] audit: type=1326 audit(2000000196.858:109033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22288 comm="syz.1.15203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f58ce38e969 code=0x7ffc0000 [ 764.477883][ T29] audit: type=1326 audit(2000000196.858:109034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22288 comm="syz.1.15203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58ce38e969 code=0x7ffc0000 [ 764.501651][ T29] audit: type=1326 audit(2000000196.858:109035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22288 comm="syz.1.15203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f58ce38e969 code=0x7ffc0000 [ 764.525537][ T29] audit: type=1326 audit(2000000196.858:109036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22288 comm="syz.1.15203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58ce38e969 code=0x7ffc0000 [ 764.549407][ T29] audit: type=1326 audit(2000000196.858:109037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22288 comm="syz.1.15203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f58ce38e969 code=0x7ffc0000 [ 764.573205][ T29] audit: type=1326 audit(2000000196.900:109038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22288 comm="syz.1.15203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58ce38e969 code=0x7ffc0000 [ 764.653851][T22300] loop8: detected capacity change from 0 to 512 [ 764.697858][T22300] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 764.715620][T22300] ext4 filesystem being mounted at /163/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 764.865272][T18762] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 764.907253][T22339] loop8: detected capacity change from 0 to 512 [ 764.953640][T22339] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 764.983710][T22339] ext4 filesystem being mounted at /164/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 765.082646][T18762] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 765.152469][T22387] FAULT_INJECTION: forcing a failure. [ 765.152469][T22387] name failslab, interval 1, probability 0, space 0, times 0 [ 765.165352][T22387] CPU: 0 UID: 0 PID: 22387 Comm: GPL Not tainted 6.15.0-rc4-syzkaller-00189-g2bfcee565c3a #0 PREEMPT(voluntary) [ 765.165388][T22387] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 765.165405][T22387] Call Trace: [ 765.165412][T22387] [ 765.165455][T22387] __dump_stack+0x1d/0x30 [ 765.165475][T22387] dump_stack_lvl+0xe8/0x140 [ 765.165492][T22387] dump_stack+0x15/0x1b [ 765.165508][T22387] should_fail_ex+0x265/0x280 [ 765.165622][T22387] should_failslab+0x8c/0xb0 [ 765.165659][T22387] kmem_cache_alloc_noprof+0x50/0x310 [ 765.165762][T22387] ? alloc_empty_file+0x76/0x200 [ 765.165796][T22387] alloc_empty_file+0x76/0x200 [ 765.165828][T22387] path_openat+0x68/0x2170 [ 765.165912][T22387] ? path_openat+0x1bf8/0x2170 [ 765.165935][T22387] ? _parse_integer_limit+0x170/0x190 [ 765.165972][T22387] ? _parse_integer+0x27/0x40 [ 765.166006][T22387] ? kstrtoull+0x111/0x140 [ 765.166074][T22387] do_filp_open+0x109/0x230 [ 765.166112][T22387] file_open_name+0xfa/0x120 [ 765.166176][T22387] __se_sys_acct+0xf0/0x490 [ 765.166209][T22387] ? fpregs_assert_state_consistent+0x84/0xa0 [ 765.166246][T22387] __x64_sys_acct+0x1f/0x30 [ 765.166329][T22387] x64_sys_call+0x18cf/0x2fb0 [ 765.166353][T22387] do_syscall_64+0xd0/0x1a0 [ 765.166379][T22387] ? clear_bhb_loop+0x25/0x80 [ 765.166404][T22387] ? clear_bhb_loop+0x25/0x80 [ 765.166503][T22387] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 765.166540][T22387] RIP: 0033:0x7f58ce38e969 [ 765.166559][T22387] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 765.166641][T22387] RSP: 002b:00007f58cc9f7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a3 [ 765.166666][T22387] RAX: ffffffffffffffda RBX: 00007f58ce5b5fa0 RCX: 00007f58ce38e969 [ 765.166682][T22387] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000500 [ 765.166697][T22387] RBP: 00007f58cc9f7090 R08: 0000000000000000 R09: 0000000000000000 [ 765.166713][T22387] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 765.166728][T22387] R13: 0000000000000000 R14: 00007f58ce5b5fa0 R15: 00007ffdfe03eaa8 [ 765.166815][T22387] [ 765.397492][T22384] xt_connbytes: Forcing CT accounting to be enabled [ 765.449364][T22384] Cannot find add_set index 0 as target [ 765.533603][T22419] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=22419 comm=syz.8.15237 [ 765.546250][T22419] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=22419 comm=syz.8.15237 [ 765.631612][T22425] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=22425 comm=syz.4.15238 [ 765.641437][T22429] syzkaller0: entered promiscuous mode [ 765.644257][T22425] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=22425 comm=syz.4.15238 [ 765.649739][T22429] syzkaller0: entered allmulticast mode [ 765.684583][T22429] block device autoloading is deprecated and will be removed. [ 765.741990][T22411] netlink: 'syz.1.15234': attribute type 13 has an invalid length. [ 765.744663][T22438] can0: slcan on ttyS3. [ 765.791260][T22411] bridge0: port 2(bridge_slave_1) entered disabled state [ 765.798510][T22411] bridge0: port 1(bridge_slave_0) entered disabled state [ 765.846142][T22411] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 765.857279][T22411] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 765.899339][T22411] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 765.908283][T22411] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 765.917398][T22411] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 765.926472][T22411] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 765.941211][T22439] IPv6: NLM_F_CREATE should be specified when creating new route [ 765.984698][T22438] can0 (unregistered): slcan off ttyS3. [ 766.118980][T22451] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=22451 comm=syz.1.15252 [ 766.131728][T22451] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=22451 comm=syz.1.15252 [ 766.170349][T22460] loop8: detected capacity change from 0 to 764 [ 766.236545][T22461] netlink: 16 bytes leftover after parsing attributes in process `syz.0.15253'. [ 766.251008][T22461] loop0: detected capacity change from 0 to 512 [ 766.263749][T22461] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 766.284007][T22461] EXT4-fs (loop0): 1 truncate cleaned up [ 766.293640][T22461] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 766.374824][T22476] loop8: detected capacity change from 0 to 2048 [ 766.395833][T22476] Alternate GPT is invalid, using primary GPT. [ 766.402193][T22476] loop8: p1 p2 p3 [ 766.724939][T22499] loop4: detected capacity change from 0 to 512 [ 766.731965][T22499] EXT4-fs: Ignoring removed mblk_io_submit option [ 766.739759][T22499] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 766.751491][T22499] EXT4-fs (loop4): 1 truncate cleaned up [ 766.757597][T22499] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 766.785074][T21533] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 766.819724][T22504] loop4: detected capacity change from 0 to 512 [ 766.826366][T22504] EXT4-fs: Ignoring removed mblk_io_submit option [ 766.833159][T22504] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 766.844196][ T7065] bridge_slave_1: left allmulticast mode [ 766.844966][T22504] EXT4-fs (loop4): 1 truncate cleaned up [ 766.849947][ T7065] bridge_slave_1: left promiscuous mode [ 766.850092][ T7065] bridge0: port 2(bridge_slave_1) entered disabled state [ 766.857827][T22504] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 766.884641][ T7065] bridge_slave_0: left allmulticast mode [ 766.890388][ T7065] bridge_slave_0: left promiscuous mode [ 766.896075][ T7065] bridge0: port 1(bridge_slave_0) entered disabled state [ 766.908235][T21533] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 766.993864][T22510] loop5: detected capacity change from 0 to 2048 [ 767.003380][T12459] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 767.022507][T22510] Alternate GPT is invalid, using primary GPT. [ 767.028750][T22510] loop5: p1 p2 p3 [ 767.032678][ T7065]  (unregistering): (slave bond_slave_0): Releasing backup interface [ 767.044368][ T7065]  (unregistering): (slave bond_slave_1): Releasing backup interface [ 767.055517][ T7065]  (unregistering): Released all slaves [ 767.076032][T22515] loop0: detected capacity change from 0 to 512 [ 767.090804][T22515] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 767.109271][T22515] ext4 filesystem being mounted at /576/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 767.127764][T22513] loop4: detected capacity change from 0 to 512 [ 767.159413][T22513] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 767.173722][T22513] EXT4-fs (loop4): orphan cleanup on readonly fs [ 767.186785][T22521] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=22521 comm=syz.5.15274 [ 767.199534][T22521] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=22521 comm=syz.5.15274 [ 767.207364][T22513] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.15269: invalid indirect mapped block 256 (level 2) [ 767.225906][ T7065] hsr_slave_0: left promiscuous mode [ 767.233558][T22513] EXT4-fs (loop4): 2 truncates cleaned up [ 767.239325][ T7065] hsr_slave_1: left promiscuous mode [ 767.239714][T22513] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 767.258043][ T7065] veth1_macvtap: left promiscuous mode [ 767.264491][ T7065] veth0_macvtap: left promiscuous mode [ 767.270415][ T7065] veth1_vlan: left promiscuous mode [ 767.275936][ T7065] veth0_vlan: left promiscuous mode [ 767.289744][T12459] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 767.382801][ T7065] team0 (unregistering): Port device team_slave_1 removed [ 767.412390][ T7065] team0 (unregistering): Port device team_slave_0 removed [ 767.499927][T22538] syzkaller0: entered promiscuous mode [ 767.505424][T22538] syzkaller0: entered allmulticast mode [ 767.528288][T22550] loop5: detected capacity change from 0 to 2048 [ 767.577776][T22550] Alternate GPT is invalid, using primary GPT. [ 767.584345][T22550] loop5: p1 p2 p3 [ 767.810623][T21533] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 769.013274][T22716] selinux_netlink_send: 2 callbacks suppressed [ 769.013361][T22716] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=22716 comm=syz.4.15301 [ 769.032228][T22716] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=22716 comm=syz.4.15301 [ 769.098634][T22719] loop0: detected capacity change from 0 to 2048 [ 769.136757][T22719] Alternate GPT is invalid, using primary GPT. [ 769.143036][T22719] loop0: p1 p2 p3 [ 769.213370][T22722] loop4: detected capacity change from 0 to 128 [ 769.235614][T22722] bio_check_eod: 3911 callbacks suppressed [ 769.235626][T22722] syz.4.15302: attempt to access beyond end of device [ 769.235626][T22722] loop4: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 769.269717][T22722] syz.4.15302: attempt to access beyond end of device [ 769.269717][T22722] loop4: rw=524288, sector=145, nr_sectors = 224 limit=128 [ 769.307294][T22722] syz.4.15302: attempt to access beyond end of device [ 769.307294][T22722] loop4: rw=0, sector=145, nr_sectors = 8 limit=128 [ 769.336004][T22728] syz.4.15302: attempt to access beyond end of device [ 769.336004][T22728] loop4: rw=0, sector=145, nr_sectors = 8 limit=128 [ 769.364249][T22722] syz.4.15302: attempt to access beyond end of device [ 769.364249][T22722] loop4: rw=0, sector=145, nr_sectors = 8 limit=128 [ 769.377564][T22728] syz.4.15302: attempt to access beyond end of device [ 769.377564][T22728] loop4: rw=0, sector=145, nr_sectors = 8 limit=128 [ 769.407262][T22722] syz.4.15302: attempt to access beyond end of device [ 769.407262][T22722] loop4: rw=0, sector=145, nr_sectors = 8 limit=128 [ 769.422914][T22728] syz.4.15302: attempt to access beyond end of device [ 769.422914][T22728] loop4: rw=0, sector=145, nr_sectors = 8 limit=128 [ 769.459831][T22728] syz.4.15302: attempt to access beyond end of device [ 769.459831][T22728] loop4: rw=0, sector=145, nr_sectors = 8 limit=128 [ 769.500236][ T29] kauditd_printk_skb: 129 callbacks suppressed [ 769.500252][ T29] audit: type=1326 audit(2000000202.306:109168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22735 comm="syz.8.15307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e5820e969 code=0x7ffc0000 [ 769.522309][T22720] syz.4.15302: attempt to access beyond end of device [ 769.522309][T22720] loop4: rw=0, sector=145, nr_sectors = 8 limit=128 [ 769.586176][ T29] audit: type=1326 audit(2000000202.359:109169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22735 comm="syz.8.15307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f4e5820e969 code=0x7ffc0000 [ 769.610249][ T29] audit: type=1326 audit(2000000202.359:109170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22735 comm="syz.8.15307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e5820e969 code=0x7ffc0000 [ 769.634089][ T29] audit: type=1326 audit(2000000202.359:109171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22735 comm="syz.8.15307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=227 compat=0 ip=0x7f4e5820e969 code=0x7ffc0000 [ 769.657956][ T29] audit: type=1326 audit(2000000202.425:109172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22735 comm="syz.8.15307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e5820e969 code=0x7ffc0000 [ 769.681769][ T29] audit: type=1326 audit(2000000202.425:109173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22735 comm="syz.8.15307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4e5820e969 code=0x7ffc0000 [ 769.705622][ T29] audit: type=1326 audit(2000000202.425:109174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22735 comm="syz.8.15307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e5820e969 code=0x7ffc0000 [ 769.729381][ T29] audit: type=1326 audit(2000000202.425:109175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22735 comm="syz.8.15307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f4e5820e969 code=0x7ffc0000 [ 769.753159][ T29] audit: type=1326 audit(2000000202.425:109176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22735 comm="syz.8.15307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e5820e969 code=0x7ffc0000 [ 769.760806][T22739] loop0: detected capacity change from 0 to 512 [ 769.776906][ T29] audit: type=1326 audit(2000000202.425:109177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22735 comm="syz.8.15307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e5820e969 code=0x7ffc0000 [ 769.918310][T22739] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c01c, mo2=0002] [ 769.937112][T22739] System zones: 0-2, 18-18, 34-34 [ 770.014030][T22739] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.15309: bg 0: block 248: padding at end of block bitmap is not set [ 770.063908][T22739] EXT4-fs error (device loop0): ext4_acquire_dquot:6935: comm syz.0.15309: Failed to acquire dquot type 1 [ 770.137981][T22739] EXT4-fs (loop0): 1 truncate cleaned up [ 770.155677][T22739] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 770.182342][T22765] loop4: detected capacity change from 0 to 2048 [ 770.198479][T22739] ext4 filesystem being mounted at /585/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 770.256562][T12459] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 770.266179][T22765] Alternate GPT is invalid, using primary GPT. [ 770.272553][T22765] loop4: p1 p2 p3 [ 770.387936][T22781] syzkaller0: entered promiscuous mode [ 770.393612][T22781] syzkaller0: entered allmulticast mode [ 770.634734][T22817] Cannot find add_set index 0 as target [ 770.692203][T22830] netlink: 'syz.8.15321': attribute type 4 has an invalid length. [ 770.700165][T22830] netlink: 152 bytes leftover after parsing attributes in process `syz.8.15321'. [ 770.931981][T22873] syzkaller0: entered promiscuous mode [ 770.937535][T22873] syzkaller0: entered allmulticast mode [ 771.305580][T22934] loop4: detected capacity change from 0 to 512 [ 771.315442][T22934] EXT4-fs: Ignoring removed mblk_io_submit option [ 771.323274][T22934] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 771.337349][T22934] EXT4-fs (loop4): 1 truncate cleaned up [ 771.343661][T22934] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 771.367865][T21533] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 771.685920][T23017] netlink: 'syz.8.15346': attribute type 4 has an invalid length. [ 771.693857][T23017] netlink: 152 bytes leftover after parsing attributes in process `syz.8.15346'. [ 771.935091][ T31] bridge_slave_1: left allmulticast mode [ 771.940891][ T31] bridge_slave_1: left promiscuous mode [ 771.946678][ T31] bridge0: port 2(bridge_slave_1) entered disabled state [ 771.959760][ T31] bridge_slave_0: left allmulticast mode [ 771.965522][ T31] bridge_slave_0: left promiscuous mode [ 771.971158][ T31] bridge0: port 1(bridge_slave_0) entered disabled state [ 772.025036][ T31]  (unregistering): (slave bond_slave_0): Releasing backup interface [ 772.035051][ T31]  (unregistering): (slave bond_slave_1): Releasing backup interface [ 772.044562][ T31]  (unregistering): Released all slaves [ 772.052960][ T31] bond0 (unregistering): Released all slaves [ 772.075293][T22978] chnl_net:caif_netlink_parms(): no params data found [ 772.131749][ T31] hsr_slave_0: left promiscuous mode [ 772.138970][ T31] hsr_slave_1: left promiscuous mode [ 772.144622][ T31] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 772.155067][ T31] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 772.198056][ T31] team0 (unregistering): Port device team_slave_1 removed [ 772.209315][ T31] team0 (unregistering): Port device team_slave_0 removed [ 772.255348][T22978] bridge0: port 1(bridge_slave_0) entered blocking state [ 772.262460][T22978] bridge0: port 1(bridge_slave_0) entered disabled state [ 772.274281][T22978] bridge_slave_0: entered allmulticast mode [ 772.281603][T22978] bridge_slave_0: entered promiscuous mode [ 772.288185][T23049] loop4: detected capacity change from 0 to 512 [ 772.291689][T22978] bridge0: port 2(bridge_slave_1) entered blocking state [ 772.301592][T22978] bridge0: port 2(bridge_slave_1) entered disabled state [ 772.309328][T22978] bridge_slave_1: entered allmulticast mode [ 772.315757][T22978] bridge_slave_1: entered promiscuous mode [ 772.318058][T23049] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c01c, mo2=0002] [ 772.329860][T23049] System zones: 0-2, 18-18, 34-34 [ 772.335661][T23049] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.15349: bg 0: block 248: padding at end of block bitmap is not set [ 772.350343][T23049] EXT4-fs error (device loop4): ext4_acquire_dquot:6935: comm syz.4.15349: Failed to acquire dquot type 1 [ 772.362192][T23049] EXT4-fs (loop4): 1 truncate cleaned up [ 772.363845][T22978] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 772.369741][T23049] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 772.378813][T22978] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 772.389721][T23049] ext4 filesystem being mounted at /68/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 772.419168][T22978] team0: Port device team_slave_0 added [ 772.426177][T22978] team0: Port device team_slave_1 added [ 772.455969][T22978] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 772.462957][T22978] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 772.488930][T22978] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 772.500690][T22978] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 772.501729][T21533] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 772.507692][T22978] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 772.507722][T22978] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 772.553581][T23056] loop5: detected capacity change from 0 to 1024 [ 772.560446][T23056] ext4: Unknown parameter 'euid' [ 772.585693][T22978] hsr_slave_0: entered promiscuous mode [ 772.591860][T22978] hsr_slave_1: entered promiscuous mode [ 772.603920][T22978] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 772.617338][T22978] Cannot create hsr debugfs directory [ 772.683431][T23068] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=23068 comm=syz.5.15356 [ 772.696309][T23068] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=23068 comm=syz.5.15356 [ 772.787057][T23072] loop5: detected capacity change from 0 to 512 [ 772.814575][T23072] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c01c, mo2=0002] [ 772.817655][T23074] loop4: detected capacity change from 0 to 764 [ 772.827558][T23072] System zones: 0-2, 18-18, 34-34 [ 772.837570][T23072] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.15357: bg 0: block 248: padding at end of block bitmap is not set [ 772.890667][T23072] EXT4-fs error (device loop5): ext4_acquire_dquot:6935: comm syz.5.15357: Failed to acquire dquot type 1 [ 772.918427][T23079] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=23079 comm=syz.4.15359 [ 772.931144][T23079] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=23079 comm=syz.4.15359 [ 772.952352][T23072] EXT4-fs (loop5): 1 truncate cleaned up [ 772.960055][T23072] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 773.002548][T23072] ext4 filesystem being mounted at /30/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 773.040786][T22978] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 773.053130][T21755] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 773.054049][T22978] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 773.065825][T23087] loop4: detected capacity change from 0 to 512 [ 773.076439][T23087] EXT4-fs: Ignoring removed mblk_io_submit option [ 773.077695][T22978] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 773.094994][T23087] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 773.105018][T22978] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 773.109650][T23087] EXT4-fs (loop4): 1 truncate cleaned up [ 773.129153][T23087] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 773.185267][T21533] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 773.194084][T22978] 8021q: adding VLAN 0 to HW filter on device bond0 [ 773.215712][T22978] 8021q: adding VLAN 0 to HW filter on device team0 [ 773.236017][T22849] bridge0: port 1(bridge_slave_0) entered blocking state [ 773.243164][T22849] bridge0: port 1(bridge_slave_0) entered forwarding state [ 773.277127][T22849] bridge0: port 2(bridge_slave_1) entered blocking state [ 773.284251][T22849] bridge0: port 2(bridge_slave_1) entered forwarding state [ 773.315409][T23095] bond1: entered promiscuous mode [ 773.320615][T23095] bond1: entered allmulticast mode [ 773.345584][T23095] 8021q: adding VLAN 0 to HW filter on device bond1 [ 773.385608][T23095] bond1 (unregistering): Released all slaves [ 773.408042][T23093] loop5: detected capacity change from 0 to 128 [ 773.460134][T22978] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 773.535766][T22978] veth0_vlan: entered promiscuous mode [ 773.543438][T23113] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=23113 comm=syz.1.15366 [ 773.556278][T23113] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=23113 comm=syz.1.15366 [ 773.594787][T22978] veth1_vlan: entered promiscuous mode [ 773.614778][T22978] veth0_macvtap: entered promiscuous mode [ 773.624676][T22978] veth1_macvtap: entered promiscuous mode [ 773.644320][T22978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 773.654792][T22978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 773.664611][T22978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 773.675125][T22978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 773.685122][T22978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 773.695567][T22978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 773.717044][T22978] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 773.741165][T23117] loop5: detected capacity change from 0 to 512 [ 773.785047][T22978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 773.795605][T22978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 773.805475][T22978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 773.815957][T22978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 773.825773][T22978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 773.836301][T22978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 773.856874][T23128] loop8: detected capacity change from 0 to 512 [ 773.868917][T23117] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 773.883091][T23117] ext4 filesystem being mounted at /33/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 773.895431][T23128] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c01c, mo2=0002] [ 773.903462][T22978] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 773.915381][T23128] System zones: 0-2, 18-18, 34-34 [ 773.947161][T22978] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 773.956253][T22978] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 773.964984][T22978] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 773.973881][T22978] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 773.991457][T23128] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.15371: bg 0: block 248: padding at end of block bitmap is not set [ 774.004662][T21755] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 774.028202][T23128] EXT4-fs error (device loop8): ext4_acquire_dquot:6935: comm syz.8.15371: Failed to acquire dquot type 1 [ 774.080569][T23128] EXT4-fs (loop8): 1 truncate cleaned up [ 774.086755][T23128] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 774.120137][T23128] ext4 filesystem being mounted at /194/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 774.164202][T23144] syzkaller0: entered promiscuous mode [ 774.169825][T23144] syzkaller0: entered allmulticast mode [ 774.182482][T18762] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 774.311484][T23168] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=23168 comm=syz.1.15378 [ 774.324146][T23168] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=23168 comm=syz.1.15378 [ 774.471370][T23188] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=23188 comm=syz.4.15382 [ 774.484054][T23188] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=23188 comm=syz.4.15382 [ 774.526006][ T29] kauditd_printk_skb: 324 callbacks suppressed [ 774.526021][ T29] audit: type=1326 audit(2000000207.699:109494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23193 comm="syz.1.15384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58ce38e969 code=0x7ffc0000 [ 774.579184][ T29] audit: type=1326 audit(2000000207.751:109495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23193 comm="syz.1.15384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58ce38e969 code=0x7ffc0000 [ 774.603041][ T29] audit: type=1326 audit(2000000207.751:109496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23193 comm="syz.1.15384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f58ce38e969 code=0x7ffc0000 [ 774.627042][ T29] audit: type=1326 audit(2000000207.751:109497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23193 comm="syz.1.15384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58ce38e969 