last executing test programs: 1m38.204392377s ago: executing program 1 (id=751): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008040000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000780)={0x0, 0x0}) r1 = syz_open_dev$hiddev(&(0x7f0000000040), 0xb83b, 0x400000) ioctl$HIDIOCGREPORTINFO(r1, 0xc00c4809, 0x0) setitimer(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/11], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r2}, 0x18) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0xffffffad) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0}) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x22802, 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x2000410, &(0x7f0000000000)={[{@bsdgroups}, {@jqfmt_vfsv1}]}, 0xc1, 0x7e9, &(0x7f00000017c0)="$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") syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x800000, &(0x7f00000002c0)={[{@noauto_da_alloc}, {@jqfmt_vfsold}, {@noquota}, {@norecovery}, {}]}, 0x1, 0x4be, &(0x7f0000000540)="$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") syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x220000, &(0x7f00000008c0)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@nouid32}, {@nombcache}, {@orlov}, {@abort}, {@nombcache}, {@stripe={'stripe', 0x3d, 0x12}}]}, 0x64, 0x50a, &(0x7f0000000940)="$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") ioctl$TCSETAF(r4, 0x5408, &(0x7f0000000380)={0x4, 0x6, 0xd3, 0x5, 0x10, "6b2b9ac6144e78d9"}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x88e, &(0x7f0000000c80), 0x3, 0x445, &(0x7f0000000800)="$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") r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) fdatasync(r5) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) 1m37.617960123s ago: executing program 1 (id=760): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='page_pool_state_release\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r4, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000280)="b9ff03076804268c989e14f088a8", 0x0, 0x2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 1m37.564236135s ago: executing program 1 (id=762): bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) r0 = socket(0x8000000010, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000080)={0x2, 'veth1_to_team\x00', {0x9}, 0x2}) bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a5df"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfeb0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r2, 0x0, 0x4}, 0x18) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000200)={'fscrypt:', @desc2}, &(0x7f0000000300)={0x0, "1e4e1557a609bff6a596dea0fb0503f22231b15d27fce60137b6c6cbf512f89b435f5dd9b4ae337bbf37b108c1ec26276567359e079abe967f5d8aad34301a48", 0x13}, 0x48, 0xfffffffffffffffc) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000003c0)={0xffffffffffffffff}, 0x111, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r3, &(0x7f00000004c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0x1, @loopback, 0x2}, r4}}, 0x30) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$smc(&(0x7f00000033c0), 0xffffffffffffffff) sendmsg$SMC_PNETID_ADD(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x34, r6, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'hsr0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x24040000}, 0x800) sendmsg$SMC_PNETID_FLUSH(r5, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f00000019c0)={0x14, r6, 0x1, 0x70bd28, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x800) 1m37.545870636s ago: executing program 1 (id=763): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x4540, 0x0, 0xfffffffc, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001180)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001140)={{r1}, &(0x7f0000000180), &(0x7f0000001100)=r2}, 0x6c3858d2252842c8) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r3}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r0, 0x8008f511, 0xfffffffffffffffe) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000080), 0x67, 0x52e, &(0x7f0000000480)="$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") fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) r4 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) write$binfmt_register(r4, &(0x7f0000000440)={0x3a, 'syz2', 0x3a, 'M', 0x3a, 0x0, 0x3a, 'usrjquota=', 0x3a, '', 0x3a, './file2', 0x3a, [0x46]}, 0x32) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') pread64(r5, &(0x7f00000192c0)=""/102350, 0x18fce, 0x400000200) ioctl$TIOCVHANGUP(r5, 0x5437, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) openat$vcsu(0xffffffffffffff9c, 0x0, 0x40200, 0x0) r6 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0xfd, &(0x7f00000004c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x40) sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x8084) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x2, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="e7bde9d98b0b9b5200edc8b01d4a18000005a9adcc4de2e11a55b40000000000000000000800000085000000ad00"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x24, 0xfffffffffffffffc, 0x0, 0x0, '\x00', 0x0, 0x38}, 0x80) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@bloom_filter={0x1e, 0x1, 0xedd1, 0x10000, 0xc1, 0xffffffffffffffff, 0x2, '\x00', 0x0, r5, 0x5, 0x5, 0x0, 0xd}, 0x50) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000a00)=@mangle={'mangle\x00', 0x1f, 0x6, 0x648, 0xf0, 0x308, 0xf0, 0x308, 0xf0, 0x578, 0x578, 0x578, 0x578, 0x578, 0x6, &(0x7f00000003c0), {[{{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@rand_addr=0x64010101, @ipv4=@dev={0xac, 0x14, 0x14, 0x44}, 0x27, 0x31, 0x8351}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @empty, [0xff000000, 0x0, 0xffffffff, 0xffffffff], [0xff000000, 0xff000000, 0xff000000, 0xffffffff], 'virt_wifi0\x00', 'hsr0\x00', {0xff}, {0xff}, 0x25, 0x0, 0x1, 0x20}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@unspec=@connlabel={{0x28}, {0x2, 0x3}}, @common=@eui64={{0x28}}]}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x41}}}, {{@ipv6={@mcast1, @private0={0xfc, 0x0, '\x00', 0x1}, [0xffffff00, 0xff000000, 0xff000000, 0xffffffff], [0x3cb9af7dfcbd7318, 0xffffffff, 0xffffffff, 0xff0000ff], 'team_slave_0\x00', 'netdevsim0\x00', {}, {}, 0x88, 0x2, 0x6, 0x10}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@unspec=@pkttype={{0x28}, {0x6, 0x4}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x160, 0x188, 0x0, {}, [@common=@srh1={{0x90}, {0x62, 0xa, 0x2, 0x40, 0xf, @rand_addr=' \x01\x00', @dev={0xfe, 0x80, '\x00', 0x17}, @mcast2, [0xff000000, 0xffffff00, 0xff000000], [0xff000000, 0xffffff00, 0xffffffff], [0xffffffff, 0xff000000, 0xffffffff, 0xff], 0x40}}, @inet=@rpfilter={{0x28}, {0xe}}]}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0xe, 0xc}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x4, 0x5, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x4e22}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6a8) r8 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r8, 0x400, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000580)=ANY=[@ANYRES8=r6], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) 1m36.984013099s ago: executing program 1 (id=768): syz_open_procfs(0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) write(r0, &(0x7f0000000000), 0x0) 1m36.535776358s ago: executing program 1 (id=778): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x5, 0x510, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0x9}, 0x0, 0x10000, 0x4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000d00)={[{@noauto_da_alloc}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x4c4, &(0x7f0000000d40)="$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") setxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000000)=@random={'security.', 'ext4\x00'}, 0x0, 0x0, 0x0) (fail_nth: 5) 1m36.48935596s ago: executing program 32 (id=778): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x5, 0x510, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0x9}, 0x0, 0x10000, 0x4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000d00)={[{@noauto_da_alloc}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x4c4, &(0x7f0000000d40)="$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") setxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000000)=@random={'security.', 'ext4\x00'}, 0x0, 0x0, 0x0) (fail_nth: 5) 1m23.725057207s ago: executing program 4 (id=985): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000020000000000000000000018110000", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00'], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1b, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kmem_cache_free\x00', r1, 0x0, 0x81}, 0x18) r2 = open(&(0x7f0000000900)='.\x00', 0x0, 0x0) r3 = socket$pptp(0x18, 0x1, 0x2) syz_usb_connect(0x4, 0x24, &(0x7f0000000240)=ANY=[@ANYBLOB="12010102d5d0591008161800a639010203010902120001000300050904e2050015823b003be936b5ff5f2f962971a99ae0d21b81bd60ac51b0c61e0411b17107caaecb4e96213aef5a4ff91014cd8e81ebc6e770e4cad51966a4f7afbd5c64b556c5780ed5955e544dd3ea2ba3de0113cfc6945a3be4bc772208627be9592082d50a67d370ecbe25c5dea99fa5e41184b580d419cd4df907ba9978c58537e813cee1666b2e7b51308be36c87d6d82331859f3ce126b3820832b6b9c78b1fe75e5827718fbe4e8f79074434974842b169b26d8bdb609d91e1ca3e6aaac382"], 0x0) close_range(r3, 0xffffffffffffffff, 0x0) fcntl$notify(r2, 0x402, 0x8000001f) close_range(r2, 0xffffffffffffffff, 0x0) 1m23.41667256s ago: executing program 4 (id=989): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff95"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='io_uring_link\x00', r1}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000008850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r4}, 0x10) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg(r5, &(0x7f0000000540)=[{{&(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x1000, @dev={0xfe, 0x80, '\x00', 0x11}, 0xa, 0x1}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000300)='>', 0x1}], 0x1}}], 0x1, 0xc88c4) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x1f, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESHEX=r2, @ANYRESDEC=r3], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r7}, 0x18) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000580)=@bpf_lsm={0x4, 0x7, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000050002000000000085000000cc00000085000000000000000500feff0000000095"], &(0x7f00000003c0)='GPL\x00', 0x4}, 0x94) sendmsg$NFT_MSG_GETOBJ(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="7c010000130a03000000000000000000000000020900020073797a31000000000900010073797a31000000000900020073797a300000000062000800e0ec1628230ce1ef4d2202e6422cc36e65e73cf87ba4460208d87e0879025e3c24b92516482fada0335bfe061e32fa4309cc6780573d322f8bb73bb942f0da3b34ea3f522d8328976e8fd2e70917e25e155d1705879b7142bb613bc125a80000080003400000000a0800034000000009d00008006d72ec3d4c9d51f98be7ac46612deb5cc9a9b1d77a0e499d58220130658dca22beb03a3c9092d1f1d768cc0eab6e234ac52717b54efa399bba3745dc70d8ffd0bc33131149632d22bef39541938d2d4345dc93bb8706fc004471c0e0eddb5ca8705b646cf1a43bf2e6ab4c670638bbbacbbdedb5f67fb2bf4821c6d7ea1f689bce26427710ec0f3e53a1ff2650f3d44457d4469c165845d861f079b55f031e25a2dffb8b85a6b2126130b91d5642eac529f943961f513e3b075234b652208ec099bc3407cad3d17231967d16"], 0x17c}, 0x1, 0x0, 0x0, 0x1}, 0x801) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="180500001f0004000000000000000000850000007a00000095000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x8004}, 0x94) r9 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_attach_bpf(r9, 0x1, 0x32, &(0x7f0000000080)=r8, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x3, 0xc, &(0x7f0000000400)=ANY=[@ANYBLOB="30bf050913591b25dcc5703988488ed314b4dabd9ab43f23a3214856239b904531829671b1765a27df18a197b93545811fb7af5424f160927c8376d44a42dffd230808da2836d807cabf1b1f6ccf65a6ccb9c22e0bc68430"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x12, '\x00', 0x0, 0x25, r6}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r10 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000380)=@o_path={&(0x7f0000000100)='./file0\x00', 0x0, 0x10, r10}, 0xffffffffffffff19) 1m23.332165534s ago: executing program 4 (id=993): socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) eventfd(0x5) syz_clone(0x82001000, &(0x7f0000001800), 0x0, &(0x7f0000001840), 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x822057, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) renameat2(r1, &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f0000000240)='./file0\x00', 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2d}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) r3 = semget$private(0x0, 0x6, 0x3b1) semtimedop(r3, &(0x7f0000000040)=[{0x0, 0x1}], 0x1, 0x0) semop(r3, &(0x7f00000000c0)=[{}], 0x1) semtimedop(r3, &(0x7f0000000200)=[{0x0, 0xffff, 0x800}, {0x1, 0x7, 0x1000}], 0x2, 0x0) 1m23.156008831s ago: executing program 4 (id=999): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4600, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x2000000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x4db1, 0x2}, 0x0, 0x0) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) syz_clone(0x8d002240, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x11, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x7b}]}, 0x0}, 0x94) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff010000850000000e000000850000005000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x9) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x10, 0x7ffc1ffb}]}) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000b00)={[{@quota}, {@init_itable}]}, 0x1, 0x24e, &(0x7f0000000340)="$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") ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) rt_sigprocmask(0x0, 0x0, 0x0, 0x0) rt_sigtimedwait(0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x12) lsetxattr$trusted_overlay_upper(0x0, 0x0, 0x0, 0xfe37, 0x0) getresuid(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='rss_stat\x00', r1}, 0x10) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000d00000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000580)='kmem_cache_free\x00', r3}, 0x10) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) 1m23.016662037s ago: executing program 4 (id=1004): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0xfd, 0x0, 0x4, 0x0, 0x0, 0xfffffffffffffffd, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, @perf_bp={0x0, 0x4}, 0x184071, 0xc8, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r3, 0x0, 0xffffff48) (fail_nth: 2) 1m22.662160402s ago: executing program 4 (id=1014): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) r1 = syz_io_uring_setup(0x6434, &(0x7f0000000000)={0x0, 0x16a9, 0x80, 0x3, 0xf8}, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_enter(r1, 0x2820, 0xd5ab, 0x50, &(0x7f0000000100)={[0x2d]}, 0x8) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='bbr', 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x0, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000024000000080000000b"], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000400)={0xffffffffffffffff, &(0x7f0000000280), 0x0}, 0x20) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x47, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000004c0)='yeah', 0x4) write$P9_RMKNOD(r2, &(0x7f00000000c0)={0x14, 0x13, 0x2, {0x80, 0x2}}, 0x14) ioctl$sock_inet_SIOCGIFNETMASK(r2, 0x891b, &(0x7f00000001c0)={'ip6erspan0\x00', {0x2, 0x0, @private}}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0700000000000000000005000000180001801400020073797a5f74756e0000000000000000000800038004000380080005"], 0x3c}}, 0x0) 1m22.654837282s ago: executing program 33 (id=1014): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) r1 = syz_io_uring_setup(0x6434, &(0x7f0000000000)={0x0, 0x16a9, 0x80, 0x3, 0xf8}, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_enter(r1, 0x2820, 0xd5ab, 0x50, &(0x7f0000000100)={[0x2d]}, 0x8) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='bbr', 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x0, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000024000000080000000b"], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000400)={0xffffffffffffffff, &(0x7f0000000280), 0x0}, 0x20) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x47, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000004c0)='yeah', 0x4) write$P9_RMKNOD(r2, &(0x7f00000000c0)={0x14, 0x13, 0x2, {0x80, 0x2}}, 0x14) ioctl$sock_inet_SIOCGIFNETMASK(r2, 0x891b, &(0x7f00000001c0)={'ip6erspan0\x00', {0x2, 0x0, @private}}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0700000000000000000005000000180001801400020073797a5f74756e0000000000000000000800038004000380080005"], 0x3c}}, 0x0) 21.512600715s ago: executing program 5 (id=2808): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000001a40)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001a00)={&(0x7f0000000040)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWSET={0x16fc, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x7}, [@NFTA_SET_DESC={0x268, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x64, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10000}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000001}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}]}]}, @NFTA_SET_DESC_CONCAT={0xa8, 0x2, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x20000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffff7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}]}, {0x4}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x63}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x400}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000001}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffff000}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}]}, {0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3ff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x744f}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}]}]}, @NFTA_SET_DESC_CONCAT={0x118, 0x2, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x101}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x26}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x200}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffff8}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2f}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x100}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7fffffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2a40}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x200}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xe2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x100}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}]}, @NFTA_SET_DESC_CONCAT={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}]}, @NFTA_SET_DESC_CONCAT={0x30, 0x2, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8}]}]}]}, @NFTA_SET_EXPRESSIONS={0x1474, 0x12, 0x0, 0x1, [{0x1d4, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x1c4, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x51, 0x3, "09db051307cc16e9dfdff07a0ec5bc77a2e427c83f01196f206bdf9478ac3fada8706e23ffbc2c151e19455db11fec8dfd0a1708562103a87ba0ad3de276a7822bdca4225acf6a052b3872fbfb"}, @NFTA_TARGET_NAME={0x8, 0x1, 'TOS\x00'}, @NFTA_TARGET_INFO={0x47, 0x3, "bdca1b0a37c33a63baa489373465deb87c0373e5191d4cfa345a6ef37262588d025a49a4a989c31d81e8173d8ff13116b91652874368bc2945cdef8d1464a624d5d423"}, @NFTA_TARGET_NAME={0xa, 0x1, 'TRACE\x00'}, @NFTA_TARGET_INFO={0xc1, 0x3, "a968dc3dfa45bc4092ceca4e92dc84dee050dbe99feec5c60466c3da36759684b8d77c5b77ff1c3949ee248e941c35aa21f0ba1408ab888c6bb7ea73a47a7d80192cdb8596b60b16692c842c5a5145a8eac1e97cb9a91b20f3b345ab5450e63ee781783fe36b8f0b512cb46e5d43cf27325faebbcd865f5796ca158fccbca76570d5247d39da3c21b0f6c0a29cd8a310973b5b1b13973e09e25585b8c8f60e07e0a61ab77ea97544a8bebf23cdde7d772e599f43f7003a1b4a13dc4373"}, @NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TARGET_INFO={0x3a, 0x3, "c69cbbd7babd32598d5ce10a5373b49b2bf11b94daf73f374a2df4d5f0c61ff5037bf329ddf159560af321bbe51d0193ebf2b00323fa"}, @NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x1}]}}}, {0x126c, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x1258, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x1254, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x54, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VALUE={0xf1, 0x1, "63f20831c1b3914f5633646d5d335933c187346aea6589e513f90e28fbd92ba079930854cc2963bc7823cc355cbd520237db6ef585f88d7f819d853b6dc642086ab65e851ec3b84f5802ae19974b3eb4b4ce6c9488cbd3bd52ec1602960c8ff4266debfd3b360c431d093fdc170cbfe1265919ffffcae970211d7517f8b0c21c9d50da80a6808cc45f9ed53da8a65e3e6747bbb90e83315cb63cbe9c37962ffcac0c27f30272ebbbfa72579c99450de90dda42cc5c860569d6ea06034ea8de34c27c680a37a12a56e978c8de40c028c91f2cf868b98e7a380047ca991795e1dc5e3d78c8875c06f3cb684bca0f"}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VALUE={0xe1, 0x1, "1a856755397059140e581f516785770a529b68c26655be291931ad2441e86223389713ff0706bf748121242cc6f5b3413cfb89da86e1ba70f1b12348f39ec295310163f824c4e637835d6542f40804616af9896f814222915c6c52bb2dcde44c024e0db765778d80a78a519823248fb201f7e3d6f07433808c5452d617f5aec022f21621734e4235061e812616e6fa65cfae62207038e003b177b8067409f50666df10c216209a77d51f68eb61bce732dde637ffea834dffd004641f8e1af2ec67f83535f7ea717a2e74f3ccdf741fb815db5b86fb64adc43f316f3686"}]}]}}}, {0x20, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_RANGE_FROM_DATA={0x4}, @NFTA_RANGE_OP={0x8, 0x2, 0x1, 0x0, 0x1}]}}}, {0x10, 0x1, 0x0, 0x1, @last={{0x9}, @void}}]}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0xf0, 0x6, 0xa, 0x801, 0x0, 0x0, {0x3, 0x0, 0x3}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x2}, @NFTA_RULE_USERDATA={0xba, 0x7, 0x1, 0x0, "0d98b521b34d82267c3b4abc0e2fa12a52709f873bfccf8348c251b92c8832446adc9126ca2873eec7f3de9d688f6a1e6a870ccc4e3521b175660a86db32ace93efa8c8873921a14aa8e76657475afa046ce5dbd8c767bcd83db426f232268da8044d336f4837a8330a36bb50d863a7710416bdf736007313c72232ecc56fcb18394018e457bbce7fdc656581c5f9a45b09321026f689a986df4bc95d4cd271a208cb25b139b2e2d3b473812c3b901e55b6f2e1b43ae"}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELOBJ={0x98, 0x14, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_OBJ_USERDATA={0x4a, 0x8, "e1d4526b6659208c53b72675de031d75dd298fa34cb37d0919c8e76bd95ba2a39ca22eeb3a73c379d6e391f17b97ed6bba76d3e252d9ea09af178a2a859d419d8a2ef8ac4133"}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x9}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWFLOWTABLE={0xcc, 0x16, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HOOK={0xb0, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK_DEVS={0x54, 0x3, 0x0, 0x1, [{0x14, 0x1, 'team0\x00'}, {0x14, 0x1, 'batadv_slave_1\x00'}, {0x14, 0x1, 'dummy0\x00'}, {0x14, 0x1, 'syzkaller1\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7fffffff}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'team_slave_1\x00'}]}]}]}, @NFT_MSG_DELTABLE={0x1c, 0x2, 0xa, 0x801, 0x0, 0x0, {0x3}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}]}], {0x14}}, 0x19b4}, 0x1, 0x0, 0x0, 0xc040}, 0xc001) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000001a80), 0x2, 0x0) write$UHID_INPUT(r0, &(0x7f0000001ac0)={0x8, {"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", 0x1000}}, 0x1006) getresuid(&(0x7f0000002b80), &(0x7f0000002bc0)=0x0, &(0x7f0000002c00)) stat(&(0x7f0000002c40)='./file0\x00', &(0x7f0000002c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000002d00)={{0x1, 0x1, 0x18, r0, {0xee01, 0xffffffffffffffff}}, './file0\x00'}) (async) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000002d00)={{0x1, 0x1, 0x18, r0, {0xee01, 0xffffffffffffffff}}, './file0\x00'}) setxattr$system_posix_acl(&(0x7f0000002b00)='./file0\x00', &(0x7f0000002b40)='system.posix_acl_default\x00', &(0x7f0000002d40)={{}, {0x1, 0x2}, [{0x2, 0x4, 0xee00}, {0x2, 0x3, r1}], {}, [{0x8, 0x0, r2}, {0x8, 0x1, r4}], {0x10, 0x6}, {0x20, 0x2}}, 0x44, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000002e00), 0xffffffffffffffff) (async) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000002e00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000002e40)={'wpan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000002e40)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000002e80)={'wpan4\x00'}) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000002e80)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEV(0xffffffffffffffff, &(0x7f0000002fc0)={&(0x7f0000002dc0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000002f80)={&(0x7f0000002ec0)={0xac, r5, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_DEVICE={0x2c, 0x2e, 0x0, 0x1, [@NL802154_DEV_ATTR_FRAME_COUNTER={0x6, 0x1, 0x6}, @NL802154_DEV_ATTR_EXTENDED_ADDR={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ATTR_KEY_MODE={0x8, 0x6, 0x2}, @NL802154_DEV_ATTR_EXTENDED_ADDR={0xc, 0x4, {0xaaaaaaaaaaaa0202}}]}, @NL802154_ATTR_SEC_DEVICE={0x24, 0x2e, 0x0, 0x1, [@NL802154_DEV_ATTR_PAN_ID={0x6}, @NL802154_DEV_ATTR_KEY_MODE={0x8, 0x6, 0x2}, @NL802154_DEV_ATTR_PAN_ID={0x6, 0x2, 0xffff}, @NL802154_DEV_ATTR_KEY_MODE={0x8}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_SEC_DEVICE={0x14, 0x2e, 0x0, 0x1, [@NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5, 0x5, 0x1}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0xac}}, 0x20000045) (async) sendmsg$NL802154_CMD_NEW_SEC_DEV(0xffffffffffffffff, &(0x7f0000002fc0)={&(0x7f0000002dc0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000002f80)={&(0x7f0000002ec0)={0xac, r5, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_DEVICE={0x2c, 0x2e, 0x0, 0x1, [@NL802154_DEV_ATTR_FRAME_COUNTER={0x6, 0x1, 0x6}, @NL802154_DEV_ATTR_EXTENDED_ADDR={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ATTR_KEY_MODE={0x8, 0x6, 0x2}, @NL802154_DEV_ATTR_EXTENDED_ADDR={0xc, 0x4, {0xaaaaaaaaaaaa0202}}]}, @NL802154_ATTR_SEC_DEVICE={0x24, 0x2e, 0x0, 0x1, [@NL802154_DEV_ATTR_PAN_ID={0x6}, @NL802154_DEV_ATTR_KEY_MODE={0x8, 0x6, 0x2}, @NL802154_DEV_ATTR_PAN_ID={0x6, 0x2, 0xffff}, @NL802154_DEV_ATTR_KEY_MODE={0x8}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_SEC_DEVICE={0x14, 0x2e, 0x0, 0x1, [@NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5, 0x5, 0x1}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0xac}}, 0x20000045) syz_genetlink_get_family_id$devlink(&(0x7f0000003040), r3) (async) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000003040), r3) sendmsg$DEVLINK_CMD_SB_POOL_SET(r3, &(0x7f00000032c0)={&(0x7f0000003000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000003280)={&(0x7f0000003080)={0x1c4, r8, 0x400, 0x70bd2b, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x7}, {0x8, 0x13, 0x8000}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x9a}, {0x6, 0x11, 0x40}, {0x8, 0x13, 0x9}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x1}, {0x8, 0x13, 0xd}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x101}, {0x6, 0x11, 0xfc90}, {0x8, 0x13, 0x1}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x2}, {0x6, 0x11, 0x8fe3}, {0x8, 0x13, 0x7fff}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x5}, {0x6, 0x11, 0xb}, {0x8, 0x13, 0x6}, {0x5, 0x14, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0xd7b}, {0x8, 0x13, 0x3}, {0x5, 0x14, 0x1}}]}, 0x1c4}, 0x1, 0x0, 0x0, 0x8010}, 0x4) setsockopt$sock_int(r3, 0x1, 0x4, &(0x7f0000003300)=0xfffffffa, 0x4) flock(r3, 0x9) r9 = fcntl$getown(r3, 0x9) ptrace(0x8, r9) (async) ptrace(0x8, r9) ioctl$FIOCLEX(r0, 0x5451) acct(0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000003380)={0x3, &(0x7f0000003340)=[{0xd, 0xdd, 0xfa, 0x6}, {0x2, 0x8, 0x8, 0x4}, {0x5, 0xd8, 0x3, 0x5c4}]}) epoll_wait(0xffffffffffffffff, &(0x7f00000033c0)=[{}, {}, {}, {}, {}, {}, {}], 0x7, 0x2) lsetxattr$trusted_overlay_redirect(&(0x7f0000003440)='./file0\x00', &(0x7f0000003480), &(0x7f00000034c0)='./file0\x00', 0x8, 0x2) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000003500)=[@in6={0xa, 0x4e22, 0x80, @dev={0xfe, 0x80, '\x00', 0x43}, 0x2}, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x3c}}, @in={0x2, 0x4e24, @loopback}, @in={0x2, 0x4e21, @private=0xa010102}, @in={0x2, 0x4e20, @private=0xa010101}, @in={0x2, 0x4e23, @empty}, @in6={0xa, 0x4e24, 0xa73e, @dev={0xfe, 0x80, '\x00', 0x21}, 0x1}, @in6={0xa, 0x4e23, 0x9, @mcast1, 0x3}, @in6={0xa, 0x4e23, 0x7ff, @remote, 0x4}, @in={0x2, 0x4e20, @local}], 0xd0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r3, 0x84, 0x21, &(0x7f0000003600), &(0x7f0000003640)=0x4) ioctl$BTRFS_IOC_QGROUP_LIMIT(r3, 0x8030942b, &(0x7f0000003680)={0x10000, {0x5, 0x2, 0x8, 0x101, 0x3}}) rseq(&(0x7f0000003700)={0x0, 0x0, &(0x7f00000036c0)={0x0, 0x1, 0x2, 0x1ff, 0x3ff}, 0x2}, 0x20, 0x0, 0x0) (async) rseq(&(0x7f0000003700)={0x0, 0x0, &(0x7f00000036c0)={0x0, 0x1, 0x2, 0x1ff, 0x3ff}, 0x2}, 0x20, 0x0, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r3, 0x40189429, &(0x7f0000003740)={0x1, 0x6, 0xfffffffffffffffe}) bind$vsock_stream(r3, &(0x7f0000003780), 0x10) (async) bind$vsock_stream(r3, &(0x7f0000003780), 0x10) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RELOAD(r10, &(0x7f00000039c0)={&(0x7f00000037c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000003980)={&(0x7f0000003800)={0x168, r8, 0x4, 0x70bd2b, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r9}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r9}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r3}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r9}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x4}}]}, 