last executing test programs: 4m36.937501522s ago: executing program 32 (id=1078): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/cgroup.procs\x00', 0x2e42, 0x1c0) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8458, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xffffffffffffff01, 0x11000}, 0x0, 0x3ff, 0x6, 0x7, 0x8, 0x20008, 0x6, 0x0, 0x0, 0x0, 0x20000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x10, 0x2, &(0x7f00000004c0)=ANY=[@ANYBLOB="0080000000000000"], &(0x7f0000000000)='GPL\x00'}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000010008500000022000000850000002300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) sendfile(r1, r0, 0x0, 0x3a) ioctl$KDENABIO(r0, 0x4b36) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x4e0, 0x0, 0x18c, 0x203, 0x320, 0x19030000, 0x410, 0x2e0, 0x2e0, 0x410, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x320, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x0, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x10000000}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0xe}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x3}, {0x2, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x8}, {}, {0x16}, {0x0, 0xff}, {}, {0x7}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0x101}, {}, {0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x0, 0x9}, {0xfffc, 0x0, 0x0, 0x6}, {}, {0xfffe}, {}, {}, {}, {0xfffe, 0xfb}, {}, {0x7a04}, {}, {}, {0x20, 0x6}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb8c, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {0x3}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {0x0, 0xfd}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0xb}, {0x4, 0x2}]}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x2, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz0\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x540) 1m19.31392409s ago: executing program 5 (id=4400): r0 = perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x7fff}, 0x18) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000080)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmsg$unix(0xffffffffffffffff, 0x0, 0x4004881) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000540), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x303, 0x37}, "475566172f45f011", "bd14060000000000000092f94413582b", "00001000", "4e67cb72f328ac2f"}, 0x28) 1m19.169865595s ago: executing program 5 (id=4405): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) r2 = socket$netlink(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x34, r6, 0x1, 0xa1ffffff, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x8000) 1m18.261580934s ago: executing program 5 (id=4418): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001000001"], 0x50) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff000000000200000009000100"], 0x7c}, 0x1, 0x0, 0x0, 0xc4}, 0x890) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x64}}, 0x4004000) sendmsg$NFT_MSG_GETOBJ(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x34}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) fcntl$setlease(r1, 0x400, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r3 = socket(0x10, 0x803, 0x0) sendto(r3, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x8804, 0x0, 0x0) recvmmsg(r3, &(0x7f00000037c0), 0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), r1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000300)={'batadv_slave_0\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000340)='leases_conflict\x00', r4}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70300000000000085"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) 1m18.065231553s ago: executing program 5 (id=4420): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0, 0x0, 0x4}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000780)='./bus\x00', 0x41, &(0x7f0000000840)={[{@delalloc}, {@noload}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@noblock_validity}, {@noblock_validity}, {@nogrpid}, {@mblk_io_submit}, {@dioread_lock}, {@stripe={'stripe', 0x3d, 0x65cf}}], [], 0x3d}, 0x65, 0x51c, &(0x7f0000000200)="$eJzs3UFoJFkZAOC/Ot3ZyUx2k1UPuuC6uiuZQac72bi7wcO6guhpQV3vY0w6IaSTDunO7iQsmsGDR0FEBU968SJ48iTIghePIizoWVFRRGf0IKhTS3dXZ2aS6k5mpiedSX8fVOrV66r3v9ehqutVPaoCGFnPRcRrEXE7TdMrETGV5ReyKfY7U2u9WzffXmpNSaTpG/9IIsnyumWlbU/EpWyzCxHx5S9EfC05Grexu7e+WKtVt7PlSnNjq9LY3bu6trG4Wl2tbs7Pz7288MrCSwuzA2nnZES8+rm/fO/bP/n8q7/85Ft/vPa3y19Psvw41I77VOz3YafppfZ3cfcG2w8Y7CwqtluYmchbY+xIzo1HXCcAAHp7X0R8LCKuxFSM9T+dBQAAAB5D6Wcm439J997dEeM98gEAAIDHSKE9BjYplLPxvpNRKJTL0R7D+4G4WKjVG81PrNR3Npc7Y2Wno1RYWatVZ7OxwtNRSlrLc+30neUXDy3PR8TTEfHdqYn2cnmpXlse9sUPAAAAGBGXDvX//z3V6f8DAAAA58z0sCsAAAAAPHL6/wAAAHD+6f8DAADAufbF119vTWn3/dfLb+7urNffvLpcbayXN3aWykv17a3yar2+2n5m38Zx5dXq9a1PxebO9Uqz2mhWGrt71zbqO5vNa2v3vAIbAAAAOEVPf+Sd3ycRsf/pifbUMn6yTU+4GnBWFQ9SSTbP2a3/8FRn/udTqhRwKsaGXQFgaIrDrgAwNKVhVwAYuuSYz3sO3vlNNv/oYOsDAAAM3syHet//L/Tdcr//x8CZZyeG0eX+P4yu9v3/k47kdbIA50rJGQCMvIe+/3+sNL2vCgEAAAM32Z6SQjm7vDcZhUK5HPFk+7UApWRlrVadjYinIuJ3U6UnWstz7S2TY/sMAAAAAAAAAAAAAAAAAAAAAAAAAEBHmiaRAgAAAOdaROGvya86z/KfmXph8vD1gfHkP1ORvSL0rR++8f3ri83m9lwr/58H+c0fZPkvDuMKBgAAAIyE4v2s3O2nd/vxAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADBIt26+vdSdTjPu3z8bEdN58YtxoT2/EKWIuPivJIp3bZdExNgA4k+0/nwwL37SqtZByLz4EwOIv3+jb/yYzr6FvPiXBhAfRtk7rePPa3n7XyGea8/z979ixD3LD6r38S8Ojn9jPfb/J08Y45l3f1bpGf9GxDPF/ONPN37SI/7zeQX+/FtHsr76lb29XvHTH0XM5P7+JPfEqjQ3tiqN3b2raxuLq9XV6ub8/NzLC68svLQwW1lZq1Wzv7kxvvPhX9zu1/6LPeJPH9P+F3LKG8/J+/+712++v5Ms5cW//HxO/F//OFvjaPxC9tv38Szd+nymm97vpO/27E9/+2y/9i/3aP9x///LvQo95MqXvvmnE64KAJyCxu7e+mKtVt0+t4lWL/0MVONxS/w3PRPVeLSJbwy0wDRN09Y+9RDlJHF6X0LSv6rDPjIBAACDduekf9g1AQAAAAAAAAAAAAAAAAAAgNF1Gk8aOxxz/yCVDOIR2gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/FeAAAA//+kyeAN") r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x80, 0x4, 0x28}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x8, &(0x7f00000004c0)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x18) r3 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000200), 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7\x00', 0x4) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sysvipc/msg\x00', 0x0, 0x0) munmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000) mremap(&(0x7f0000a01000/0x4000)=nil, 0x4000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mremap(&(0x7f00009a1000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000fef000/0x4000)=nil) syz_clone(0xa2540400, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000100)='.\x00', 0x10820, &(0x7f00000009c0)=ANY=[], 0x0, 0x0, &(0x7f0000000000)) 1m17.901991279s ago: executing program 5 (id=4421): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) readlinkat(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = syz_open_dev$vcsn(0x0, 0x0, 0x26642) fsetxattr$security_capability(r2, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) syz_emit_ethernet(0x56, &(0x7f0000000340)={@local, @remote, @void, {@canfd={0xd, {{0x3, 0x0, 0x1}, 0xa, 0x3, 0x0, 0x0, "e15d5552f17b39f0cff7d5e1c9af80ec28487b692bde04bf28153157a74c53801c432ff439b41db9d7984043dc6e2d7c4cdefbda11bf8c6cb3ddcd11a2d92125"}}}}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r4, @ANYBLOB="0000000002000000b70500000800000085000000aa00000095"], &(0x7f0000000140)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r3}, 0x18) geteuid() 1m17.821956777s ago: executing program 5 (id=4423): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x601c2, 0x0) ftruncate(r1, 0x8800000) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) sendfile(r2, r1, 0x0, 0x558410e9) (async) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x2c, r3, 0x3141e0b2751b0f9b, 0x70bd2a, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x68c5}, 0x80) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000001c0)={'veth1_to_hsr\x00', 0x0}) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r5, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010029bd7000ffdbdf2500000000", @ANYRES32=r10, @ANYRES16], 0x44}, 0x1, 0x0, 0x0, 0x404d0}, 0x40040d4) (async) r11 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r11, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) (async) r12 = socket$nl_route(0x10, 0x3, 0x0) (async) r13 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r13, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r13, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r14, 0x9801}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev}]}}}]}, 0x38}}, 0x0) sendto$packet(r11, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c642b4a1b7880610cc96655b1b141", 0xfe03, 0x0, &(0x7f0000000040)={0xc9, 0x0, r14, 0x1, 0x0, 0x6, @multicast}, 0x14) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000140)={'ip6_vti0\x00', 0x0, 0xc166c3bd21830756, 0x6, 0x2, 0x8, 0x8, @private1={0xfc, 0x1, '\x00', 0x1}, @remote, 0x8000, 0x7800, 0xffffffff, 0xeb177fbd}}) sendmsg$ETHTOOL_MSG_EEE_GET(r2, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0xa0, r3, 0x200, 0x70bd28, 0x25dfdbff, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x80000}, 0x80) (async) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x16, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000005000000000000000200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000f0ff00850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000850000006d000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xed41d0969ec4053c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m17.780089261s ago: executing program 33 (id=4423): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x601c2, 0x0) ftruncate(r1, 0x8800000) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) sendfile(r2, r1, 0x0, 0x558410e9) (async) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x2c, r3, 0x3141e0b2751b0f9b, 0x70bd2a, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x68c5}, 0x80) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000001c0)={'veth1_to_hsr\x00', 0x0}) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r5, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010029bd7000ffdbdf2500000000", @ANYRES32=r10, @ANYRES16], 0x44}, 0x1, 0x0, 0x0, 0x404d0}, 0x40040d4) (async) r11 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r11, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) (async) r12 = socket$nl_route(0x10, 0x3, 0x0) (async) r13 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r13, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r13, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r14, 0x9801}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev}]}}}]}, 0x38}}, 0x0) sendto$packet(r11, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c642b4a1b7880610cc96655b1b141", 0xfe03, 0x0, &(0x7f0000000040)={0xc9, 0x0, r14, 0x1, 0x0, 0x6, @multicast}, 0x14) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000140)={'ip6_vti0\x00', 0x0, 0xc166c3bd21830756, 0x6, 0x2, 0x8, 0x8, @private1={0xfc, 0x1, '\x00', 0x1}, @remote, 0x8000, 0x7800, 0xffffffff, 0xeb177fbd}}) sendmsg$ETHTOOL_MSG_EEE_GET(r2, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0xa0, r3, 0x200, 0x70bd28, 0x25dfdbff, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x80000}, 0x80) (async) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x16, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000005000000000000000200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000f0ff00850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000850000006d000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xed41d0969ec4053c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m13.756058506s ago: executing program 4 (id=4490): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000010c0), 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) open(0x0, 0x2000, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000180)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000080)=ANY=[@ANYBLOB="e00000027f00"], 0x18) fchdir(r0) 1m13.734859778s ago: executing program 4 (id=4492): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setns(r0, 0x66020000) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0207e80702"], 0x10}}, 0x40044) r3 = socket$inet6(0xa, 0x3, 0x87) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000280)={{{@in=@multicast1, @in=@private=0xa010100, 0x4e62, 0x0, 0x3, 0x0, 0xa, 0x0, 0x100}, {0x0, 0x4, 0xfffffffffffffffe, 0x5000007ffffffc, 0x0, 0x9, 0x0, 0x3ff7}, {0x7fffffffffffffff, 0x1000000000, 0x53e8, 0x1f}, 0x0, 0x1, 0x1, 0x0, 0x3, 0x1}, {{@in=@multicast2, 0x0, 0x32}, 0x2, @in=@broadcast, 0x1502, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1}}, 0xe8) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x2, @empty, 0xfffffffc}, 0x1c) 1m12.884377792s ago: executing program 4 (id=4504): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r0}, &(0x7f0000000040), &(0x7f00000002c0)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000002100), 0x48) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r3, 0xc0105500, &(0x7f0000000440)={0x80, 0x6, 0x9, 0x400, 0x0, 0x800fd, 0x0}) 1m12.793510461s ago: executing program 4 (id=4506): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0, 0x0, 0x4}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000780)='./bus\x00', 0x41, &(0x7f0000000840)={[{@delalloc}, {@noload}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@noblock_validity}, {@noblock_validity}, {@nogrpid}, {@mblk_io_submit}, {@dioread_lock}, {@stripe={'stripe', 0x3d, 0x65cf}}], [], 0x3d}, 0x65, 0x51c, &(0x7f0000000200)="$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") r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x80, 0x4, 0x28}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x8, &(0x7f00000004c0)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x18) r3 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000200), 0x0) syz_clone(0xa2540400, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000100)='.\x00', 0x10820, &(0x7f00000009c0)=ANY=[], 0x0, 0x0, &(0x7f0000000000)) 1m12.377341772s ago: executing program 4 (id=4510): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x30046, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) capset(0x0, 0x0) 1m12.150869534s ago: executing program 6 (id=4515): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000140)={'vcan0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x3, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', r2, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$sock_SIOCETHTOOL(r3, 0x89f6, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0x12, 0x0, 0x2, 0x100, 0xb152, 0x3, 0x1fb, 0xfffffff9, 0x5}}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0}, 0x94) syz_open_dev$usbfs(0x0, 0x77, 0x41341) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000001000000e27f00000100"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff80}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r9}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x439, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, 0x9801}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @private2}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x24048001}, 0x4000004) 1m11.209605586s ago: executing program 6 (id=4526): syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f00000000c0), 0x2, 0xbd1, &(0x7f0000001340)="$eJzs3M1rHOcZAPBnRquVbKtduZRS91KVUmwoXUsuMrUp1C4uvfRQaK8Fq/LKCK0/kFRcyTqskn8gX+dALoEkJiGH+OxLQnLNJbGvCTkETFCsBEJIFGY/pI2lleR4V6PIvx+8mvedd7TP8+ywO/PC7gbwxBrJ/qQRxyLiYhJRau5PI6JY7w1G1BrHra4sTX65sjSZxNravz5LIomIBytLk63HSprbI83BYES8/9ckfvb05rhzC4szE9VqZbY5Pjl/5frJuYXFP0xfmbhcuVy5Onb6T+Onxk+PnhnvWq1ffXTu9he/+fsnta9f/ebW58+/nMS5GGrOtdfRLSMxsv6ctCtExES3g+Wkr1lPe51JYYd/SnucFAAAHaVt93C/iFL0xcbNWyne/iDX5AAAAICuWOuLWAMAAAAOuMT6HwAAAA641ucAHqwsTbZavp9I2Fv3z0fEcKP+1WZrzBSiVt8ORn9EHH6QRPvXWpPGvz22kYj4+N6ZN7IWPfoe8nZqyxHxy63Of1Kvf7j+Le7N9acRMdqF+CMPjX9M9Z/rQvy86wfgyXTnfONCtvn6l67f/8QW17/CFteuHyLv61/r/m910/3fRv19He7//rnLGDdfefFGp7ms/j/f/tvrrZbFz7aPVdQjuL8c8avCVvUn6/UnHeq/uMsYpW9vVDrN5V3/2ksRx2Pr+luS7X+f6OTUdLUy2vi7ZYzl98Zf6xQ/7/qz83+4Q/2t33/qdP6v7zLGfy5ceHPTznsb3e3rTz8tJv+u94rNPf+fmJ+fHYsoJv/YvP/U9rm0jmk9Rlb/id9u//rfqv7sPaHWfB6ytcByc5uNn3oo5l9u3XyrUz6t9V+e5/9Sh/PfXv+7hc3n/5ldxvjdO8+d6DTXvv7NWha/tRYGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgJY0IoYiScvr/TQtlyOORMTP43BavTY3//upa/+7eimbixiO/nRquloZjYhSY5xk47F6f2N86qHxHyPiaES8UDpUH5cnr1Uv5V08AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA645ExFAkaTki0ohYLaVpuZx3VgAAAEDXDeedAAAAANBz1v8AAABw8Fn/AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0GNHf33nbhIRtbOH6i1TbM7155oZ0Gtp3gkAuenLOwEgN4W8EwBy84hrfLcLcAAlO8wPdpwZ6HouAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOxfx4/duZtERO3soXrLFJtz/blmBvRa2tZPcswD2Ht9200W9i4PYO95icOTyxof2GntP7hxTO37MwM9ywkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/Weo3pK0HBHF5r5yOeInETEc/cnUdLUyGhE/jYgPS/0D2Xgs55wBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADovrmFxZmJarUym3XSaHbW9/Sg09eM3MMQvekkjbxr+yWfg90ZeHanY/4bjxmiGPui0n3ayfNdCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAvMwtLM5MVKuV2bm8MwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADyNrewODNRrVZme9jJu0YAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPLzXQAAAP//jAsGRw==") quotactl$Q_GETNEXTQUOTA(0xffffffff80000901, 0x0, 0xee00, 0x0) 1m11.147002803s ago: executing program 6 (id=4528): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port1\x00', 0x62, 0x20c1b, 0x0, 0x8000007, 0x3, 0xfffffffe, 0x0, 0x0, 0x7cce8c743ee810dd}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r1}, &(0x7f0000000240), &(0x7f0000000280)=r2}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x86, 0xe9a, 0x0, 0x5, 0x2, 0xc, 0x1, 0x0, 0x1}) 1m11.088961068s ago: executing program 6 (id=4531): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0, 0x0, 0x4}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000780)='./bus\x00', 0x41, &(0x7f0000000840)={[{@delalloc}, {@noload}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@noblock_validity}, {@noblock_validity}, {@nogrpid}, {@mblk_io_submit}, {@dioread_lock}, {@stripe={'stripe', 0x3d, 0x65cf}}], [], 0x3d}, 0x65, 0x51c, &(0x7f0000000200)="$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") r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x80, 0x4, 0x28}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x8, &(0x7f00000004c0)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x18) syz_clone(0xa2540400, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000100)='.\x00', 0x10820, &(0x7f00000009c0)=ANY=[], 0x0, 0x0, &(0x7f0000000000)) 1m10.442297422s ago: executing program 6 (id=4537): pipe(0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, 0x0, 0x8000) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c30000"], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x64, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000880)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="b7e981ac337ec321000000000000000507000000", @ANYRES32=r3, @ANYBLOB="000000000a000200aaaaaaaaaa0c0000"], 0x28}}, 0x0) sendmmsg$inet(r0, 0x0, 0x0, 0x2000c044) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) arch_prctl$ARCH_SET_GS(0x1001, &(0x7f0000000000)) r5 = socket(0x200000000000011, 0x2, 0xd) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r9, 0x2, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0, 0x4e}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x4, 0x6, r8, &(0x7f00000001c0)='m', 0x1, 0x1}]) bind$packet(r5, &(0x7f0000000080)={0x11, 0x800, r6, 0x1, 0x0, 0x6, @multicast}, 0x23) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={r4, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, &(0x7f0000000480)=[0x0, 0x0, 0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0], 0x0, 0xc8, &(0x7f0000000500)=[{}, {}], 0x10, 0x10, &(0x7f0000000540), &(0x7f0000000580), 0x8, 0xed, 0x8, 0x8, &(0x7f00000005c0)}}, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000b00)={&(0x7f00000007c0)=@updsa={0x328, 0x1a, 0x200, 0x70bd28, 0x25dfdbff, {{@in6=@private0, @in6=@mcast1, 0x4e22, 0x3, 0x4e24, 0x2, 0xa, 0xa0, 0x0, 0x32, r6, 0xffffffffffffffff}, {@in=@rand_addr=0x64010102, 0x4d5, 0x32}, @in6=@mcast2, {0x10, 0x56eb, 0x2, 0xffffffff, 0x5, 0x9, 0xfffffffffffffff7}, {0xfffffffffffffff7, 0x8000000000000000, 0x81, 0xffffffff}, {0x0, 0x2, 0xa}, 0x70bd2b, 0x3505, 0xa, 0x3, 0x2, 0x10}, [@tfcpad={0x8, 0x16, 0xff}, @sa={0xe4, 0x6, {{@in6=@mcast1, @in6=@private2, 0x4e21, 0x32b, 0x4e23, 0x6, 0xa, 0x80, 0x20, 0x8, r10}, {@in=@multicast1, 0x4d2, 0x32}, @in=@private=0xa010100, {0x5, 0x1490, 0x4, 0x0, 0xffff, 0x6, 0x2b12671, 0x8}, {0x6, 0x3, 0xda4, 0x7}, {0xffffffff, 0x7, 0xa0f}, 0x70bd27, 0x0, 0xa, 0x1, 0x1, 0xf2}}, @tmpl={0x5c, 0x5, [{{@in6=@mcast1, 0x4d6, 0x33}, 0xa, @in=@multicast1, 0x0, 0x1, 0x3, 0x2c, 0x9, 0xfffff09d, 0xf7}, {{@in=@broadcast, 0x4d2, 0x6c}, 0xa, @in6=@remote, 0x0, 0xc79aaf56c23ac394, 0x3, 0xb, 0x6b6f, 0x0, 0xc}, {{@in=@dev={0xac, 0x14, 0x14, 0x42}, 0x4d6, 0x6c}, 0x2, @in=@multicast2, 0x34ff, 0x2, 0x1, 0x2, 0xfffffffe, 0xec4, 0x5}]}, @replay_esn_val={0x40, 0x17, {0x9, 0x70bd2c, 0x70bd25, 0x70bd2c, 0x70bd2d, 0xb1c5, [0x2289b49c, 0x2, 0xff, 0x3, 0x40, 0xfffffffa, 0x9, 0x7ff, 0x2]}}, @lifetime_val={0x24, 0x9, {0x7, 0x100, 0x0, 0x3}}, @replay_esn_val={0x24, 0x17, {0x2, 0x70bd2b, 0x70bd25, 0x70bd2d, 0x70bd27, 0x0, [0x0, 0x2c]}}]}, 0x328}, 0x1, 0x0, 0x0, 0x40}, 0x4000000) openat$nci(0xffffffffffffff9c, 0x0, 0x5400, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x800, 0xa) 1m10.163621459s ago: executing program 6 (id=4549): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x39) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kmem_cache_free\x00', r3}, 0x10) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000380)=@o_path={0x0, r2}, 0x18) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000c80)='kmem_cache_free\x00', r4}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x121202, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000003c0)=0x1) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000001000010700000000200000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0) 1m10.141814581s ago: executing program 34 (id=4549): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x39) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kmem_cache_free\x00', r3}, 0x10) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000380)=@o_path={0x0, r2}, 