code=0x7ffc0000 [ 774.650905][ T29] audit: type=1326 audit(2000000207.751:109498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23193 comm="syz.1.15384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58ce38e969 code=0x7ffc0000 [ 774.674649][ T29] audit: type=1326 audit(2000000207.751:109499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23193 comm="syz.1.15384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f58ce38e969 code=0x7ffc0000 [ 774.698502][ T29] audit: type=1326 audit(2000000207.751:109500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23193 comm="syz.1.15384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58ce38e969 code=0x7ffc0000 [ 774.722300][ T29] audit: type=1326 audit(2000000207.751:109501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23193 comm="syz.1.15384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f58ce38e969 code=0x7ffc0000 [ 774.746180][ T29] audit: type=1326 audit(2000000207.751:109502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23193 comm="syz.1.15384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58ce38e969 code=0x7ffc0000 [ 774.770191][ T29] audit: type=1326 audit(2000000207.751:109503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23193 comm="syz.1.15384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f58ce38e969 code=0x7ffc0000 [ 774.974665][T23228] sg_write: data in/out 895/21 bytes for SCSI command 0xd2-- guessing data in; [ 774.974665][T23228] program syz.1.15388 not setting count and/or reply_len properly [ 775.058484][T23240] FAULT_INJECTION: forcing a failure. [ 775.058484][T23240] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 775.071680][T23240] CPU: 0 UID: 0 PID: 23240 Comm: syz.8.15390 Not tainted 6.15.0-rc4-syzkaller-00189-g2bfcee565c3a #0 PREEMPT(voluntary) [ 775.071796][T23240] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 775.071810][T23240] Call Trace: [ 775.071817][T23240] [ 775.071851][T23240] __dump_stack+0x1d/0x30 [ 775.071869][T23240] dump_stack_lvl+0xe8/0x140 [ 775.071947][T23240] dump_stack+0x15/0x1b [ 775.071973][T23240] should_fail_ex+0x265/0x280 [ 775.072005][T23240] should_fail+0xb/0x20 [ 775.072028][T23240] should_fail_usercopy+0x1a/0x20 [ 775.072043][T23240] _copy_from_user+0x1c/0xb0 [ 775.072082][T23240] ucma_query+0x57/0xce0 [ 775.072105][T23240] ? path_openat+0x1bf8/0x2170 [ 775.072131][T23240] ? _parse_integer+0x27/0x40 [ 775.072195][T23240] ? kstrtoull+0x111/0x140 [ 775.072217][T23240] ? kstrtouint+0x76/0xc0 [ 775.072240][T23240] ? kstrtouint_from_user+0x9f/0xf0 [ 775.072314][T23240] ? should_fail_ex+0xdb/0x280 [ 775.072349][T23240] ucma_write+0x1b0/0x250 [ 775.072372][T23240] ? __pfx_ucma_write+0x10/0x10 [ 775.072425][T23240] vfs_write+0x266/0x8d0 [ 775.072447][T23240] ? __rcu_read_unlock+0x4f/0x70 [ 775.072477][T23240] ? __fget_files+0x184/0x1c0 [ 775.072507][T23240] ksys_write+0xda/0x1a0 [ 775.072547][T23240] __x64_sys_write+0x40/0x50 [ 775.072573][T23240] x64_sys_call+0x2cdd/0x2fb0 [ 775.072590][T23240] do_syscall_64+0xd0/0x1a0 [ 775.072609][T23240] ? clear_bhb_loop+0x25/0x80 [ 775.072689][T23240] ? clear_bhb_loop+0x25/0x80 [ 775.072707][T23240] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 775.072725][T23240] RIP: 0033:0x7f4e5820e969 [ 775.072736][T23240] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 775.072815][T23240] RSP: 002b:00007f4e56877038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 775.072831][T23240] RAX: ffffffffffffffda RBX: 00007f4e58435fa0 RCX: 00007f4e5820e969 [ 775.072896][T23240] RDX: 0000000000000018 RSI: 00002000000000c0 RDI: 0000000000000005 [ 775.072974][T23240] RBP: 00007f4e56877090 R08: 0000000000000000 R09: 0000000000000000 [ 775.072984][T23240] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 775.072996][T23240] R13: 0000000000000000 R14: 00007f4e58435fa0 R15: 00007fffac99f1a8 [ 775.073096][T23240] [ 775.306615][T23253] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=23253 comm=syz.4.15392 [ 775.319251][T23253] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=23253 comm=syz.4.15392 [ 775.744241][T23292] loop8: detected capacity change from 0 to 2048 [ 775.916918][T23292] Alternate GPT is invalid, using primary GPT. [ 775.923377][T23292] loop8: p1 p2 p3 [ 776.247889][T23336] loop0: detected capacity change from 0 to 512 [ 776.254491][T23336] EXT4-fs: Ignoring removed mblk_io_submit option [ 776.261358][T23336] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 776.291459][T23336] EXT4-fs (loop0): 1 truncate cleaned up [ 776.297630][T23336] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 776.325816][T22978] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 776.338341][T23342] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=23342 comm=syz.1.15405 [ 776.351043][T23342] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=23342 comm=syz.1.15405 [ 776.472438][T23355] loop0: detected capacity change from 0 to 512 [ 776.489789][T23355] EXT4-fs: Ignoring removed mblk_io_submit option [ 776.507930][T23361] netlink: 12 bytes leftover after parsing attributes in process `syz.4.15409'. [ 776.537340][T23355] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 776.549823][T23355] EXT4-fs (loop0): 1 truncate cleaned up [ 776.597115][T23355] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 776.647126][T23362] syzkaller0: entered promiscuous mode [ 776.652664][T23362] syzkaller0: entered allmulticast mode [ 776.670773][T22978] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 776.714166][T23366] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 776.850043][T23369] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.15409'. [ 776.891007][T23366] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 776.904548][T23361] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.15409'. [ 776.961291][T23366] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 777.028476][T23366] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 777.087996][T23386] loop0: detected capacity change from 0 to 512 [ 777.126843][T23382] netlink: 4 bytes leftover after parsing attributes in process `syz.8.15418'. [ 777.136080][T23366] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 777.146986][T23386] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 777.162987][T23366] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 777.171690][T23386] ext4 filesystem being mounted at /6/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 777.179427][T23366] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 777.195797][T23366] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 777.234480][T22978] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 777.263704][T23397] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=23397 comm=syz.0.15422 [ 777.276406][T23397] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=23397 comm=syz.0.15422 [ 777.678306][T23444] loop4: detected capacity change from 0 to 2048 [ 777.701668][T23444] Alternate GPT is invalid, using primary GPT. [ 777.708069][T23444] loop4: p1 p2 p3 [ 777.925035][T23465] netlink: 'syz.4.15431': attribute type 1 has an invalid length. [ 778.106941][T23489] FAULT_INJECTION: forcing a failure. [ 778.106941][T23489] name failslab, interval 1, probability 0, space 0, times 0 [ 778.119641][T23489] CPU: 0 UID: 0 PID: 23489 Comm: syz.8.15435 Not tainted 6.15.0-rc4-syzkaller-00189-g2bfcee565c3a #0 PREEMPT(voluntary) [ 778.119670][T23489] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 778.119684][T23489] Call Trace: [ 778.119691][T23489] [ 778.119699][T23489] __dump_stack+0x1d/0x30 [ 778.119720][T23489] dump_stack_lvl+0xe8/0x140 [ 778.119797][T23489] dump_stack+0x15/0x1b [ 778.119810][T23489] should_fail_ex+0x265/0x280 [ 778.119836][T23489] should_failslab+0x8c/0xb0 [ 778.119866][T23489] kmem_cache_alloc_node_noprof+0x57/0x320 [ 778.119912][T23489] ? __alloc_skb+0x101/0x320 [ 778.119945][T23489] __alloc_skb+0x101/0x320 [ 778.120085][T23489] netlink_alloc_large_skb+0xba/0xf0 [ 778.120157][T23489] netlink_sendmsg+0x3cf/0x6b0 [ 778.120198][T23489] ? __pfx_netlink_sendmsg+0x10/0x10 [ 778.120239][T23489] __sock_sendmsg+0x142/0x180 [ 778.120339][T23489] ____sys_sendmsg+0x31e/0x4e0 [ 778.120360][T23489] ___sys_sendmsg+0x17b/0x1d0 [ 778.120389][T23489] __x64_sys_sendmsg+0xd4/0x160 [ 778.120422][T23489] x64_sys_call+0x2999/0x2fb0 [ 778.120482][T23489] do_syscall_64+0xd0/0x1a0 [ 778.120503][T23489] ? clear_bhb_loop+0x25/0x80 [ 778.120524][T23489] ? clear_bhb_loop+0x25/0x80 [ 778.120547][T23489] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 778.120567][T23489] RIP: 0033:0x7f4e5820e969 [ 778.120581][T23489] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 778.120649][T23489] RSP: 002b:00007f4e56877038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 778.120672][T23489] RAX: ffffffffffffffda RBX: 00007f4e58435fa0 RCX: 00007f4e5820e969 [ 778.120751][T23489] RDX: 0000000028040000 RSI: 00002000000002c0 RDI: 0000000000000003 [ 778.120767][T23489] RBP: 00007f4e56877090 R08: 0000000000000000 R09: 0000000000000000 [ 778.120781][T23489] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 