0x168}, 0x1, 0x0, 0x0, 0x40}, 0xc000) (async) sendmsg$DEVLINK_CMD_RELOAD(r10, &(0x7f00000039c0)={&(0x7f00000037c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000003980)={&(0x7f0000003800)={0x168, r8, 0x4, 0x70bd2b, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r9}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r9}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r3}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r9}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x4}}]}, 0x168}, 0x1, 0x0, 0x0, 0x40}, 0xc000) 21.512369345s ago: executing program 5 (id=2809): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000300)={0xa, 0x2, 0xfffffffc, @empty, 0x80000001}, 0x18) 21.512057385s ago: executing program 5 (id=2810): bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000030000000"], 0x0, 0x7}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000280)="b9ff03076804268c989e14f088a8", 0x0, 0x2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 21.509071425s ago: executing program 5 (id=2811): symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000fc0)=@raw={'raw\x00', 0x8, 0x3, 0x4e8, 0x0, 0x11, 0x148, 0x340, 0x0, 0x450, 0x2a8, 0x2a8, 0x450, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x88000000, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00'}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}, {0x0, 0x0, 0x81}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x4f, 0x7, "72f6daeff0a9c6294e211d2d88fe6dcff5d0e552201da3b7a1fdb30dcb59"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x548) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/disk', 0x1, 0x0) io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x734b, r1, &(0x7f0000000040)="c292", 0x2, 0x7, 0x0, 0x2}]) socket$nl_route(0x10, 0x3, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000140)=ANY=[], 0x32600) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000003c0)=0x11) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x2) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f00000003c0)=[@in={0x2, 0x4e1e, @private=0xa010101}], 0x10) r4 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f00000000c0), 0x12) syz_read_part_table(0x5af, &(0x7f0000001540)="$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") setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r3, 0x84, 0xc, &(0x7f0000000100), 0x4) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r3, 0x84, 0x6d, &(0x7f0000000140)={0x0, 0x2c, "24a113204f6b67ba709543f5bc2b841301cea822c8abd4c2fdae4e5d15c36ce12a904dc27f6ed93c40d5a7b2"}, &(0x7f00000000c0)=0x34) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6a, '\x00', 0x0, @fallback=0x29, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f00000002c0), 0x64, 0x50a, &(0x7f0000000940)="$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") bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r5}, 0x10) r6 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r6, &(0x7f0000000040)={0x18, 0x0, {0x1, @multicast, 'ip6gre0\x00'}}, 0x1e) connect$pppoe(r6, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a4a438, &(0x7f00000008c0)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200080, &(0x7f0000000500)={[{@mb_optimize_scan}, {@discard}, {@barrier}, {@noauto_da_alloc}, {@prjquota}, {@journal_dev={'journal_dev', 0x3d, 0x4}}]}, 0xfb, 0x59e, &(0x7f0000001480)="$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") bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f00000007c0)=ANY=[], &(0x7f0000000180)=""/17, 0x8d, 0x11, 0x1, 0x80000001}, 0x28) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x4, 0x7ffc0002}]}) 20.658380991s ago: executing program 5 (id=2832): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) (async) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff, 0xffffffffffffffff}}, './file0/../file0\x00'}) io_uring_setup(0x7c32, &(0x7f0000000100)={0x0, 0x9e2, 0x200, 0x1, 0x22, 0x0, r0}) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) mount$bpf(0x0, &(0x7f0000000180)='./file0/../file0\x00', 0x0, 0x24000, 0x0) (async) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) (async) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x8b7848, 0x0) 20.633207882s ago: executing program 5 (id=2833): bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000030000000"], 0x0, 0x7}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r1}, 0x18) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000280)="b9ff03076804268c989e14f088a8", 0x0, 0x2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 9.778503869s ago: executing program 2 (id=3012): r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000500000002"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x18) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r3, @ANYBLOB="00000000000000001c001a800800028008000200080000003e"], 0x44}}, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmmsg(r4, 0x0, 0x0, 0x0) 9.561601638s ago: executing program 2 (id=3013): socket$inet_sctp(0x2, 0x1, 0x84) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000340), &(0x7f0000000280)=@tcp, 0x1}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000000c0)='kmem_cache_free\x00', r1}, 0x18) syz_emit_ethernet(0x2e, &(0x7f0000000200)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0xb00, 0x4e22, 0xc, 0x0, @gue={{0x1, 0x1, 0x3, 0xd, 0x100, @void}}}}}}}, 0x0) 9.561376488s ago: executing program 2 (id=3014): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000000400000008020000d9"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7030000003e7400850000001b000000b700000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)={0x2c, r3, 0xc4fc9e906872338b, 0x70bd2a, 0x1000, {{0x15}, {@val={0x8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x4}]}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc040000}, 0x4008040) 9.559143738s ago: executing program 2 (id=3015): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) getsockopt$inet6_opts(r2, 0x29, 0x1, 0x0, &(0x7f0000000240)) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)={0x34, r1, 0x1, 0x3, 0x25dfdbff, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x48000}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18efffffffffe04b00000000000088d924d8dac4", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x3c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r3 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r3, 0x29, 0xd1, &(0x7f0000000000)=0x9, 0x4) ioctl$sock_inet_SIOCDARP(r3, 0x8953, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) timer_create(0x2, 0x0, &(0x7f0000bbdffc)) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x10000) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000007000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', r5, 0x0, 0x3}, 0x18) r6 = fsopen(&(0x7f0000000040)='debugfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f00000000c0)='syzkaller\x00', &(0x7f0000000240)='\x00', 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r7) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r9}, 0x10) add_key(&(0x7f00000001c0)='ceph\x00', 0x0, &(0x7f0000000840)='\x00\x00\x00\x00\x00\x00\x00\x00\x00*\x00\x00', 0xc, 0xffffffffffffffff) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4004000}, 0x20000001) sendmsg$NFT_BATCH(r10, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[], 0x70}, 0x1, 0x0, 0x0, 0x4451099e461ce3a5}, 0x4005) 5.590420615s ago: executing program 34 (id=2833): bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000030000000"], 0x0, 0x7}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r1}, 0x18) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000280)="b9ff03076804268c989e14f088a8", 0x0, 0x2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 3.595567749s ago: executing program 3 (id=3077): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000480)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000080)='sys_enter\x00', r0}, 0x10) r1 = add_key$fscrypt_v1(&(0x7f0000000400), &(0x7f0000000440)={'fscrypt:', @desc1}, &(0x7f0000000480)={0x0, "6035ae1e0fe721441705322225930e6c1e3e2a51a92fd796bc34d7cf6e0236805b4377f7ab1a9b01c103a4c6a7ef54e6763fd7264c39ea00c508ba6062696138"}, 0x48, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x4, r1, 0x0, 0x0, 0x0) 2.002729516s ago: executing program 3 (id=3082): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="34000000150a03"], 0x34}, 0x1, 0x0, 0x0, 0x66df5cfbe53006d1}, 0x0) madvise(&(0x7f0000a5e000/0x1000)=nil, 0x1000, 0x17) r3 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r3, 0x40042409, 0x1) 1.823928183s ago: executing program 2 (id=3021): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = socket$rds(0x15, 0x5, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001e00)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x39, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x7, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa010100, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@cipso={0x86, 0x6}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) bind$rds(r1, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r1, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}], 0x1}}, @rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000000180)=""/58, 0x3a}, &(0x7f00000002c0), 0x8}}], 0x78}, 0x0) 1.717014718s ago: executing program 2 (id=3085): r0 = socket$inet(0x2, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r2, 0x0, 0x20000000) sendmsg$NFT_BATCH(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a32000000002c0003800800014000000000180003801400010076657468315f00005f626f6e64000000080002400000000064000000160a0101000b000000000000010000000900020073797a32000000000900010073797a3000000000300003802c0003801400010067656e657665300000000000000000001400010076657468315f"], 0x104}}, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x2, 0x3, 0x290, 0x0, 0x0, 0xf0, 0xf8, 0xf0, 0x1f8, 0x1f8, 0x1f8, 0x1f8, 0x1f8, 0x3, 0x0, {[{{@ip={@multicast1, @multicast1, 0x0, 0x0, 'ip6gretap0\x00', 'syzkaller1\x00', {}, {}, 0x11}, 0x0, 0xd8, 0xf8, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0xc}}, @common=@unspec=@quota={{0x38}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0x98, 0x100, 0x0, {}, [@common=@ttl={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x1, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f0) r3 = openat$incfs(0xffffffffffffffff, 0x0, 0x200000, 0x954553c44c398482) r4 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000700000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000300)='kmem_cache_free\x00', r6}, 0x18) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000880), r3) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r4, &(0x7f00000009c0)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000980)={&(0x7f00000008c0)={0xa4, r7, 0x300, 0x70bd2a, 0x25dfdbff, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8}, {0x2}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}]}, 0xa4}, 0x1, 0x0, 0x0, 0x100}, 0x90) r8 = request_key(&(0x7f0000000380)='keyring\x00', &(0x7f0000000740)={'syz', 0x0}, &(0x7f0000000800)='\x00\x00', 0xfffffffffffffffb) request_key(&(0x7f0000000200)='syzkaller\x00', &(0x7f0000000240)={'syz', 0x2}, &(0x7f0000000340)='$\x00', r8) statx(0xffffffffffffffff, 0x0, 0x6000, 0x8, 0x0) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000000), 0x4) r9 = getpid() r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000000a40), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r11, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r9}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x4, 0x1, 0x7ffc1ff9}]}) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000002c0)='kmem_cache_free\x00', r12}, 0x10) r13 = socket(0x10, 0x3, 0x0) sendto$inet6(r13, &(0x7f0000000100)="c10e000018001f06b9409b0dffff110d0207be040205fe0506100a044300040018000000fac8388827a685a168d9a44604094565360c648dcaaf6c26c291214549932fde4a460c89b6ec0cff3959547f509058ba86c902fc3a10004a320c0400160012000a00000000", 0x69, 0x0, 0x0, 0x0) lsm_list_modules(0x0, 0x0, 0x0) 1.630905061s ago: executing program 3 (id=3086): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000002c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x3000046, &(0x7f00000134c0)={[{@dioread_nolock}, {@noauto_da_alloc}, {@inlinecrypt}, {@sysvgroups}, {@data_err_ignore}, {@barrier_val={'barrier', 0x3d, 0x7f}}, {@data_err_ignore}, {@grpquota}, {@dioread_nolock}, {@nobarrier}, {@resuid}, {@quota}]}, 0x1, 0x553, &(0x7f0000001080)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==") ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc018937e, 0x0) syz_emit_ethernet(0x11dc0, &(0x7f0000000340)=ANY=[], 0x0) msgctl$IPC_RMID(0x0, 0x2000000) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305828, &(0x7f0000000240)={0x17c04, 0xffffffffffffffff, 0x100, 0x100000002, 0xfffffffffffffffe}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1b, 0x3, &(0x7f0000000100)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x94) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x183042, 0x8) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000200)=0x4) pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xe7c) bpf$PROG_LOAD(0x5, 0x0, 0x0) symlinkat(0x0, 0xffffffffffffff9c, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000ed074479000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r2}, 0x18) getpid() sched_setaffinity(0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1200, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) unlinkat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="b40000000107010100008000000000000700000708000540000000010800054000000000340007800800024000000006080001"], 0xb4}, 0x1, 0x0, 0x0, 0x40000}, 0x24004800) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=@deltaction={0x14, 0x31, 0x8, 0x70bd2d, 0x25dfdbfd}, 0x14}}, 0x20040881) 1.334277734s ago: executing program 3 (id=3092): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='page_pool_state_release\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000280)="b9ff03076804268c989e14f088a8", 0x0, 0x2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 1.301574665s ago: executing program 3 (id=3093): bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001700)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) getrlimit(0x5, &(0x7f00000000c0)) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x10000}) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x8f0, &(0x7f0000002400)=0x0) io_submit(r5, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2002000000, 0x4, 0x0, 0x1, 0x0, r4, &(0x7f0000000040)="0200ffff0000", 0x6, 0x0, 0x0, 