0x18) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000c80)='kmem_cache_free\x00', r4}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x121202, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000003c0)=0x1) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000001000010700000000200000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0) 1m9.509546564s ago: executing program 4 (id=4562): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000800000000400000028000000", @ANYRES32, @ANYBLOB="00000012a7"], 0x50) 1m9.509129493s ago: executing program 35 (id=4562): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000800000000400000028000000", @ANYRES32, @ANYBLOB="00000012a7"], 0x50) 1m3.729515141s ago: executing program 3 (id=4630): r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/cgroup.procs\x00', 0x0, 0xce) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r2}, 0x18) msgget$private(0x0, 0x0) close(r0) 1m3.611262623s ago: executing program 3 (id=4633): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="a575836a00000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x7, 0x0, 0x0, 0x0, 0x0, 0xff, 0x110b5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0xb8b}, 0x100b23, 0x0, 0xfffffffc, 0x0, 0x21, 0xfffffff2, 0x2, 0x0, 0x4, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC=r0, @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000000c0), 0xde, 0x256, &(0x7f0000000880)="$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") mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x40, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000400)=@nat={'nat\x00', 0x670, 0x5, 0x3b0, 0x178, 0x0, 0xfeffffff, 0x178, 0xa8, 0x318, 0x318, 0xffffffff, 0x318, 0x318, 0x5, 0x0, {[{{@ip={@broadcast, @remote, 0x0, 0xffffffff, 'geneve1\x00', 'geneve0\x00', {0xff}}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x7ffffffe, {0x12, @dev={0xac, 0x14, 0x14, 0x3f}, @loopback, @port=0x4e24, @gre_key=0x6}}}}, {{@uncond, 0x0, 0x70, 0xd0, 0x0, {0x0, 0x7}}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x2, [0x1, 0x5, 0x5, 0x4, 0x4, 0x1], 0x6, 0x1}, {0x3, [0x1, 0x0, 0x0, 0xc, 0x2, 0x5], 0x4, 0x1}}}}, {{@uncond, 0x0, 0xc0, 0xf8, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00', 0x0, 0xd, 0x0, 0x1}}]}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0xd00, {0x0, @loopback, @local, @gre_key, @gre_key}}}}, {{@ip={@private, @local, 0x0, 0x0, 'veth1_virt_wifi\x00', 'pim6reg0\x00', {}, {0xff}, 0x84, 0x2}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @local, @loopback, @icmp_id=0x67, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x410) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback=0x2f, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x3, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, [@call={0x85, 0x0, 0x0, 0x2e}, @call={0x85, 0x0, 0x0, 0x50}]}, &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001240)={r6, 0x0, 0xe, 0x0, &(0x7f0000000080)="925a95e24550ec24e8e1a95586dd", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x2a) r7 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE2(r7, 0x0, 0x8) 1m3.342007319s ago: executing program 3 (id=4638): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x4) write$cgroup_int(r0, 0x0, 0x0) 1m3.304256783s ago: executing program 3 (id=4640): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0, 0x0, 0x4}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000780)='./bus\x00', 0x41, &(0x7f0000000840)={[{@delalloc}, {@noload}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@noblock_validity}, {@noblock_validity}, {@nogrpid}, {@mblk_io_submit}, {@dioread_lock}, {@stripe={'stripe', 0x3d, 0x65cf}}], [], 0x3d}, 0x65, 0x51c, &(0x7f0000000200)="$eJzs3UFoJFkZAOC/Ot3ZyUx2k1UPuuC6uiuZQac72bi7wcO6guhpQV3vY0w6IaSTDunO7iQsmsGDR0FEBU968SJ48iTIghePIizoWVFRRGf0IKhTS3dXZ2aS6k5mpiedSX8fVOrV66r3v9ehqutVPaoCGFnPRcRrEXE7TdMrETGV5ReyKfY7U2u9WzffXmpNSaTpG/9IIsnyumWlbU/EpWyzCxHx5S9EfC05Grexu7e+WKtVt7PlSnNjq9LY3bu6trG4Wl2tbs7Pz7288MrCSwuzA2nnZES8+rm/fO/bP/n8q7/85Ft/vPa3y19Psvw41I77VOz3YafppfZ3cfcG2w8Y7CwqtluYmchbY+xIzo1HXCcAAHp7X0R8LCKuxFSM9T+dBQAAAB5D6Wcm439J997dEeM98gEAAIDHSKE9BjYplLPxvpNRKJTL0R7D+4G4WKjVG81PrNR3Npc7Y2Wno1RYWatVZ7OxwtNRSlrLc+30neUXDy3PR8TTEfHdqYn2cnmpXlse9sUPAAAAGBGXDvX//z3V6f8DAAAA58z0sCsAAAAAPHL6/wAAAHD+6f8DAADAufbF119vTWn3/dfLb+7urNffvLpcbayXN3aWykv17a3yar2+2n5m38Zx5dXq9a1PxebO9Uqz2mhWGrt71zbqO5vNa2v3vAIbAAAAOEVPf+Sd3ycRsf/pifbUMn6yTU+4GnBWFQ9SSTbP2a3/8FRn/udTqhRwKsaGXQFgaIrDrgAwNKVhVwAYuuSYz3sO3vlNNv/oYOsDAAAM3syHet//L/Tdcr//x8CZZyeG0eX+P4yu9v3/k47kdbIA50rJGQCMvIe+/3+sNL2vCgEAAAM32Z6SQjm7vDcZhUK5HPFk+7UApWRlrVadjYinIuJ3U6UnWstz7S2TY/sMAAAAAAAAAAAAAAAAAAAAAAAAAEBHmiaRAgAAAOdaROGvya86z/KfmXph8vD1gfHkP1ORvSL0rR++8f3ri83m9lwr/58H+c0fZPkvDuMKBgAAAIyE4v2s3O2nd/vxAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADBIt26+vdSdTjPu3z8bEdN58YtxoT2/EKWIuPivJIp3bZdExNgA4k+0/nwwL37SqtZByLz4EwOIv3+jb/yYzr6FvPiXBhAfRtk7rePPa3n7XyGea8/z979ixD3LD6r38S8Ojn9jPfb/J08Y45l3f1bpGf9GxDPF/ONPN37SI/7zeQX+/FtHsr76lb29XvHTH0XM5P7+JPfEqjQ3tiqN3b2raxuLq9XV6ub8/NzLC68svLQwW1lZq1Wzv7kxvvPhX9zu1/6LPeJPH9P+F3LKG8/J+/+712++v5Ms5cW//HxO/F//OFvjaPxC9tv38Szd+nymm97vpO/27E9/+2y/9i/3aP9x///LvQo95MqXvvmnE64KAJyCxu7e+mKtVt0+t4lWL/0MVONxS/w3PRPVeLSJbwy0wDRN09Y+9RDlJHF6X0LSv6rDPjIBAACDduekf9g1AQAAAAAAAAAAAAAAAAAAgNF1Gk8aOxxz/yCVDOIR2gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/FeAAAA//+kyeAN") bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x80, 0x4, 0x28}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x18) syz_clone(0xa2540400, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000100)='.\x00', 0x10820, &(0x7f00000009c0)=ANY=[], 0x0, 0x0, &(0x7f0000000000)) 1m3.086225064s ago: executing program 3 (id=4645): socket$inet6_sctp(0xa, 0x5, 0x84) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000004d00000600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x10, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdbb, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYRES8=r2], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000c1010000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000070000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000059729ec6850000008200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0xff, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xa, 0x1ff}, 0x1100, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f3, &(0x7f0000000180)={'sit0\x00', &(0x7f0000000480)={'gre0\x00', 0x0, 0x40, 0x0, 0x1, 0x0, {{0x6, 0x4, 0x0, 0x3f, 0x18, 0x66, 0x0, 0x0, 0x89, 0x0, @rand_addr, @rand_addr=0x64010100, {[@rr={0x7, 0x3, 0x67}]}}}}}) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x18, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x3}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r7}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x4}, 0x3094}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x3, 0x20, 0x0, 0x30046, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000080)={0x0, 0x989680}, 0x0) 1m2.862180656s ago: executing program 3 (id=4646): r0 = perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x7fff}, 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000080)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) sendmsg$unix(0xffffffffffffffff, 0x0, 0x4004881) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000540), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x303, 0x37}, "475566172f45f011", "bd14060000000000000092f94413582b", "00001000", "4e67cb72f328ac2f"}, 0x28) 1m2.843053578s ago: executing program 36 (id=4646): r0 = perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x7fff}, 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000080)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) sendmsg$unix(0xffffffffffffffff, 0x0, 0x4004881) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000540), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x303, 0x37}, "475566172f45f011", "bd14060000000000000092f94413582b", "00001000", "4e67cb72f328ac2f"}, 0x28) 59.611410326s ago: executing program 8 (id=4678): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) setsockopt$nfc_llcp_NFC_LLCP_RW(r0, 0x118, 0x1000000, 0x0, 0x0) 59.56214503s ago: executing program 8 (id=4679): r0 = socket(0x11, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="02011400012918000e3580009f0001140000003f0600ac141430e0000003808a8972bd0b72e41082b1a3d2061fd7fdfe4b88942a31f48597e36e039b1c599db6e466749c2d4c8303a0f7fbda34fb8825f80200e3c0aba61f6304a80500ffffca88facafeeef976"], 0xdd12}, {0x0}, {&(0x7f0000000040)={0x1c, 0x3c, 0x2, 0x70bd2d, 0x25dfdbfb, "", [@nested={0xc, 0x10a, 0x0, 0x1, [@nested={0x4, 0xdc}, @nested={0x4, 0x6d}]}]}, 0x1c}], 0x3}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000880)={0x2c, 0x0, 0x1, 0x4070bd28, 0x1, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x2c}}, 0x18) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000040)={0xffffffffffffffff, 0x4, 0xf3, 0x9, @vifc_lcl_ifindex=r4, @remote}, 0x10) r5 = getpid() sched_setscheduler(r5, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00f7ffffffffffff130012800b00010062617461647600000400028008000a00", @ANYRES32], 0x3c}}, 0x0) r8 = socket(0x10, 0x3, 0x0) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmmsg(r8, &(0x7f0000000000), 0x4000000000001f2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7, 0x0, 0x7fff}, 0x18) 59.377841198s ago: executing program 8 (id=4688): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{0xffffffffffffffff, 0xffffffffffffffff}, 0x0, &(0x7f00000001c0)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000340)='kmem_cache_free\x00', r1}, 0x18) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x40, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r3, 0xc0c89425, &(0x7f00000000c0)={"3fcc297cabb94e506cfd110a12eefdb5", 0x0, 0x0, {0x7f, 0xe}, {0x0, 0x9}, 0x7ff, [0x6, 0x6, 0x6, 0x8, 0x8, 0x8, 0x4, 0x800, 0x413, 0x0, 0x3, 0x8, 0xefa4, 0x3, 0x5, 0x28338ca]}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r2, 0x5000943f, &(0x7f0000000a40)={{r0}, r4, 0x12, @inherit={0x68, &(0x7f0000000380)={0x0, 0x4, 0xffff, 0xa, {0x6, 0x8, 0x1, 0x9, 0x2}, [0x2, 0xffffffffffffffff, 0x400000000000, 0xf8]}}, @devid}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100003020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001280)='memory.events\x00', 0x26e1, 0x0) write$cgroup_subtree(r7, &(0x7f0000000140)=ANY=[], 0x32600) ioctl$PERF_EVENT_IOC_PERIOD(r7, 0x40305829, &(0x7f0000000040)) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r8, 0x8, 0x0, 0x0, 0x18, &(0x7f0000000200), 0x1}, 0x6d) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r9, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001200), 0x8, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r6, 0x18000000000002a0, 0x6, 0x0, &(0x7f00000000c0)="b9e203076008", 0x0, 0x6, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x4}, 0x50) setsockopt$nfc_llcp_NFC_LLCP_RW(r5, 0x118, 0x0, &(0x7f00000001c0)=0x11, 0x4) 59.311444505s ago: executing program 8 (id=4689): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000780)='./bus\x00', 0x41, &(0x7f0000000840)={[{@delalloc}, {@noload}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@noblock_validity}, {@noblock_validity}, {@nogrpid}, {@mblk_io_submit}, {@dioread_lock}, {@stripe={'stripe', 0x3d, 0x65cf}}], [], 0x3d}, 0x65, 0x51c, &(0x7f0000000200)="$eJzs3UFoJFkZAOC/Ot3ZyUx2k1UPuuC6uiuZQac72bi7wcO6guhpQV3vY0w6IaSTDunO7iQsmsGDR0FEBU968SJ48iTIghePIizoWVFRRGf0IKhTS3dXZ2aS6k5mpiedSX8fVOrV66r3v9ehqutVPaoCGFnPRcRrEXE7TdMrETGV5ReyKfY7U2u9WzffXmpNSaTpG/9IIsnyumWlbU/EpWyzCxHx5S9EfC05Grexu7e+WKtVt7PlSnNjq9LY3bu6trG4Wl2tbs7Pz7288MrCSwuzA2nnZES8+rm/fO/bP/n8q7/85Ft/vPa3y19Psvw41I77VOz3YafppfZ3cfcG2w8Y7CwqtluYmchbY+xIzo1HXCcAAHp7X0R8LCKuxFSM9T+dBQAAAB5D6Wcm439J997dEeM98gEAAIDHSKE9BjYplLPxvpNRKJTL0R7D+4G4WKjVG81PrNR3Npc7Y2Wno1RYWatVZ7OxwtNRSlrLc+30neUXDy3PR8TTEfHdqYn2cnmpXlse9sUPAAAAGBGXDvX//z3V6f8DAAAA58z0sCsAAAAAPHL6/wAAAHD+6f8DAADAufbF119vTWn3/dfLb+7urNffvLpcbayXN3aWykv17a3yar2+2n5m38Zx5dXq9a1PxebO9Uqz2mhWGrt71zbqO5vNa2v3vAIbAAAAOEVPf+Sd3ycRsf/pifbUMn6yTU+4GnBWFQ9SSTbP2a3/8FRn/udTqhRwKsaGXQFgaIrDrgAwNKVhVwAYuuSYz3sO3vlNNv/oYOsDAAAM3syHet//L/Tdcr//x8CZZyeG0eX+P4yu9v3/k47kdbIA50rJGQCMvIe+/3+sNL2vCgEAAAM32Z6SQjm7vDcZhUK5HPFk+7UApWRlrVadjYinIuJ3U6UnWstz7S2TY/sMAAAAAAAAAAAAAAAAAAAAAAAAAEBHmiaRAgAAAOdaROGvya86z/KfmXph8vD1gfHkP1ORvSL0rR++8f3ri83m9lwr/58H+c0fZPkvDuMKBgAAAIyE4v2s3O2nd/vxAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADBIt26+vdSdTjPu3z8bEdN58YtxoT2/EKWIuPivJIp3bZdExNgA4k+0/nwwL37SqtZByLz4EwOIv3+jb/yYzr6FvPiXBhAfRtk7rePPa3n7XyGea8/z979ixD3LD6r38S8Ojn9jPfb/J08Y45l3f1bpGf9GxDPF/ONPN37SI/7zeQX+/FtHsr76lb29XvHTH0XM5P7+JPfEqjQ3tiqN3b2raxuLq9XV6ub8/NzLC68svLQwW1lZq1Wzv7kxvvPhX9zu1/6LPeJPH9P+F3LKG8/J+/+712++v5Ms5cW//HxO/F//OFvjaPxC9tv38Szd+nymm97vpO/27E9/+2y/9i/3aP9x///LvQo95MqXvvmnE64KAJyCxu7e+mKtVt0+t4lWL/0MVONxS/w3PRPVeLSJbwy0wDRN09Y+9RDlJHF6X0LSv6rDPjIBAACDduekf9g1AQAAAAAAAAAAAAAAAAAAgNF1Gk8aOxxz/yCVDOIR2gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/FeAAAA//+kyeAN") r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x80, 0x4, 0x28}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x8, &(0x7f00000004c0)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x18) syz_clone(0xa2540400, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000100)='.\x00', 0x10820, &(0x7f00000009c0)=ANY=[], 0x0, 0x0, &(0x7f0000000000)) 58.866523659s ago: executing program 8 (id=4696): io_uring_setup(0x330b, &(0x7f0000000640)={0x0, 0xffffffee, 0x1, 0x103fc, 0x14e}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x60, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6, 0x6, 0x3, 0x7ffcfffc}]}) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) fcntl$setpipe(r4, 0x407, 0x0) ioctl$FICLONERANGE(r1, 0x4020940d, &(0x7f0000000480)={{r2}, 0x4, 0x8, 0x4}) vmsplice(r4, &(0x7f0000000140)=[{&(0x7f0000000100)='\x00', 0x20000101}], 0x1000000000000044, 0x0) 58.471451598s ago: executing program 8 (id=4700): lsetxattr$security_selinux(&(0x7f00000001c0)='.\x00', &(0x7f0000000240), &(0x7f0000000280)='system_u:object_r:fsadm_exec_t:s0\x00', 0x1001, 0x0) 58.417596053s ago: executing program 37 (id=4700): lsetxattr$security_selinux(&(0x7f00000001c0)='.\x00', &(0x7f0000000240), &(0x7f0000000280)='system_u:object_r:fsadm_exec_t:s0\x00', 0x1001, 0x0) 3.019255744s ago: executing program 7 (id=5578): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="070000000400000008000000d9"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000008000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r2, &(0x7f0000000040)='l', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r3, 0xffffffffffffffff, 0x0) 2.412611274s ago: executing program 0 (id=5595): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file2\x00', 0x300c056, &(0x7f0000000d80)={[{@noload}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@errors_remount}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x55a, &(0x7f0000000480)="$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") creat(&(0x7f0000000240)='./bus\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r1, &(0x7f0000000280)='B', 0x1) socket(0x22, 0x2, 0x26) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x9c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x70, 0x4, 0x0, 0x1, [{0x58, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x48, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x2c, 0x3, "9ac420000461afb9fdd672bad09dfb78c7699c74e891a0c700"/40}, @NFTA_TARGET_REV={0x8}, @NFTA_TARGET_NAME={0xe, 0x1, 'IDLETIMER\x00'}]}}}, {0x14, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x4}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xc4}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) sendfile(r1, r0, 0x0, 0x3ffff) r3 = open(&(0x7f0000000080)='./file1\x00', 0x145142, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) ftruncate(r3, 0x2007ffc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000240)='kmem_cache_free\x00'}, 0x18) socket(0x840000000002, 0x3, 0xff) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000200)={'ip6gre0\x00', &(0x7f0000000bc0)={'ip6gre0\x00', 0x0, 0x29, 0x0, 0x8, 0x3, 0x40, @loopback, @mcast1, 0x20, 0x8000, 0x100, 0x1cc80000}}) sendfile(r3, r3, 0x0, 0x800000009) 2.412178134s ago: executing program 9 (id=5596): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000005c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021200011800e000100636f6e6e6c696d69740000000c0002800800"], 0xe0}}, 0x0) 2.395405875s ago: executing program 9 (id=5597): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1d, 0x2, 0x6) r2 = socket(0x1d, 0x2, 0x6) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/vmstat\x00', 0x0, 0x0) r5 = syz_io_uring_setup(0x49d, &(0x7f0000000440)={0x0, 0x79ae, 0x400, 0x7ffd, 0x32c}, &(0x7f0000000680)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x2007, @fd=r4, 0x6, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1}) io_uring_enter(r5, 0xfd0, 0x4c1, 0x43, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000400)={0x1d, r8, 0x2, {0x0, 0xf0}}, 0x18) syz_emit_ethernet(0xfdef, &(0x7f0000000100)={@local, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "92c01f", 0x8, 0x2f, 0x0, @remote, @ipv4={'\x00', '\xff\xff', @private=0x38}, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21}, {}, {0x8, 0x88be, 0x4305000f}}}}}}}, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000940)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad1f50ad32d3fd25dfd73a015e0ca6a0f68a7d007f15451dfb265a0e3ccae669e173a64bc1cfd5587d452d64e7cc957d77578f4c25235138d5521f9453559c35da860e8efbc64e57cbb7aee976f2b54421eed73d5661ca3dbe74bd09de8793dbcceef76b2e5feecf9c66c54c3b3ffe1b4ce25d7c983c044c06cd0a48dfe3e26e7a23129d6606fd28a69989d552af6d9a9df2c3af36e0360050011bbecc2f4a3799af2551ce935b0f327cb3f011a7d06602e2fd5234712596b696418f163d1a13ed38ae82f87925bfacba83109753f541cd027edd68149ee99eebc6f7d6dd4aed4af7588c8e1b44ccb19e810879b70a7000000e7ffffff00000000d7900a820b63278f4e9a217b98ef7042ad2a92895614cd50cbe43a1ed25268816b00000000000009d27d753a30a147b24a48435bd8a568669596e9e0867958e1dd7a0defb6670c06054002238260000000000040587c1ed797aa21a38e1e389f640a0b8b0000000000a835ad0f61ba73c31b05c00fba8a4aee676d7c45bb29671a68ee2e60da7b01a2e5785a238afa4aba70c07fcd95bf8b0d71b6f72d6a8d87fb08533d97ad96d3943c4cc8306dac433a5cdf334178b04963d67dd5a5707e618a1ef9057fec00f9e930219fa8d30e716de8cde9c60f0000000c3b64d10f0939b42b788daa7075fa542242b00f6bf9b64ad460e386b6f388351fbdacb3ad074574ee9d450f9dcfaef1be95ff3c449e6482e4403174618c20e887d6f320616d31d78a0e5421d5742cc52509fd90cf2df6d1404f6b8f810d7b94d421971b77a3270153a0d57cccfe27872f3e8e44480f93c33421986a7737842627301fb2fee8cabab074adaa2024ff57e609ba2f4d83b3bbf52309484532416f48f43b31395c6f45fee8f1682a4e8d5e3b9ae634ed24fb0e8b5fadaf5cb7eea62b7bb4264e72950c9dc791d771acc24c08cdb6ef24c813d082a86d9b879bdf5aefdfd905a2bd4ea36b0b54915a68fe149db154a8340017e1855511e9c0fe62d0cf55"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000140)='kmem_cache_free\x00', r9}, 0x10) link(&(0x7f0000001240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000f00)=@newtfilter={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r10}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 2.256972879s ago: executing program 9 (id=5599): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000070400000008911f92c13102", @ANYRES32=0x0], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="180700000000000000", @ANYRES32], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_usb_connect(0x3, 0x2d, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000380)={0x1d, r0, 0x1, {0x0, 0x1, 0x3}, 0xfe}, 0x18) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="1f", 0x206c}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) 2.156398108s ago: executing program 7 (id=5602): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080000000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00iK{\"'], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r2}, 0x10) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r3}, 0x8) write$cgroup_int(r4, &(0x7f00000001c0), 0xfffffdef) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r7, &(0x7f0000000580)=ANY=[], 0xfdef) 1.656564158s ago: executing program 9 (id=5607): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000005c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021200011800e000100636f6e6e6c696d69740000000c000280080001"], 0xe0}}, 0x0) 1.655963898s ago: executing program 1 (id=5609): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1d, 0x2, 0x6) r2 = socket(0x1d, 0x2, 0x6) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/vmstat\x00', 0x0, 0x0) r5 = syz_io_uring_setup(0x49d, &(0x7f0000000440)={0x0, 0x79ae, 0x400, 0x7ffd, 0x32c}, &(0x7f0000000680)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x2007, @fd=r4, 0x6, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1}) io_uring_enter(r5, 0xfd0, 0x4c1, 0x43, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000400)={0x1d, r8, 0x2, {0x0, 0xf0}}, 0x18) syz_emit_ethernet(0xfdef, &(0x7f0000000100)={@local, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "92c01f", 0x8, 0x2f, 0x0, @remote, @ipv4={'\x00', '\xff\xff', @private=0x38}, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21}, {}, {0x8, 0x88be, 0x4305000f}}}}}}}, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000140)='kmem_cache_free\x00', r9}, 0x10) link(&(0x7f0000001240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000f00)=@newtfilter={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r10}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 1.652635768s ago: executing program 9 (id=5610): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000070400000008911f92c13102", @ANYRES32=0x0], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="180700000000000000", @ANYRES32], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='sched_switch\x00'}, 0x10) r0 = socket$kcm(0x10, 0x2, 0x0) socket$inet(0x2, 0x2, 0xa) syz_usb_connect(0x3, 0x2d, 0x0, 0x0) r1 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000380)={0x1d, r2, 0x1, {0x0, 0x1, 0x3}, 0xfe}, 0x18) sendmmsg$sock(r1, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="1f", 0x206c}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000540)="d8000000190081054e81f782db4cb9040220080000000000000000070a000a000900142603600e1208001e0000050401d559e0e0dd7fc07963acc3038ebba8000400027c035c0461c1d67f6f94007134cf6efb8001a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c3f5aeb4edbb57a5025ccca9e008026f6e6ddba61f5fad95667e006dcdf639500bfeb789d00000000000007d5e1cace81ed6c117ab5d6d69bda651297f9583b89965f52df514039e81f86f60f0bffece0b4", 