778.120792][T23489] R13: 0000000000000000 R14: 00007f4e58435fa0 R15: 00007fffac99f1a8 [ 778.120813][T23489] [ 778.380487][T23500] xt_connbytes: Forcing CT accounting to be enabled [ 778.418664][T23500] Cannot find add_set index 0 as target [ 778.516285][T23522] loop4: detected capacity change from 0 to 764 [ 778.708151][T23536] syzkaller0: entered promiscuous mode [ 778.713730][T23536] syzkaller0: entered allmulticast mode [ 778.744003][T23554] netlink: 4 bytes leftover after parsing attributes in process `syz.4.15450'. [ 778.802432][ T7065] bridge_slave_1: left allmulticast mode [ 778.808320][ T7065] bridge_slave_1: left promiscuous mode [ 778.814164][ T7065] bridge0: port 2(bridge_slave_1) entered disabled state [ 778.845206][ T7065] bridge_slave_0: left allmulticast mode [ 778.850947][ T7065] bridge_slave_0: left promiscuous mode [ 778.856653][ T7065] bridge0: port 1(bridge_slave_0) entered disabled state [ 779.017037][ T7065] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 779.026650][ T7065] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 779.043721][ T7065] bond0 (unregistering): Released all slaves [ 779.069748][T23562] lo speed is unknown, defaulting to 1000 [ 779.075880][T23562] lo speed is unknown, defaulting to 1000 [ 779.083171][T23562] lo speed is unknown, defaulting to 1000 [ 779.089889][T23562] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 779.101074][T23562] lo speed is unknown, defaulting to 1000 [ 779.114613][T23562] lo speed is unknown, defaulting to 1000 [ 779.126997][T23562] lo speed is unknown, defaulting to 1000 [ 779.142292][T23562] lo speed is unknown, defaulting to 1000 [ 779.157003][T23562] lo speed is unknown, defaulting to 1000 [ 779.163232][T23562] lo speed is unknown, defaulting to 1000 [ 779.176219][T23562] lo speed is unknown, defaulting to 1000 [ 779.183855][T23562] lo speed is unknown, defaulting to 1000 [ 779.190569][T23562] lo speed is unknown, defaulting to 1000 [ 779.204946][T23562] lo speed is unknown, defaulting to 1000 [ 779.215656][T23609] bond0: entered promiscuous mode [ 779.220734][T23609] bond0: entered allmulticast mode [ 779.236968][T23609] 8021q: adding VLAN 0 to HW filter on device bond0 [ 779.256943][T23609] bond0 (unregistering): Released all slaves [ 779.267287][T23613] netlink: 4 bytes leftover after parsing attributes in process `syz.5.15459'. [ 779.278152][T23562] lo speed is unknown, defaulting to 1000 [ 779.316411][T23562] lo speed is unknown, defaulting to 1000 [ 779.323990][T23562] lo speed is unknown, defaulting to 1000 [ 779.332615][T23562] lo speed is unknown, defaulting to 1000 [ 779.420526][ T29] kauditd_printk_skb: 68 callbacks suppressed [ 779.420539][ T29] audit: type=1400 audit(2000000212.901:109572): avc: denied { ioctl } for pid=23614 comm="syz.5.15460" path="/dev/usbmon0" dev="devtmpfs" ino=141 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 779.501895][ T29] audit: type=1400 audit(2000000212.954:109573): avc: denied { write } for pid=23614 comm="syz.5.15460" name="random" dev="devtmpfs" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 779.532941][ T7065] hsr_slave_0: left promiscuous mode [ 779.538835][T23618] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 779.557051][ T7065] hsr_slave_1: left promiscuous mode [ 779.571616][ T7065] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 779.591846][ T7065] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 779.664363][ T7065] team0 (unregistering): Port device team_slave_1 removed [ 779.690779][ T7065] team0 (unregistering): Port device team_slave_0 removed [ 779.711040][ T29] audit: type=1326 audit(2000000213.206:109574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23625 comm="syz.5.15464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24c484e969 code=0x7ffc0000 [ 779.734928][ T29] audit: type=1326 audit(2000000213.206:109575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23625 comm="syz.5.15464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24c484e969 code=0x7ffc0000 [ 779.807039][ T29] audit: type=1326 audit(2000000213.206:109576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23625 comm="syz.5.15464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f24c484e969 code=0x7ffc0000 [ 779.830967][ T29] audit: type=1326 audit(2000000213.206:109577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23625 comm="syz.5.15464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24c484e969 code=0x7ffc0000 [ 779.854849][ T29] audit: type=1326 audit(2000000213.206:109578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23625 comm="syz.5.15464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24c484e969 code=0x7ffc0000 [ 779.878777][ T29] audit: type=1326 audit(2000000213.206:109579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23625 comm="syz.5.15464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f24c484e969 code=0x7ffc0000 [ 779.880389][T23626] loop5: detected capacity change from 0 to 512 [ 779.902575][ T29] audit: type=1326 audit(2000000213.206:109580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23625 comm="syz.5.15464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24c484e969 code=0x7ffc0000 [ 779.932647][ T29] audit: type=1326 audit(2000000213.206:109581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23625 comm="syz.5.15464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f24c484e969 code=0x7ffc0000 [ 779.970942][T23569] chnl_net:caif_netlink_parms(): no params data found [ 779.991583][T23626] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c01c, mo2=0002] [ 780.000543][T23632] syzkaller0: entered promiscuous mode [ 780.006224][T23632] syzkaller0: entered allmulticast mode [ 780.033693][T23626] System zones: 0-2, 18-18, 34-34 [ 780.051200][T23626] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.15464: bg 0: block 248: padding at end of block bitmap is not set [ 780.076674][T23626] EXT4-fs error (device loop5): ext4_acquire_dquot:6935: comm syz.5.15464: Failed to acquire dquot type 1 [ 780.101341][T23626] EXT4-fs (loop5): 1 truncate cleaned up [ 780.114615][T23626] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 780.129889][T23626] ext4 filesystem being mounted at /45/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 780.146267][T23569] bridge0: port 1(bridge_slave_0) entered blocking state [ 780.153385][T23569] bridge0: port 1(bridge_slave_0) entered disabled state [ 780.168400][T23569] bridge_slave_0: entered allmulticast mode [ 780.175255][T23569] bridge_slave_0: entered promiscuous mode [ 780.182103][T23569] bridge0: port 2(bridge_slave_1) entered blocking state [ 780.189317][T23569] bridge0: port 2(bridge_slave_1) entered disabled state [ 780.197538][T23569] bridge_slave_1: entered allmulticast mode [ 780.204217][T23569] bridge_slave_1: entered promiscuous mode [ 780.218199][T21755] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 780.246036][T23569] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 780.257133][T23569] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 780.274728][T23663] loop0: detected capacity change from 0 to 512 [ 780.308550][T23569] team0: Port device team_slave_0 added [ 780.317792][T23663] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 780.338559][T23569] team0: Port device team_slave_1 added [ 780.356852][T23663] ext4 filesystem being mounted at /19/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 780.377269][T23569] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 780.384239][T23569] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 780.410267][T23569] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 780.430108][T23675] netlink: 4 bytes leftover after parsing attributes in process `syz.8.15483'. [ 780.445039][T22978] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 780.460723][T23569] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 780.467776][T23569] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 780.493683][T23569] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 780.507805][T23681] loop0: detected capacity change from 0 to 512 [ 780.514424][T23681] EXT4-fs: Ignoring removed mblk_io_submit option [ 780.521994][T23681] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 780.549908][T23681] EXT4-fs (loop0): 1 truncate cleaned up [ 780.562709][T23681] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 780.588003][T23569] hsr_slave_0: entered promiscuous mode [ 780.594051][T23569] hsr_slave_1: entered promiscuous mode [ 780.602001][T23569] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 780.609759][T23692] netlink: 'syz.8.15488': attribute type 4 has an invalid length. [ 780.617767][T23692] netlink: 152 bytes leftover after parsing attributes in process `syz.8.15488'. [ 780.620006][T23569] Cannot create hsr debugfs directory [ 780.633367][T22978] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 780.667384][T23698] random: crng reseeded on system resumption [ 780.772070][T23709] loop5: detected capacity change from 0 to 512 [ 780.779780][T23709] EXT4-fs: Ignoring