0x2}]) sendmmsg$unix(r3, &(0x7f0000003580)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000380)="a1", 0x1}], 0x1, &(0x7f0000000800)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r2, @ANYBLOB="0000000014"], 0x30, 0x40400d1}}], 0x1, 0x810) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={0x0, &(0x7f0000000500)=""/88, 0x0, 0x58, 0x0, 0x4, 0x10000}, 0x28) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r8}, 0x10) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = socket(0x10, 0x3, 0x0) write(r10, &(0x7f0000000000)="3c00000043001f001307f4f9002304427f7a4353c7c97027000a04d65f08000800000000021700038042ad46da87b805cae5e38caf1ece0500000099", 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x20, 0x3, &(0x7f00000004c0)=ANY=[@ANYRESOCT=r0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000b80)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b40)={&(0x7f0000000600)='kfree\x00', r11}, 0x10) r12 = openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x88002, 0x0) pwritev(r12, &(0x7f0000000100)=[{0x0, 0x72}, {&(0x7f0000000140)="de", 0x1}], 0x2, 0x0, 0x0) splice(r2, 0x0, r9, 0x0, 0xa85, 0xf) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000e50003000000000085100000fcffffff250000001000000006000000faffffff95"], &(0x7f0000000140)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000}, 0x94) 1.176080731s ago: executing program 3 (id=3096): r0 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000c40)={0x0, 0xfe72}) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xc, &(0x7f0000000040)=ANY=[@ANYRESOCT=0x0, @ANYRES32, @ANYRES16=r0], 0x0, 0xfffffffd, 0x0, 0x0, 0x41100, 0x39, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) ioprio_get$uid(0x3, 0xffffffffffffffff) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000340)={0x1d, r4, 0x0, {0x0, 0x1, 0x4}, 0xfe}, 0x18) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000080)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x924924924924c31, 0x3ec0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff2c}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r7 = io_uring_setup(0x4fee, &(0x7f0000000040)={0x0, 0xc8df, 0xc000, 0xa, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x10, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0x9, 0xffff}, {0xe, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x20040000) r8 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r7, 0x2219, 0x7721, 0x16, 0x0, 0x0) readv(r5, &(0x7f00000002c0)=[{&(0x7f0000000200)=""/171, 0xab}], 0x1) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) setsockopt$SO_J1939_FILTER(r3, 0x6b, 0x1, &(0x7f0000000180)=[{0x2, 0x800000, {0x2, 0x1, 0x3}, {0x0, 0x0, 0x4}, 0x2, 0x99f499b4b67a323b}, {0x3, 0x3, {0x2, 0xff}, {0x0, 0x0, 0x3}, 0xfe, 0x2}], 0x40) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x74, r4, {0xfff3, 0x10}, {0xfff1, 0x9}, {0x2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x48040}, 0x20000050) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r1, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x1, 0x0, 0x0, 0x0, 0x2}, 0x94) 1.026706047s ago: executing program 6 (id=3102): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000002c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x3000046, &(0x7f00000134c0)={[{@dioread_nolock}, {@noauto_da_alloc}, {@inlinecrypt}, {@sysvgroups}, {@data_err_ignore}, {@barrier_val={'barrier', 0x3d, 0x7f}}, {@data_err_ignore}, {@grpquota}, {@dioread_nolock}, {@nobarrier}, {@resuid}, {@quota}]}, 0x1, 0x553, &(0x7f0000001080)="$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") ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc018937e, 0x0) syz_emit_ethernet(0x11dc0, &(0x7f0000000340)=ANY=[], 0x0) msgctl$IPC_RMID(0x0, 0x2000000) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305828, &(0x7f0000000240)={0x17c04, 0xffffffffffffffff, 0x100, 0x100000002, 0xfffffffffffffffe}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1b, 0x3, &(0x7f0000000100)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x94) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x183042, 0x8) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000200)=0x4) pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xe7c) bpf$PROG_LOAD(0x5, 0x0, 0x0) symlinkat(0x0, 0xffffffffffffff9c, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000ed074479000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r2}, 0x18) getpid() sched_setaffinity(0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1200, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) unlinkat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="b40000000107010100008000000000000700000708000540000000010800054000000000340007800800024000000006080001"], 0xb4}, 0x1, 0x0, 0x0, 0x40000}, 0x24004800) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=@deltaction={0x14, 0x31, 0x8, 0x70bd2d, 0x25dfdbfd}, 0x14}}, 0x20040881) 826.871696ms ago: executing program 6 (id=3103): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='page_pool_state_release\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000280)="b9ff03076804268c989e14f088a8", 0x0, 0x2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 780.908317ms ago: executing program 6 (id=3104): r0 = accept4$llc(0xffffffffffffffff, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000100)=0x10, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r0, 0x80089419, &(0x7f0000000140)) r1 = socket(0x2, 0x3, 0xff) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000016c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x840e, &(0x7f0000000580)={[{@discard}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@jqfmt_vfsold}, {@bsdgroups}, {@quota}]}, 0x3, 0x43a, &(0x7f0000000840)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000060000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000480), r6) sendmsg$NLBL_CIPSOV4_C_ADD(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x3c, r7, 0x207, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5, 0x3, 0x5}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x84}, 0x880) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000dfff75390000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='io_uring_register\x00', r8}, 0x10) r9 = io_uring_setup(0x484, &(0x7f00000002c0)={0x0, 0xad7f, 0x400, 0x1, 0x98}) io_uring_register$IORING_REGISTER_FILES(r9, 0x2, &(0x7f0000000640), 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000180)='kfree\x00', r5}, 0x18) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r10 = syz_io_uring_setup(0x18d6, &(0x7f0000000440)={0x0, 0x5352, 0x0, 0x2000, 0xfffffffc}, &(0x7f0000ffe000), &(0x7f00000004c0)) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r10, 0x2, &(0x7f0000000180), 0xfe) pwrite64(r3, &(0x7f00000001c0)='\x00', 0x1, 0x8000c61) fallocate(r3, 0x3, 0x8000000, 0x8000c62) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), r11) sendmsg$WG_CMD_SET_DEVICE(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=ANY=[@ANYBLOB="c8010000", @ANYRES16=r12, @ANYBLOB="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"], 0x1c8}}, 0x24000000) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) sendmmsg$unix(r1, &(0x7f0000000180), 0x31, 0x0) 593.469526ms ago: executing program 7 (id=3107): syz_emit_ethernet(0x6e, &(0x7f00000004c0)={@broadcast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x38, 0x3a, 0x0, @local, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x7d0, {0x0, 0x6, "8cb02b", 0x0, 0x2f, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, @local, [@dstopts={0x1d}]}}}}}}}, 0x0) 552.418137ms ago: executing program 7 (id=3108): syz_io_uring_setup(0x6434, 0x0, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000500)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x47, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0700000000000000000005000000180001801400020073797a5f74756e0000000000000000000800038004000380080005"], 0x3c}}, 0x0) 439.564032ms ago: executing program 0 (id=3110): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000000400000008020000d9"], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYBLOB="0000000000000000b7030000003e7400850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r0}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)={0x2c, r2, 0xc4fc9e906872338b, 0x70bd2a, 0x1000, {{0x15}, {@val={0x8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x4}]}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc040000}, 0x4008040) 267.205529ms ago: executing program 0 (id=3112): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000001540)={0x58, 0x0, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x3}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_PEER_V6={0x14, 0x9, @loopback}, @FOU_ATTR_IPPROTO={0x5}, @FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e22}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x404c) 266.927969ms ago: executing program 7 (id=3113): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='page_pool_state_release\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000280)="b9ff03076804268c989e14f088a8", 0x0, 0x2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 232.03173ms ago: executing program 7 (id=3114): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a500000008000000"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x4}, 0x18) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, &(0x7f00000004c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0x1, @loopback, 0x2}}}, 0x30) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={0xffffffffffffffff, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$smc(&(0x7f00000033c0), 0xffffffffffffffff) sendmsg$SMC_PNETID_ADD(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x34, r3, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'hsr0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x24040000}, 0x800) sendmsg$SMC_PNETID_FLUSH(r2, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f00000019c0)={0x14, r3, 0x1, 0x70bd28, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x800) 224.163861ms ago: executing program 6 (id=3115): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x4e4}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r3, @ANYBLOB], 0x44}}, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f0000000000), 0x4000000000001f2, 0x0) 191.938232ms ago: executing program 0 (id=3116): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000002c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x3000046, &(0x7f00000134c0)={[{@dioread_nolock}, {@noauto_da_alloc}, {@inlinecrypt}, {@sysvgroups}, {@data_err_ignore}, {@barrier_val={'barrier', 0x3d, 0x7f}}, {@data_err_ignore}, {@grpquota}, {@dioread_nolock}, {@nobarrier}, {@resuid}, {@quota}]}, 0x1, 0x553, &(0x7f0000001080)="$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") ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc018937e, 0x0) syz_emit_ethernet(0x11dc0, &(0x7f0000000340)=ANY=[], 0x0) msgctl$IPC_RMID(0x0, 0x2000000) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305828, &(0x7f0000000240)={0x17c04, 0xffffffffffffffff, 0x100, 0x100000002, 0xfffffffffffffffe}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1b, 0x3, &(0x7f0000000100)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x94) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x183042, 0x8) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000200)=0x4) pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xe7c) bpf$PROG_LOAD(0x5, 0x0, 0x0) symlinkat(0x0, 0xffffffffffffff9c, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r2}, 0x18) getpid() sched_setaffinity(0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1200, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) unlinkat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="b40000000107010100008000000000000700000708000540000000010800054000000000340007800800024000000006080001"], 0xb4}, 0x1, 0x0, 0x0, 0x40000}, 0x24004800) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=@deltaction={0x14, 0x31, 0x8, 0x70bd2d, 0x25dfdbfd}, 0x14}}, 0x20040881) 187.431252ms ago: executing program 7 (id=3117): timerfd_create(0x8, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001cc0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000200), 0x1, 0x4bc, &(0x7f0000000a40)="$eJzs3ctvW1UaAPDPdpMmaWb6mNGo7UjTSh2p81DjPDRqMjObWc3MotJoKrEBqYTEDSVOHMVOaaIuUth1wQKBQEIs2PMXsKErKiTEGvaIBSqCEiRAQjK613abOHGwII1p7u8n3ebch/2dU+s7Ovf4Xt8AMuts8k8uYjgiPoyIo43VrQecbfzZuH9zJllyUa9f/iKXHpestw5tve5IRKxHxEBE/P/fEc/ktsetrq7NT5fLpeXmerG2sFSsrq5duLYwPVeaKy2OTV6cmpocnRif2rO23n7puduX3vlv/9vfvHjv7svvvZtUa7i5b3M79lKj6X1xfNO2QxHxz0cRrAcKzfYM9roi/CTJ5/ebiDiX5v/RKKSfJpAF9Xq9/n39cKfd63XgwMqnY+BcfiQiGuV8fmSkMYb/bQzly5Vq7a9XKyuLs42x8rHoy1+9Vi6NNs8VjkVfLlkfS8sP18fb1ici0jHwK4XBdH1kplKe3d+uDmhzpC3/vy408h/ICKf8kF3yH7JL/kN2yX/ILvkP2SX/IbvkP2SX/Ifskv+QXfIfskv+Qyb979KlZKm37n+fvb66Ml+5fmG2VJ0fWViZGZmpLC+NzFUqc+k9Ows/9n7lSmVp7G+xcqNYK1Vrxerq2pWFyspi7Up6X/+VUt++tAroxvEzdz7ORcT63wfTJdHf3CdX4WCr13PR63uQgd4o9LoDAnrG1B9kl3N8oP0netvHBQOdXrj0cL4QeLzke10BoGfOn/L9H2SV+X/ILvP/kF3G+MAOj+jbYrf5f+DxZP4fsmu4w/O/frXp2V2jEfHriPio0He49awv4CDIf5Zrjv/PH/3jcPve/ty36VcE/RHx/BuXX7sxXastjyXbv3ywvfZ6c/v4phd2PGEAeqWVp608BgCya+P+zZnWsp9xP/9X4yKE7fEPNecmB9LvKIc2cluuVcjt0bUL67ci4uRO8XPN5503TmSGNgrb4p9o/s013iKt76H0uen7E//Upvh/2BT/9M/+X4FsuJP0P6M75V8+zel4kH9b+5/hPbp2onP/l3/Q/xU69H9nuozx7JsvfNox/q2I0zvGb8UbSGO1x0/qdr7L+PeeeuJ3nfbV32q8z07xW5JSsbawVKyurl1If0durrQ4NnlxampydGJ8qpjOURdbM9Xb/ePkB3d3a/9Qh/i7tT/Z9ucu2//d799/8uwu8f90bufP/8Qu8Qcj4i9dxv9q/JOnO+1L4s92aH9+l/jJtoku41df/c/hLg8FAPZBdXVtfrpcLi0rKCj0pHDrl1GNtkKveybgUauuJqfmSdL3uiYAAAAAAAAAAABAt/bjcuJetxEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4CD4IQAA//9HcdTQ") creat(&(0x7f00000000c0)='./bus\x00', 0x1a2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000000bc0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="a1ab00000000000000003200000008001781"], 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0xa4c42, 0x108) 125.279745ms ago: executing program 0 (id=3118): timerfd_create(0x8, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001cc0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000200), 0x1, 0x4bc, &(0x7f0000000a40)="$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") creat(&(0x7f00000000c0)='./bus\x00', 0x1a2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000000bc0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="a1ab00000000000000003200000008001781"], 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) 98.331466ms ago: executing program 0 (id=3119): socket$inet_sctp(0x2, 0x1, 0x84) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000340), &(0x7f0000000280)=@tcp, 0x1}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000000c0)='kmem_cache_free\x00', r1}, 0x18) syz_emit_ethernet(0x2e, &(0x7f0000000200)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0xb00, 