0xd8}], 0x1}, 0x14) 1.370803916s ago: executing program 1 (id=5615): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="070000000400000008020000"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000440)='kfree\x00', r1, 0x0, 0x5}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000134c0)={[{@dioread_nolock}, {@noauto_da_alloc}, {@inlinecrypt}, {@sysvgroups}, {@data_err_ignore}, {@barrier_val={'barrier', 0x3d, 0x7f}}, {@data_err_ignore}, {@grpquota}, {@dioread_nolock}, {@user_xattr}, {@resuid}, {@quota}]}, 0x1, 0x553, &(0x7f0000001080)="$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") sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=ANY=[@ANYBLOB="ec000000210001000000000000000000fc020000000000000000000000000001fe80000000000000000000000000003a00000000000000000a0000a02e000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000009c0011000a010101000000000000000000f700007f000001000400000000000000000000fc020000000000000000000000000001000000000000000000000000000000013c04"], 0xec}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r2 = fsopen(&(0x7f0000000400)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000240)=',-\x10*\x00', &(0x7f0000000380)='\x15\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000140)='syzkaller\x00', &(0x7f0000001140)='\xf1\x95\xb3>-\x8c\xd4M\x01\xfa\xe2{eED\x0e\xaaPV\x11\xff\xb6j\xd4~6\x82^\x9b b', 0x0) close(r2) 1.272930805s ago: executing program 7 (id=5616): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1b, 0x3, &(0x7f0000000580)=@framed={{0x18, 0x5}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', 0xffffffffffffffff, 0x0, 0x4}, 0x18) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000040000001400050003030000000a0000005dc00000000001080002000500000014000600ff01000a00f2f3f31f000a0000000001060001"], 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x4040000) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x24008000}, 0x4040000) 1.272497695s ago: executing program 7 (id=5617): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000070400000008911f92c13102", @ANYRES32=0x0], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="180700000000000000", @ANYRES32], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000380)={0x1d, r1, 0x1, {0x0, 0x1, 0x3}, 0xfe}, 0x18) sendmmsg$sock(r0, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="1f", 0x206c}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) 1.238705669s ago: executing program 1 (id=5618): pipe(0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, 0x0, 0x8000) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c30000"], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x64, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000880)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRES32=r3, @ANYBLOB="000000000a000200aaaaaaaaaa0c0000"], 0x28}}, 0x0) sendmmsg$inet(r0, 0x0, 0x0, 0x2000c044) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) arch_prctl$ARCH_SET_GS(0x1001, &(0x7f0000000000)) r5 = socket(0x200000000000011, 0x2, 0xd) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r9, 0x2, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0, 0x4e}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x4, 0x6, r8, &(0x7f00000001c0)='m', 0x1, 0x1}]) bind$packet(r5, &(0x7f0000000080)={0x11, 0x800, r6, 0x1, 0x0, 0x6, @multicast}, 0x23) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={r4, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, &(0x7f0000000480)=[0x0, 0x0, 0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0], 0x0, 0xc8, &(0x7f0000000500)=[{}, {}], 0x10, 0x10, &(0x7f0000000540), &(0x7f0000000580), 0x8, 0xed, 0x8, 0x8, &(0x7f00000005c0)}}, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000b00)={&(0x7f00000007c0)=@updsa={0x328, 0x1a, 0x200, 0x70bd28, 0x25dfdbff, {{@in6=@private0, @in6=@mcast1, 0x4e22, 0x3, 0x4e24, 0x2, 0xa, 0xa0, 0x0, 0x32, r6, 0xffffffffffffffff}, {@in=@rand_addr=0x64010102, 0x4d5, 0x32}, @in6=@mcast2, {0x10, 0x56eb, 0x2, 0xffffffff, 0x5, 0x9, 0xfffffffffffffff7}, {0xfffffffffffffff7, 0x8000000000000000, 0x81, 0xffffffff}, {0x0, 0x2, 0xa}, 0x70bd2b, 0x3505, 0xa, 0x3, 0x2, 0x10}, [@tfcpad={0x8, 0x16, 0xff}, @sa={0xe4, 0x6, {{@in6=@mcast1, @in6=@private2, 0x4e21, 0x32b, 0x4e23, 0x6, 0xa, 0x80, 0x20, 0x8, r10}, {@in=@multicast1, 0x4d2, 0x32}, @in=@private=0xa010100, {0x5, 0x1490, 0x4, 0x0, 0xffff, 0x6, 0x2b12671, 0x8}, {0x6, 0x3, 0xda4, 0x7}, {0xffffffff, 0x7, 0xa0f}, 0x70bd27, 0x0, 0xa, 0x1, 0x1, 0xf2}}, @tmpl={0x5c, 0x5, [{{@in6=@mcast1, 0x4d6, 0x33}, 0xa, @in=@multicast1, 0x0, 0x1, 0x3, 0x2c, 0x9, 0xfffff09d, 0xf7}, {{@in=@broadcast, 0x4d2, 0x6c}, 0xa, @in6=@remote, 0x0, 0xc79aaf56c23ac394, 0x3, 0xb, 0x6b6f, 0x0, 0xc}, {{@in=@dev={0xac, 0x14, 0x14, 0x42}, 0x4d6, 0x6c}, 0x2, @in=@multicast2, 0x34ff, 0x2, 0x1, 0x2, 0xfffffffe, 0xec4, 0x5}]}, @replay_esn_val={0x40, 0x17, {0x9, 0x70bd2c, 0x70bd25, 0x70bd2c, 0x70bd2d, 0xb1c5, [0x2289b49c, 0x2, 0xff, 0x3, 0x40, 0xfffffffa, 0x9, 0x7ff, 0x2]}}, @lifetime_val={0x24, 0x9, {0x7, 0x100, 0x0, 0x3}}, @replay_esn_val={0x24, 0x17, {0x2, 0x70bd2b, 0x70bd25, 0x70bd2d, 0x70bd27, 0x0, [0x0, 0x2c]}}]}, 0x328}, 0x1, 0x0, 0x0, 0x40}, 0x4000000) openat$nci(0xffffffffffffff9c, 0x0, 0x5400, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x800, 0xa) 1.182148574s ago: executing program 0 (id=5619): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000022007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r1}, 0x18) rt_sigaction(0x16, &(0x7f0000000080)={0x0, 0x90000000, 0x0}, 0x0, 0x8, &(0x7f0000000200)) 1.072835055s ago: executing program 0 (id=5620): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000070400000008911f92c13102", @ANYRES32=0x0], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="180700000000000000", @ANYRES32], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='sched_switch\x00'}, 0x10) r0 = socket$kcm(0x10, 0x2, 0x0) socket$inet(0x2, 0x2, 0xa) syz_usb_connect(0x3, 0x2d, 0x0, 0x0) r1 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000380)={0x1d, r2, 0x1, {0x0, 0x1, 0x3}, 0xfe}, 0x18) sendmmsg$sock(r1, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="1f", 0x206c}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000540)="d8000000190081054e81f782db4cb9040220080000000000000000070a000a000900142603600e1208001e0000050401d559e0e0dd7fc07963acc3038ebba8000400027c035c0461c1d67f6f94007134cf6efb8001a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c3f5aeb4edbb57a5025ccca9e008026f6e6ddba61f5fad95667e006dcdf639500bfeb789d00000000000007d5e1cace81ed6c117ab5d6d69bda651297f9583b89965f52df514039e81f86f60f0bffece0b4", 0xd8}], 0x1}, 0x14) 1.072351335s ago: executing program 7 (id=5621): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setns(r0, 0x66020000) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0207e80702"], 0x10}}, 0x40044) r4 = socket$inet6(0xa, 0x3, 0x87) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000280)={{{@in=@multicast1, @in=@private=0xa010100, 0x4e62, 0x0, 0x3, 0x0, 0xa, 0x0, 0x100}, {0x0, 0x4, 0xfffffffffffffffe, 0x5000007ffffffc, 0x0, 0x9, 0x0, 0x3ff7}, {0x7fffffffffffffff, 0x1000000000, 0x53e8, 0x1f}, 0x0, 0x1, 0x1, 0x0, 0x3, 0x1}, {{@in=@multicast2, 0x0, 0x32}, 0x2, @in=@broadcast, 0x1502, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1}}, 0xe8) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x2, @empty, 0xfffffffc}, 0x1c) 517.43009ms ago: executing program 2 (id=5624): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x304}, "a6341a1a379332f5", "1fd33c81cf7995313c09de00fd6ded74", "62266bd8", "1e00040000000100"}, 0x28) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 494.806282ms ago: executing program 2 (id=5625): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) r2 = socket$unix(0x1, 0x5, 0x0) pipe(0x0) splice(r2, &(0x7f0000000180)=0xc9d4, 0xffffffffffffffff, 0x0, 0x1, 0x6) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000008500000023000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) r5 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r5, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8010}, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r7}, 0x10) sendmsg$inet(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000035c0)="5c00000013006bcd9e3fe3dc4e48aa31086b8703340000001f00000000000000040014000d000a00140000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x240000c0) 384.068282ms ago: executing program 0 (id=5626): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000005c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021200011800e000100636f6e"], 0xe0}}, 0x0) 376.266473ms ago: executing program 2 (id=5627): sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) io_uring_setup(0x3c46, &(0x7f0000000880)={0x0, 0xeb7f, 0x1000, 0x2, 0x26c}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r3}, &(0x7f0000000240), &(0x7f00000003c0)=r5}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r4, r1, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x11bc, &(0x7f0000000a00)={@empty, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x8, 0x6, "5ead87", 0x1186, 0x6, 0xff, @dev={0xfe, 0x80, '\x00', 0x36}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, {[@hopopts={0x32, 0x218, '\x00', [@generic={0x2, 0x84, "c4efe01341d1f9f6a875a1cd159647a239605d706842c6a9891d7d66664e3c9f3d517d07b84822937cb1e64738c2f3a7b70fac3162d6631c0eb60b14fcab4b9b14274d81643c9924226ece93ce48b6e2008b6a268c234f252b9f653a5aa34ae2903a53e054c3335a2021dcc9afbf47fa12654fb0fef539b6d490fa14fbe3d2db6e5ba10e"}, @ra={0x5, 0x2, 0x5}, @calipso={0x7, 0x28, {0x3, 0x8, 0x8, 0x5, [0x8, 0x20, 0x3a, 0x6]}}, @generic={0x6, 0x1000, "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"}, @pad1, @ra={0x5, 0x2, 0x5}, @enc_lim={0x4, 0x1, 0xf}]}, @srh={0x5d, 0x10, 0x4, 0x8, 0x6, 0x30, 0x2, [@ipv4={'\x00', '\xff\xff', @empty}, @private2={0xfc, 0x2, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, @private2, @mcast2, @rand_addr=' \x01\x00']}], {{0x4, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x7, 0x0, 0x1, {[@exp_fastopen={0xfe, 0x6, 0xf989, "f79f"}, @exp_fastopen={0xfe, 0xc, 0xf989, "7aec862bb31382ec"}, @sack_perm={0x4, 0x2}]}}, {"50e8dfa7009b1663b67d5abfc0ba"}}}}}}}, &(0x7f0000000200)={0x0, 0x2, [0x490, 0x38d, 0x7dd, 0xeff]}) 328.104188ms ago: executing program 2 (id=5628): r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000200)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) r1 = syz_io_uring_setup(0x497, &(0x7f0000000540)={0x0, 0x4660, 0x400, 0x3, 0x40289}, &(0x7f00000004c0)=0x0, &(0x7f0000000480)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}) io_uring_enter(r1, 0x3498, 0x969, 0xffff00000000fff4, 0x0, 0x0) 284.446472ms ago: executing program 2 (id=5629): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000005c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021200011800e000100636f6e"], 0xe0}}, 0x0) 283.033932ms ago: executing program 1 (id=5630): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000200100000102000028"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) writev(r2, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}], 0x1) 260.282025ms ago: executing program 0 (id=5631): r0 = syz_mount_image$vfat(&(0x7f0000000240), &(0x7f00000000c0)='./file0\x00', 0x4000, &(0x7f0000000540)=ANY=[@ANYBLOB="73686f72746e616d653d77696e6e742c757466383d302c636865636b3d7374726963742c646973636172642c757466383d312c6e66732c73686f72746e616d653d77696e39352c73686f72746e616d653d6c6f7765722c756e695f786c6174653d302c0036b5"], 0xfd, 0x299, &(0x7f00000005c0)="$eJzs3M9rE0EUwPHXtGnTlDY5iKAgPvSil6WNf0GQFsSAUhtRD8LUbjRkTUp2jUTE9ubVv6N49CZY/4FevHkXL0UQvPQgXelu1mxLsD9s3Np8P1B2ujMvM7s7CW8XdjbvvXlaq7hWxXiSyqikRFZlSyS/U+oY6mxTQXlU4lbl6sSPzxfu3H9ws1gqzc6rzhUXrhVUderih+cv31766E3cfTf1fkw28g83vxe+bJzdOLe5vRB9esNTo4uNhmcWHVuXqm7NUr3t2Ma1tVp37eau+orTWF5uq6kvTWaXm7brqqm3tWa31Wuo12yreWyqdbUsSyezMmiGDx1RXpufN8W+DAZJGO+1s9ksmuGeleW1fzEoAABwsiSV/z+pulp1tb5f/p8S8v/+CfL/7Z5JI06H9M4NQNFkO9/f3cj/AQAAAAAAAAAAAAAAAAAAAAD4H2z5fs73/Vy0jf7GRCQjItH/SY8T/XGE6z+U4HBxzGIv7mVEnNetcqscbsP6YkWq4ogt02mRn8F86AjLczdKs9MayMu6s9KJD14SHIviI/ne8TNhvMbiV1rltGTj/RckJ2d6xxf2xKdFpFUelSuXY/GW5OTTI2mII0vBvO7Gv5pRvX6rtKf/8aAdAAAAAACngaW/5Xff/4arSVqWRsuG7KkPd3afD0hun+cDKuuj0o0fkfMjyR03AAAAAACDxG2/qBnHsZsUDlcYxFNnZcJJ88fGvu+v7DT6+05TIpLQkX4TkRNwwo+78PVZeAEP0jjJXyUAAAAA/dBN+pMeCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAg+ugi4dF7Y+y9lisu+FkjhIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4GX4FAAD//z2KG1o=") r1 = creat(&(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) unshare(0xa000200) (async) unshare(0xa000200) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) pread64(0xffffffffffffffff, 0x0, 0x0, 0x7) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$peeksig(0x4209, r2, &(0x7f0000000140)={0x0, 0x0, 0x4e}, &(0x7f0000000fc0)) (async) ptrace$peeksig(0x4209, r2, &(0x7f0000000140)={0x0, 0x0, 0x4e}, &(0x7f0000000fc0)) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x1c, 0x10, 0x0, 0x0, 0x0, 0x0, 0x60}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000000c0)='kfree\x00', r3}, 0x10) r4 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) r5 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r5, 0x560a, &(0x7f0000000040)={0x0, 0x8, 0x0, 0x4}) write$UHID_CREATE2(r4, 0x0, 0x8) (async) write$UHID_CREATE2(r4, 0x0, 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000a00)=ANY=[@ANYRES64=r5, @ANYBLOB="f6fd3a7754d19bb8d54e2dfcde70cf72987325dcaa2a801283ac315c34005a9ffda4a4a3cf9dbe1a517db8568d8f41c1d8a2bfd1a0a09536c30282486f1bf8762a72661286aa6bc1377faace01c7245ac8211f7867b53eedaad0750a6ee8e0210e397e199413d7a4a785c4d918bfd5dc", @ANYRES16=r0, @ANYRESDEC=r1, @ANYRES64=r3, @ANYBLOB="f64be6352c2464ab591071f781a4c1347abda82f05425c761ae1fa15b9246d21c435ac4ac15951198c8f4361243b3c17eefcabafbdd4cb60778c501ce59218d360f5b450", @ANYRES8], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x56, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000a00)=ANY=[@ANYRES64=r5, @ANYBLOB="f6fd3a7754d19bb8d54e2dfcde70cf72987325dcaa2a801283ac315c34005a9ffda4a4a3cf9dbe1a517db8568d8f41c1d8a2bfd1a0a09536c30282486f1bf8762a72661286aa6bc1377faace01c7245ac8211f7867b53eedaad0750a6ee8e0210e397e199413d7a4a785c4d918bfd5dc", @ANYRES16=r0, @ANYRESDEC=r1, @ANYRES64=r3, @ANYBLOB="f64be6352c2464ab591071f781a4c1347abda82f05425c761ae1fa15b9246d21c435ac4ac15951198c8f4361243b3c17eefcabafbdd4cb60778c501ce59218d360f5b450", @ANYRES8], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x56, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x10) r7 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000980)=ANY=[@ANYBLOB="180000000300000000000000fe0200108500000007000000955498b77dcae65c49e0962c014f1e0221042012678a742af4d8e43686680d91a41637ad2f57673b2578b0b9fc10"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x30, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$qrtrtun(r7, &(0x7f0000000340)="66bb0b760dc0f4", 0x7) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r8, 0x0, 0x30, 0x0, @void}, 0x10) semget$private(0x0, 0x4000, 0x0) (async) semget$private(0x0, 0x4000, 0x0) semtimedop(0x0, &(0x7f0000000040)=[{0x4, 0x6, 0x1000}], 0x1, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x4000, &(0x7f0000000740)={[{@test_dummy_encryption}, {@i_version}, {@noblock_validity}, {@commit={'commit', 0x3d, 0x5}}, {@inlinecrypt}, {@max_batch_time}, {@abort}, {@auto_da_alloc}, {@lazytime}, {@noauto_da_alloc}, {@block_validity}]}, 0xd, 0x5d8, &(0x7f0000000c00)="$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") (async) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x4000, &(0x7f0000000740)={[{@test_dummy_encryption}, {@i_version}, {@noblock_validity}, {@commit={'commit', 0x3d, 0x5}}, {@inlinecrypt}, {@max_batch_time}, {@abort}, {@auto_da_alloc}, {@lazytime}, {@noauto_da_alloc}, {@block_validity}]}, 0xd, 0x5d8, &(0x7f0000000c00)="$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") socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) 178.245593ms ago: executing program 7 (id=5632): sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYBLOB="6ba425bd7000fbdbdf2501000000050004000100"], 0x44}, 0x1, 0x0, 0x0, 0x4040000}, 0x40004) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000001400000000000000ff000000850000000e0000008500000007"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000001c0), 0x1, 0x553, &(0x7f0000001080)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==") bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="070000000400000008000000d9"], 0x50) r0 = socket(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) write(r0, &(0x7f0000000000)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) connect$netlink(r0, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000b4bffc)=0x1, 0x4) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000040)=0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0xa4) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) write(r0, &(0x7f0000000980)="a9", 0x1) 177.708403ms ago: executing program 1 (id=5633): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1b, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1008}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x4f, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1, 0x0, 0x4}, 0x18) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000001140)=@newsa={0x1a0, 0x10, 0x1, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x64}, {@in, 0x0, 0x32}, @in=@dev={0xac, 0x14, 0x14, 0x36}, {0x0, 0x100, 0x0, 0xfffffffffffffffd}, {0xfffffffffffffffd, 0x0, 0x8000000, 0x200}, {0x0, 0x0, 0x2}, 0x0, 0x0, 0xa, 0x0, 0x0, 0xcd}, [@algo_crypt={0x48, 0x2, {{'cbc(aes)\x00'}}}, @replay_esn_val={0x1c, 0x17, {0x0, 0x0, 0x0, 0x70bd2a, 0x70bd28}}, @algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}, 0x0, 0x18}}]}, 0x1a0}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x2, 0x7, 0x73) prctl$PR_SET_NAME(0xf, &(0x7f0000000a40)='GPL\x00') r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r3, &(0x7f0000000c40)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000011c0)="93bffc", 0x3}], 0x1}}, {{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000001280)="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", 0x2e6}], 0x1}}], 0x2, 0xc0) sendto$inet(r3, &(0x7f0000000a00)="17c6b679c2", 0x5, 0x10008095, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00'}, 0x94) socket$nl_route(0x10, 0x3, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r4) sendmsg$NLBL_MGMT_C_ADDDEF(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000000000000000040000001400050003030000000a0000005dc00000000001080002000500000014000600ff01000a00f2f3f31f000a0000000001060001"], 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x4040000) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, 0x0, &(0x7f0000000180)) sendmsg$NLBL_MGMT_C_ADDDEF(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x24008000}, 0x4040000) 126.193728ms ago: executing program 2 (id=5634): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002009000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x8381, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f00000000c0)=0x101, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='mm_page_free\x00', r0}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) 5.19125ms ago: executing program 0 (id=5635): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="070000000400000008000000d9"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000008000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000006900850000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r2, &(0x7f0000000040)='l', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r3, 0xffffffffffffffff, 0x0) 583.47µs ago: executing program 9 (id=5636): r0 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000002c0)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000a40)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0xfffffffe, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9], 0x0, [0x8, 0x404, 0x0, 0x0, 0x40, 0x0, 0x2, 0x0, 0xfffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], [0xfffd, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2]}}]}}]}, 0x8c}}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x3f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r3}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_GET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)={0x2c, r5, 0x1, 0x0, 0x0, {0x1c}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}]}, 0x2c}}, 0x0) 0s ago: executing program 1 (id=5637): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00', r0}, 0x10) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="85000000070000006a0a00ff000000000c00000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="000000000000000005000000000000009500000000000000b1f8306e05d1e4aab009c16b5c05077115d0749619ca39f89974785ae0619b77c6585f678ac92a3b6b4148f56b43c3dd75d75f97c8f92f60a2def458df05e2fbfb3e849b2b3cffd4f29446ae60dd76654b2639b2bc14350706214a6ab7a712d4317fbc3ca01d0d3ed6110b3775903141a5091a4d3db8eb335414fbdb288aba73aaf6d18000a3a2a069cf7f9402e1425bb6bc370576aa1faea0fe222671ecf99038fce8dba53dcb11f87cca"], &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)=ANY=[@ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB="110000000600000000000000", @ANYRES32=r2, @ANYRES64=0x0], 0x20) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r4, 0x4b62, 0x8000000000001) kernel console output (not intermixed with test programs): 1879] batadv1: entered allmulticast mode [ 345.509319][T21891] FAULT_INJECTION: forcing a failure. [ 345.509319][T21891] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 345.522490][T21891] CPU: 1 UID: 0 PID: 21891 Comm: syz.9.4912 Not tainted syzkaller #0 PREEMPT(voluntary) [ 345.522527][T21891] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 345.522603][T21891] Call Trace: [ 345.522612][T21891] [ 345.522623][T21891] __dump_stack+0x1d/0x30 [ 345.522652][T21891] dump_stack_lvl+0xe8/0x140 [ 345.522679][T21891] dump_stack+0x15/0x1b [ 345.522703][T21891] should_fail_ex+0x265/0x280 [ 345.522872][T21891] should_fail+0xb/0x20 [ 345.522905][T21891] should_fail_usercopy+0x1a/0x20 [ 345.522980][T21891] _copy_from_iter+0xd2/0xe80 [ 345.523011][T21891] ? __build_skb_around+0x1ab/0x200 [ 345.523042][T21891] ? __alloc_skb+0x223/0x320 [ 345.523113][T21891] netlink_sendmsg+0x471/0x6b0 [ 345.523178][T21891] ? __pfx_netlink_sendmsg+0x10/0x10 [ 345.523217][T21891] __sock_sendmsg+0x145/0x180 [ 345.523244][T21891] __sys_sendto+0x268/0x330 [ 345.523323][T21891] __x64_sys_sendto+0x76/0x90 [ 345.523350][T21891] x64_sys_call+0x2d14/0x3000 [ 345.523371][T21891] do_syscall_64+0xd2/0x200 [ 345.523408][T21891] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 345.523436][T21891] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 345.523457][T21891] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 345.523479][T21891] RIP: 0033:0x7ffb4785eec9 [ 345.523497][T21891] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 345.523572][T21891] RSP: 002b:00007ffb462c7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 345.523598][T21891] RAX: ffffffffffffffda RBX: 00007ffb47ab5fa0 RCX: 00007ffb4785eec9 [ 345.523688][T21891] RDX: 0000000000000090 RSI: 00002000000000c0 RDI: 0000000000000004 [ 345.523706][T21891] RBP: 00007ffb462c7090 R08: 0000000000000000 R09: 0000000000000000 [ 345.523738][T21891] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 345.523754][T21891] R13: 00007ffb47ab6038 R14: 00007ffb47ab5fa0 R15: 00007ffc14ee1568 [ 345.523780][T21891] [ 345.745126][T21895] netlink: 80 bytes leftover after parsing attributes in process `syz.1.4913'. [ 345.762839][T21893] lo speed is unknown, defaulting to 1000 [ 345.770019][T21895] netlink: 80 bytes leftover after parsing attributes in process `syz.1.4913'. [ 345.802964][T21893] lo speed is unknown, defaulting to 1000 [ 345.925587][T21902] loop1: detected capacity change from 0 to 1024 [ 346.025806][T21914] loop2: detected capacity change from 0 to 1024 [ 346.047387][T21916] loop9: detected capacity change from 0 to 1024 [ 346.118067][T21921] netlink: 3 bytes leftover after parsing attributes in process `syz.1.4922'. [ 346.183713][T21921] batadv1: entered promiscuous mode [ 346.189100][T21921] batadv1: entered allmulticast mode [ 346.212243][T21928] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4924'. [ 346.269142][T21934] loop7: detected capacity change from 0 to 1024 [ 346.277839][T21934] EXT4-fs: Ignoring removed nobh option [ 346.283601][T21934] EXT4-fs: Ignoring removed bh option [ 346.547875][T21966] netlink: 160 bytes leftover after parsing attributes in process `syz.2.4937'. [ 346.557069][T21966] netlink: 160 bytes leftover after parsing attributes in process `syz.2.4937'. [ 346.700922][T21975] loop2: detected capacity change from 0 to 1024 [ 346.767540][T21981] loop2: detected capacity change from 0 to 1024 [ 346.775588][T21981] EXT4-fs: Ignoring removed nobh option [ 346.781252][T21981] EXT4-fs: Ignoring removed bh option [ 347.063540][T21998] 8021q: VLANs not supported on ip6tnl0 [ 347.082703][T21998] veth0: entered promiscuous mode [ 347.088722][T21998] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4945'. [ 347.141474][T21933] delete_channel: no stack [ 347.199874][T21993] xt_CT: You must specify a L4 protocol and not use inversions on it [ 347.240804][T21992] veth0: left promiscuous mode [ 347.246174][T22003] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4947'. [ 347.249469][T21984] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4193: comm syz.2.4943: Allocating blocks 497-513 which overlap fs metadata [ 347.302381][T22003] loop9: detected capacity change from 0 to 1024 [ 347.305014][T21984] EXT4-fs (loop2): Remounting filesystem read-only [ 347.318824][T22007] loop1: detected capacity change from 0 to 1024 [ 347.325832][T22007] EXT4-fs: Ignoring removed nobh option [ 347.331570][T22007] EXT4-fs: Ignoring removed bh option [ 347.347258][T21980] EXT4-fs (loop2): pa ffff888106a5caf0: logic 48, phys. 193, len 20 [ 347.362722][T21980] delete_channel: no stack [ 347.593795][T22028] loop2: detected capacity change from 0 to 1024 [ 347.614440][T22028] EXT4-fs: Ignoring removed nobh option [ 347.620085][T22028] EXT4-fs: Ignoring removed bh option [ 347.791106][T22017] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4193: comm syz.1.4949: Allocating blocks 497-513 which overlap fs metadata [ 347.812624][T22017] EXT4-fs (loop1): Remounting filesystem read-only [ 347.901738][T22006] EXT4-fs (loop1): pa ffff888106a5ccb0: logic 48, phys. 193, len 20 [ 347.910146][T22006] delete_channel: no stack [ 348.041738][T22054] loop7: detected capacity change from 0 to 1024 [ 348.054518][T22037] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4193: comm syz.2.4954: Allocating blocks 497-513 which overlap fs metadata [ 348.082606][T22037] EXT4-fs (loop2): Remounting filesystem read-only [ 348.134850][T22027] EXT4-fs (loop2): pa ffff8881069fda80: logic 48, phys. 193, len 20 [ 348.143124][T22027] delete_channel: no stack [ 348.234796][T22070] loop2: detected capacity change from 0 to 1024 [ 348.242341][T22070] EXT4-fs: inline encryption not supported [ 349.079774][T22116] batadv1: entered promiscuous mode [ 349.085120][T22116] batadv1: entered allmulticast mode [ 349.167939][T22126] loop1: detected capacity change from 0 to 1024 [ 349.176074][T22118] loop7: detected capacity change from 0 to 512 [ 349.188597][T22118] EXT4-fs (loop7): orphan cleanup on readonly fs [ 349.205850][T22130] loop2: detected capacity change from 0 to 1024 [ 349.213438][T22130] EXT4-fs: Ignoring removed nobh option [ 349.214186][T22118] EXT4-fs warning (device loop7): ext4_xattr_inode_get:560: inode #11: comm +}[@: EA inode hash validation failed [ 349.219097][T22130] EXT4-fs: Ignoring removed bh option [ 349.232558][T22118] EXT4-fs warning (device loop7): ext4_expand_extra_isize_ea:2853: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 349.251617][T22118] EXT4-fs error (device loop7): ext4_do_update_inode:5624: inode #15: comm +}[@: corrupted inode contents [ 349.283731][T22118] EXT4-fs error (device loop7): ext4_dirty_inode:6509: inode #15: comm +}[@: mark_inode_dirty error [ 349.326902][T22118] EXT4-fs error (device loop7): ext4_do_update_inode:5624: inode #15: comm +}[@: corrupted inode contents [ 349.338603][T22118] EXT4-fs error (device loop7): ext4_xattr_delete_inode:2996: inode #15: comm +}[@: mark_inode_dirty error [ 349.376520][T22118] EXT4-fs error (device loop7): ext4_xattr_delete_inode:2999: inode #15: comm +}[@: mark inode dirty (error -117) [ 349.376541][T22089] delete_channel: no stack [ 349.424688][T22118] EXT4-fs warning (device loop7): ext4_evict_inode:274: xattr delete (err -117) [ 349.464115][T22118] EXT4-fs (loop7): 1 orphan inode deleted [ 349.592311][ T30] kauditd_printk_skb: 639 callbacks suppressed [ 349.592328][ T30] audit: type=1326 audit(1760209756.643:41542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22148 comm="syz.7.4987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ab5baeec9 code=0x7ffc0000 [ 349.648863][ T30] audit: type=1326 audit(1760209756.673:41543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22148 comm="syz.7.4987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=310 compat=0 ip=0x7f9ab5baeec9 code=0x7ffc0000 [ 349.672660][ T30] audit: type=1326 audit(1760209756.673:41544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22148 comm="syz.7.4987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ab5baeec9 code=0x7ffc0000 [ 349.696368][ T30] audit: type=1326 audit(1760209756.673:41545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22148 comm="syz.7.4987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ab5baeec9 code=0x7ffc0000 [ 349.720113][ T30] audit: type=1326 audit(1760209756.673:41546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22148 comm="syz.7.4987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9ab5baeec9 code=0x7ffc0000 [ 349.743762][ T30] audit: type=1326 audit(1760209756.673:41547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22148 comm="syz.7.4987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ab5baeec9 code=0x7ffc0000 [ 349.767504][ T30] audit: type=1326 audit(1760209756.673:41548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22148 comm="syz.7.4987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ab5baeec9 code=0x7ffc0000 [ 349.791235][ T30] audit: type=1326 audit(1760209756.673:41549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22148 comm="syz.7.4987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f9ab5baeec9 code=0x7ffc0000 [ 349.814845][ T30] audit: type=1326 audit(1760209756.673:41550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22148 comm="syz.7.4987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ab5baeec9 code=0x7ffc0000 [ 349.838488][ T30] audit: type=1326 audit(1760209756.673:41551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22148 comm="syz.7.4987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ab5baeec9 code=0x7ffc0000 [ 350.118918][T22128] delete_channel: no stack [ 350.122955][T22169] loop9: detected capacity change from 0 to 1024 [ 350.162678][T22173] loop1: detected capacity change from 0 to 1024 [ 350.170186][T22173] EXT4-fs: inline encryption not supported [ 350.195265][T22173] __nla_validate_parse: 6 callbacks suppressed [ 350.195283][T22173] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4995'. [ 350.314168][T22191] loop9: detected capacity change from 0 to 1024 [ 350.321526][T22191] EXT4-fs: Ignoring removed nobh option [ 350.327192][T22191] EXT4-fs: Ignoring removed bh option [ 350.334207][T22183] loop2: detected capacity change from 0 to 512 [ 350.343715][T22183] EXT4-fs (loop2): orphan cleanup on readonly fs [ 350.361019][T22183] EXT4-fs warning (device loop2): ext4_xattr_inode_get:560: inode #11: comm +}[@: EA inode hash validation failed [ 350.374122][T22183] EXT4-fs error (device loop2): ext4_do_update_inode:5624: inode #15: comm +}[@: corrupted inode contents [ 350.386141][T22183] EXT4-fs error (device loop2): ext4_dirty_inode:6509: inode #15: comm +}[@: mark_inode_dirty error [ 350.398151][T22183] EXT4-fs error (device loop2): ext4_do_update_inode:5624: inode #15: comm +}[@: corrupted inode contents [ 350.418704][T22183] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2996: inode #15: comm +}[@: mark_inode_dirty error [ 350.430754][T22183] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2999: inode #15: comm +}[@: mark inode dirty (error -117) [ 350.451581][T22183] EXT4-fs warning (device loop2): ext4_evict_inode:274: xattr delete (err -117) [ 350.475897][T22183] EXT4-fs (loop2): 1 orphan inode deleted [ 350.613488][T22208] netlink: 168 bytes leftover after parsing attributes in process `syz.2.5005'. [ 350.627047][T22209] netlink: 168 bytes leftover after parsing attributes in process `syz.7.5004'. [ 351.213354][T22190] delete_channel: no stack [ 351.218851][T22240] netlink: 168 bytes leftover after parsing attributes in process `syz.1.5016'. [ 351.532079][T22255] loop9: detected capacity change from 0 to 1024 [ 351.560807][T22260] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5022'. [ 351.668426][T22275] netlink: 168 bytes leftover after parsing attributes in process `syz.2.5021'. [ 351.684304][T22275] netlink: 72 bytes leftover after parsing attributes in process `syz.2.5021'. [ 351.696561][T22275] loop2: detected capacity change from 0 to 512 [ 351.704702][T22275] EXT4-fs error (device loop2): ext4_init_orphan_info:581: comm syz.2.5021: inode #0: comm syz.2.5021: iget: illegal inode # [ 351.718847][T22275] EXT4-fs (loop2): get orphan inode failed [ 351.725669][T22275] EXT4-fs (loop2): mount failed [ 351.797167][T22282] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5027'. [ 351.815388][T22282] loop1: detected capacity change from 0 to 1024 [ 351.874603][T22286] loop1: detected capacity change from 0 to 128 [ 351.883314][T22286] ext4 filesystem being mounted at /45/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 351.916855][T22286] EXT4-fs error (device loop1): __ext4_find_entry:1626: inode #2: comm syz.1.5028: checksumming directory block 0 [ 351.953694][T22289] netlink: 3 bytes leftover after parsing attributes in process `syz.1.5029'. [ 351.966207][T22289] batadv1: entered promiscuous mode [ 351.971570][T22289] batadv1: entered allmulticast mode [ 352.082100][T22301] loop1: detected capacity change from 0 to 1024 [ 352.089237][T22301] EXT4-fs: inline encryption not supported [ 352.204928][T22304] sg_write: data in/out 268435420/10 bytes for SCSI command 0xfd-- guessing data in; [ 352.204928][T22304] program syz.7.5032 not setting count and/or reply_len properly [ 352.285562][T22316] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5036'. [ 352.493179][T22325] loop9: detected capacity change from 0 to 128 [ 352.505974][T22325] ext4 filesystem being mounted at /76/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 352.531349][T22314] sg_write: data in/out 268435420/10 bytes for SCSI command 0xfd-- guessing data in; [ 352.531349][T22314] program syz.1.5035 not setting count and/or reply_len properly [ 352.596965][T22325] EXT4-fs error (device loop9): __ext4_find_entry:1626: inode #2: comm syz.9.5039: checksumming directory block 0 [ 352.996177][T22347] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=22347 comm=syz.2.5046 [ 353.200999][T22353] loop9: detected capacity change from 0 to 1024 [ 353.724623][T22385] loop1: detected capacity change from 0 to 128 [ 353.747137][T22385] ext4 filesystem being mounted at /53/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 353.783963][T22385] EXT4-fs error (device loop1): __ext4_find_entry:1626: inode #2: comm syz.1.5052: checksumming directory block 0 [ 354.057635][T22428] loop1: detected capacity change from 0 to 1024 [ 354.081610][T22428] EXT4-fs: Ignoring removed oldalloc option [ 354.087694][T22428] EXT4-fs: Ignoring removed bh option [ 354.336685][T22481] loop9: detected capacity change from 0 to 128 [ 354.366555][T22481] ext4 filesystem being mounted at /83/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 354.542234][T22481] EXT4-fs error (device loop9): __ext4_find_entry:1626: inode #2: comm syz.9.5066: checksumming directory block 0 [ 354.630537][ T30] kauditd_printk_skb: 387 callbacks suppressed [ 354.630557][ T30] audit: type=1400 audit(1760209761.673:41937): avc: granted { setsecparam } for pid=22480 comm="syz.9.5066" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 354.703465][T20876] EXT4-fs unmount: 74 callbacks suppressed [ 354.703483][T20876] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 355.012771][T21088] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 355.166089][ T30] audit: type=1400 audit(1760209762.213:41938): avc: denied { append } for pid=22507 comm="syz.7.5071" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 355.200883][T22508] blktrace: Concurrent blktraces are not allowed on sg0 [ 355.216561][ T30] audit: type=1400 audit(1760209762.243:41939): avc: denied { ioctl } for pid=22507 comm="syz.7.5071" path="/dev/sg0" dev="devtmpfs" ino=135 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 355.323543][ T30] audit: type=1400 audit(1760209762.353:41940): avc: denied { getopt } for pid=22517 comm="syz.0.5075" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 355.479074][T22525] __nla_validate_parse: 7 callbacks suppressed [ 355.479095][T22525] netlink: 164 bytes leftover after parsing attributes in process `syz.0.5076'. [ 355.518775][T22527] loop7: detected capacity change from 0 to 1024 [ 355.526718][T22527] EXT4-fs: Ignoring removed nobh option [ 355.532334][T22527] EXT4-fs: Ignoring removed bh option [ 355.661079][ T30] audit: type=1326 audit(1760209762.703:41941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22529 comm="syz.9.5078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb4785eec9 code=0x7ffc0000 [ 355.695846][T22530] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5078'. [ 355.706115][ T30] audit: type=1326 audit(1760209762.733:41942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22529 comm="syz.9.5078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7ffb4785eec9 code=0x7ffc0000 [ 355.730398][ T30] audit: type=1326 audit(1760209762.733:41943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22529 comm="syz.9.5078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb4785eec9 code=0x7ffc0000 [ 355.754921][ T30] audit: type=1326 audit(1760209762.743:41944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22529 comm="syz.9.5078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ffb4785eec9 code=0x7ffc0000 [ 355.779210][ T30] audit: type=1326 audit(1760209762.743:41945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22529 comm="syz.9.5078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb4785eec9 code=0x7ffc0000 [ 355.802240][T22530] loop9: detected capacity change from 0 to 1024 [ 355.803729][ T30] audit: type=1326 audit(1760209762.743:41946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22529 comm="syz.9.5078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb4785eec9 code=0x7ffc0000 [ 355.811928][T22527] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 355.873605][T22530] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 355.886015][T22534] loop2: detected capacity change from 0 to 1024 [ 355.895018][T22534] EXT4-fs: Ignoring removed nobh option [ 355.900740][T22534] EXT4-fs: Ignoring removed bh option [ 355.916402][T22534] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 355.959292][T20876] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 356.494795][T22538] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4193: comm syz.7.5077: Allocating blocks 497-513 which overlap fs metadata [ 356.528180][T22538] EXT4-fs (loop7): Remounting filesystem read-only [ 356.610172][T22526] EXT4-fs (loop7): pa ffff888106a5cd90: logic 48, phys. 193, len 20 [ 356.620169][T22526] delete_channel: no stack [ 356.642805][T22566] blktrace: Concurrent blktraces are not allowed on sg0 [ 356.757485][T22539] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4193: comm syz.2.5079: Allocating blocks 497-513 which overlap fs metadata [ 356.776063][T20501] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 356.813745][T22539] EXT4-fs (loop2): Remounting filesystem read-only [ 356.913034][T22533] EXT4-fs (loop2): pa ffff888106a5cd20: logic 48, phys. 193, len 20 [ 356.913908][T22573] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5089'. [ 356.930433][T22533] delete_channel: no stack [ 357.018967][T13287] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 357.063741][T22582] loop2: detected capacity change from 0 to 512 [ 357.085929][T22582] EXT4-fs: Ignoring removed orlov option [ 357.114780][T22582] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 357.127522][T22582] ext4 filesystem being mounted at /408/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 357.146193][T22582] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.5093: bg 0: block 328: padding at end of block bitmap is not set [ 357.219141][T22587] loop1: detected capacity change from 0 to 1024 [ 357.250638][T22587] EXT4-fs: Ignoring removed nobh option [ 357.256384][T22587] EXT4-fs: Ignoring removed bh option [ 357.276737][ T9925] IPVS: starting estimator thread 0... [ 357.290341][T13287] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 357.325600][T22587] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 357.371056][T22590] IPVS: using max 2112 ests per chain, 105600 per kthread [ 357.661313][T22614] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5103'. [ 357.795017][T22626] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5107'. [ 357.826285][T22608] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4193: comm syz.1.5095: Allocating blocks 497-513 which overlap fs metadata [ 357.843106][T22608] EXT4-fs (loop1): Remounting filesystem read-only [ 357.843297][T22623] netlink: 168 bytes leftover after parsing attributes in process `syz.7.5106'. [ 357.913372][T22586] EXT4-fs (loop1): pa ffff888106a5cc40: logic 48, phys. 193, len 20 [ 357.924641][T22586] delete_channel: no stack [ 357.968151][T21088] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 358.098455][T22643] loop1: detected capacity change from 0 to 128 [ 358.107178][T22643] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 358.119763][T22643] ext4 filesystem being mounted at /74/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 358.153565][T22643] EXT4-fs error (device loop1): __ext4_find_entry:1626: inode #2: comm syz.1.5112: checksumming directory block 0 [ 358.179980][T21088] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 358.262473][T22652] loop1: detected capacity change from 0 to 1024 [ 358.269422][T22652] EXT4-fs: Ignoring removed nobh option [ 358.275107][T22652] EXT4-fs: Ignoring removed bh option [ 358.296026][T22652] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 358.408950][T22658] loop7: detected capacity change from 0 to 1024 [ 358.428668][T22658] EXT4-fs: Ignoring removed nobh option [ 358.434408][T22658] EXT4-fs: Ignoring removed bh option [ 358.456292][T22658] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 358.803226][T22668] netlink: 360 bytes leftover after parsing attributes in process `syz.2.5118'. [ 359.210322][T22651] delete_channel: no stack [ 359.213992][T22678] loop9: detected capacity change from 0 to 128 [ 359.224466][T22678] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 359.262204][T22678] ext4 filesystem being mounted at /93/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 359.357426][T22657] delete_channel: no stack [ 359.376025][T22678] EXT4-fs error (device loop9): __ext4_find_entry:1626: inode #2: comm syz.9.5123: checksumming directory block 0 [ 359.398987][T21088] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 359.410294][T20876] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 359.464769][T20501] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 359.476099][T22693] loop1: detected capacity change from 0 to 1024 [ 359.488644][T22693] EXT4-fs: Ignoring removed nobh option [ 359.494347][T22693] EXT4-fs: Ignoring removed bh option [ 359.515217][T22693] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 359.573660][T22697] netlink: 168 bytes leftover after parsing attributes in process `syz.7.5127'. [ 359.703370][ T30] kauditd_printk_skb: 104 callbacks suppressed [ 359.703384][ T30] audit: type=1400 audit(1760209766.753:42051): avc: denied { read write } for pid=20876 comm="syz-executor" name="loop9" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 