removed mblk_io_submit option [ 780.786904][T23709] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 780.799349][T23709] EXT4-fs (loop5): 1 truncate cleaned up [ 780.805844][T23709] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 780.821153][T23698] netlink: 'syz.0.15490': attribute type 29 has an invalid length. [ 780.839424][T21755] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 780.877627][T23716] loop5: detected capacity change from 0 to 512 [ 780.885516][T23716] EXT4-fs: Ignoring removed mblk_io_submit option [ 780.892429][T23716] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 780.904602][T23716] EXT4-fs (loop5): 1 truncate cleaned up [ 780.913196][T23716] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 780.953591][T23569] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 780.962442][T23569] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 780.971501][T21755] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 780.982662][T23569] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 781.001235][T23569] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 781.041932][T23733] loop5: detected capacity change from 0 to 128 [ 781.067763][T23569] 8021q: adding VLAN 0 to HW filter on device bond0 [ 781.087238][T23733] bio_check_eod: 3966 callbacks suppressed [ 781.087266][T23733] syz.5.15505: attempt to access beyond end of device [ 781.087266][T23733] loop5: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 781.087519][T23569] 8021q: adding VLAN 0 to HW filter on device team0 [ 781.108976][T23733] syz.5.15505: attempt to access beyond end of device [ 781.108976][T23733] loop5: rw=524288, sector=145, nr_sectors = 224 limit=128 [ 781.145620][T23569] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 781.156076][T23569] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 781.170572][T23736] syz.5.15505: attempt to access beyond end of device [ 781.170572][T23736] loop5: rw=0, sector=145, nr_sectors = 8 limit=128 [ 781.184814][T22847] bridge0: port 1(bridge_slave_0) entered blocking state [ 781.191895][T22847] bridge0: port 1(bridge_slave_0) entered forwarding state [ 781.200565][T22847] bridge0: port 2(bridge_slave_1) entered blocking state [ 781.207638][T22847] bridge0: port 2(bridge_slave_1) entered forwarding state [ 781.215557][T23733] syz.5.15505: attempt to access beyond end of device [ 781.215557][T23733] loop5: rw=0, sector=145, nr_sectors = 8 limit=128 [ 781.228871][T23736] syz.5.15505: attempt to access beyond end of device [ 781.228871][T23736] loop5: rw=0, sector=145, nr_sectors = 8 limit=128 [ 781.245241][T23732] syz.5.15505: attempt to access beyond end of device [ 781.245241][T23732] loop5: rw=0, sector=145, nr_sectors = 8 limit=128 [ 781.258965][T23733] syz.5.15505: attempt to access beyond end of device [ 781.258965][T23733] loop5: rw=0, sector=145, nr_sectors = 8 limit=128 [ 781.273551][T23736] syz.5.15505: attempt to access beyond end of device [ 781.273551][T23736] loop5: rw=0, sector=145, nr_sectors = 8 limit=128 [ 781.300838][T23569] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 781.321470][T23732] syz.5.15505: attempt to access beyond end of device [ 781.321470][T23732] loop5: rw=0, sector=145, nr_sectors = 8 limit=128 [ 781.337450][T23733] syz.5.15505: attempt to access beyond end of device [ 781.337450][T23733] loop5: rw=0, sector=145, nr_sectors = 8 limit=128 [ 781.398735][T23748] syzkaller0: entered promiscuous mode [ 781.404232][T23748] syzkaller0: entered allmulticast mode [ 781.652491][T23569] veth0_vlan: entered promiscuous mode [ 781.670014][T23569] veth1_vlan: entered promiscuous mode [ 781.702430][T23569] veth0_macvtap: entered promiscuous mode [ 781.769521][T23774] loop8: detected capacity change from 0 to 512 [ 781.776259][T23774] EXT4-fs: Ignoring removed mblk_io_submit option [ 781.783042][T23774] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 781.845666][T23774] EXT4-fs (loop8): 1 truncate cleaned up [ 781.851716][T23774] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 781.863668][T23569] veth1_macvtap: entered promiscuous mode [ 781.882112][T23569] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 781.892617][T23569] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 781.902530][T23569] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 781.912964][T23569] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 781.922858][T23569] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 781.933398][T23569] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 781.943342][T23569] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 781.953792][T23569] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 781.964896][T18762] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 781.964951][T23569] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 781.993975][T23569] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 782.004424][T23569] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 782.014382][T23569] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 782.024902][T23569] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 782.034741][T23569] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 782.045193][T23569] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 782.055052][T23569] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 782.065709][T23569] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 782.077954][T23569] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 782.120067][T23569] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 782.128962][T23569] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 782.137761][T23569] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 782.146581][T23569] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 782.201186][T23781] loop8: detected capacity change from 0 to 2048 [ 782.234499][T23781] Alternate GPT is invalid, using primary GPT. [ 782.240919][T23781] loop8: p1 p2 p3 [ 782.255223][T23787] syzkaller0: entered promiscuous mode [ 782.260790][T23787] syzkaller0: entered allmulticast mode [ 782.309096][T23790] xt_connbytes: Forcing CT accounting to be enabled [ 782.318783][T23790] Cannot find add_set index 0 as target [ 782.378254][T23801] loop4: detected capacity change from 0 to 128 [ 782.398085][T23781] lo speed is unknown, defaulting to 1000 [ 782.457018][T23798] lo speed is unknown, defaulting to 1000 [ 782.606278][T23816] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=23816 comm=syz.8.15530 [ 782.618978][T23816] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=23816 comm=syz.8.15530 [ 782.672009][T23823] netlink: 4 bytes leftover after parsing attributes in process `syz.0.15533'. [ 782.905371][T23828] Cannot find add_set index 0 as target [ 782.961519][T23834] rdma_op ffff88810fd2ad80 conn xmit_rdma 0000000000000000 [ 782.971375][T23836] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=23836 comm=syz.8.15538 [ 782.984200][T23836] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=23836 comm=syz.8.15538 [ 783.000644][T23838] loop4: detected capacity change from 0 to 512 [ 783.015965][T23834] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 783.034770][T23838] EXT4-fs: Ignoring removed mblk_io_submit option [ 783.051525][T23838] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 783.074467][T23838] EXT4-fs (loop4): 1 truncate cleaned up [ 783.080665][T23838] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 783.124890][T23834] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 783.168234][T21533] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 783.215049][T23850] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=23850 comm=syz.4.15544 [ 783.227708][T23850] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=23850 comm=syz.4.15544 [ 783.265547][T23834] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 783.322547][T23848] lo speed is unknown, defaulting to 1000 [ 783.375694][T23834] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 783.571095][T23860] loop4: detected capacity change from 0 to 764 [ 783.596332][T23834] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 783.609516][T23834] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 783.621604][T23834] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 783.634753][T23834] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 783.877507][T23856] lo speed is unknown, defaulting to 1000 [ 784.013858][T23880] lo speed is unknown, defaulting to 1000 [ 784.048804][T23886] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=23886 comm=syz.8.15557 [ 784.061475][T23886] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=23886 comm=syz.8.15557 [ 784.620368][ T29] kauditd_printk_skb: 302 callbacks suppressed [ 784.620387][ T29] audit: type=1326 audit(2000000218.523:109882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23889 comm="syz.0.15558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f816bb9e969 code=0x7ffc0000 [ 784.650422][ T29] audit: type=1326 audit(2000000218.523:109883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23889 