0x4e22, 0xc, 0x0, @gue={{0x1, 0x1, 0x3, 0xd, 0x100, @void}}}}}}}, 0x0) 63.665688ms ago: executing program 6 (id=3120): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x4}, 0x18) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, &(0x7f00000004c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0x1, @loopback, 0x2}}}, 0x30) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={0xffffffffffffffff, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$smc(&(0x7f00000033c0), 0xffffffffffffffff) sendmsg$SMC_PNETID_ADD(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x34, r3, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'hsr0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x24040000}, 0x800) sendmsg$SMC_PNETID_FLUSH(r2, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f00000019c0)={0x14, r3, 0x1, 0x70bd28, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x800) 34.339399ms ago: executing program 0 (id=3121): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000000400000008020000d9"], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYBLOB="0000000000000000b7030000003e7400850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r0}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)={0x2c, r2, 0xc4fc9e906872338b, 0x70bd2a, 0x1000, {{0x15}, {@val={0x8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x4}]}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc040000}, 0x4008040) 19.870079ms ago: executing program 7 (id=3122): r0 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000c40)={0x0, 0xfe72}) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xc, &(0x7f0000000040)=ANY=[@ANYRESOCT=0x0, @ANYRES32, @ANYRES16=r0], 0x0, 0xfffffffd, 0x0, 0x0, 0x41100, 0x39, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) ioprio_get$uid(0x3, 0xffffffffffffffff) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000340)={0x1d, r4, 0x0, {0x0, 0x1, 0x4}, 0xfe}, 0x18) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000080)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x924924924924c31, 0x3ec0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff2c}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r7 = io_uring_setup(0x4fee, &(0x7f0000000040)={0x0, 0xc8df, 0xc000, 0xa, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x10, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0x9, 0xffff}, {0xe, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x20040000) r8 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r7, 0x2219, 0x7721, 0x16, 0x0, 0x0) readv(r5, &(0x7f00000002c0)=[{&(0x7f0000000200)=""/171, 0xab}], 0x1) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) setsockopt$SO_J1939_FILTER(r3, 0x6b, 0x1, &(0x7f0000000180)=[{0x2, 0x800000, {0x2, 0x1, 0x3}, {0x0, 0x0, 0x4}, 0x2, 0x99f499b4b67a323b}, {0x3, 0x3, {0x2, 0xff}, {0x0, 0x0, 0x3}, 0xfe, 0x2}], 0x40) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x74, r4, {0xfff3, 0x10}, {0xfff1, 0x9}, {0x2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x48040}, 0x20000050) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r1, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x1, 0x0, 0x0, 0x0, 0x2}, 0x94) 0s ago: executing program 6 (id=3123): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='page_pool_state_release\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000280)="b9ff03076804268c989e14f088a8", 0x0, 0x2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) kernel console output (not intermixed with test programs): ][T13397] loop3: detected capacity change from 0 to 1024 [ 150.698063][T13395] EXT4-fs: test_dummy_encryption option not supported [ 150.716312][T13397] EXT4-fs: inline encryption not supported [ 150.736901][T13397] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4193: comm syz.3.2694: Allocating blocks 385-513 which overlap fs metadata [ 150.757550][T13406] loop2: detected capacity change from 0 to 512 [ 150.766795][T13397] EXT4-fs (loop3): pa ffff8881071de9a0: logic 16, phys. 129, len 24 [ 150.775121][T13397] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5444: group 0, free 0, pa_free 8 [ 150.786215][T13397] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 52 with error 28 [ 150.798745][T13397] EXT4-fs (loop3): This should not happen!! Data will be lost [ 150.798745][T13397] [ 150.808601][T13397] EXT4-fs (loop3): Total free blocks count 0 [ 150.814634][T13397] EXT4-fs (loop3): Free/Dirty block details [ 150.820554][T13397] EXT4-fs (loop3): free_blocks=128 [ 150.825710][T13397] EXT4-fs (loop3): dirty_blocks=0 [ 150.830830][T13397] EXT4-fs (loop3): Block reservation details [ 150.836877][T13397] EXT4-fs (loop3): i_reserved_data_blocks=0 [ 150.849135][T13406] ext4 filesystem being mounted at /508/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 150.861411][T13406] FAULT_INJECTION: forcing a failure. [ 150.861411][T13406] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 150.874670][T13406] CPU: 1 UID: 0 PID: 13406 Comm: syz.2.2695 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 150.874708][T13406] Tainted: [W]=WARN [ 150.874715][T13406] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 150.874729][T13406] Call Trace: [ 150.874736][T13406] [ 150.874743][T13406] __dump_stack+0x1d/0x30 [ 150.874764][T13406] dump_stack_lvl+0xe8/0x140 [ 150.874825][T13406] dump_stack+0x15/0x1b [ 150.874914][T13406] should_fail_ex+0x265/0x280 [ 150.874942][T13406] should_fail+0xb/0x20 [ 150.874957][T13406] should_fail_usercopy+0x1a/0x20 [ 150.875048][T13406] strncpy_from_user+0x25/0x230 [ 150.875079][T13406] ? kmem_cache_alloc_noprof+0x242/0x480 [ 150.875135][T13406] ? getname_flags+0x80/0x3b0 [ 150.875211][T13406] getname_flags+0xae/0x3b0 [ 150.875238][T13406] do_sys_openat2+0x60/0x110 [ 150.875262][T13406] __x64_sys_openat+0xf2/0x120 [ 150.875283][T13406] x64_sys_call+0x2eab/0x3000 [ 150.875378][T13406] do_syscall_64+0xd2/0x200 [ 150.875457][T13406] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 150.875540][T13406] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 150.875596][T13406] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.875621][T13406] RIP: 0033:0x7fb6f658f749 [ 150.875638][T13406] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 150.875741][T13406] RSP: 002b:00007fb6f4ff7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 150.875764][T13406] RAX: ffffffffffffffda RBX: 00007fb6f67e5fa0 RCX: 00007fb6f658f749 [ 150.875778][T13406] RDX: 0000000000107042 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 150.875790][T13406] RBP: 00007fb6f4ff7090 R08: 0000000000000000 R09: 0000000000000000 [ 150.875802][T13406] R10: 0000000000000020 R11: 0000000000000246 R12: 0000000000000001 [ 150.875815][T13406] R13: 00007fb6f67e6038 R14: 00007fb6f67e5fa0 R15: 00007ffed5178d78 [ 150.875836][T13406] [ 151.079964][T13414] __nla_validate_parse: 31 callbacks suppressed [ 151.079982][T13414] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2698'. [ 151.110485][T13414] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2698'. [ 151.203122][T13471] loop5: detected capacity change from 0 to 512 [ 151.212830][T13479] smc: net device hsr0 applied user defined pnetid SYZ2 [ 151.228362][T13481] loop3: detected capacity change from 0 to 1024 [ 151.236881][T13481] EXT4-fs: inline encryption not supported [ 151.243896][T13471] ext4 filesystem being mounted at /386/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 151.245331][T13484] loop2: detected capacity change from 0 to 256 [ 151.261564][T13484] FAT-fs (loop2): bogus logical sector size 128 [ 151.268063][T13484] FAT-fs (loop2): Can't find a valid FAT filesystem [ 151.288391][T13481] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4193: comm syz.3.2709: Allocating blocks 385-513 which overlap fs metadata [ 151.312927][T13481] EXT4-fs (loop3): pa ffff8881071f5e70: logic 16, phys. 129, len 24 [ 151.321054][T13481] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5444: group 0, free 0, pa_free 8 [ 151.344435][T13481] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 52 with error 28 [ 151.357028][T13481] EXT4-fs (loop3): This should not happen!! Data will be lost [ 151.357028][T13481] [ 151.366984][T13481] EXT4-fs (loop3): Total free blocks count 0 [ 151.373117][T13481] EXT4-fs (loop3): Free/Dirty block details [ 151.373154][T13509] netlink: 92 bytes leftover after parsing attributes in process `syz.3.2709'. [ 151.379028][T13481] EXT4-fs (loop3): free_blocks=128 [ 151.388529][T13509] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2709'. [ 151.393576][T13481] EXT4-fs (loop3): dirty_blocks=0 [ 151.407743][T13481] EXT4-fs (loop3): Block reservation details [ 151.413961][T13481] EXT4-fs (loop3): i_reserved_data_blocks=0 [ 151.437438][T13511] loop2: detected capacity change from 0 to 512 [ 151.465152][T13511] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 151.502921][T13511] EXT4-fs (loop2): orphan cleanup on readonly fs [ 151.511647][T13510] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2713'. [ 151.542702][T13511] EXT4-fs warning (device loop2): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 151.579948][T13511] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 151.589143][T13535] loop5: detected capacity change from 0 to 256 [ 151.597892][T13535] FAT-fs (loop5): bogus logical sector size 128 [ 151.604338][T13535] FAT-fs (loop5): Can't find a valid FAT filesystem [ 151.612178][T13511] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.2714: bg 0: block 40: padding at end of block bitmap is not set [ 151.613260][T13535] FAULT_INJECTION: forcing a failure. [ 151.613260][T13535] name failslab, interval 1, probability 0, space 0, times 0 [ 151.639207][T13535] CPU: 0 UID: 0 PID: 13535 Comm: syz.5.2723 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 151.639240][T13535] Tainted: [W]=WARN [ 151.639247][T13535] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 151.639258][T13535] Call Trace: [ 151.639266][T13535] [ 151.639274][T13535] __dump_stack+0x1d/0x30 [ 151.639299][T13535] dump_stack_lvl+0xe8/0x140 [ 151.639356][T13535] dump_stack+0x15/0x1b [ 151.639362][T13537] loop3: detected capacity change from 0 to 764 [ 151.639377][T13535] should_fail_ex+0x265/0x280 [ 151.639410][T13535] should_failslab+0x8c/0xb0 [ 151.639438][T13535] kmem_cache_alloc_node_noprof+0x57/0x4a0 [ 151.639513][T13535] ? __alloc_skb+0x101/0x320 [ 151.639542][T13535] __alloc_skb+0x101/0x320 [ 151.639569][T13535] netlink_alloc_large_skb+0xbf/0xf0 [ 151.639676][T13535] netlink_sendmsg+0x3cf/0x6b0 [ 151.639698][T13535] ? __pfx_netlink_sendmsg+0x10/0x10 [ 151.639760][T13535] __sock_sendmsg+0x145/0x180 [ 151.639784][T13535] ____sys_sendmsg+0x31e/0x4e0 [ 151.639814][T13535] ___sys_sendmsg+0x17b/0x1d0 [ 151.639846][T13535] __x64_sys_sendmsg+0xd4/0x160 [ 151.639941][T13535] x64_sys_call+0x191e/0x3000 [ 151.640018][T13535] do_syscall_64+0xd2/0x200 [ 151.640039][T13535] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 151.640067][T13535] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 151.640134][T13535] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.640156][T13535] RIP: 0033:0x7f56ddf5f749 [ 151.640173][T13535] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 151.640192][T13535] RSP: 002b:00007f56dc9bf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 151.640231][T13535] RAX: ffffffffffffffda RBX: 00007f56de1b5fa0 RCX: 00007f56ddf5f749 [ 151.640245][T13535] RDX: 0000000020008000 RSI: 0000200000000480 RDI: 0000000000000006 [ 151.640258][T13535] RBP: 00007f56dc9bf090 R08: 0000000000000000 R09: 0000000000000000 [ 151.640270][T13535] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 151.640282][T13535] R13: 00007f56de1b6038 R14: 00007f56de1b5fa0 R15: 00007ffde3dc6dc8 [ 151.640301][T13535] [ 151.640908][T13511] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 151.672427][T13511] EXT4-fs (loop2): 1 truncate cleaned up [ 151.908931][T13551] loop3: detected capacity change from 0 to 1024 [ 151.916050][T13551] EXT4-fs: inline encryption not supported [ 151.938225][T13551] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4193: comm syz.3.2728: Allocating blocks 385-513 which overlap fs metadata [ 151.956089][T13551] EXT4-fs (loop3): pa ffff8881071f5e00: logic 16, phys. 129, len 24 [ 151.964176][T13551] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5444: group 0, free 0, pa_free 8 [ 151.974453][T13563] loop5: detected capacity change from 0 to 128 [ 151.974726][T13551] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 52 with error 28 [ 151.993208][T13551] EXT4-fs (loop3): This should not happen!! Data will be lost [ 151.993208][T13551] [ 152.003007][T13551] EXT4-fs (loop3): Total free blocks count 0 [ 152.009094][T13551] EXT4-fs (loop3): Free/Dirty block details [ 152.015096][T13551] EXT4-fs (loop3): free_blocks=128 [ 152.020229][T13551] EXT4-fs (loop3): dirty_blocks=0 [ 152.025357][T13551] EXT4-fs (loop3): Block reservation details [ 152.031353][T13551] EXT4-fs (loop3): i_reserved_data_blocks=0 [ 152.038682][T13569] netlink: 92 bytes leftover after parsing attributes in process `syz.3.2728'. [ 152.047772][T13569] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2728'. [ 152.060629][T13573] smc: net device hsr0 applied user defined pnetid SYZ2 [ 152.103459][T13581] loop5: detected capacity change from 0 to 256 [ 152.110508][T13581] vfat: Unknown parameter '/dev/snd/timer' [ 152.140464][T13590] loop5: detected capacity change from 0 to 128 [ 152.149368][T13590] ext4 filesystem being mounted at /397/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 152.200890][T13608] FAULT_INJECTION: forcing a failure. [ 152.200890][T13608] name failslab, interval 1, probability 0, space 0, times 0 [ 152.213669][T13608] CPU: 0 UID: 0 PID: 13608 Comm: syz.5.2744 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 152.213707][T13608] Tainted: [W]=WARN [ 152.213715][T13608] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 152.213729][T13608] Call Trace: [ 152.213806][T13608] [ 152.213814][T13608] __dump_stack+0x1d/0x30 [ 152.213840][T13608] dump_stack_lvl+0xe8/0x140 [ 152.213864][T13608] dump_stack+0x15/0x1b [ 152.213884][T13608] should_fail_ex+0x265/0x280 [ 152.213934][T13608] should_failslab+0x8c/0xb0 [ 152.213966][T13608] kmem_cache_alloc_noprof+0x50/0x480 [ 152.214070][T13608] ? skb_clone+0x151/0x1f0 [ 152.214093][T13608] skb_clone+0x151/0x1f0 [ 152.214114][T13608] __netlink_deliver_tap+0x2c9/0x500 [ 152.214185][T13608] netlink_unicast+0x66b/0x690 [ 152.214224][T13608] netlink_sendmsg+0x58b/0x6b0 [ 152.214247][T13608] ? __pfx_netlink_sendmsg+0x10/0x10 [ 152.214295][T13608] __sock_sendmsg+0x145/0x180 [ 152.214322][T13608] ____sys_sendmsg+0x31e/0x4e0 [ 152.214393][T13608] ___sys_sendmsg+0x17b/0x1d0 [ 152.214426][T13608] __x64_sys_sendmsg+0xd4/0x160 [ 152.214520][T13608] x64_sys_call+0x191e/0x3000 [ 152.214546][T13608] do_syscall_64+0xd2/0x200 [ 152.214569][T13608] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 152.214627][T13608] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 152.214663][T13608] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.214687][T13608] RIP: 0033:0x7f56ddf5f749 [ 152.214704][T13608] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 152.214773][T13608] RSP: 002b:00007f56dc9bf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 152.214797][T13608] RAX: ffffffffffffffda RBX: 00007f56de1b5fa0 RCX: 00007f56ddf5f749 [ 152.214812][T13608] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 152.214897][T13608] RBP: 00007f56dc9bf090 R08: 0000000000000000 R09: 0000000000000000 [ 152.214911][T13608] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 152.214925][T13608] R13: 00007f56de1b6038 R14: 00007f56de1b5fa0 R15: 00007ffde3dc6dc8 [ 152.214945][T13608] [ 152.215504][T13608] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2744'. [ 152.229058][T13609] loop3: detected capacity change from 0 to 1024 [ 152.337491][T13617] FAULT_INJECTION: forcing a failure. [ 152.337491][T13617] name failslab, interval 1, probability 0, space 0, times 0 [ 152.340540][T13609] EXT4-fs: inline encryption not supported [ 152.345672][T13617] CPU: 0 UID: 0 PID: 13617 Comm: syz.6.2747 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 152.345704][T13617] Tainted: [W]=WARN [ 152.345711][T13617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 152.345722][T13617] Call Trace: [ 152.345729][T13617] [ 152.345810][T13617] __dump_stack+0x1d/0x30 [ 152.345857][T13617] dump_stack_lvl+0xe8/0x140 [ 152.345878][T13617] dump_stack+0x15/0x1b [ 152.345947][T13617] should_fail_ex+0x265/0x280 [ 152.346029][T13617] ? sctp_add_bind_addr+0x71/0x1e0 [ 152.346049][T13617] should_failslab+0x8c/0xb0 [ 152.346076][T13617] __kmalloc_cache_noprof+0x4c/0x4a0 [ 152.346187][T13617] sctp_add_bind_addr+0x71/0x1e0 [ 152.346206][T13617] sctp_copy_local_addr_list+0x199/0x220 [ 152.346331][T13617] sctp_copy_one_addr+0x7f/0x280 [ 152.346350][T13617] sctp_bind_addr_copy+0x79/0x290 [ 152.346370][T13617] sctp_assoc_set_bind_addr_from_ep+0xce/0xe0 [ 152.346475][T13617] sctp_connect_new_asoc+0x1c3/0x3a0 [ 152.346503][T13617] sctp_sendmsg+0xf10/0x18d0 [ 152.346568][T13617] ? selinux_socket_sendmsg+0x131/0x1b0 [ 152.346593][T13617] ? __pfx_sctp_sendmsg+0x10/0x10 [ 152.346670][T13617] inet_sendmsg+0xc5/0xd0 [ 152.346692][T13617] __sock_sendmsg+0x102/0x180 [ 152.346717][T13617] __sys_sendto+0x268/0x330 [ 152.346752][T13617] __x64_sys_sendto+0x76/0x90 [ 152.346824][T13617] x64_sys_call+0x2d14/0x3000 [ 152.346896][T13617] do_syscall_64+0xd2/0x200 [ 152.346916][T13617] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 152.346991][T13617] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 152.347022][T13617] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.347073][T13617] RIP: 0033:0x7fdcf212f749 [ 152.347090][T13617] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 152.347169][T13617] RSP: 002b:00007fdcf0b97038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 152.347190][T13617] RAX: ffffffffffffffda RBX: 00007fdcf2385fa0 RCX: 00007fdcf212f749 [ 152.347203][T13617] RDX: 0000000000000001 RSI: 0000200000000400 RDI: 0000000000000006 [ 152.347216][T13617] RBP: 00007fdcf0b97090 R08: 0000200000000080 R09: 000000000000001c [ 152.347228][T13617] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 152.347241][T13617] R13: 00007fdcf2386038 R14: 00007fdcf2385fa0 R15: 00007ffe14c27a18 [ 152.347259][T13617] [ 152.376602][T13621] vhci_hcd: invalid port number 255 [ 152.410032][T13609] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4193: comm syz.3.2745: Allocating blocks 385-513 which overlap fs metadata [ 152.411058][T13621] vhci_hcd: USB_PORT_FEAT_LINK_STATE req not supported for USB 2.0 roothub [ 152.586063][T13629] netlink: 92 bytes leftover after parsing attributes in process `syz.3.2745'. [ 152.605331][T13627] EXT4-fs (loop3): pa ffff8881071dea10: logic 16, phys. 129, len 24 [ 152.618128][T13629] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2745'. [ 152.622544][T13627] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5444: group 0, free 0, pa_free 8 [ 152.765096][T13627] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 52 with error 28 [ 152.777716][T13627] EXT4-fs (loop3): This should not happen!! Data will be lost [ 152.777716][T13627] [ 152.787539][T13627] EXT4-fs (loop3): Total free blocks count 0 [ 152.793660][T13627] EXT4-fs (loop3): Free/Dirty block details [ 152.799576][T13627] EXT4-fs (loop3): free_blocks=128 [ 152.804828][T13627] EXT4-fs (loop3): dirty_blocks=0 [ 152.809965][T13627] EXT4-fs (loop3): Block reservation details [ 152.816063][T13627] EXT4-fs (loop3): i_reserved_data_blocks=0 [ 152.983743][T13661] loop6: detected capacity change from 0 to 1024 [ 152.990555][T13661] EXT4-fs: inline encryption not supported [ 153.006298][T13661] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4193: comm syz.6.2764: Allocating blocks 385-513 which overlap fs metadata [ 153.023328][T13661] EXT4-fs (loop6): pa ffff8881071dea10: logic 16, phys. 129, len 24 [ 153.031371][T13661] EXT4-fs error (device loop6): ext4_mb_release_inode_pa:5444: group 0, free 0, pa_free 8 [ 153.041497][T13661] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 52 with error 28 [ 153.053939][T13661] EXT4-fs (loop6): This should not happen!! Data will be lost [ 153.053939][T13661] [ 153.063780][T13661] EXT4-fs (loop6): Total free blocks count 0 [ 153.069763][T13661] EXT4-fs (loop6): Free/Dirty block details [ 153.075779][T13661] EXT4-fs (loop6): free_blocks=128 [ 153.080935][T13661] EXT4-fs (loop6): dirty_blocks=0 [ 153.085987][T13661] EXT4-fs (loop6): Block reservation details [ 153.092080][T13661] EXT4-fs (loop6): i_reserved_data_blocks=0 [ 153.185912][ T361] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.205073][ T361] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.222258][ T361] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.233387][ T361] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.248154][T13691] FAULT_INJECTION: forcing a failure. [ 153.248154][T13691] name failslab, interval 1, probability 0, space 0, times 0 [ 153.260949][T13691] CPU: 0 UID: 0 PID: 13691 Comm: syz.0.2771 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 153.261054][T13691] Tainted: [W]=WARN [ 153.261062][T13691] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 153.261075][T13691] Call Trace: [ 153.261082][T13691] [ 153.261090][T13691] __dump_stack+0x1d/0x30 [ 153.261115][T13691] dump_stack_lvl+0xe8/0x140 [ 153.261136][T13691] dump_stack+0x15/0x1b [ 153.261179][T13691] should_fail_ex+0x265/0x280 [ 153.261250][T13691] ? audit_log_d_path+0x8d/0x150 [ 153.261341][T13691] should_failslab+0x8c/0xb0 [ 153.261372][T13691] __kmalloc_cache_noprof+0x4c/0x4a0 [ 153.261470][T13691] audit_log_d_path+0x8d/0x150 [ 153.261553][T13691] audit_log_d_path_exe+0x42/0x70 [ 153.261573][T13691] audit_log_task+0x1e9/0x250 [ 153.261631][T13691] ? kstrtouint+0x76/0xc0 [ 153.261659][T13691] audit_seccomp+0x61/0x100 [ 153.261688][T13691] ? __seccomp_filter+0x82d/0x1250 [ 153.261784][T13691] __seccomp_filter+0x83e/0x1250 [ 153.261815][T13691] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 153.261918][T13691] ? vfs_write+0x7e8/0x960 [ 153.261943][T13691] ? __rcu_read_unlock+0x4f/0x70 [ 153.261971][T13691] ? __fget_files+0x184/0x1c0 [ 153.262002][T13691] __secure_computing+0x82/0x150 [ 153.262081][T13691] syscall_trace_enter+0xcf/0x1e0 [ 153.262142][T13691] do_syscall_64+0xac/0x200 [ 153.262165][T13691] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 153.262228][T13691] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 153.262264][T13691] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.262287][T13691] RIP: 0033:0x7f7d1bf4f749 [ 153.262305][T13691] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 153.262327][T13691] RSP: 002b:00007f7d1a9b7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 153.262365][T13691] RAX: ffffffffffffffda RBX: 00007f7d1c1a5fa0 RCX: 00007f7d1bf4f749 [ 153.262380][T13691] RDX: 000000000000001c RSI: 0000200000000300 RDI: 0000000000000006 [ 153.262393][T13691] RBP: 00007f7d1a9b7090 R08: 0000000000000000 R09: 0000000000000000 [ 153.262404][T13691] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 153.262416][T13691] R13: 00007f7d1c1a6038 R14: 00007f7d1c1a5fa0 R15: 00007ffd33f23948 [ 153.262447][T13691] [ 153.551167][T13708] loop0: detected capacity change from 0 to 1024 [ 153.558492][T13708] EXT4-fs: inline encryption not supported [ 153.588309][T13718] xt_CT: You must specify a L4 protocol and not use inversions on it [ 153.600988][T13718] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.624526][T13724] FAULT_INJECTION: forcing a failure. [ 153.624526][T13724] name failslab, interval 1, probability 0, space 0, times 0 [ 153.637327][T13724] CPU: 1 UID: 0 PID: 13724 Comm: syz.6.2783 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 153.637358][T13724] Tainted: [W]=WARN [ 153.637365][T13724] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 153.637375][T13724] Call Trace: [ 153.637381][T13724] [ 153.637387][T13724] __dump_stack+0x1d/0x30 [ 153.637454][T13724] dump_stack_lvl+0xe8/0x140 [ 153.637476][T13724] dump_stack+0x15/0x1b [ 153.637497][T13724] should_fail_ex+0x265/0x280 [ 153.637526][T13724] should_failslab+0x8c/0xb0 [ 153.637554][T13724] kmem_cache_alloc_node_noprof+0x57/0x4a0 [ 153.637573][T13724] ? __alloc_skb+0x101/0x320 [ 153.637654][T13724] __alloc_skb+0x101/0x320 [ 153.637672][T13724] netlink_alloc_large_skb+0xbf/0xf0 [ 153.637691][T13724] netlink_sendmsg+0x3cf/0x6b0 [ 153.637761][T13724] ? __pfx_netlink_sendmsg+0x10/0x10 [ 153.637841][T13724] __sock_sendmsg+0x145/0x180 [ 153.637920][T13724] ____sys_sendmsg+0x31e/0x4e0 [ 153.637935][T13724] ___sys_sendmsg+0x17b/0x1d0 [ 153.637956][T13724] __x64_sys_sendmsg+0xd4/0x160 [ 153.637986][T13724] x64_sys_call+0x191e/0x3000 [ 153.638000][T13724] do_syscall_64+0xd2/0x200 [ 153.638013][T13724] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 153.638107][T13724] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 153.638127][T13724] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.638141][T13724] RIP: 0033:0x7fdcf212f749 [ 153.638163][T13724] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 153.638175][T13724] RSP: 002b:00007fdcf0b97038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 153.638190][T13724] RAX: ffffffffffffffda RBX: 00007fdcf2385fa0 RCX: 00007fdcf212f749 [ 153.638255][T13724] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000006 [ 153.638266][T13724] RBP: 00007fdcf0b97090 R08: 0000000000000000 R09: 0000000000000000 [ 153.638279][T13724] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 153.638293][T13724] R13: 00007fdcf2386038 R14: 00007fdcf2385fa0 R15: 00007ffe14c27a18 [ 153.638311][T13724] [ 153.897174][T13718] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.925471][T13736] can0: slcan on ttyS3. [ 153.944004][T13718] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.968403][T13752] loop3: detected capacity change from 0 to 1024 [ 153.975995][T13752] EXT4-fs: inline encryption not supported [ 153.982670][T13736] can0 (unregistered): slcan off ttyS3. [ 153.996433][T13752] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4193: comm syz.3.2791: Allocating blocks 385-513 which overlap fs metadata [ 154.014385][T13752] EXT4-fs (loop3): pa ffff8881071deaf0: logic 16, phys. 129, len 24 [ 154.022832][T13752] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5444: group 0, free 0, pa_free 8 [ 154.033458][T13752] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 52 with error 28 [ 154.045863][T13752] EXT4-fs (loop3): This should not happen!! Data will be lost [ 154.045863][T13752] [ 154.055552][T13752] EXT4-fs (loop3): Total free blocks count 0 [ 154.061554][T13752] EXT4-fs (loop3): Free/Dirty block details [ 154.067517][T13752] EXT4-fs (loop3): free_blocks=128 [ 154.072775][T13752] EXT4-fs (loop3): dirty_blocks=0 [ 154.077890][T13752] EXT4-fs (loop3): Block reservation details [ 154.083897][T13752] EXT4-fs (loop3): i_reserved_data_blocks=0 [ 154.090807][T13718] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.105628][T13736] can0: slcan on ttyS3. [ 154.120579][T13736] loop6: detected capacity change from 0 to 512 [ 154.135958][T13736] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 154.146413][T13736] EXT4-fs error (device loop6): ext4_validate_block_bitmap:432: comm syz.6.2785: bg 0: block 104: invalid block bitmap [ 154.172037][T13736] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 154.182431][T13736] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.2785: invalid indirect mapped block 1 (level 1) [ 154.198589][T13736] EXT4-fs (loop6): 1 truncate cleaned up [ 154.250143][T13735] can0 (unregistered): slcan off ttyS3. [ 154.351511][T13805] loop5: detected capacity change from 0 to 1024 [ 154.359294][T13805] EXT4-fs: inline encryption not supported [ 154.364860][T13804] loop6: detected capacity change from 0 to 128 [ 154.373125][T13804] vfat filesystem being mounted at /300/file1 supports timestamps until 2107-12-31 (0x10391447e) [ 154.390261][T13805] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4193: comm syz.5.2806: Allocating blocks 385-513 which overlap fs metadata [ 154.407566][T13805] EXT4-fs (loop5): pa ffff8881071deb60: logic 16, phys. 129, len 24 [ 154.415690][T13805] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:5444: group 0, free 0, pa_free 8 [ 154.441942][T13805] EXT4-fs error (device loop5): mb_free_blocks:2017: group 0, inode 15: block 337:freeing already freed block (bit 21); block bitmap corrupt. [ 154.836222][T13828] xt_hashlimit: max too large, truncated to 1048576 [ 154.905529][T13829] loop5: detected capacity change from 0 to 2048 [ 154.991604][T13829] loop5: detected capacity change from 0 to 1024 [ 154.999699][T13829] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 155.028892][T13849] loop2: detected capacity change from 0 to 1024 [ 155.035747][T13849] EXT4-fs: inline encryption not supported [ 155.066385][T13849] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4193: comm syz.2.2818: Allocating blocks 385-513 which overlap fs metadata [ 155.082223][T13849] EXT4-fs (loop2): pa ffff8881071f5e70: logic 16, phys. 129, len 24 [ 155.090267][T13849] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5444: group 0, free 0, pa_free 8 [ 155.102000][T13849] EXT4-fs error (device loop2): mb_free_blocks:2017: group 0, inode 15: block 337:freeing already freed block (bit 21); block bitmap corrupt. [ 155.228223][ T29] kauditd_printk_skb: 