359.734264][ T30] audit: type=1400 audit(1760209766.753:42052): avc: denied { open } for pid=20876 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 359.820961][ T30] audit: type=1400 audit(1760209766.793:42053): avc: denied { ioctl } for pid=20876 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=109 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 359.847092][ T30] audit: type=1400 audit(1760209766.843:42054): avc: denied { create } for pid=22713 comm="syz.9.5133" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 359.867110][ T30] audit: type=1400 audit(1760209766.843:42055): avc: denied { bind } for pid=22713 comm="syz.9.5133" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 359.886858][ T30] audit: type=1400 audit(1760209766.843:42056): avc: denied { name_bind } for pid=22713 comm="syz.9.5133" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 359.908065][ T30] audit: type=1400 audit(1760209766.843:42057): avc: denied { node_bind } for pid=22713 comm="syz.9.5133" saddr=ff02::1 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 359.930370][ T30] audit: type=1400 audit(1760209766.843:42058): avc: denied { prog_load } for pid=22713 comm="syz.9.5133" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 359.949616][ T30] audit: type=1400 audit(1760209766.843:42059): avc: denied { bpf } for pid=22713 comm="syz.9.5133" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 359.970446][ T30] audit: type=1400 audit(1760209766.843:42060): avc: denied { perfmon } for pid=22713 comm="syz.9.5133" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 360.114882][T22721] loop9: detected capacity change from 0 to 1024 [ 360.122913][T22721] EXT4-fs: Ignoring removed nobh option [ 360.128549][T22721] EXT4-fs: Ignoring removed bh option [ 360.153835][T22723] loop7: detected capacity change from 0 to 128 [ 360.170397][T22721] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 360.213353][T22723] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 360.232566][T22723] ext4 filesystem being mounted at /110/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 360.293944][T22728] netlink: 64 bytes leftover after parsing attributes in process `syz.2.5137'. [ 360.378303][T22723] EXT4-fs error (device loop7): __ext4_find_entry:1626: inode #2: comm syz.7.5136: checksumming directory block 0 [ 360.444310][T22692] delete_channel: no stack [ 360.496898][T20501] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 360.614345][T21088] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 360.715152][T22745] netlink: 148 bytes leftover after parsing attributes in process `syz.0.5144'. [ 360.741083][T22745] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5144'. [ 360.782368][T22729] EXT4-fs error (device loop9): ext4_mb_mark_diskspace_used:4193: comm syz.9.5135: Allocating blocks 497-513 which overlap fs metadata [ 360.803246][T22729] EXT4-fs (loop9): Remounting filesystem read-only [ 360.819732][T22741] loop2: detected capacity change from 0 to 512 [ 360.834762][T22737] sg_write: data in/out 268435420/10 bytes for SCSI command 0xfd-- guessing data in; [ 360.834762][T22737] program syz.7.5140 not setting count and/or reply_len properly [ 360.839781][T22741] EXT4-fs (loop2): orphan cleanup on readonly fs [ 360.900846][T22720] EXT4-fs (loop9): pa ffff8881069fdb60: logic 48, phys. 193, len 20 [ 360.910852][T22720] delete_channel: no stack [ 360.926267][T22741] EXT4-fs warning (device loop2): ext4_xattr_inode_get:560: inode #11: comm wÞ£ÿ: EA inode hash validation failed [ 360.939798][T22741] EXT4-fs error (device loop2): ext4_do_update_inode:5624: inode #15: comm wÞ£ÿ: corrupted inode contents [ 360.953169][T22741] EXT4-fs error (device loop2): ext4_dirty_inode:6509: inode #15: comm wÞ£ÿ: mark_inode_dirty error [ 360.991834][T22741] EXT4-fs error (device loop2): ext4_do_update_inode:5624: inode #15: comm wÞ£ÿ: corrupted inode contents [ 361.022317][T20876] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 361.043274][T22741] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2996: inode #15: comm wÞ£ÿ: mark_inode_dirty error [ 361.072061][T22741] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2999: inode #15: comm wÞ£ÿ: mark inode dirty (error -117) [ 361.123588][T22741] EXT4-fs warning (device loop2): ext4_evict_inode:274: xattr delete (err -117) [ 361.133535][T22741] EXT4-fs (loop2): 1 orphan inode deleted [ 361.139857][T22741] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 361.205480][T22781] loop1: detected capacity change from 0 to 128 [ 361.226048][T13287] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 361.264093][T22791] blktrace: Concurrent blktraces are not allowed on sg0 [ 361.267640][T22790] loop2: detected capacity change from 0 to 128 [ 361.355476][T22790] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 361.368432][T22790] ext4 filesystem being mounted at /426/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 361.414689][T22790] EXT4-fs error (device loop2): __ext4_find_entry:1626: inode #2: comm syz.2.5159: checksumming directory block 0 [ 361.441576][T13287] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 361.442328][T22803] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5165'. [ 361.621321][T22820] netlink: 72 bytes leftover after parsing attributes in process `syz.9.5162'. [ 361.630408][T22820] netlink: 36 bytes leftover after parsing attributes in process `syz.9.5162'. [ 361.980177][T22824] lo speed is unknown, defaulting to 1000 [ 362.210421][T22824] lo speed is unknown, defaulting to 1000 [ 362.297681][T22831] 9pnet: Could not find request transport: fd [ 363.011234][T22873] __dump_stack+0x1d/0x30 [ 363.011335][T22873] dump_stack_lvl+0xe8/0x140 [ 363.011362][T22873] dump_stack+0x15/0x1b [ 363.011381][T22873] should_fail_ex+0x265/0x280 [ 363.011420][T22873] should_fail_alloc_page+0xf2/0x100 [ 363.011472][T22873] __alloc_frozen_pages_noprof+0xff/0x360 [ 363.011573][T22873] alloc_pages_mpol+0xb3/0x260 [ 363.011673][T22873] alloc_pages_noprof+0x90/0x130 [ 363.011699][T22873] pgd_alloc+0x40/0x290 [ 363.011799][T22873] mm_init+0x385/0x7f0 [ 363.011869][T22873] ? kmem_cache_alloc_noprof+0x2b8/0x480 [ 363.011950][T22873] mm_alloc+0x81/0xa0 [ 363.011980][T22873] alloc_bprm+0x20e/0x350 [ 363.012009][T22873] do_execveat_common+0x12e/0x750 [ 363.012040][T22873] ? getname_flags+0x154/0x3b0 [ 363.012139][T22873] __x64_sys_execveat+0x73/0x90 [ 363.012161][T22873] x64_sys_call+0x1fec/0x3000 [ 363.012181][T22873] do_syscall_64+0xd2/0x200 [ 363.012229][T22873] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 363.012256][T22873] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 363.012277][T22873] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 363.012298][T22873] RIP: 0033:0x7f9ab5baeec9 [ 363.012312][T22873] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 363.012392][T22873] RSP: 002b:00007f9ab4617038 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 363.012409][T22873] RAX: ffffffffffffffda RBX: 00007f9ab5e05fa0 RCX: 00007f9ab5baeec9 [ 363.012422][T22873] RDX: 0000000000000000 RSI: 0000200000000240 RDI: ffffffffffffff9c [ 363.012494][T22873] RBP: 00007f9ab4617090 R08: 0000000000000000 R09: 0000000000000000 [ 363.012506][T22873] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 363.012518][T22873] R13: 00007f9ab5e06038 R14: 00007f9ab5e05fa0 R15: 00007ffcbc348288 [ 363.012536][T22873] [ 363.261301][T22878] loop1: detected capacity change from 0 to 1024 [ 363.271545][T22878] EXT4-fs: Ignoring removed nobh option [ 363.277181][T22878] EXT4-fs: Ignoring removed bh option [ 363.295836][T22880] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5191'. [ 363.307350][T22878] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 363.329012][T22880] loop9: detected capacity change from 0 to 1024 [ 363.383434][T22880] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 363.407768][T22893] netlink: 3 bytes leftover after parsing attributes in process `syz.2.5192'. [ 363.418809][T22876] sg_write: data in/out 268435420/10 bytes for SCSI command 0xfd-- guessing data in; [ 363.418809][T22876] program syz.7.5188 not setting count and/or reply_len properly [ 363.439530][T22893] batadv1: entered promiscuous mode [ 363.444856][T22893] batadv1: entered allmulticast mode [ 363.488761][T20876] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 363.509280][T22899] loop2: detected capacity change from 0 to 1024 [ 363.517321][T22899] EXT4-fs: Ignoring removed nobh option [ 363.523086][T22899] EXT4-fs: Ignoring removed bh option [ 363.561154][T22899] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 363.685187][T22891] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4193: comm syz.1.5190: Allocating blocks 497-513 which overlap fs metadata [ 363.808805][T22891] EXT4-fs (loop1): Remounting filesystem read-only [ 363.828144][T22910] loop7: detected capacity change from 0 to 1024 [ 363.835693][T22910] EXT4-fs: dax option not supported [ 363.874334][T22877] EXT4-fs (loop1): pa ffff8881069fdb60: logic 48, phys. 193, len 20 [ 363.891046][T22877] delete_channel: no stack [ 363.920102][T22919] netlink: 168 bytes leftover after parsing attributes in process `syz.0.5199'. [ 363.956504][T21088] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 364.024130][T22924] loop1: detected capacity change from 0 to 1024 [ 364.047408][T22924] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 364.394802][T22898] delete_channel: no stack [ 364.442448][T13287] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 364.574071][T22938] loop9: detected capacity change from 0 to 1024 [ 364.595536][T22938] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 364.658977][T20876] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 364.691920][T22951] FAULT_INJECTION: forcing a failure. [ 364.691920][T22951] name failslab, interval 1, probability 0, space 0, times 0 [ 364.704677][T22951] CPU: 1 UID: 0 PID: 22951 Comm: syz.9.5209 Not tainted syzkaller #0 PREEMPT(voluntary) [ 364.704710][T22951] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 364.704729][T22951] Call Trace: [ 364.704736][T22951] [ 364.704746][T22951] __dump_stack+0x1d/0x30 [ 364.704773][T22951] dump_stack_lvl+0xe8/0x140 [ 364.704799][T22951] dump_stack+0x15/0x1b [ 364.704821][T22951] should_fail_ex+0x265/0x280 [ 364.704915][T22951] should_failslab+0x8c/0xb0 [ 364.704951][T22951] __kmalloc_cache_node_noprof+0x54/0x4a0 [ 364.704991][T22951] ? __get_vm_area_node+0x106/0x1d0 [ 364.705054][T22951] __get_vm_area_node+0x106/0x1d0 [ 364.705090][T22951] __vmalloc_node_range_noprof+0x28c/0xed0 [ 364.705183][T22951] ? bpf_prog_alloc_no_stats+0x47/0x3b0 [ 364.705280][T22951] ? __rcu_read_unlock+0x4f/0x70 [ 364.705377][T22951] ? cred_has_capability+0x210/0x280 [ 364.705417][T22951] ? bpf_prog_alloc_no_stats+0x47/0x3b0 [ 364.705449][T22951] __vmalloc_noprof+0x83/0xc0 [ 364.705485][T22951] ? bpf_prog_alloc_no_stats+0x47/0x3b0 [ 364.705562][T22951] bpf_prog_alloc_no_stats+0x47/0x3b0 [ 364.705594][T22951] ? bpf_prog_alloc+0x2a/0x150 [ 364.705627][T22951] bpf_prog_alloc+0x3c/0x150 [ 364.705727][T22951] bpf_prog_load+0x506/0x1100 [ 364.705825][T22951] ? security_bpf+0x2b/0x90 [ 364.705851][T22951] __sys_bpf+0x469/0x7c0 [ 364.705943][T22951] __x64_sys_bpf+0x41/0x50 [ 364.705973][T22951] x64_sys_call+0x2aee/0x3000 [ 364.705994][T22951] do_syscall_64+0xd2/0x200 [ 364.706024][T22951] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 364.706105][T22951] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 364.706186][T22951] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 364.706283][T22951] RIP: 0033:0x7ffb4785eec9 [ 364.706298][T22951] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 364.706325][T22951] RSP: 002b:00007ffb462c7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 364.706357][T22951] RAX: ffffffffffffffda RBX: 00007ffb47ab5fa0 RCX: 00007ffb4785eec9 [ 364.706374][T22951] RDX: 0000000000000094 RSI: 0000200000000a40 RDI: 0000000000000005 [ 364.706392][T22951] RBP: 00007ffb462c7090 R08: 0000000000000000 R09: 0000000000000000 [ 364.706409][T22951] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 364.706474][T22951] R13: 00007ffb47ab6038 R14: 00007ffb47ab5fa0 R15: 00007ffc14ee1568 [ 364.706494][T22951] [ 364.706508][T22951] syz.9.5209: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0 [ 364.952500][ T30] kauditd_printk_skb: 509 callbacks suppressed [ 364.952524][ T30] audit: type=1400 audit(1760209771.783:42570): avc: denied { mounton } for pid=22952 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 364.961433][T22951] CPU: 1 UID: 0 PID: 22951 Comm: syz.9.5209 Not tainted syzkaller #0 PREEMPT(voluntary) [ 364.961467][T22951] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 364.961538][T22951] Call Trace: [ 364.961546][T22951] [ 364.961556][T22951] __dump_stack+0x1d/0x30 [ 364.961583][T22951] dump_stack_lvl+0xe8/0x140 [ 364.961627][T22951] dump_stack+0x15/0x1b [ 364.961667][T22951] warn_alloc+0x12b/0x1a0 [ 364.961765][T22951] __vmalloc_node_range_noprof+0x2b1/0xed0 [ 364.961814][T22951] ? __rcu_read_unlock+0x4f/0x70 [ 364.961855][T22951] ? cred_has_capability+0x210/0x280 [ 364.962028][T22951] ? bpf_prog_alloc_no_stats+0x47/0x3b0 [ 364.962075][T22951] __vmalloc_noprof+0x83/0xc0 [ 364.962160][T22951] ? bpf_prog_alloc_no_stats+0x47/0x3b0 [ 364.962224][T22951] bpf_prog_alloc_no_stats+0x47/0x3b0 [ 364.962331][T22951] ? bpf_prog_alloc+0x2a/0x150 [ 364.962451][T22951] bpf_prog_alloc+0x3c/0x150 [ 364.962496][T22951] bpf_prog_load+0x506/0x1100 [ 364.962534][T22951] ? security_bpf+0x2b/0x90 [ 364.962570][T22951] __sys_bpf+0x469/0x7c0 [ 364.962712][T22951] __x64_sys_bpf+0x41/0x50 [ 364.962754][T22951] x64_sys_call+0x2aee/0x3000 [ 364.962785][T22951] do_syscall_64+0xd2/0x200 [ 364.962895][T22951] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 364.962934][T22951] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 364.962993][T22951] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 364.963024][T22951] RIP: 0033:0x7ffb4785eec9 [ 364.963045][T22951] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 364.963071][T22951] RSP: 002b:00007ffb462c7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 364.963108][T22951] RAX: ffffffffffffffda RBX: 00007ffb47ab5fa0 RCX: 00007ffb4785eec9 [ 364.963126][T22951] RDX: 0000000000000094 RSI: 0000200000000a40 RDI: 0000000000000005 [ 364.963144][T22951] RBP: 00007ffb462c7090 R08: 0000000000000000 R09: 0000000000000000 [ 364.963203][T22951] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 364.963275][T22951] R13: 00007ffb47ab6038 R14: 00007ffb47ab5fa0 R15: 00007ffc14ee1568 [ 364.963295][T22951] [ 364.963302][T22951] Mem-Info: [ 365.203621][T22951] active_anon:4643 inactive_anon:5 isolated_anon:0 [ 365.203621][T22951] active_file:10512 inactive_file:13390 isolated_file:0 [ 365.203621][T22951] unevictable:0 dirty:525 writeback:0 [ 365.203621][T22951] slab_reclaimable:4026 slab_unreclaimable:36284 [ 365.203621][T22951] mapped:29665 shmem:648 pagetables:1258 [ 365.203621][T22951] sec_pagetables:0 bounce:0 [ 365.203621][T22951] kernel_misc_reclaimable:0 [ 365.203621][T22951] free:1812406 free_pcp:61721 free_cma:0 [ 365.248617][T22951] Node 0 active_anon:18572kB inactive_anon:20kB active_file:42048kB inactive_file:53560kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:118660kB dirty:2100kB writeback:0kB shmem:2592kB kernel_stack:5408kB pagetables:5032kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 365.276166][T22951] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 365.305874][T22951] lowmem_reserve[]: 0 2883 7862 7862 [ 365.311198][T22951] Node 0 DMA32 free:2949060kB boost:0kB min:4132kB low:7064kB high:9996kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2952692kB mlocked:0kB bounce:0kB free_pcp:3632kB local_pcp:3532kB free_cma:0kB [ 365.342830][T22951] lowmem_reserve[]: 0 0 4978 4978 [ 365.347877][T22951] Node 0 Normal free:4285204kB boost:0kB min:7184kB low:12280kB high:17376kB reserved_highatomic:0KB free_highatomic:0KB active_anon:18572kB inactive_anon:20kB active_file:42048kB inactive_file:53560kB unevictable:0kB writepending:2028kB zspages:0kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:243252kB local_pcp:88364kB free_cma:0kB [ 365.381156][T22951] lowmem_reserve[]: 0 0 0 0 [ 365.385853][T22951] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 365.398548][T22951] Node 0 DMA32: 3*4kB (M) 3*8kB (M) 4*16kB (M) 1*32kB (M) 3*64kB (M) 3*128kB (M) 3*256kB (M) 3*512kB (M) 3*1024kB (M) 3*2048kB (M) 717*4096kB (M) = 2949060kB [ 365.414650][T22951] Node 0 Normal: 2872*4kB (UM) 1225*8kB (UME) 632*16kB (UME) 634*32kB (UME) 540*64kB (UME) 435*128kB (UME) 211*256kB (UME) 371*512kB (UME) 598*1024kB (UM) 101*2048kB (UME) 752*4096kB (UM) = 4285288kB [ 365.434571][T22951] Node 0 hugepages_total=4 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 365.443951][T22951] 24335 total pagecache pages [ 365.448645][T22951] 4 pages in swap cache [ 365.452812][T22951] Free swap = 124980kB [ 365.456975][T22951] Total swap = 124996kB [ 365.461246][T22951] 2097051 pages RAM [ 365.465085][T22951] 0 pages HighMem/MovableOnly [ 365.469856][T22951] 80478 pages reserved [ 365.479200][T21088] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 365.523420][T12910] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 365.570521][T12910] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 365.593293][T22952] lo speed is unknown, defaulting to 1000 [ 365.602711][T12910] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 365.644365][T22952] lo speed is unknown, defaulting to 1000 [ 365.665018][T12910] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 365.682679][ T30] audit: type=1400 audit(1760209772.733:42571): avc: denied { map_create } for pid=22983 comm="syz.1.5216" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 365.702990][ T30] audit: type=1400 audit(1760209772.733:42572): avc: denied { perfmon } for pid=22983 comm="syz.1.5216" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 365.724896][ T30] audit: type=1400 audit(1760209772.733:42573): avc: denied { map_read map_write } for pid=22983 comm="syz.1.5216" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 365.745341][ T30] audit: type=1400 audit(1760209772.763:42574): avc: denied { create } for pid=22983 comm="syz.1.5216" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 365.766250][ T30] audit: type=1400 audit(1760209772.763:42575): avc: denied { open } for pid=22983 comm="syz.1.5216" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 365.785800][ T30] audit: type=1400 audit(1760209772.763:42576): avc: denied { kernel } for pid=22983 comm="syz.1.5216" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 365.805416][ T30] audit: type=1400 audit(1760209772.783:42577): avc: denied { prog_load } for pid=22983 comm="syz.1.5216" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 365.824710][ T30] audit: type=1400 audit(1760209772.783:42578): avc: denied { bpf } for pid=22983 comm="syz.1.5216" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 365.845531][ T30] audit: type=1400 audit(1760209772.783:42579): avc: denied { prog_run } for pid=22983 comm="syz.1.5216" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 365.911395][T22988] bridge_slave_0: left allmulticast mode [ 365.917097][T22988] bridge_slave_0: left promiscuous mode [ 365.922907][T22988] bridge0: port 1(bridge_slave_0) entered disabled state [ 365.932339][T22988] bridge_slave_1: left allmulticast mode [ 365.938004][T22988] bridge_slave_1: left promiscuous mode [ 365.943702][T22988] bridge0: port 2(bridge_slave_1) entered disabled state [ 365.954678][T22988] bond0: (slave bond_slave_0): Releasing backup interface [ 365.954799][T22990] netlink: 'syz.7.5217': attribute type 10 has an invalid length. [ 365.970439][T22990] __nla_validate_parse: 2 callbacks suppressed [ 365.970457][T22990] netlink: 40 bytes leftover after parsing attributes in process `syz.7.5217'. [ 365.989944][T22988] bond0: (slave bond_slave_1): Releasing backup interface [ 366.005431][T22988] team0: Port device team_slave_0 removed [ 366.015352][T22988] team0: Port device team_slave_1 removed [ 366.023476][T22988] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 366.031016][T22988] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 366.038778][T22992] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5218'. [ 366.040397][T22988] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 366.056047][T22988] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 366.067444][T22988] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 366.087464][T22952] chnl_net:caif_netlink_parms(): no params data found [ 366.107982][T22994] loop9: detected capacity change from 0 to 1024 [ 366.113078][T22990] batman_adv: batadv0: Adding interface: veth1_vlan [ 366.121712][T22990] batman_adv: batadv0: The MTU of interface veth1_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 366.121840][T22994] EXT4-fs: Ignoring removed nobh option [ 366.148560][T22990] batman_adv: batadv0: Interface activated: veth1_vlan [ 366.153144][T22994] EXT4-fs: Ignoring removed bh option [ 366.160557][T22995] loop1: detected capacity change from 0 to 1024 [ 366.187347][T12910] bridge_slave_1: left allmulticast mode [ 366.193132][T12910] bridge_slave_1: left promiscuous mode [ 366.198821][T12910] bridge0: port 2(bridge_slave_1) entered disabled state [ 366.208000][T22994] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 366.222243][T12910] bridge_slave_0: left allmulticast mode [ 366.227923][T12910] bridge_slave_0: left promiscuous mode [ 366.235002][T12910] bridge0: port 1(bridge_slave_0) entered disabled state [ 366.265819][T22995] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 366.362998][T12910] tipc: Disabling bearer [ 366.392975][T21088] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 366.403754][T12910] bond1 (unregistering): (slave bridge1): Releasing backup interface [ 366.420993][T12910] bridge1 (unregistering): left promiscuous mode [ 366.476421][T12910] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 366.493100][T12910] bond_slave_0: left allmulticast mode [ 366.499016][T12910] bond0 (unregistering): Released all slaves [ 366.523761][T12910] bond1 (unregistering): Released all slaves [ 366.599518][T12910] tipc: Left network mode [ 366.607675][T22952] bridge0: port 1(bridge_slave_0) entered blocking state [ 366.614970][T22952] bridge0: port 1(bridge_slave_0) entered disabled state [ 366.622752][T22952] bridge_slave_0: entered allmulticast mode [ 366.629736][T22952] bridge_slave_0: entered promiscuous mode [ 366.638827][T22952] bridge0: port 2(bridge_slave_1) entered blocking state [ 366.645998][T22952] bridge0: port 2(bridge_slave_1) entered disabled state [ 366.654564][T22952] bridge_slave_1: entered allmulticast mode [ 366.656849][T23013] loop7: detected capacity change from 0 to 1024 [ 366.661472][T22952] bridge_slave_1: entered promiscuous mode [ 366.678978][T23013] EXT4-fs: Ignoring removed nobh option [ 366.684718][T23013] EXT4-fs: Ignoring removed bh option [ 366.709142][T23013] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 366.729378][T22952] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 366.739345][T12910] hsr_slave_0: left promiscuous mode [ 366.745925][T12910] hsr_slave_1: left promiscuous mode [ 366.752048][T12910] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 366.760201][T12910] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 366.769508][T12910] pimreg (unregistering): left allmulticast mode [ 366.814648][T12910] team0 (unregistering): Port device team_slave_1 removed [ 366.839497][T12910] team0 (unregistering): Port device team_slave_0 removed [ 366.993535][T22952] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 367.064094][T22993] delete_channel: no stack [ 367.112520][T22952] team0: Port device team_slave_0 added [ 367.134091][T22952] team0: Port device team_slave_1 added [ 367.187466][T20876] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 367.264600][T23028] netlink: 'syz.1.5225': attribute type 21 has an invalid length. [ 367.286881][T23028] netlink: 156 bytes leftover after parsing attributes in process `syz.1.5225'. [ 367.295992][T23028] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5225'. [ 367.305554][T22952] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 367.312637][T22952] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 367.339259][T22952] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 367.363075][T23016] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4193: comm syz.7.5222: Allocating blocks 497-513 which overlap fs metadata [ 367.368920][T23030] loop9: detected capacity change from 0 to 128 [ 367.409812][T23016] EXT4-fs (loop7): Remounting filesystem read-only [ 367.418050][T22952] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 367.425062][T22952] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 367.451715][T22952] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 367.484777][T22952] hsr_slave_0: entered promiscuous mode [ 367.491799][T22952] hsr_slave_1: entered promiscuous mode [ 367.497827][T22952] debugfs: 'hsr0' already exists in 'hsr' [ 367.503630][T22952] Cannot create hsr debugfs directory [ 367.509791][T23030] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 367.576991][T23030] ext4 filesystem being mounted at /118/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 367.609107][T23012] EXT4-fs (loop7): pa ffff888106a5ce70: logic 48, phys. 193, len 20 [ 367.625747][T23040] loop1: detected capacity change from 0 to 1024 [ 367.632714][T23040] EXT4-fs: Ignoring removed nobh option [ 367.638437][T23040] EXT4-fs: Ignoring removed bh option [ 367.647586][T23030] EXT4-fs error (device loop9): __ext4_find_entry:1626: inode #2: comm syz.9.5226: checksumming directory block 0 [ 367.658354][T23012] delete_channel: no stack [ 367.686563][T23040] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 367.714927][T20876] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 367.746795][T20501] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 367.780078][T23048] netlink: 28 bytes leftover after parsing attributes in process `syz.9.5232'. [ 367.915293][T23058] loop2: detected capacity change from 0 to 1024 [ 367.922593][T23058] EXT4-fs: Ignoring removed nobh option [ 367.928565][T23058] EXT4-fs: Ignoring removed bh option [ 367.956584][T23058] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 368.174506][T22952] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 368.182914][T23069] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4193: comm syz.2.5237: Allocating blocks 497-513 which overlap fs metadata [ 368.203349][T22952] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 368.211815][T23069] EXT4-fs (loop2): Remounting filesystem read-only [ 368.232759][T22952] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 368.244780][T23057] EXT4-fs (loop2): pa ffff888106a5cf50: logic 48, phys. 193, len 20 [ 368.248000][T22952] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 368.259813][T23057] delete_channel: no stack [ 368.296177][T23075] bridge_slave_0: left allmulticast mode [ 368.301898][T23075] bridge_slave_0: left promiscuous mode [ 368.307586][T23075] bridge0: port 1(bridge_slave_0) entered disabled state [ 368.317935][T23075] bridge_slave_1: left allmulticast mode [ 368.323856][T23075] bridge_slave_1: left promiscuous mode [ 368.329599][T23075] bridge0: port 2(bridge_slave_1) entered disabled state [ 368.340453][T23075] bond0: (slave bond_slave_0): Releasing backup interface [ 368.356265][T13287] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 368.371461][T23075] bond0: (slave bond_slave_1): Releasing backup interface [ 368.371902][T23076] netlink: 'syz.9.5243': attribute type 10 has an invalid length. [ 368.387273][T23076] netlink: 40 bytes leftover after parsing attributes in process `syz.9.5243'. [ 368.415482][T23075] team0: Port device team_slave_0 removed [ 368.435153][T23075] team0: Port device team_slave_1 removed [ 368.442943][T23075] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 368.450429][T23075] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 368.459891][T23075] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 368.468049][T23075] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 368.552624][T23078] loop2: detected capacity change from 0 to 512 [ 368.562450][T23078] EXT4-fs (loop2): orphan cleanup on readonly fs [ 368.563372][T23075] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 368.569807][T23078] EXT4-fs warning (device loop2): ext4_xattr_inode_get:560: inode #11: comm +}[@: EA inode hash validation failed [ 368.586114][T23038] delete_channel: no stack [ 368.603131][T23078] EXT4-fs error (device loop2): ext4_do_update_inode:5624: inode #15: comm +}[@: corrupted inode contents [ 368.615095][T23078] EXT4-fs error (device loop2): ext4_dirty_inode:6509: inode #15: comm +}[@: mark_inode_dirty error [ 368.644363][T23076] batman_adv: batadv0: Adding interface: veth1_vlan [ 368.651083][T23076] batman_adv: batadv0: The MTU of interface veth1_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 368.672297][T23078] EXT4-fs error (device loop2): ext4_do_update_inode:5624: inode #15: comm +}[@: corrupted inode contents [ 368.678939][T21088] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 368.688300][T23078] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2996: inode #15: comm +}[@: mark_inode_dirty error [ 368.698218][T23076] batman_adv: batadv0: Interface activated: veth1_vlan [ 368.709867][T23078] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2999: inode #15: comm +}[@: mark inode dirty (error -117) [ 368.729034][T23078] EXT4-fs warning (device loop2): ext4_evict_inode:274: xattr delete (err -117) [ 368.778907][T23078] EXT4-fs (loop2): 1 orphan inode deleted [ 368.802055][T22952] 8021q: adding VLAN 0 to HW filter on device bond0 [ 368.816948][T23078] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 368.845479][T22952] 8021q: adding VLAN 0 to HW filter on device team0 [ 368.857577][T23103] loop9: detected capacity change from 0 to 128 [ 368.866579][T12908] bridge0: port 1(bridge_slave_0) entered blocking state [ 368.873700][T12908] bridge0: port 1(bridge_slave_0) entered forwarding state [ 368.886349][T13287] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 368.901631][T23103] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 368.902199][T12908] bridge0: port 2(bridge_slave_1) entered blocking state [ 368.921037][T12908] bridge0: port 2(bridge_slave_1) entered forwarding state [ 368.932983][T23103] ext4 filesystem being mounted at /129/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 368.975838][T22952] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 368.999042][T23103] EXT4-fs error (device loop9): __ext4_find_entry:1626: inode #2: comm syz.9.5250: checksumming directory block 0 [ 369.037921][T23107] loop2: detected capacity change from 0 to 512 [ 369.048323][T23107] EXT4-fs (loop2): orphan cleanup on readonly fs [ 369.055861][T20876] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 369.065560][T23107] EXT4-fs warning (device loop2): ext4_xattr_inode_get:560: inode #11: comm wÞ£ÿ: EA inode hash validation failed [ 369.078996][T23107] EXT4-fs error (device loop2): ext4_do_update_inode:5624: inode #15: comm wÞ£ÿ: corrupted inode contents [ 369.091979][T23107] EXT4-fs error (device loop2): ext4_dirty_inode:6509: inode #15: comm wÞ£ÿ: mark_inode_dirty error [ 369.106353][T23107] EXT4-fs error (device loop2): ext4_do_update_inode:5624: inode #15: comm wÞ£ÿ: corrupted inode contents [ 369.119054][T23107] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2996: inode #15: comm wÞ£ÿ: mark_inode_dirty error [ 369.139247][T22952] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 369.141283][T23107] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2999: inode #15: comm wÞ£ÿ: mark inode dirty (error -117) [ 369.162328][T23107] EXT4-fs warning (device loop2): ext4_evict_inode:274: xattr delete (err -117) [ 369.172590][T23107] EXT4-fs (loop2): 1 orphan inode deleted [ 369.185062][T23107] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 369.222307][T13287] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 369.239527][T22952] veth0_vlan: entered promiscuous mode [ 369.248643][T22952] veth1_vlan: entered promiscuous mode [ 369.253366][T23126] loop2: detected capacity change from 0 to 1024 [ 369.262755][T23126] EXT4-fs: Ignoring removed nobh option [ 369.268252][T22952] veth0_macvtap: entered promiscuous mode [ 369.268384][T23126] EXT4-fs: Ignoring removed bh option [ 369.277952][T22952] veth1_macvtap: entered promiscuous mode [ 369.296518][T23126] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 369.299272][T22952] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 369.323267][T22952] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 369.336732][T12894] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.346387][T12894] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.357861][T12908] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.367404][T12908] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.632878][T23137] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4193: comm syz.2.5254: Allocating blocks 497-513 which overlap fs metadata [ 369.669699][T23133] sg_write: data in/out 268435420/10 bytes for SCSI command 0xfd-- guessing data in; [ 369.669699][T23133] program syz.0.5207 not setting count and/or reply_len properly [ 369.702301][T23149] loop7: detected capacity change from 0 to 736 [ 369.710064][T23137] EXT4-fs (loop2): Remounting filesystem read-only [ 369.733650][T23149] ip6tnl1: entered allmulticast mode [ 369.745678][T23152] loop1: detected capacity change from 0 to 1024 [ 369.753926][T23152] EXT4-fs: Ignoring removed nobh option [ 369.759543][T23152] EXT4-fs: Ignoring removed bh option [ 369.785889][T23152] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 369.833700][T23125] EXT4-fs (loop2): pa ffff888106a5cee0: logic 48, phys. 193, len 20 [ 369.845239][T23157] loop7: detected capacity change from 0 to 512 [ 369.854261][T23125] delete_channel: no stack [ 369.855794][T23157] EXT4-fs (loop7): orphan cleanup on readonly fs [ 369.880418][T23157] EXT4-fs warning (device loop7): ext4_xattr_inode_get:560: inode #11: comm wÞ£ÿ: EA inode hash validation failed [ 369.892982][T23157] EXT4-fs error (device loop7): ext4_do_update_inode:5624: inode #15: comm wÞ£ÿ: corrupted inode contents [ 369.907708][T23157] EXT4-fs error (device loop7): ext4_dirty_inode:6509: inode #15: comm wÞ£ÿ: mark_inode_dirty error [ 369.937617][T23157] EXT4-fs error (device loop7): ext4_do_update_inode:5624: inode #15: comm wÞ£ÿ: corrupted inode contents [ 369.967707][T23157] EXT4-fs error (device loop7): ext4_xattr_delete_inode:2996: inode #15: comm wÞ£ÿ: mark_inode_dirty error [ 369.998311][T23168] loop2: detected capacity change from 0 to 1024 [ 370.000036][T23157] EXT4-fs error (device loop7): ext4_xattr_delete_inode:2999: inode #15: comm wÞ£ÿ: mark inode dirty (error -117) [ 370.005771][T23168] EXT4-fs: Ignoring removed nobh option [ 370.022625][T23168] EXT4-fs: Ignoring removed bh option [ 370.028862][ T30] kauditd_printk_skb: 483 callbacks suppressed [ 370.028876][ T30] audit: type=1326 audit(1760209777.073:43063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23118 comm="syz.9.5253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb4785eec9 code=0x7ffc0000 [ 370.058958][ T30] audit: type=1326 audit(1760209777.073:43064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23118 comm="syz.9.5253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb4785eec9 code=0x7ffc0000 [ 370.091817][T23157] EXT4-fs warning (device loop7): ext4_evict_inode:274: xattr delete (err -117) [ 370.092661][ T30] audit: type=1326 audit(1760209777.103:43065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23163 comm="syz.0.5264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d21e9eec9 code=0x7ffc0000 [ 370.101793][T23157] EXT4-fs (loop7): 1 orphan inode deleted [ 370.124672][ T30] audit: type=1326 audit(1760209777.103:43066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23163 comm="syz.0.5264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d21e9eec9 code=0x7ffc0000 [ 370.213346][ T30] audit: type=1326 audit(1760209777.243:43067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23156 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9ab5bad710 code=0x7ffc0000 [ 370.237765][ T30] audit: type=1326 audit(1760209777.243:43068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23156 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9ab5bad710 code=0x7ffc0000 [ 370.262048][ T30] audit: type=1326 audit(1760209777.243:43069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23156 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ab5baeec9 code=0x7ffc0000 [ 370.285660][ T30] audit: type=1326 audit(1760209777.243:43070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23156 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ab5baeec9 code=0x7ffc0000 [ 370.310058][ T30] audit: type=1326 audit(1760209777.243:43071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23156 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ab5baeec9 code=0x7ffc0000 [ 370.334626][ T30] audit: type=1326 audit(1760209777.243:43072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23156 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ab5baeec9 code=0x7ffc0000 [ 370.438016][T23180] netlink: 68 bytes leftover after parsing attributes in process `syz.9.5268'. [ 370.463101][T23180] tipc: Started in network mode [ 370.468145][T23180] tipc: Node identity ac14140f, cluster identity 4711 [ 370.479016][T23180] tipc: New replicast peer: 255.255.255.255 [ 370.485316][T23180] tipc: Enabled bearer , priority 10 [ 370.499434][T23165] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4193: comm syz.1.5262: Allocating blocks 497-513 which overlap fs metadata [ 370.542223][T23165] EXT4-fs (loop1): Remounting filesystem read-only [ 370.574946][T23184] blktrace: Concurrent blktraces are not allowed on sg0 [ 370.674263][T23151] EXT4-fs (loop1): pa ffff8881069fdd90: logic 48, phys. 193, len 20 [ 370.674759][T23191] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5273'. [ 370.709419][T23191] loop9: detected capacity change from 0 to 1024 [ 370.709629][T23151] delete_channel: no stack [ 370.830349][T23196] loop9: detected capacity change from 0 to 1024 [ 370.838665][T23196] EXT4-fs: Ignoring removed nobh option [ 370.844437][T23196] EXT4-fs: Ignoring removed bh option [ 370.991228][T23167] delete_channel: no stack [ 371.143374][T23213] loop1: detected capacity change from 0 to 512 [ 371.253198][T23213] EXT4-fs (loop1): orphan cleanup on readonly fs [ 371.283598][T23213] EXT4-fs warning (device loop1): ext4_xattr_inode_get:560: inode #11: comm wÞ£ÿ: EA inode hash validation failed [ 371.465241][T23213] EXT4-fs error (device loop1): ext4_do_update_inode:5624: inode #15: comm wÞ£ÿ: corrupted inode contents [ 371.480945][ T3562] tipc: Node number set to 2886997007 [ 371.638263][T23213] EXT4-fs error (device loop1): ext4_dirty_inode:6509: inode #15: comm wÞ£ÿ: mark_inode_dirty error [ 371.745134][T23213] EXT4-fs error (device loop1): ext4_do_update_inode:5624: inode #15: comm wÞ£ÿ: corrupted inode contents [ 371.864095][T23213] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2996: inode #15: comm wÞ£ÿ: mark_inode_dirty error [ 372.012686][T23213] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2999: inode #15: comm wÞ£ÿ: mark inode dirty (error -117) [ 372.058498][T23213] EXT4-fs warning (device loop1): ext4_evict_inode:274: xattr delete (err -117) [ 372.073102][T23195] delete_channel: no stack [ 372.088146][T23213] EXT4-fs (loop1): 1 orphan inode deleted [ 372.234422][T23238] loop1: detected capacity change from 0 to 1024 [ 372.244136][T23238] EXT4-fs: inline encryption not supported [ 372.325988][T23241] blktrace: Concurrent blktraces are not allowed on sg0 [ 372.529883][T23279] netlink: 'syz.7.5298': attribute type 10 has an invalid length. [ 372.537783][T23279] netlink: 40 bytes leftover after parsing attributes in process `syz.7.5298'. [ 372.578491][T23268] loop1: detected capacity change from 0 to 512 [ 372.588729][T23272] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 372.606408][T23268] EXT4-fs (loop1): orphan cleanup on readonly fs [ 372.614204][T23268] EXT4-fs warning (device loop1): ext4_xattr_inode_get:560: inode #11: comm +}[@: EA inode hash validation failed [ 372.626929][T23268] EXT4-fs error (device loop1): ext4_do_update_inode:5624: inode #15: comm +}[@: corrupted inode contents [ 372.668688][T23268] EXT4-fs error (device loop1): ext4_dirty_inode:6509: inode #15: comm +}[@: mark_inode_dirty error [ 372.679964][T23268] EXT4-fs error (device loop1): ext4_do_update_inode:5624: inode #15: comm +}[@: corrupted inode contents [ 372.699892][T23268] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2996: inode #15: comm +}[@: mark_inode_dirty error [ 372.713870][T23268] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2999: inode #15: comm +}[@: mark inode dirty (error -117) [ 372.822974][T23268] EXT4-fs warning (device loop1): ext4_evict_inode:274: xattr delete (err -117) [ 372.843005][T23268] EXT4-fs (loop1): 1 orphan inode deleted [ 373.676198][T23345] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5306'. [ 373.753479][T23345] loop9: detected capacity change from 0 to 1024 [ 373.846752][T23361] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 373.918231][T23361] netlink: 'syz.7.5309': attribute type 10 has an invalid length. [ 373.926180][T23361] netlink: 40 bytes leftover after parsing attributes in process `syz.7.5309'. [ 374.012028][T23371] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5310'. [ 374.047242][T23384] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5316'. [ 374.083385][T23384] loop7: detected capacity change from 0 to 1024 [ 374.134783][T23396] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5321'. [ 374.144580][T23396] netlink: 3 bytes leftover after parsing attributes in process `syz.2.5321'. [ 374.165163][T23396] batadv2: entered promiscuous mode [ 374.170485][T23396] batadv2: entered allmulticast mode [ 374.192854][T23403] loop7: detected capacity change from 0 to 1024 [ 374.197660][T23401] bridge_slave_0: left allmulticast mode [ 374.200080][T23403] EXT4-fs: Ignoring removed nobh option [ 374.205064][T23401] bridge_slave_0: left promiscuous mode [ 374.205251][T23401] bridge0: port 1(bridge_slave_0) entered disabled state [ 374.224868][T23403] EXT4-fs: Ignoring removed bh option [ 374.232136][T23405] netlink: 168 bytes leftover after parsing attributes in process `syz.0.5322'. [ 374.244737][T23406] netlink: 'syz.1.5324': attribute type 10 has an invalid length. [ 374.252755][T23406] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5324'. [ 374.265230][T23401] bridge_slave_1: left allmulticast mode [ 374.271001][T23401] bridge_slave_1: left promiscuous mode [ 374.276740][T23401] bridge0: port 2(bridge_slave_1) entered disabled state [ 374.287240][T23401] bond0: (slave bond_slave_0): Releasing backup interface [ 374.299036][T23401] bond0: (slave bond_slave_1): Releasing backup interface [ 374.332479][T23401] team0: Port device team_slave_0 removed [ 374.345914][T23401] team0: Port device team_slave_1 removed [ 374.362366][T23401] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 374.369807][T23401] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 374.383451][T23401] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 374.391099][T23401] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 374.404378][T23401] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 374.417432][T23416] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4193: comm syz.7.5323: Allocating blocks 497-513 which overlap fs metadata [ 374.442899][T23406] batman_adv: batadv0: Adding interface: veth1_vlan [ 374.449165][T23416] EXT4-fs (loop7): Remounting filesystem read-only [ 374.449522][T23406] batman_adv: batadv0: The MTU of interface veth1_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 374.469936][T23406] batman_adv: batadv0: Interface activated: veth1_vlan [ 374.526136][T23402] EXT4-fs (loop7): pa ffff888106a5ce00: logic 48, phys. 193, len 20 [ 374.535260][T23402] delete_channel: no stack [ 374.570256][T23425] loop1: detected capacity change from 0 to 512 [ 374.577339][T23425] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 374.591235][T23425] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5331'. [ 374.664847][T23436] loop7: detected capacity