comm="syz.0.15558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f816bb9e969 code=0x7ffc0000 [ 784.728107][T23914] loop4: detected capacity change from 0 to 512 [ 784.741509][T23914] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 784.754421][T23914] ext4 filesystem being mounted at /120/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 784.790758][T23914] 9pnet_fd: p9_fd_create_tcp (23914): problem connecting socket to 127.0.0.1 [ 784.908369][T21533] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 784.990499][T23920] lo speed is unknown, defaulting to 1000 [ 785.343299][T23938] lo speed is unknown, defaulting to 1000 [ 785.357836][ T29] audit: type=1326 audit(2000000219.311:109884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23949 comm="syz.4.15575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e59e8e969 code=0x7ffc0000 [ 785.381657][ T29] audit: type=1326 audit(2000000219.311:109885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23949 comm="syz.4.15575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e59e8e969 code=0x7ffc0000 [ 785.405467][ T29] audit: type=1326 audit(2000000219.311:109886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23949 comm="syz.4.15575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6e59e8e969 code=0x7ffc0000 [ 785.429255][ T29] audit: type=1326 audit(2000000219.311:109887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23949 comm="syz.4.15575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e59e8e969 code=0x7ffc0000 [ 785.452991][ T29] audit: type=1326 audit(2000000219.311:109888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23949 comm="syz.4.15575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e59e8e969 code=0x7ffc0000 [ 785.476794][ T29] audit: type=1326 audit(2000000219.311:109889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23949 comm="syz.4.15575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6e59e8e969 code=0x7ffc0000 [ 785.500614][ T29] audit: type=1326 audit(2000000219.311:109890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23949 comm="syz.4.15575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e59e8e969 code=0x7ffc0000 [ 785.524461][ T29] audit: type=1326 audit(2000000219.311:109891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23949 comm="syz.4.15575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6e59e8e969 code=0x7ffc0000 [ 785.705250][T23959] Cannot find add_set index 0 as target [ 785.724254][T23963] loop0: detected capacity change from 0 to 512 [ 785.779392][T23963] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 785.856349][T23963] ext4 filesystem being mounted at /44/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 785.968883][T23963] 9pnet_fd: p9_fd_create_tcp (23963): problem connecting socket to 127.0.0.1 [ 785.991145][T23976] lo speed is unknown, defaulting to 1000 [ 786.044558][T22978] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 786.114124][T23999] loop8: detected capacity change from 0 to 128 [ 786.125183][T24012] netlink: 4 bytes leftover after parsing attributes in process `syz.4.15586'. [ 786.155711][T24016] loop0: detected capacity change from 0 to 512 [ 786.197522][T24012] bond0: (slave bond_slave_0): Releasing backup interface [ 786.248864][T24016] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c01c, mo2=0002] [ 786.265801][T24016] System zones: 0-2, 18-18, 34-34 [ 786.281997][T24016] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.15585: bg 0: block 248: padding at end of block bitmap is not set [ 786.300305][T24016] EXT4-fs error (device loop0): ext4_acquire_dquot:6935: comm syz.0.15585: Failed to acquire dquot type 1 [ 786.333264][T24016] EXT4-fs (loop0): 1 truncate cleaned up [ 786.404965][T24016] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 786.450612][T24032] syzkaller0: entered promiscuous mode [ 786.456198][T24032] syzkaller0: entered allmulticast mode [ 786.484588][T24016] ext4 filesystem being mounted at /45/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 786.578620][T22978] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 786.705194][T24077] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=24077 comm=syz.4.15594 [ 786.717931][T24077] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=24077 comm=syz.4.15594 [ 786.759891][T24079] loop0: detected capacity change from 0 to 512 [ 786.787025][T24079] EXT4-fs: Ignoring removed mblk_io_submit option [ 786.794500][T24091] loop4: detected capacity change from 0 to 764 [ 786.801310][T24079] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 786.842151][T24095] loop4: detected capacity change from 0 to 128 [ 786.966332][T24079] EXT4-fs (loop0): 1 truncate cleaned up [ 787.014972][T24079] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 787.116192][T22978] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 787.184631][T24145] netlink: 12 bytes leftover after parsing attributes in process `syz.5.15611'. [ 787.194423][T24139] loop4: detected capacity change from 0 to 128 [ 787.235838][T24139] bio_check_eod: 16733 callbacks suppressed [ 787.235849][T24139] syz.4.15610: attempt to access beyond end of device [ 787.235849][T24139] loop4: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 787.246277][T24151] loop0: detected capacity change from 0 to 512 [ 787.263731][T24151] EXT4-fs: Ignoring removed mblk_io_submit option [ 787.270375][T24151] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 787.287086][T24139] syz.4.15610: attempt to access beyond end of device [ 787.287086][T24139] loop4: rw=524288, sector=145, nr_sectors = 224 limit=128 [ 787.287547][T24149] bond1: entered promiscuous mode [ 787.301319][T24139] syz.4.15610: attempt to access beyond end of device [ 787.301319][T24139] loop4: rw=0, sector=145, nr_sectors = 8 limit=128 [ 787.306076][T24149] bond1: entered allmulticast mode [ 787.319270][T24139] syz.4.15610: attempt to access beyond end of device [ 787.319270][T24139] loop4: rw=0, sector=145, nr_sectors = 8 limit=128 [ 787.337834][T24139] syz.4.15610: attempt to access beyond end of device [ 787.337834][T24139] loop4: rw=0, sector=145, nr_sectors = 8 limit=128 [ 787.351186][T24153] syz.4.15610: attempt to access beyond end of device [ 787.351186][T24153] loop4: rw=0, sector=145, nr_sectors = 8 limit=128 [ 787.356383][T24151] EXT4-fs (loop0): 1 truncate cleaned up [ 787.372898][T24151] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 787.377971][T24149] 8021q: adding VLAN 0 to HW filter on device bond1 [ 787.399882][T22978] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 787.408991][T24139] syz.4.15610: attempt to access beyond end of device [ 787.408991][T24139] loop4: rw=0, sector=145, nr_sectors = 8 limit=128 [ 787.423793][T24138] syz.4.15610: attempt to access beyond end of device [ 787.423793][T24138] loop4: rw=0, sector=145, nr_sectors = 8 limit=128 [ 787.439833][T24149] bond1 (unregistering): Released all slaves [ 787.446899][T24153] syz.4.15610: attempt to access beyond end of device [ 787.446899][T24153] loop4: rw=0, sector=145, nr_sectors = 8 limit=128 [ 787.460726][T24153] syz.4.15610: attempt to access beyond end of device [ 787.460726][T24153] loop4: rw=0, sector=145, nr_sectors = 8 limit=128 [ 787.638136][T24170] loop5: detected capacity change from 0 to 2048 [ 787.662561][T24170] EXT4-fs: Ignoring removed bh option [ 787.687147][T24180] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=24180 comm=syz.8.15626 [ 787.699806][T24180] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=24180 comm=syz.8.15626 [ 787.738779][T24170] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 787.798660][T24170] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 787.815506][T24170] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 28 [ 787.827796][T24170] EXT4-fs (loop5): This should not happen!! Data will be lost [ 787.827796][T24170] [ 787.837531][T24170] EXT4-fs (loop5): Total free blocks count 0 [ 787.843708][T24170] EXT4-fs (loop5): Free/Dirty block details [ 787.849708][T24170] EXT4-fs (loop5): free_blocks=2415919104 [ 787.855651][T24170] EXT4-fs (loop5): dirty_blocks=48 [ 787.860774][T24170] EXT4-fs (loop5): Block reservation details [ 787.866793][T24170] EXT4-fs (loop5): i_reserved_data_blocks=3 [ 787.874675][T24200] netlink: 4 bytes leftover after parsing attributes in process `syz.7.15632'. [ 787.910403][T24197] netlink: 4 bytes leftover after parsing attributes in process `syz.0.15633'. [ 788.092430][T24217] bond1: entered promiscuous mode [ 788.097500][T24217] bond1: entered allmulticast mode [ 788.135923][T24225] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=24225 comm=syz.7.15638 [ 788.148669][T24225] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=24225 comm=syz.7.15638 [ 788.164290][T24217] 8021q: adding VLAN 0 to HW filter on device bond1 [ 788.194872][T24217] bond1 (unregistering): Released all slaves [ 788.251693][T24232] netlink: 12 bytes leftover after parsing attributes in process `syz.4.15640'. [ 788.274464][T13761] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 65537 with max blocks 1 with error 28 [ 788.318856][T24245] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=24245 comm=syz.0.15644 [ 788.331562][T24245] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=24245 comm=syz.0.15644 [ 788.373036][T24252] sd 0:0:1:0: device reset [ 788.386123][T24254] loop0: detected capacity change from 0 to 2048 [ 788.397179][T24241] netlink: 4 bytes leftover after parsing attributes in process `syz.5.15642'. [ 788.445279][T24268] loop7: detected capacity change from 0 to 512 [ 788.453610][T24268] EXT4-fs: Ignoring removed mblk_io_submit option [ 788.455552][T24254] Alternate GPT is invalid, using primary GPT. [ 788.466346][T24254] loop0: p1 p2 p3 [ 788.467355][T24268] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 788.492686][T24271] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=24271 comm=syz.5.15650 [ 788.505346][T24271] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=24271 comm=syz.5.15650 [ 788.536224][T24268] EXT4-fs (loop7): 1 truncate cleaned up [ 788.543996][T24268] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 788.582706][T24254] lo speed is unknown, defaulting to 1000 [ 788.600658][T23569] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 788.616209][T24293] netlink: 12 bytes leftover after parsing attributes in process `syz.4.15654'. [ 788.628360][T24295] loop7: detected capacity change from 0 to 512 [ 788.648949][T24295] EXT4-fs: Ignoring removed mblk_io_submit option [ 788.671812][T24304] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=24304 comm=syz.5.15657 [ 788.673179][T24295] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 788.684480][T24304] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=24304 comm=syz.5.15657 [ 788.709489][T24295] EXT4-fs (loop7): 1 truncate cleaned up [ 788.718396][T24295] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 788.800973][T24321] loop5: detected capacity change from 0 to 512 [ 788.827846][T23569] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 788.845766][T24321] EXT4-fs: Ignoring removed mblk_io_submit option [ 788.867410][T24322] loop0: detected capacity change from 0 to 512 [ 788.868114][T24321] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 788.894175][T24321] EXT4-fs (loop5): 1 truncate cleaned up [ 788.912791][T24322] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 788.925490][T24322] ext4 filesystem being mounted at /64/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 788.945879][T24321] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 788.988516][T22978] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 789.014485][T21755] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 789.033700][T24348] loop7: detected capacity change from 0 to 512 [ 789.076193][T24348] EXT4-fs: Ignoring removed mblk_io_submit option [ 789.083797][T24354] netlink: 4 bytes leftover after parsing attributes in process `syz.0.15666'. [ 789.110828][T24348] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 789.128569][T24348] EXT4-fs (loop7): 1 truncate cleaned up [ 789.135383][T24348] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 789.178416][T24362] bond1: entered promiscuous mode [ 789.183555][T24362] bond1: entered allmulticast mode [ 789.188851][T24362] 8021q: adding VLAN 0 to HW filter on device bond1 [ 789.205335][T24362] bond1 (unregistering): Released all slaves [ 789.214580][T23569] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 789.223812][T24364] loop0: detected capacity change from 0 to 2048 [ 789.237849][T23569] ================================================================== [ 789.245940][T23569] BUG: KCSAN: data-race in find_get_block_common / has_bh_in_lru [ 789.253668][T23569] [ 789.255981][T23569] read-write to 0xffff888237d26b70 of 8 bytes by task 24357 on cpu 1: [ 789.264126][T23569] find_get_block_common+0x4f0/0x960 [ 789.269405][T23569] bdev_getblk+0x7f/0x3d0 [ 789.273733][T23569] __ext4_get_inode_loc+0x303/0x930 [ 789.278933][T23569] ext4_reserve_inode_write+0xdb/0x230 [ 789.284393][T23569] __ext4_mark_inode_dirty+0x8c/0x3f0 [ 789.289762][T23569] ext4_dirty_inode+0x92/0xc0 [ 789.294438][T23569] __mark_inode_dirty+0x15c/0x760 [ 789.299470][T23569] file_update_time+0x288/0x2b0 [ 789.304324][T23569] ext4_page_mkwrite+0x18b/0xba0 [ 789.309262][T23569] handle_mm_fault+0x1733/0x2ae0 [ 789.314196][T23569] do_user_addr_fault+0x636/0x1090 [ 789.319307][T23569] exc_page_fault+0x54/0xc0 [ 789.323813][T23569] asm_exc_page_fault+0x26/0x30 [ 789.328658][T23569] [ 789.330975][T23569] read to 0xffff888237d26b70 of 8 bytes by task 23569 on cpu 0: [ 789.338601][T23569] has_bh_in_lru+0x35/0x1f0 [ 789.343101][T23569] smp_call_function_many_cond+0x394/0xb20 [ 789.348913][T23569] on_each_cpu_cond_mask+0x3c/0x80 [ 789.354027][T23569] invalidate_bh_lrus+0x2a/0x30 [ 789.358875][T23569] blkdev_flush_mapping+0x9a/0x1a0 [ 789.363986][T23569] bdev_release+0x2bf/0x3d0 [ 789.368486][T23569] blkdev_release+0x15/0x20 [ 789.372990][T23569] __fput+0x298/0x650 [ 789.376964][T23569] ____fput+0x1c/0x30 [ 789.380939][T23569] task_work_run+0x12e/0x1a0 [ 789.385534][T23569] resume_user_mode_work+0x6a/0x70 [ 789.390653][T23569] syscall_exit_to_user_mode+0x77/0xb0 [ 789.396125][T23569] do_syscall_64+0xdd/0x1a0 [ 789.400628][T23569] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 789.406521][T23569] [ 789.408835][T23569] value changed: 0x0000000000000000 -> 0xffff888104a72138 [ 789.415927][T23569] [ 789.418241][T23569] Reported by Kernel Concurrency Sanitizer on: [ 789.424380][T23569] CPU: 0 UID: 0 PID: 23569 Comm: syz-executor Not tainted 6.15.0-rc4-syzkaller-00189-g2bfcee565c3a #0 PREEMPT(voluntary) [ 789.437043][T23569] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 789.447087][T23569] ================================================================== [ 789.483323][T24364] Alternate GPT is invalid, using primary GPT. [ 789.489679][T24364] loop0: p1 p2 p3 [ 789.504485][ T29] kauditd_printk_skb: 209 callbacks suppressed [ 789.504497][ T29] audit: type=1326 audit(2000000223.727:110099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24376 comm="syz.7.15670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feea9eee969 code=0x7ffc0000 [ 789.594402][T24377] loop7: detected capacity change from 0 to 512 [ 789.613638][ T29] audit: type=1326 audit(2000000223.811:110100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24376 comm="syz.7.15670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7feea9eee969 code=0x7ffc0000 [ 789.616392][T24372] lo speed is unknown, defaulting to 1000 [ 789.637411][ T29] audit: type=1326 audit(2000000223.811:110101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24376 comm="syz.7.15670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feea9eee969 code=0x7ffc0000 [ 789.666932][ T29] audit: type=1326 audit(2000000223.811:110102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24376 comm="syz.7.15670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feea9eee969 code=0x7ffc0000 [ 789.690764][ T29] audit: type=1326 audit(2000000223.811:110103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24376 comm="syz.7.15670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7feea9eee969 code=0x7ffc0000 [ 789.707504][T24377] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c01c, mo2=0002] [ 789.714584][ T29] audit: type=1326 audit(2000000223.811:110104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24376 comm="syz.7.15670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feea9eee969 code=0x7ffc0000 [ 789.723912][T24377] System zones: [ 789.746303][ T29] audit: type=1326 audit(2000000223.811:110105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24376 comm="syz.7.15670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7feea9eee969 code=0x7ffc0000 [ 789.749860][T24377] 0-2, 18-18, 34-34 [ 789.773599][ T29] audit: type=1326 audit(2000000223.811:110106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24376 comm="syz.7.15670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feea9eee969 code=0x7ffc0000 [ 789.773649][T24377] [ 789.774918][T24377] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.15670: bg 0: block 248: padding at end of block bitmap is not set [ 789.777437][ T29] audit: type=1326 audit(2000000223.811:110107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24376 comm="syz.7.15670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7feea9eee969 code=0x7ffc0000 [ 789.841771][ T29] audit: type=1326 audit(2000000223.811:110108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24376 comm="syz.7.15670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feea9eee969 code=0x7ffc0000 [ 789.852792][T24377] EXT4-fs error (device loop7): ext4_acquire_dquot:6935: comm syz.7.15670: Failed to acquire dquot type 1 [ 789.889784][T24377] EXT4-fs (loop7): 1 truncate cleaned up [ 789.895852][T24377] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 789.910096][T24377] ext4 filesystem being mounted at /27/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 789.943764][T23569] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.