change from 0 to 1024 [ 374.675472][T23425] loop1: detected capacity change from 0 to 512 [ 374.683098][T23425] EXT4-fs (loop1): VFS: Can't find ext4 filesystem [ 374.732576][T23440] batadv1: entered promiscuous mode [ 374.737913][T23440] batadv1: entered allmulticast mode [ 374.764467][T23442] loop1: detected capacity change from 0 to 1024 [ 374.771349][T23442] EXT4-fs: Ignoring removed nobh option [ 374.776941][T23442] EXT4-fs: Ignoring removed bh option [ 374.876336][T23453] loop7: detected capacity change from 0 to 1024 [ 374.884568][T23453] EXT4-fs: inline encryption not supported [ 375.021797][T23460] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 375.048287][T23460] netlink: 'syz.7.5342': attribute type 10 has an invalid length. [ 375.076903][ T30] kauditd_printk_skb: 584 callbacks suppressed [ 375.076922][ T30] audit: type=1326 audit(1760209782.123:43657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23465 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d21e9eec9 code=0x7ffc0000 [ 375.107672][ T30] audit: type=1326 audit(1760209782.153:43658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23465 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d21e9eec9 code=0x7ffc0000 [ 375.132008][ T30] audit: type=1326 audit(1760209782.153:43659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23465 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f7d21e9eec9 code=0x7ffc0000 [ 375.171748][T23451] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4193: comm syz.1.5336: Allocating blocks 497-513 which overlap fs metadata [ 375.187359][ T30] audit: type=1400 audit(1760209782.193:43660): avc: denied { ioctl } for pid=23441 comm="syz.1.5336" path="/124/file2/bus" dev="loop1" ino=18 ioctlcmd=0x89f2 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 375.187473][T23451] EXT4-fs (loop1): Remounting filesystem read-only [ 375.211827][ T30] audit: type=1326 audit(1760209782.203:43661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23465 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f7d21e9ef03 code=0x7ffc0000 [ 375.211869][ T30] audit: type=1326 audit(1760209782.203:43662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23465 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f7d21e9ef03 code=0x7ffc0000 [ 375.211925][ T30] audit: type=1326 audit(1760209782.203:43663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23465 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d21e9eec9 code=0x7ffc0000 [ 375.211998][ T30] audit: type=1326 audit(1760209782.203:43664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23465 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d21e9eec9 code=0x7ffc0000 [ 375.212032][ T30] audit: type=1326 audit(1760209782.203:43665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23465 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d21e9eec9 code=0x7ffc0000 [ 375.212067][ T30] audit: type=1326 audit(1760209782.203:43666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23465 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d21e9eec9 code=0x7ffc0000 [ 375.390540][T23474] batadv1: entered promiscuous mode [ 375.395897][T23474] batadv1: entered allmulticast mode [ 375.432785][T23441] EXT4-fs (loop1): pa ffff8881069fde70: logic 48, phys. 193, len 20 [ 375.443155][T23441] delete_channel: no stack [ 375.448000][T23476] loop2: detected capacity change from 0 to 1024 [ 375.526671][T23486] loop1: detected capacity change from 0 to 1024 [ 375.534324][T23486] EXT4-fs: inline encryption not supported [ 375.610508][T23498] loop9: detected capacity change from 0 to 128 [ 375.619007][T23498] ext4 filesystem being mounted at /144/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 375.653935][T23498] EXT4-fs error (device loop9): __ext4_find_entry:1626: inode #2: comm syz.9.5355: checksumming directory block 0 [ 375.691289][T23502] loop9: detected capacity change from 0 to 1024 [ 375.698275][T23502] EXT4-fs: Ignoring removed nobh option [ 375.704457][T23502] EXT4-fs: Ignoring removed bh option [ 376.013719][T23505] EXT4-fs error (device loop9): ext4_mb_mark_diskspace_used:4193: comm syz.9.5356: Allocating blocks 497-513 which overlap fs metadata [ 376.029077][T23505] EXT4-fs (loop9): Remounting filesystem read-only [ 376.079792][T23501] EXT4-fs (loop9): pa ffff888106a5ce70: logic 48, phys. 193, len 20 [ 376.088658][T23501] delete_channel: no stack [ 376.149819][T23514] loop9: detected capacity change from 0 to 1024 [ 376.267895][T23521] loop9: detected capacity change from 0 to 1024 [ 376.275072][T23521] EXT4-fs: inline encryption not supported [ 376.318597][T23530] loop9: detected capacity change from 0 to 128 [ 376.327848][T23530] ext4 filesystem being mounted at /149/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 376.362114][T23530] EXT4-fs error (device loop9): __ext4_find_entry:1626: inode #2: comm syz.9.5366: checksumming directory block 0 [ 376.425806][T23535] loop9: detected capacity change from 0 to 512 [ 376.433030][T23535] EXT4-fs: Ignoring removed orlov option [ 376.443847][T23535] ext4 filesystem being mounted at /150/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 376.464078][T23528] sg_write: data in/out 268435420/10 bytes for SCSI command 0xfd-- guessing data in; [ 376.464078][T23528] program syz.0.5365 not setting count and/or reply_len properly [ 376.485451][T23535] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.5368: bg 0: block 328: padding at end of block bitmap is not set [ 376.573052][T23547] loop2: detected capacity change from 0 to 1024 [ 376.677036][T23557] loop2: detected capacity change from 0 to 1024 [ 376.684614][T23557] EXT4-fs: inline encryption not supported [ 376.906243][T23573] loop7: detected capacity change from 0 to 1024 [ 376.922184][T23573] EXT4-fs: Ignoring removed nobh option [ 376.927872][T23573] EXT4-fs: Ignoring removed bh option [ 377.204556][T23586] loop9: detected capacity change from 0 to 512 [ 377.271512][T23586] EXT4-fs error (device loop9): ext4_init_orphan_info:581: comm syz.9.5383: inode #0: comm syz.9.5383: iget: illegal inode # [ 377.303152][T23586] EXT4-fs (loop9): get orphan inode failed [ 377.326625][T23586] EXT4-fs (loop9): mount failed [ 377.440253][T23586] 9pnet_fd: Insufficient options for proto=fd [ 377.646398][T23566] delete_channel: no stack [ 377.697255][T23596] __nla_validate_parse: 19 callbacks suppressed [ 377.697276][T23596] netlink: 168 bytes leftover after parsing attributes in process `syz.2.5384'. [ 377.730528][T23596] loop2: detected capacity change from 0 to 512 [ 377.740686][T23596] EXT4-fs error (device loop2): ext4_init_orphan_info:581: comm syz.2.5384: inode #0: comm syz.2.5384: iget: illegal inode # [ 377.757580][T23596] EXT4-fs (loop2): get orphan inode failed [ 377.773561][T23596] EXT4-fs (loop2): mount failed [ 377.795046][T23589] 9pnet_fd: Insufficient options for proto=fd [ 377.854835][T23572] delete_channel: no stack [ 377.944968][T23624] loop7: detected capacity change from 0 to 1024 [ 377.953406][T23624] EXT4-fs: inline encryption not supported [ 378.111746][T23617] loop1: detected capacity change from 0 to 512 [ 378.146603][T23649] netlink: 60 bytes leftover after parsing attributes in process `syz.9.5393'. [ 378.161813][T23617] EXT4-fs (loop1): orphan cleanup on readonly fs [ 378.172725][T23617] EXT4-fs warning (device loop1): ext4_xattr_inode_get:560: inode #11: comm +}[@: EA inode hash validation failed [ 378.192693][T23649] IPVS: Unknown mcast interface: [ 378.201155][T23617] EXT4-fs error (device loop1): ext4_do_update_inode:5624: inode #15: comm +}[@: corrupted inode contents [ 378.212793][T23649] loop9: detected capacity change from 0 to 1024 [ 378.227653][T23617] EXT4-fs error (device loop1): ext4_dirty_inode:6509: inode #15: comm +}[@: mark_inode_dirty error [ 378.233369][T23633] sg_write: data in/out 268435420/10 bytes for SCSI command 0xfd-- guessing data in; [ 378.233369][T23633] program syz.7.5389 not setting count and/or reply_len properly [ 378.249084][T23649] EXT4-fs: Ignoring removed oldalloc option [ 378.261818][T23649] EXT4-fs: Ignoring removed bh option [ 378.267316][T23617] EXT4-fs error (device loop1): ext4_do_update_inode:5624: inode #15: comm +}[@: corrupted inode contents [ 378.279473][T23617] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2996: inode #15: comm +}[@: mark_inode_dirty error [ 378.293925][T23617] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2999: inode #15: comm +}[@: mark inode dirty (error -117) [ 378.362599][T23617] EXT4-fs warning (device loop1): ext4_evict_inode:274: xattr delete (err -117) [ 378.389952][T23617] EXT4-fs (loop1): 1 orphan inode deleted [ 378.630144][T23703] pimreg: entered allmulticast mode [ 378.654101][T23682] lo speed is unknown, defaulting to 1000 [ 378.662735][T23703] loop1: detected capacity change from 0 to 128 [ 378.740715][T23707] pimreg: left allmulticast mode [ 378.795874][T23710] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=23710 comm=syz.1.5397 [ 378.826511][T23709] loop7: detected capacity change from 0 to 1024 [ 378.838883][T23709] EXT4-fs: inline encryption not supported [ 379.009638][T23719] netlink: 168 bytes leftover after parsing attributes in process `syz.7.5400'. [ 379.048240][T23719] netlink: 72 bytes leftover after parsing attributes in process `syz.7.5400'. [ 379.081603][T23719] loop7: detected capacity change from 0 to 512 [ 379.088965][ T5964] kworker/u8:11: attempt to access beyond end of device [ 379.088965][ T5964] loop1: rw=1, sector=145, nr_sectors = 16 limit=128 [ 379.121009][ T5964] kworker/u8:11: attempt to access beyond end of device [ 379.121009][ T5964] loop1: rw=1, sector=169, nr_sectors = 8 limit=128 [ 379.135371][ T5964] kworker/u8:11: attempt to access beyond end of device [ 379.135371][ T5964] loop1: rw=1, sector=185, nr_sectors = 8 limit=128 [ 379.153621][T23719] EXT4-fs error (device loop7): ext4_init_orphan_info:581: comm syz.7.5400: inode #0: comm syz.7.5400: iget: illegal inode # [ 379.180129][ T5964] kworker/u8:11: attempt to access beyond end of device [ 379.180129][ T5964] loop1: rw=1, sector=201, nr_sectors = 8 limit=128 [ 379.200675][T23719] EXT4-fs (loop7): get orphan inode failed [ 379.206776][T23719] EXT4-fs (loop7): mount failed [ 379.221534][ T5964] kworker/u8:11: attempt to access beyond end of device [ 379.221534][ T5964] loop1: rw=1, sector=217, nr_sectors = 8 limit=128 [ 379.312238][T23719] 9pnet_fd: Insufficient options for proto=fd [ 379.394507][ T5964] kworker/u8:11: attempt to access beyond end of device [ 379.394507][ T5964] loop1: rw=1, sector=233, nr_sectors = 8 limit=128 [ 379.423235][ T5964] kworker/u8:11: attempt to access beyond end of device [ 379.423235][ T5964] loop1: rw=1, sector=249, nr_sectors = 8 limit=128 [ 379.454274][ T5964] kworker/u8:11: attempt to access beyond end of device [ 379.454274][ T5964] loop1: rw=1, sector=265, nr_sectors = 8 limit=128 [ 379.476453][T23723] loop9: detected capacity change from 0 to 512 [ 379.485077][ T5964] kworker/u8:11: attempt to access beyond end of device [ 379.485077][ T5964] loop1: rw=1, sector=281, nr_sectors = 8 limit=128 [ 379.502669][T23723] EXT4-fs (loop9): orphan cleanup on readonly fs [ 379.509882][T23723] EXT4-fs warning (device loop9): ext4_xattr_inode_get:560: inode #11: comm wÞ£ÿ: EA inode hash validation failed [ 379.533897][ T5964] kworker/u8:11: attempt to access beyond end of device [ 379.533897][ T5964] loop1: rw=1, sector=297, nr_sectors = 8 limit=128 [ 379.548362][T23723] EXT4-fs error (device loop9): ext4_do_update_inode:5624: inode #15: comm wÞ£ÿ: corrupted inode contents [ 379.573727][T23723] EXT4-fs error (device loop9): ext4_dirty_inode:6509: inode #15: comm wÞ£ÿ: mark_inode_dirty error [ 379.593709][T23704] delete_channel: no stack [ 379.602544][T23723] EXT4-fs error (device loop9): ext4_do_update_inode:5624: inode #15: comm wÞ£ÿ: corrupted inode contents [ 379.620804][T23723] EXT4-fs error (device loop9): ext4_xattr_delete_inode:2996: inode #15: comm wÞ£ÿ: mark_inode_dirty error [ 379.633557][T23723] EXT4-fs error (device loop9): ext4_xattr_delete_inode:2999: inode #15: comm wÞ£ÿ: mark inode dirty (error -117) [ 379.686749][T23723] EXT4-fs warning (device loop9): ext4_evict_inode:274: xattr delete (err -117) [ 379.712254][T23723] EXT4-fs (loop9): 1 orphan inode deleted [ 379.777821][T23737] loop1: detected capacity change from 0 to 1024 [ 379.789119][T23737] EXT4-fs: Ignoring removed nobh option [ 379.795500][T23737] EXT4-fs: Ignoring removed bh option [ 380.111421][ T30] kauditd_printk_skb: 613 callbacks suppressed [ 380.111439][ T30] audit: type=1400 audit(1760209787.163:44278): avc: denied { read } for pid=23777 comm="syz.2.5415" dev="nsfs" ino=4026532379 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 380.139094][ T30] audit: type=1400 audit(1760209787.163:44279): avc: denied { open } for pid=23777 comm="syz.2.5415" path="net:[4026532379]" dev="nsfs" ino=4026532379 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 380.198560][ T30] audit: type=1400 audit(1760209787.223:44280): avc: denied { create } for pid=23777 comm="syz.2.5415" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 380.220207][ T30] audit: type=1400 audit(1760209787.243:44281): avc: denied { ioctl } for pid=23735 comm="syz.1.5405" path="/135/file2/bus" dev="loop1" ino=18 ioctlcmd=0x89f2 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 380.245259][ T30] audit: type=1400 audit(1760209787.243:44282): avc: denied { read } for pid=23735 comm="syz.1.5405" path="/135/file2/file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 380.269256][ T30] audit: type=1400 audit(1760209787.243:44283): avc: denied { write } for pid=23735 comm="syz.1.5405" path="/135/file2/file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 380.300993][ T30] audit: type=1400 audit(1760209787.243:44284): avc: denied { setcurrent } for pid=23779 comm="syz.7.5414" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 380.321525][ T30] audit: type=1401 audit(1760209787.243:44285): op=security_bounded_transition seresult=denied oldcontext=root:sysadm_r:sysadm_t newcontext=system_u:object_r:hugetlbfs_t [ 380.338478][ T30] audit: type=1400 audit(1760209787.243:44286): avc: denied { write } for pid=23779 comm="syz.7.5414" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 380.359970][ T30] audit: type=1400 audit(1760209787.243:44287): avc: denied { read } for pid=23779 comm="syz.7.5414" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 380.434451][T23761] sg_write: data in/out 268435420/10 bytes for SCSI command 0xfd-- guessing data in; [ 380.434451][T23761] program syz.0.5410 not setting count and/or reply_len properly [ 380.482595][T23796] netlink: 65039 bytes leftover after parsing attributes in process `syz.7.5418'. [ 380.606215][T23786] loop2: detected capacity change from 0 to 512 [ 380.619873][T23735] delete_channel: no stack [ 380.624874][T23786] EXT4-fs (loop2): orphan cleanup on readonly fs [ 380.639265][T23786] EXT4-fs warning (device loop2): ext4_xattr_inode_get:560: inode #11: comm wÞ£ÿ: EA inode hash validation failed [ 380.731190][T23786] EXT4-fs error (device loop2): ext4_do_update_inode:5624: inode #15: comm wÞ£ÿ: corrupted inode contents [ 380.814093][T23786] EXT4-fs error (device loop2): ext4_dirty_inode:6509: inode #15: comm wÞ£ÿ: mark_inode_dirty error [ 380.881001][T23786] EXT4-fs error (device loop2): ext4_do_update_inode:5624: inode #15: comm wÞ£ÿ: corrupted inode contents [ 380.914300][T23852] netlink: 168 bytes leftover after parsing attributes in process `syz.9.5421'. [ 380.929594][T23786] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2996: inode #15: comm wÞ£ÿ: mark_inode_dirty error [ 380.952716][T23852] netlink: 72 bytes leftover after parsing attributes in process `syz.9.5421'. [ 380.965913][T23852] loop9: detected capacity change from 0 to 512 [ 380.972367][T23786] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2999: inode #15: comm wÞ£ÿ: mark inode dirty (error -117) [ 380.992746][T23786] EXT4-fs warning (device loop2): ext4_evict_inode:274: xattr delete (err -117) [ 381.011768][T23786] EXT4-fs (loop2): 1 orphan inode deleted [ 381.012062][T23852] EXT4-fs error (device loop9): ext4_init_orphan_info:581: comm syz.9.5421: inode #0: comm syz.9.5421: iget: illegal inode # [ 381.044449][T23855] rtc_cmos 00:00: Alarms can be up to one day in the future [ 381.057352][T23854] rtc_cmos 00:00: Alarms can be up to one day in the future [ 381.065435][T23852] EXT4-fs (loop9): get orphan inode failed [ 381.071524][T23852] EXT4-fs (loop9): mount failed [ 381.086883][T23839] 9pnet_fd: Insufficient options for proto=fd [ 381.122128][T23860] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5426'. [ 381.175037][T23866] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5429'. [ 381.193310][T23866] loop1: detected capacity change from 0 to 1024 [ 381.286455][T23864] loop2: detected capacity change from 0 to 512 [ 381.305279][T23864] EXT4-fs (loop2): orphan cleanup on readonly fs [ 381.309934][T23882] loop1: detected capacity change from 0 to 1024 [ 381.313604][T23864] EXT4-fs warning (device loop2): ext4_xattr_inode_get:560: inode #11: comm +}[@: EA inode hash validation failed [ 381.325422][T23882] EXT4-fs: Ignoring removed nobh option [ 381.335942][T23882] EXT4-fs: Ignoring removed bh option [ 381.342209][T23864] EXT4-fs error (device loop2): ext4_do_update_inode:5624: inode #15: comm +}[@: corrupted inode contents [ 381.359519][T23864] EXT4-fs error (device loop2): ext4_dirty_inode:6509: inode #15: comm +}[@: mark_inode_dirty error [ 381.372248][T23864] EXT4-fs error (device loop2): ext4_do_update_inode:5624: inode #15: comm +}[@: corrupted inode contents [ 381.391009][T23864] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2996: inode #15: comm +}[@: mark_inode_dirty error [ 381.407191][T23864] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2999: inode #15: comm +}[@: mark inode dirty (error -117) [ 381.428671][T23864] EXT4-fs warning (device loop2): ext4_evict_inode:274: xattr delete (err -117) [ 381.438117][T23864] EXT4-fs (loop2): 1 orphan inode deleted [ 381.461428][T23893] team0: Port device team_slave_0 removed [ 381.610963][T23906] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4193: comm syz.1.5432: Allocating blocks 497-513 which overlap fs metadata [ 381.635585][T23912] netlink: 176 bytes leftover after parsing attributes in process `syz.2.5437'. [ 381.651724][T23906] EXT4-fs (loop1): Remounting filesystem read-only [ 381.684394][T23880] EXT4-fs (loop1): pa ffff888106a5cb60: logic 48, phys. 193, len 20 [ 381.705698][T23880] delete_channel: no stack [ 381.716388][T23922] FAULT_INJECTION: forcing a failure. [ 381.716388][T23922] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 381.729556][T23922] CPU: 1 UID: 0 PID: 23922 Comm: syz.9.5440 Not tainted syzkaller #0 PREEMPT(voluntary) [ 381.729590][T23922] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 381.729608][T23922] Call Trace: [ 381.729616][T23922] [ 381.729626][T23922] __dump_stack+0x1d/0x30 [ 381.729690][T23922] dump_stack_lvl+0xe8/0x140 [ 381.729715][T23922] dump_stack+0x15/0x1b [ 381.729755][T23922] should_fail_ex+0x265/0x280 [ 381.729864][T23922] should_fail+0xb/0x20 [ 381.729948][T23922] should_fail_usercopy+0x1a/0x20 [ 381.729999][T23922] _copy_from_iter+0xd2/0xe80 [ 381.730031][T23922] ? alloc_pages_mpol+0x217/0x260 [ 381.730056][T23922] copy_page_from_iter+0x178/0x2a0 [ 381.730079][T23922] tun_get_user+0x679/0x26e0 [ 381.730159][T23922] ? ref_tracker_alloc+0x1f2/0x2f0 [ 381.730208][T23922] tun_chr_write_iter+0x15e/0x210 [ 381.730245][T23922] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 381.730280][T23922] vfs_write+0x527/0x960 [ 381.730423][T23922] ksys_write+0xda/0x1a0 [ 381.730454][T23922] __x64_sys_write+0x40/0x50 [ 381.730478][T23922] x64_sys_call+0x2802/0x3000 [ 381.730503][T23922] do_syscall_64+0xd2/0x200 [ 381.730534][T23922] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 381.730570][T23922] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 381.730599][T23922] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 381.730625][T23922] RIP: 0033:0x7ffb4785d97f [ 381.730709][T23922] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 381.730727][T23922] RSP: 002b:00007ffb462c7000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 381.730748][T23922] RAX: ffffffffffffffda RBX: 00007ffb47ab5fa0 RCX: 00007ffb4785d97f [ 381.730775][T23922] RDX: 000000000000007e RSI: 0000200000000140 RDI: 00000000000000c8 [ 381.730787][T23922] RBP: 00007ffb462c7090 R08: 0000000000000000 R09: 0000000000000000 [ 381.730800][T23922] R10: 000000000000007e R11: 0000000000000293 R12: 0000000000000001 [ 381.730817][T23922] R13: 00007ffb47ab6038 R14: 00007ffb47ab5fa0 R15: 00007ffc14ee1568 [ 381.730849][T23922] [ 381.937051][ T9926] rtc_cmos 00:00: Alarms can be up to one day in the future [ 381.944735][ T9926] rtc_cmos 00:00: Alarms can be up to one day in the future [ 381.953064][ T9926] rtc_cmos 00:00: Alarms can be up to one day in the future [ 381.960694][ T9926] rtc_cmos 00:00: Alarms can be up to one day in the future [ 381.968124][ T9926] rtc rtc0: __rtc_set_alarm: err=-22 [ 382.067269][T23936] loop1: detected capacity change from 0 to 1024 [ 382.498530][T23990] loop7: detected capacity change from 0 to 1024 [ 382.563249][T24010] loop1: detected capacity change from 0 to 1024 [ 382.570178][T24010] EXT4-fs: Ignoring removed nobh option [ 382.575884][T24010] EXT4-fs: Ignoring removed bh option [ 382.642432][T24017] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 382.681480][T24017] netlink: 'syz.2.5461': attribute type 10 has an invalid length. [ 382.690069][T24019] blktrace: Concurrent blktraces are not allowed on sg0 [ 382.690813][T24017] batman_adv: batadv0: Adding interface: veth1_vlan [ 382.703976][T24017] batman_adv: batadv0: The MTU of interface veth1_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 382.738046][T24017] batman_adv: batadv0: Interface activated: veth1_vlan [ 383.141339][T24043] __nla_validate_parse: 9 callbacks suppressed [ 383.141356][T24043] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5472'. [ 383.190831][T24043] loop7: detected capacity change from 0 to 1024 [ 383.257257][T24050] loop2: detected capacity change from 0 to 1024 [ 383.264519][T24050] EXT4-fs: Ignoring removed nobh option [ 383.270111][T24050] EXT4-fs: Ignoring removed bh option [ 383.355486][T24050] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4193: comm syz.2.5474: Allocating blocks 449-513 which overlap fs metadata [ 383.370214][T24050] EXT4-fs (loop2): Remounting filesystem read-only [ 383.380396][T24049] EXT4-fs (loop2): pa ffff8881069fde00: logic 48, phys. 177, len 21 [ 383.389413][T24049] delete_channel: no stack [ 383.419384][T24009] delete_channel: no stack [ 383.676282][T24073] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5482'. [ 383.693115][T24073] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5482'. [ 383.716380][T24073] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5482'. [ 383.830859][T24091] loop2: detected capacity change from 0 to 1024 [ 383.843388][T24082] loop9: detected capacity change from 0 to 512 [ 383.851754][T24091] EXT4-fs: Ignoring removed nobh option [ 383.857399][T24091] EXT4-fs: Ignoring removed bh option [ 383.864368][T24082] EXT4-fs (loop9): orphan cleanup on readonly fs [ 383.871445][T24082] EXT4-fs warning (device loop9): ext4_xattr_inode_get:560: inode #11: comm wÞ£ÿ: EA inode hash validation failed [ 383.884781][T24082] EXT4-fs error (device loop9): ext4_do_update_inode:5624: inode #15: comm wÞ£ÿ: corrupted inode contents [ 383.897013][T24082] EXT4-fs error (device loop9): ext4_dirty_inode:6509: inode #15: comm wÞ£ÿ: mark_inode_dirty error [ 383.926686][T24082] EXT4-fs error (device loop9): ext4_do_update_inode:5624: inode #15: comm wÞ£ÿ: corrupted inode contents [ 383.938509][T24082] EXT4-fs error (device loop9): ext4_xattr_delete_inode:2996: inode #15: comm wÞ£ÿ: mark_inode_dirty error [ 383.942888][T24091] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4193: comm syz.2.5488: Allocating blocks 449-513 which overlap fs metadata [ 383.950600][T24082] EXT4-fs error (device loop9): ext4_xattr_delete_inode:2999: inode #15: comm wÞ£ÿ: mark inode dirty (error -117) [ 383.966588][T24091] EXT4-fs (loop2): Remounting filesystem read-only [ 383.984044][T24082] EXT4-fs warning (device loop9): ext4_evict_inode:274: xattr delete (err -117) [ 383.994535][T24090] EXT4-fs (loop2): pa ffff8881069fde00: logic 48, phys. 177, len 21 [ 383.994622][T24082] EXT4-fs (loop9): 1 orphan inode deleted [ 384.015849][T24090] delete_channel: no stack [ 384.124031][T24104] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5490'. [ 384.144845][T24104] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5490'. [ 384.174184][T24104] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5490'. [ 384.262988][T24116] loop2: detected capacity change from 0 to 512 [ 384.460950][T24130] loop2: detected capacity change from 0 to 512 [ 384.467450][T24133] netlink: 168 bytes leftover after parsing attributes in process `syz.1.5494'. [ 384.480323][T24130] EXT4-fs (loop2): orphan cleanup on readonly fs [ 384.487678][T24130] EXT4-fs warning (device loop2): ext4_xattr_inode_get:560: inode #11: comm wÞ£ÿ: EA inode hash validation failed [ 384.500748][T24130] EXT4-fs error (device loop2): ext4_do_update_inode:5624: inode #15: comm wÞ£ÿ: corrupted inode contents [ 384.526317][T24130] EXT4-fs error (device loop2): ext4_dirty_inode:6509: inode #15: comm wÞ£ÿ: mark_inode_dirty error [ 384.541118][T24130] EXT4-fs error (device loop2): ext4_do_update_inode:5624: inode #15: comm wÞ£ÿ: corrupted inode contents [ 384.554525][T24128] loop7: detected capacity change from 0 to 1024 [ 384.562254][T24128] EXT4-fs: Ignoring removed nobh option [ 384.567897][T24128] EXT4-fs: Ignoring removed bh option [ 384.568489][T24130] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2996: inode #15: comm wÞ£ÿ: mark_inode_dirty error [ 384.586357][T24130] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2999: inode #15: comm wÞ£ÿ: mark inode dirty (error -117) [ 384.598908][T24130] EXT4-fs warning (device loop2): ext4_evict_inode:274: xattr delete (err -117) [ 384.609019][T24130] EXT4-fs (loop2): 1 orphan inode deleted [ 384.671316][T24128] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4193: comm syz.7.5500: Allocating blocks 449-513 which overlap fs metadata [ 384.688708][T24128] EXT4-fs (loop7): Remounting filesystem read-only [ 384.708309][T24127] EXT4-fs (loop7): pa ffff8881069fdee0: logic 48, phys. 177, len 21 [ 384.732358][T20501] EXT4-fs unmount: 89 callbacks suppressed [ 384.732378][T20501] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 384.770185][T24142] loop2: detected capacity change from 0 to 1024 [ 384.777334][T24142] EXT4-fs: inline encryption not supported [ 384.802948][T24142] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 384.865623][T24150] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5507'. [ 384.875308][T13287] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 384.898255][T24150] loop7: detected capacity change from 0 to 1024 [ 384.914525][T24152] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5508'. [ 384.925324][T24150] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 384.964647][T20501] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 385.105623][T24170] loop2: detected capacity change from 0 to 1024 [ 385.105885][T24168] loop1: detected capacity change from 0 to 1024 [ 385.116696][T24170] EXT4-fs: Ignoring removed nobh option [ 385.124240][T24170] EXT4-fs: Ignoring removed bh option [ 385.124934][ T30] kauditd_printk_skb: 1094 callbacks suppressed [ 385.124995][ T30] audit: type=1326 audit(1760209792.173:45382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24164 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f9ab5baef03 code=0x7ffc0000 [ 385.161326][ T30] audit: type=1326 audit(1760209792.213:45383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24164 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f9ab5baef03 code=0x7ffc0000 [ 385.185582][ T30] audit: type=1326 audit(1760209792.213:45384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24164 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ab5baeec9 code=0x7ffc0000 [ 385.209869][ T30] audit: type=1326 audit(1760209792.213:45385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24164 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ab5baeec9 code=0x7ffc0000 [ 385.211935][T24168] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 385.247639][ T30] audit: type=1326 audit(1760209792.293:45386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24164 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7f9ab5baeec9 code=0x7ffc0000 [ 385.252082][T24170] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 385.272172][ T30] audit: type=1326 audit(1760209792.293:45387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24164 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ab5baeec9 code=0x7ffc0000 [ 385.308089][ T30] audit: type=1326 audit(1760209792.293:45388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24164 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ab5baeec9 code=0x7ffc0000 [ 385.318053][T24170] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4193: comm syz.2.5515: Allocating blocks 449-513 which overlap fs metadata [ 385.332638][ T30] audit: type=1326 audit(1760209792.293:45389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24164 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ab5baeec9 code=0x7ffc0000 [ 385.346456][T24170] EXT4-fs (loop2): Remounting filesystem read-only [ 385.370156][ T30] audit: type=1326 audit(1760209792.293:45390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24164 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ab5baeec9 code=0x7ffc0000 [ 385.385872][T24169] EXT4-fs (loop2): pa ffff888106a5cbd0: logic 48, phys. 177, len 21 [ 385.400338][ T30] audit: type=1326 audit(1760209792.293:45391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24164 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f9ab5baeec9 code=0x7ffc0000 [ 385.454357][T24166] loop7: detected capacity change from 0 to 512 [ 385.461822][T24185] loop9: detected capacity change from 0 to 1024 [ 385.469888][T24166] EXT4-fs (loop7): orphan cleanup on readonly fs [ 385.478974][T13287] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 385.493618][T24185] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 385.501578][T24188] bridge_slave_0: left allmulticast mode [ 385.507273][T24166] EXT4-fs warning (device loop7): ext4_xattr_inode_get:560: inode #11: comm wÞ£ÿ: EA inode hash validation failed [ 385.511391][T24188] bridge_slave_0: left promiscuous mode [ 385.511510][T24188] bridge0: port 1(bridge_slave_0) entered disabled state [ 385.537630][T24166] EXT4-fs error (device loop7): ext4_do_update_inode:5624: inode #15: comm wÞ£ÿ: corrupted inode contents [ 385.552633][T24166] EXT4-fs error (device loop7): ext4_dirty_inode:6509: inode #15: comm wÞ£ÿ: mark_inode_dirty error [ 385.552713][T24188] bridge_slave_1: left allmulticast mode [ 385.563883][T24166] EXT4-fs error (device loop7): ext4_do_update_inode:5624: inode #15: comm wÞ£ÿ: corrupted inode contents [ 385.569597][T24188] bridge_slave_1: left promiscuous mode [ 385.582427][T24166] EXT4-fs error (device loop7): ext4_xattr_delete_inode:2996: inode #15: comm wÞ£ÿ: mark_inode_dirty error [ 385.586921][T24188] bridge0: port 2(bridge_slave_1) entered disabled state [ 385.598313][T24166] EXT4-fs error (device loop7): ext4_xattr_delete_inode:2999: inode #15: comm wÞ£ÿ: mark inode dirty (error -117) [ 385.619238][T21088] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 385.634578][T24191] netlink: 'syz.0.5521': attribute type 10 has an invalid length. [ 385.637410][T24166] EXT4-fs warning (device loop7): ext4_evict_inode:274: xattr delete (err -117) [ 385.643527][T24188] bond0: (slave bond_slave_0): Releasing backup interface [ 385.659622][T24166] EXT4-fs (loop7): 1 orphan inode deleted [ 385.665870][T24166] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 385.694150][T24188] bond0: (slave bond_slave_1): Releasing backup interface [ 385.706675][T20876] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 385.760412][T20501] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 385.779565][T24188] team0: Port device team_slave_1 removed [ 385.823057][T24188] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 385.830494][T24188] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 385.839491][T24188] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 385.847024][T24188] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 385.856470][T24188] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 385.874375][T24191] batman_adv: batadv0: Adding interface: veth1_vlan [ 385.881187][T24191] batman_adv: batadv0: The MTU of interface veth1_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 385.907981][T24191] batman_adv: batadv0: Interface activated: veth1_vlan [ 385.909855][T24216] netlink: 'syz.9.5529': attribute type 10 has an invalid length. [ 385.974663][T24212] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 386.021958][T24217] netlink: 'syz.1.5531': attribute type 2 has an invalid length. [ 386.043040][T24224] loop2: detected capacity change from 0 to 1024 [ 386.082262][T24224] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 386.128099][T24240] tmpfs: Bad value for 'mpol' [ 386.160394][T13287] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 386.300683][T24260] netlink: 'syz.1.5548': attribute type 10 has an invalid length. [ 386.321250][T24251] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 386.347282][T24261] blktrace: Concurrent blktraces are not allowed on sg0 [ 386.561811][T24248] sg_write: data in/out 268435420/10 bytes for SCSI command 0xfd-- guessing data in; [ 386.561811][T24248] program syz.7.5547 not setting count and/or reply_len properly [ 387.101170][T24257] delete_channel: no stack [ 387.147814][T24307] loop9: detected capacity change from 0 to 8192 [ 387.326617][T24336] loop1: detected capacity change from 0 to 1024 [ 387.333723][T24330] loop9: detected capacity change from 0 to 512 [ 387.343058][T24330] EXT4-fs (loop9): orphan cleanup on readonly fs [ 387.350144][T24330] EXT4-fs warning (device loop9): ext4_xattr_inode_get:560: inode #11: comm +}[@: EA inode hash validation failed [ 387.363947][T24330] EXT4-fs error (device loop9): ext4_do_update_inode:5624: inode #15: comm +}[@: corrupted inode contents [ 387.375916][T24330] EXT4-fs error (device loop9): ext4_dirty_inode:6509: inode #15: comm +}[@: mark_inode_dirty error [ 387.387974][T24336] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 387.391117][T24330] EXT4-fs error (device loop9): ext4_do_update_inode:5624: inode #15: comm +}[@: corrupted inode contents [ 387.412906][T24330] EXT4-fs error (device loop9): ext4_xattr_delete_inode:2996: inode #15: comm +}[@: mark_inode_dirty error [ 387.425174][T24330] EXT4-fs error (device loop9): ext4_xattr_delete_inode:2999: inode #15: comm +}[@: mark inode dirty (error -117) [ 387.439043][T24330] EXT4-fs warning (device loop9): ext4_evict_inode:274: xattr delete (err -117) [ 387.448412][T24330] EXT4-fs (loop9): 1 orphan inode deleted [ 387.455416][T24330] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 387.482767][T20876] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 387.591615][T24346] loop9: detected capacity change from 0 to 8192 [ 387.677986][T24356] veth0: entered promiscuous mode [ 387.723004][T24363] loop9: detected capacity change from 0 to 512 [ 387.729725][T24363] ext4: Bad value for 'journal_dev' [ 387.737137][T24367] loop2: detected capacity change from 0 to 1024 [ 387.763256][T24367] EXT4-fs: Ignoring removed nobh option [ 387.768889][T24367] EXT4-fs: Ignoring removed bh option [ 387.798853][T24367] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 387.836176][T24367] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4193: comm syz.2.5592: Allocating blocks 449-513 which overlap fs metadata [ 387.858576][T24367] EXT4-fs (loop2): Remounting filesystem read-only [ 387.896787][T24359] veth0: left promiscuous mode [ 387.912084][T24365] EXT4-fs (loop2): pa ffff888106a5cd90: logic 48, phys. 177, len 21 [ 387.954168][T13287] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 388.168809][T21088] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 388.249002][T24407] FAULT_INJECTION: forcing a failure. [ 388.249002][T24407] name failslab, interval 1, probability 0, space 0, times 0 [ 388.261729][T24407] CPU: 0 UID: 0 PID: 24407 Comm: syz.1.5606 Not tainted syzkaller #0 PREEMPT(voluntary) [ 388.261766][T24407] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 388.261783][T24407] Call Trace: [ 388.261793][T24407] [ 388.261803][T24407] __dump_stack+0x1d/0x30 [ 388.261831][T24407] dump_stack_lvl+0xe8/0x140 [ 388.261857][T24407] dump_stack+0x15/0x1b [ 388.261939][T24407] should_fail_ex+0x265/0x280 [ 388.261985][T24407] should_failslab+0x8c/0xb0 [ 388.262021][T24407] kmem_cache_alloc_noprof+0x50/0x480 [ 388.262116][T24407] ? __send_signal_locked+0x154/0x760 [ 388.262150][T24407] __send_signal_locked+0x154/0x760 [ 388.262221][T24407] send_signal_locked+0x34e/0x3c0 [ 388.262263][T24407] do_send_sig_info+0x9f/0xf0 [ 388.262306][T24407] kill_pgrp_info+0xba/0x130 [ 388.262400][T24407] do_pidfd_send_signal+0x2b9/0x320 [ 388.262448][T24407] ? __rcu_read_unlock+0x4f/0x70 [ 388.262474][T24407] ? __rcu_read_unlock+0x4f/0x70 [ 388.262500][T24407] ? __fget_files+0x184/0x1c0 [ 388.262562][T24407] __se_sys_pidfd_send_signal+0x230/0x290 [ 388.262595][T24407] __x64_sys_pidfd_send_signal+0x55/0x70 [ 388.262702][T24407] x64_sys_call+0x1c6d/0x3000 [ 388.262732][T24407] do_syscall_64+0xd2/0x200 [ 388.262799][T24407] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 388.262878][T24407] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 388.262910][T24407] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 388.262940][T24407] RIP: 0033:0x7f033ecbeec9 [ 388.262962][T24407] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 388.262988][T24407] RSP: 002b:00007f033d727038 EFLAGS: 00000246 ORIG_RAX: 00000000000001a8 [ 388.263013][T24407] RAX: ffffffffffffffda RBX: 00007f033ef15fa0 RCX: 00007f033ecbeec9 [ 388.263041][T24407] RDX: 0000000000000000 RSI: 0000000000000021 RDI: 0000000000000003 [ 388.263056][T24407] RBP: 00007f033d727090 R08: 0000000000000000 R09: 0000000000000000 [ 388.263068][T24407] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000001 [ 388.263164][T24407] R13: 00007f033ef16038 R14: 00007f033ef15fa0 R15: 00007ffeaf1e3f38 [ 388.263193][T24407] [ 388.655502][T24422] __nla_validate_parse: 20 callbacks suppressed [ 388.655517][T24422] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5609'. [ 388.725064][T24416] netlink: 168 bytes leftover after parsing attributes in process `syz.9.5610'. [ 388.819719][T24429] loop2: detected capacity change from 0 to 1024 [ 388.869657][T24429] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 388.888709][T24433] loop1: detected capacity change from 0 to 1024 [ 388.912869][T24433] EXT4-fs: inline encryption not supported [ 388.943019][T24433] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 388.990702][T21088] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 389.004478][T24373] delete_channel: no stack [ 389.022980][T24442] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=24442 comm=syz.1.5618 [ 389.223369][T24463] netlink: 168 bytes leftover after parsing attributes in process `syz.0.5620'. [ 389.652032][T13287] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 389.767203][T24550] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 389.803586][T24550] netlink: 'syz.2.5625': attribute type 10 has an invalid length. [ 389.811580][T24550] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5625'. [ 389.856383][T24565] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5626'. [ 389.878712][T24565] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5626'. [ 389.928496][T24565] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5626'. [ 389.948075][T24581] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5629'. [ 389.977646][T24581] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5629'. [ 390.034891][T24581] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5629'. [ 390.078658][T24603] loop7: detected capacity change from 0 to 1024 [ 390.132415][T24603] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 390.140988][ T30] kauditd_printk_skb: 619 callbacks suppressed [ 390.141012][ T30] audit: type=1400 audit(1760209797.183:46011): avc: denied { name_bind } for pid=24601 comm="GPL" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 390.172046][ T30] audit: type=1400 audit(1760209797.183:46012): avc: denied { node_bind } for pid=24601 comm="GPL" saddr=172.20.20.170 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 390.172148][T24615] ================================================================== [ 390.172184][T24615] BUG: KCSAN: data-race in _prb_read_valid / data_alloc [ 390.172226][T24615] [ 390.172234][T24615] write to 0xffffffff8686ae00 of 8 bytes by task 30 on cpu 1: [ 390.172255][T24615] data_alloc+0x274/0x2e0 [ 390.172295][T24615] prb_reserve+0x807/0xaf0 [ 390.172315][T24615] vprintk_store+0x56d/0x860 [ 390.172340][T24615] vprintk_emit+0x10d/0x580 [ 390.172365][T24615] vprintk_default+0x26/0x30 [ 390.172391][T24615] vprintk+0x1d/0x30 [ 390.172424][T24615] _printk+0x79/0xa0 [ 390.172452][T24615] kauditd_hold_skb+0x1b1/0x1c0 [ 390.172476][T24615] kauditd_send_queue+0x273/0x2c0 [ 390.172499][T24615] kauditd_thread+0x421/0x630 [ 390.172518][T24615] kthread+0x486/0x510 [ 390.172540][T24615] ret_from_fork+0x122/0x1b0 [ 390.172560][T24615] ret_from_fork_asm+0x1a/0x30 [ 390.172582][T24615] [ 390.172587][T24615] read to 0xffffffff8686ae00 of 16 bytes by task 24615 on cpu 0: [ 390.172603][T24615] _prb_read_valid+0x1bc/0x920 [ 390.172621][T24615] prb_read_valid+0x3c/0x60 [ 390.172638][T24615] printk_get_next_message+0xc8/0x510 [ 390.172662][T24615] console_flush_all+0x290/0x6a0 [ 390.172686][T24615] console_unlock+0xa1/0x2e0 [ 390.172706][T24615] vcs_open+0x90/0xa0 [ 390.172734][T24615] chrdev_open+0x2eb/0x3a0 [ 390.172776][T24615] do_dentry_open+0x646/0xa20 [ 390.172818][T24615] vfs_open+0x37/0x1e0 [ 390.172854][T24615] path_openat+0x1c5e/0x2170 [ 390.172871][T24615] do_filp_open+0x109/0x230 [ 390.172889][T24615] do_sys_openat2+0xa6/0x110 [ 390.172921][T24615] __x64_sys_openat+0xf2/0x120 [ 390.172954][T24615] x64_sys_call+0x2eab/0x3000 [ 390.172975][T24615] do_syscall_64+0xd2/0x200 [ 390.172999][T24615] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 390.173021][T24615] [ 390.173025][T24615] Reported by Kernel Concurrency Sanitizer on: [ 390.173037][T24615] CPU: 0 UID: 0 PID: 24615 Comm: syz.2.5634 Not tainted syzkaller #0 PREEMPT(voluntary) [ 390.173062][T24615] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 390.173076][T24615] ================================================================== [ 390.277367][ T30] audit: type=1400 audit(1760209797.203:46013): avc: denied { mount } for pid=24602 comm="syz.7.5632" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 390.439193][ T30] audit: type=1400 audit(1760209797.203:46014): avc: denied { read } for pid=24601 comm="GPL" dev="nsfs" ino=4026532893 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 390.439222][ T30] audit: type=1400 audit(1760209797.203:46015): avc: denied { open } for pid=24601 comm="GPL" path="net:[4026532893]" dev="nsfs" ino=4026532893 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 390.439254][ T30] audit: type=1400 audit(1760209797.203:46016): avc: denied { create } for pid=24601 comm="GPL" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 390.502858][ T30] audit: type=1400 audit(1760209797.203:46017): avc: denied { write } for pid=24601 comm="GPL" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 390.522832][ T30] audit: type=1400 audit(1760209797.203:46018): avc: denied { read } for pid=24601 comm="GPL" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 390.542699][ T30] audit: type=1326 audit(1760209797.253:46019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24600 comm="syz.0.5631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f7d21e9eec9 code=0x7ffc0000 [ 390.570301][ T30] audit: type=1400 audit(1760209797.383:46020): avc: denied { create } for pid=24623 comm="syz.0.5635" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 390.898958][T20501] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.