338 callbacks suppressed [ 155.228242][ T29] audit: type=1326 audit(3911141292.039:6301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13862 comm="syz.2.2822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6f658f749 code=0x7ffc0000 [ 155.260670][ T29] audit: type=1326 audit(3911141292.039:6302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13862 comm="syz.2.2822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6f658f749 code=0x7ffc0000 [ 155.284235][ T29] audit: type=1326 audit(3911141292.039:6303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13862 comm="syz.2.2822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=252 compat=0 ip=0x7fb6f658f749 code=0x7ffc0000 [ 155.308112][ T29] audit: type=1326 audit(3911141292.039:6304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13862 comm="syz.2.2822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6f658f749 code=0x7ffc0000 [ 155.331636][ T29] audit: type=1326 audit(3911141292.039:6305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13862 comm="syz.2.2822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb6f658f749 code=0x7ffc0000 [ 155.355336][ T29] audit: type=1326 audit(3911141292.039:6306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13862 comm="syz.2.2822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6f658f749 code=0x7ffc0000 [ 155.379473][ T29] audit: type=1326 audit(3911141292.039:6307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13862 comm="syz.2.2822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb6f658f749 code=0x7ffc0000 [ 155.403558][ T29] audit: type=1326 audit(3911141292.039:6308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13862 comm="syz.2.2822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6f658f749 code=0x7ffc0000 [ 155.427249][ T29] audit: type=1326 audit(3911141292.039:6309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13862 comm="syz.2.2822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb6f658f749 code=0x7ffc0000 [ 155.450811][ T29] audit: type=1326 audit(3911141292.039:6310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13862 comm="syz.2.2822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6f658f749 code=0x7ffc0000 [ 155.614561][T13915] loop6: detected capacity change from 0 to 1024 [ 155.621429][T13915] EXT4-fs: inline encryption not supported [ 155.636269][T13915] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4193: comm syz.6.2831: Allocating blocks 385-513 which overlap fs metadata [ 155.653560][T13915] EXT4-fs (loop6): pa ffff8881071deb60: logic 16, phys. 129, len 24 [ 155.661807][T13915] EXT4-fs error (device loop6): ext4_mb_release_inode_pa:5444: group 0, free 0, pa_free 8 [ 155.672194][T13915] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 52 with error 28 [ 155.684667][T13915] EXT4-fs (loop6): This should not happen!! Data will be lost [ 155.684667][T13915] [ 155.694398][T13915] EXT4-fs (loop6): Total free blocks count 0 [ 155.700407][T13915] EXT4-fs (loop6): Free/Dirty block details [ 155.706468][T13915] EXT4-fs (loop6): free_blocks=128 [ 155.711601][T13915] EXT4-fs (loop6): dirty_blocks=0 [ 155.716756][T13915] EXT4-fs (loop6): Block reservation details [ 155.723287][T13915] EXT4-fs (loop6): i_reserved_data_blocks=0 [ 155.763955][T13927] loop6: detected capacity change from 0 to 512 [ 155.777496][T13927] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 155.788928][T13927] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 155.804065][T13927] EXT4-fs (loop6): 1 truncate cleaned up [ 155.832212][T13933] FAULT_INJECTION: forcing a failure. [ 155.832212][T13933] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 155.845642][T13933] CPU: 0 UID: 0 PID: 13933 Comm: syz.6.2835 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 155.845673][T13933] Tainted: [W]=WARN [ 155.845679][T13933] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 155.845690][T13933] Call Trace: [ 155.845729][T13933] [ 155.845737][T13933] __dump_stack+0x1d/0x30 [ 155.845763][T13933] dump_stack_lvl+0xe8/0x140 [ 155.845787][T13933] dump_stack+0x15/0x1b [ 155.845808][T13933] should_fail_ex+0x265/0x280 [ 155.845908][T13933] should_fail+0xb/0x20 [ 155.845926][T13933] should_fail_usercopy+0x1a/0x20 [ 155.845950][T13933] strncpy_from_user+0x25/0x230 [ 155.845980][T13933] ? __kmalloc_cache_noprof+0x249/0x4a0 [ 155.846122][T13933] __se_sys_memfd_create+0x1ff/0x590 [ 155.846151][T13933] __x64_sys_memfd_create+0x31/0x40 [ 155.846172][T13933] x64_sys_call+0x2ac2/0x3000 [ 155.846192][T13933] do_syscall_64+0xd2/0x200 [ 155.846285][T13933] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 155.846320][T13933] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.846339][T13933] RIP: 0033:0x7fdcf212f749 [ 155.846355][T13933] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 155.846451][T13933] RSP: 002b:00007fdcf0b96e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 155.846474][T13933] RAX: ffffffffffffffda RBX: 0000000000000441 RCX: 00007fdcf212f749 [ 155.846490][T13933] RDX: 00007fdcf0b96ef0 RSI: 0000000000000000 RDI: 00007fdcf21b4960 [ 155.846505][T13933] RBP: 0000200000000440 R08: 00007fdcf0b96bb7 R09: 00007fdcf0b96e40 [ 155.846518][T13933] R10: 000000000000000a R11: 0000000000000202 R12: 00002000000001c0 [ 155.846529][T13933] R13: 00007fdcf0b96ef0 R14: 00007fdcf0b96eb0 R15: 0000200000000a00 [ 155.846623][T13933] [ 156.145028][T13947] xt_hashlimit: max too large, truncated to 1048576 [ 156.162262][T13947] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 156.191032][ T3394] Process accounting resumed [ 156.195126][T13954] loop6: detected capacity change from 0 to 1024 [ 156.208410][T13954] EXT4-fs: inline encryption not supported [ 156.227121][T13954] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4193: comm syz.6.2844: Allocating blocks 385-513 which overlap fs metadata [ 156.245003][T13954] EXT4-fs (loop6): pa ffff8881071deaf0: logic 16, phys. 129, len 24 [ 156.253159][T13954] EXT4-fs error (device loop6): ext4_mb_release_inode_pa:5444: group 0, free 0, pa_free 8 [ 156.265559][T13954] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 52 with error 28 [ 156.278064][T13954] EXT4-fs (loop6): This should not happen!! Data will be lost [ 156.278064][T13954] [ 156.287926][T13954] EXT4-fs (loop6): Total free blocks count 0 [ 156.293970][T13954] EXT4-fs (loop6): Free/Dirty block details [ 156.299940][T13954] EXT4-fs (loop6): free_blocks=128 [ 156.305177][T13954] EXT4-fs (loop6): dirty_blocks=0 [ 156.310215][T13954] EXT4-fs (loop6): Block reservation details [ 156.316321][T13954] EXT4-fs (loop6): i_reserved_data_blocks=0 [ 156.333314][T13963] __nla_validate_parse: 17 callbacks suppressed [ 156.333334][T13963] netlink: 92 bytes leftover after parsing attributes in process `syz.6.2844'. [ 156.365158][T13963] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2844'. [ 156.386043][T13962] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2846'. [ 156.723508][T13996] FAULT_INJECTION: forcing a failure. [ 156.723508][T13996] name failslab, interval 1, probability 0, space 0, times 0 [ 156.736267][T13996] CPU: 1 UID: 0 PID: 13996 Comm: syz.2.2856 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 156.736306][T13996] Tainted: [W]=WARN [ 156.736314][T13996] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 156.736349][T13996] Call Trace: [ 156.736356][T13996] [ 156.736364][T13996] __dump_stack+0x1d/0x30 [ 156.736390][T13996] dump_stack_lvl+0xe8/0x140 [ 156.736411][T13996] dump_stack+0x15/0x1b [ 156.736427][T13996] should_fail_ex+0x265/0x280 [ 156.736528][T13996] should_failslab+0x8c/0xb0 [ 156.736560][T13996] kmem_cache_alloc_node_noprof+0x57/0x4a0 [ 156.736594][T13996] ? __alloc_skb+0x101/0x320 [ 156.736629][T13996] __alloc_skb+0x101/0x320 [ 156.736661][T13996] netlink_alloc_large_skb+0xbf/0xf0 [ 156.736688][T13996] netlink_sendmsg+0x3cf/0x6b0 [ 156.736758][T13996] ? __pfx_netlink_sendmsg+0x10/0x10 [ 156.736778][T13996] __sock_sendmsg+0x145/0x180 [ 156.736800][T13996] ____sys_sendmsg+0x31e/0x4e0 [ 156.736820][T13996] ___sys_sendmsg+0x17b/0x1d0 [ 156.736853][T13996] __x64_sys_sendmsg+0xd4/0x160 [ 156.736958][T13996] x64_sys_call+0x191e/0x3000 [ 156.736981][T13996] do_syscall_64+0xd2/0x200 [ 156.737002][T13996] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 156.737034][T13996] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 156.737116][T13996] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.737178][T13996] RIP: 0033:0x7fb6f658f749 [ 156.737196][T13996] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 156.737216][T13996] RSP: 002b:00007fb6f4ff7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 156.737240][T13996] RAX: ffffffffffffffda RBX: 00007fb6f67e5fa0 RCX: 00007fb6f658f749 [ 156.737268][T13996] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 156.737280][T13996] RBP: 00007fb6f4ff7090 R08: 0000000000000000 R09: 0000000000000000 [ 156.737292][T13996] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 156.737304][T13996] R13: 00007fb6f67e6038 R14: 00007fb6f67e5fa0 R15: 00007ffed5178d78 [ 156.737341][T13996] [ 156.968291][T14000] program syz.2.2857 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 157.001750][T14004] loop2: detected capacity change from 0 to 1024 [ 157.009871][T14004] EXT4-fs: inline encryption not supported [ 157.034209][T14004] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4193: comm syz.2.2858: Allocating blocks 385-513 which overlap fs metadata [ 157.063494][T14004] EXT4-fs (loop2): pa ffff8881071f5e70: logic 16, phys. 129, len 24 [ 157.071528][T14004] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5444: group 0, free 0, pa_free 8 [ 157.118417][T14004] EXT4-fs error (device loop2): mb_free_blocks:2017: group 0, inode 15: block 337:freeing already freed block (bit 21); block bitmap corrupt. [ 157.175671][T14020] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2863'. [ 157.182892][T14016] capability: warning: `syz.6.2861' uses 32-bit capabilities (legacy support in use) [ 157.204341][T14004] netlink: 92 bytes leftover after parsing attributes in process `syz.2.2858'. [ 157.213401][T14004] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2858'. [ 157.297313][T14034] loop2: detected capacity change from 0 to 512 [ 157.318908][T14034] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 157.362247][T14040] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2867'. [ 157.484095][T14043] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2870'. [ 157.750722][T14088] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2874'. [ 157.792801][T14093] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2876'. [ 157.847830][T14109] loop3: detected capacity change from 0 to 1024 [ 157.854904][T14109] EXT4-fs: inline encryption not supported [ 157.876523][T14109] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4193: comm syz.3.2878: Allocating blocks 385-513 which overlap fs metadata [ 157.894247][T14109] EXT4-fs (loop3): pa ffff8881071deb60: logic 16, phys. 129, len 24 [ 157.902353][T14109] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5444: group 0, free 0, pa_free 8 [ 157.912849][T14109] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 52 with error 28 [ 157.925333][T14109] EXT4-fs (loop3): This should not happen!! Data will be lost [ 157.925333][T14109] [ 157.935090][T14109] EXT4-fs (loop3): Total free blocks count 0 [ 157.941108][T14109] EXT4-fs (loop3): Free/Dirty block details [ 157.947023][T14109] EXT4-fs (loop3): free_blocks=128 [ 157.952308][T14109] EXT4-fs (loop3): dirty_blocks=0 [ 157.957434][T14109] EXT4-fs (loop3): Block reservation details [ 157.963548][T14109] EXT4-fs (loop3): i_reserved_data_blocks=0 [ 158.065494][T14123] team0 (unregistering): Port device team_slave_0 removed [ 158.075348][T14123] team0 (unregistering): Port device team_slave_1 removed [ 158.264252][T14179] loop3: detected capacity change from 0 to 1024 [ 158.274153][T14179] EXT4-fs: inline encryption not supported [ 158.293990][T14179] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4193: comm syz.3.2890: Allocating blocks 385-513 which overlap fs metadata [ 158.312566][T14185] loop2: detected capacity change from 0 to 512 [ 158.323090][T14185] EXT4-fs: Ignoring removed oldalloc option [ 158.336169][T14187] SELinux: failed to load policy [ 158.345172][T14179] EXT4-fs (loop3): pa ffff8881071f5e70: logic 16, phys. 129, len 24 [ 158.353259][T14179] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5444: group 0, free 0, pa_free 8 [ 158.353544][T14185] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 158.377978][T14179] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 52 with error 28 [ 158.390481][T14179] EXT4-fs (loop3): This should not happen!! Data will be lost [ 158.390481][T14179] [ 158.400265][T14179] EXT4-fs (loop3): Total free blocks count 0 [ 158.406417][T14179] EXT4-fs (loop3): Free/Dirty block details [ 158.412513][T14179] EXT4-fs (loop3): free_blocks=128 [ 158.417828][T14179] EXT4-fs (loop3): dirty_blocks=0 [ 158.422971][T14179] EXT4-fs (loop3): Block reservation details [ 158.428957][T14179] EXT4-fs (loop3): i_reserved_data_blocks=0 [ 158.443202][T14185] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #16: comm syz.2.2888: invalid indirect mapped block 4294967295 (level 0) [ 158.458089][T14185] EXT4-fs (loop2): Remounting filesystem read-only [ 158.464987][T14185] EXT4-fs (loop2): 1 orphan inode deleted [ 158.470829][T14185] EXT4-fs (loop2): 1 truncate cleaned up [ 158.489771][T14191] FAULT_INJECTION: forcing a failure. [ 158.489771][T14191] name failslab, interval 1, probability 0, space 0, times 0 [ 158.502524][T14191] CPU: 0 UID: 0 PID: 14191 Comm: syz.6.2893 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 158.502561][T14191] Tainted: [W]=WARN [ 158.502569][T14191] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 158.502582][T14191] Call Trace: [ 158.502589][T14191] [ 158.502599][T14191] __dump_stack+0x1d/0x30 [ 158.502667][T14191] dump_stack_lvl+0xe8/0x140 [ 158.502696][T14191] dump_stack+0x15/0x1b [ 158.502711][T14191] should_fail_ex+0x265/0x280 [ 158.502759][T14191] should_failslab+0x8c/0xb0 [ 158.502791][T14191] __kmalloc_cache_node_noprof+0x54/0x4a0 [ 158.502855][T14191] ? __get_vm_area_node+0x106/0x1d0 [ 158.502891][T14191] __get_vm_area_node+0x106/0x1d0 [ 158.503015][T14191] __vmalloc_node_range_noprof+0x28c/0xed0 [ 158.503114][T14191] ? sel_write_load+0x158/0x380 [ 158.503208][T14191] ? _parse_integer+0x27/0x40 [ 158.503242][T14191] ? sel_write_load+0x158/0x380 [ 158.503322][T14191] vmalloc_noprof+0x82/0xc0 [ 158.503353][T14191] ? sel_write_load+0x158/0x380 [ 158.503435][T14191] sel_write_load+0x158/0x380 [ 158.503456][T14191] ? __pfx_sel_write_load+0x10/0x10 [ 158.503473][T14191] vfs_write+0x269/0x960 [ 158.503499][T14191] ? __rcu_read_unlock+0x4f/0x70 [ 158.503528][T14191] ? __fget_files+0x184/0x1c0 [ 158.503630][T14191] ksys_write+0xda/0x1a0 [ 158.503653][T14191] __x64_sys_write+0x40/0x50 [ 158.503675][T14191] x64_sys_call+0x2802/0x3000 [ 158.503706][T14191] do_syscall_64+0xd2/0x200 [ 158.503726][T14191] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 158.503765][T14191] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 158.503837][T14191] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.503871][T14191] RIP: 0033:0x7fdcf212f749 [ 158.503890][T14191] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 158.503906][T14191] RSP: 002b:00007fdcf0b97038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 158.503925][T14191] RAX: ffffffffffffffda RBX: 00007fdcf2385fa0 RCX: 00007fdcf212f749 [ 158.503938][T14191] RDX: 000000000000fd44 RSI: 0000200000000000 RDI: 0000000000000005 [ 158.503950][T14191] RBP: 00007fdcf0b97090 R08: 0000000000000000 R09: 0000000000000000 [ 158.503995][T14191] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 158.504031][T14191] R13: 00007fdcf2386038 R14: 00007fdcf2385fa0 R15: 00007ffe14c27a18 [ 158.504051][T14191] [ 158.504060][T14191] syz.6.2893: vmalloc error: size 64836, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null) [ 158.552158][ T31] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.553964][T14191] ,cpuset= [ 158.558630][ T31] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.564427][T14191] /,mems_allowed=0 [ 158.564459][T14191] CPU: 0 UID: 0 PID: 14191 Comm: syz.6.2893 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 158.564490][T14191] Tainted: [W]=WARN [ 158.564497][T14191] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 158.564572][T14191] Call Trace: [ 158.564579][T14191] [ 158.564589][T14191] __dump_stack+0x1d/0x30 [ 158.564682][T14191] dump_stack_lvl+0xe8/0x140 [ 158.564709][T14191] dump_stack+0x15/0x1b [ 158.564727][T14191] warn_alloc+0x12b/0x1a0 [ 158.564771][T14191] __vmalloc_node_range_noprof+0x2b1/0xed0 [ 158.564805][T14191] ? _parse_integer+0x27/0x40 [ 158.564838][T14191] ? sel_write_load+0x158/0x380 [ 158.564857][T14191] vmalloc_noprof+0x82/0xc0 [ 158.564951][T14191] ? sel_write_load+0x158/0x380 [ 158.564969][T14191] sel_write_load+0x158/0x380 [ 158.564987][T14191] ? __pfx_sel_write_load+0x10/0x10 [ 158.565006][T14191] vfs_write+0x269/0x960 [ 158.565101][T14191] ? __rcu_read_unlock+0x4f/0x70 [ 158.565125][T14191] ? __fget_files+0x184/0x1c0 [ 158.565153][T14191] ksys_write+0xda/0x1a0 [ 158.565178][T14191] __x64_sys_write+0x40/0x50 [ 158.565248][T14191] x64_sys_call+0x2802/0x3000 [ 158.565329][T14191] do_syscall_64+0xd2/0x200 [ 158.565349][T14191] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 158.565381][T14191] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 158.565412][T14191] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.565509][T14191] RIP: 0033:0x7fdcf212f749 [ 158.565525][T14191] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 158.565543][T14191] RSP: 002b:00007fdcf0b97038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 158.565562][T14191] RAX: ffffffffffffffda RBX: 00007fdcf2385fa0 RCX: 00007fdcf212f749 [ 158.565575][T14191] RDX: 000000000000fd44 RSI: 0000200000000000 RDI: 0000000000000005 [ 158.565588][T14191] RBP: 00007fdcf0b97090 R08: 0000000000000000 R09: 0000000000000000 [ 158.565601][T14191] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 158.565627][T14191] R13: 00007fdcf2386038 R14: 00007fdcf2385fa0 R15: 00007ffe14c27a18 [ 158.565645][T14191] [ 158.565651][T14191] Mem-Info: [ 158.572421][ T31] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.574743][T14191] active_anon:4384 inactive_anon:1 isolated_anon:0 [ 158.574743][T14191] active_file:10439 inactive_file:16758 isolated_file:0 [ 158.574743][T14191] unevictable:0 dirty:312 writeback:0 [ 158.574743][T14191] slab_reclaimable:3435 slab_unreclaimable:15431 [ 158.574743][T14191] mapped:29827 shmem:391 pagetables:978 [ 158.574743][T14191] sec_pagetables:0 bounce:0 [ 158.574743][T14191] kernel_misc_reclaimable:0 [ 158.574743][T14191] free:1840192 free_pcp:50395 free_cma:0 [ 159.042388][T14191] Node 0 active_anon:17472kB inactive_anon:4kB active_file:41756kB inactive_file:67048kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:119272kB dirty:1300kB writeback:0kB shmem:1676kB kernel_stack:3408kB pagetables:3992kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 159.069819][T14191] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 159.099933][T14191] lowmem_reserve[]: 0 2881 7859 7859 [ 159.105306][T14191] Node 0 DMA32 free:2946624kB boost:0kB min:4132kB low:7060kB high:9988kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2950256kB mlocked:0kB bounce:0kB free_pcp:3632kB local_pcp:104kB free_cma:0kB [ 159.136877][T14191] lowmem_reserve[]: 0 0 4978 4978 [ 159.141934][T14191] Node 0 Normal free:4406888kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:17472kB inactive_anon:4kB active_file:41756kB inactive_file:67048kB unevictable:0kB writepending:1280kB zspages:0kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:189032kB local_pcp:47320kB free_cma:0kB [ 159.175445][T14191] lowmem_reserve[]: 0 0 0 0 [ 159.180024][T14191] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 159.192855][T14191] Node 0 DMA32: 4*4kB (M) 2*8kB (M) 2*16kB (M) 2*32kB (M) 3*64kB (M) 2*128kB (M) 2*256kB (M) 3*512kB (M) 3*1024kB (M) 2*2048kB (M) 717*4096kB (M) = 2946624kB [ 159.209018][T14191] Node 0 Normal: 3*4kB (UE) 5*8kB (UE) 3*16kB (UM) 3*32kB (UE) 88*64kB (UME) 131*128kB (UME) 138*256kB (UME) 100*512kB (UM) 73*1024kB (UME) 46*2048kB (UM) 1008*4096kB (UM) = 4406852kB [ 159.227526][T14191] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 159.237026][T14191] 27572 total pagecache pages [ 159.241722][T14191] 28 pages in swap cache [ 159.246167][T14191] Free swap = 124884kB [ 159.250328][T14191] Total swap = 124996kB [ 159.254637][T14191] 2097051 pages RAM [ 159.258449][T14191] 0 pages HighMem/MovableOnly [ 159.263146][T14191] 81087 pages reserved [ 159.267405][T14205] SELinux: policydb magic number 0x9c does not match expected magic number 0xf97cff8c [ 159.278529][T14205] SELinux: failed to load policy [ 159.296406][ T31] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.325933][T14214] FAULT_INJECTION: forcing a failure. [ 159.325933][T14214] name failslab, interval 1, probability 0, space 0, times 0 [ 159.330804][T14211] loop3: detected capacity change from 0 to 1024 [ 159.338767][T14214] CPU: 0 UID: 0 PID: 14214 Comm: syz.6.2896 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 159.338800][T14214] Tainted: [W]=WARN [ 159.338807][T14214] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 159.338819][T14214] Call Trace: [ 159.338824][T14214] [ 159.338832][T14214] __dump_stack+0x1d/0x30 [ 159.338855][T14214] dump_stack_lvl+0xe8/0x140 [ 159.338876][T14214] dump_stack+0x15/0x1b [ 159.338893][T14214] should_fail_ex+0x265/0x280 [ 159.338924][T14214] should_failslab+0x8c/0xb0 [ 159.338950][T14214] kmem_cache_alloc_noprof+0x50/0x480 [ 159.338976][T14214] ? mas_alloc_nodes+0x1a2/0x210 [ 159.338997][T14214] mas_alloc_nodes+0x1a2/0x210 [ 159.339016][T14214] mas_preallocate+0x2ca/0x510 [ 159.339039][T14214] __split_vma+0x240/0x650 [ 159.339065][T14214] ? mas_find+0x5d5/0x700 [ 159.339085][T14214] vms_gather_munmap_vmas+0x2b2/0x7b0 [ 159.339112][T14214] do_vmi_align_munmap+0x1ac/0x3d0 [ 159.339143][T14214] do_vmi_munmap+0x1db/0x220 [ 159.339166][T14214] do_munmap+0x79/0xb0 [ 159.339188][T14214] mremap_to+0x192/0x430 [ 159.339213][T14214] ? check_prep_vma+0x5d6/0x660 [ 159.339241][T14214] __se_sys_mremap+0x632/0xb30 [ 159.339273][T14214] ? fput+0x8f/0xc0 [ 159.339289][T14214] ? ksys_write+0x192/0x1a0 [ 159.339314][T14214] __x64_sys_mremap+0x67/0x80 [ 159.339339][T14214] x64_sys_call+0x2a28/0x3000 [ 159.339361][T14214] do_syscall_64+0xd2/0x200 [ 159.339380][T14214] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 159.339405][T14214] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 159.339436][T14214] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.339457][T14214] RIP: 0033:0x7fdcf212f749 [ 159.339472][T14214] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 159.339490][T14214] RSP: 002b:00007fdcf0b97038 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 159.339510][T14214] RAX: ffffffffffffffda RBX: 00007fdcf2385fa0 RCX: 00007fdcf212f749 [ 159.339523][T14214] RDX: 000000000000f000 RSI: 0000000000003000 RDI: 0000200000006000 [ 159.339535][T14214] RBP: 00007fdcf0b97090 R08: 0000200000009000 R09: 0000000000000000 [ 159.339547][T14214] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001 [ 159.339559][T14214] R13: 00007fdcf2386038 R14: 00007fdcf2385fa0 R15: 00007ffe14c27a18 [ 159.339577][T14214] [ 159.583088][T14211] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 159.594039][T14211] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (14919!=20869) [ 159.617412][T14211] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 159.669430][T14211] EXT4-fs (loop3): invalid journal inode [ 159.675516][T14211] EXT4-fs (loop3): can't get journal size [ 159.681930][T14211] EXT4-fs error (device loop3): ext4_protect_reserved_inode:182: inode #3: comm syz.3.2894: blocks 2-2 from inode overlap system zone [ 159.721199][T14241] xt_CT: You must specify a L4 protocol and not use inversions on it [ 159.734409][T14241] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.756464][T14237] loop6: detected capacity change from 0 to 1024 [ 159.764090][T14237] EXT4-fs: inline encryption not supported [ 159.777307][T14211] EXT4-fs (loop3): failed to initialize system zone (-117) [ 159.793031][T14211] EXT4-fs (loop3): mount failed [ 159.816679][T14237] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4193: comm syz.6.2904: Allocating blocks 385-513 which overlap fs metadata [ 159.822842][T14241] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.844101][T14237] EXT4-fs (loop6): pa ffff8881071debd0: logic 16, phys. 129, len 24 [ 159.852444][T14237] EXT4-fs error (device loop6): ext4_mb_release_inode_pa:5444: group 0, free 0, pa_free 8 [ 159.879239][T14257] loop3: detected capacity change from 0 to 1024 [ 159.886315][T14257] EXT4-fs: Ignoring removed bh option [ 159.903802][T14241] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.914187][T14237] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 52 with error 28 [ 159.926775][T14237] EXT4-fs (loop6): This should not happen!! Data will be lost [ 159.926775][T14237] [ 159.936684][T14237] EXT4-fs (loop6): Total free blocks count 0 [ 159.942738][T14237] EXT4-fs (loop6): Free/Dirty block details [ 159.948717][T14237] EXT4-fs (loop6): free_blocks=128 [ 159.953953][T14237] EXT4-fs (loop6): dirty_blocks=0 [ 159.958998][T14237] EXT4-fs (loop6): Block reservation details [ 159.965008][T14237] EXT4-fs (loop6): i_reserved_data_blocks=0 [ 159.986568][T14257] FAULT_INJECTION: forcing a failure. [ 159.986568][T14257] name failslab, interval 1, probability 0, space 0, times 0 [ 159.999426][T14257] CPU: 1 UID: 0 PID: 14257 Comm: syz.3.2907 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 159.999461][T14257] Tainted: [W]=WARN [ 159.999469][T14257] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 159.999557][T14257] Call Trace: [ 159.999564][T14257] [ 159.999571][T14257] __dump_stack+0x1d/0x30 [ 159.999634][T14257] dump_stack_lvl+0xe8/0x140 [ 159.999713][T14257] dump_stack+0x15/0x1b [ 159.999734][T14257] should_fail_ex+0x265/0x280 [ 159.999805][T14257] should_failslab+0x8c/0xb0 [ 159.999834][T14257] __kmalloc_noprof+0xa5/0x570 [ 159.999894][T14257] ? ext4_find_extent+0x16b/0x7a0 [ 159.999932][T14257] ext4_find_extent+0x16b/0x7a0 [ 159.999955][T14257] ? folio_mark_accessed+0x240/0x3a0 [ 160.000045][T14257] ext4_ext_map_blocks+0x11f/0x38a0 [ 160.000071][T14257] ? bdev_getblk+0x66/0x3b0 [ 160.000095][T14257] ? ext4_get_group_desc+0x16b/0x190 [ 160.000117][T14257] ? from_kprojid+0x159/0x380 [ 160.000193][T14257] ? ext4_fc_track_inode+0x9f/0x530 [ 160.000219][T14257] ? mark_buffer_dirty+0xf8/0x210 [ 160.000250][T14257] ? ext4_es_lookup_extent+0x352/0x4f0 [ 160.000289][T14257] ext4_map_blocks+0x5ee/0xd00 [ 160.000337][T14257] ext4_alloc_file_blocks+0x2a9/0x800 [ 160.000373][T14257] ext4_do_fallocate+0x13b/0x3f0 [ 160.000405][T14257] ext4_fallocate+0x20d/0x2f0 [ 160.000465][T14257] vfs_fallocate+0x3b6/0x400 [ 160.000500][T14257] __x64_sys_fallocate+0x7a/0xd0 [ 160.000568][T14257] x64_sys_call+0x2518/0x3000 [ 160.000594][T14257] do_syscall_64+0xd2/0x200 [ 160.000613][T14257] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 160.000691][T14257] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 160.000795][T14257] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.000820][T14257] RIP: 0033:0x7fb6a02ef749 [ 160.000838][T14257] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 160.000858][T14257] RSP: 002b:00007fb69ed4f038 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 160.000881][T14257] RAX: ffffffffffffffda RBX: 00007fb6a0545fa0 RCX: 00007fb6a02ef749 [ 160.000959][T14257] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 160.000970][T14257] RBP: 00007fb69ed4f090 R08: 0000000000000000 R09: 0000000000000000 [ 160.001062][T14257] R10: 0000000008800000 R11: 0000000000000246 R12: 0000000000000002 [ 160.001076][T14257] R13: 00007fb6a0546038 R14: 00007fb6a0545fa0 R15: 00007ffd40336fd8 [ 160.001094][T14257] [ 160.248059][ T29] kauditd_printk_skb: 286 callbacks suppressed [ 160.248078][ T29] audit: type=1400 audit(3911141297.059:6597): avc: denied { write } for pid=14264 comm="syz.0.2909" name="packet" dev="proc" ino=4026532978 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 160.319272][ T29] audit: type=1400 audit(3911141297.059:6598): avc: denied { append } for pid=14264 comm="syz.0.2909" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 160.354336][T14241] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.435309][ T1575] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.458248][T14280] loop6: detected capacity change from 0 to 512 [ 160.461893][ T4850] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.474362][T14280] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 160.479255][ T4850] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.501411][ T4850] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.502287][T14280] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 160.532417][ T29] audit: type=1326 audit(3911141297.339:6599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14285 comm="syz.3.2913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6a02ef749 code=0x7ffc0000 [ 160.556067][ T29] audit: type=1326 audit(3911141297.339:6600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14285 comm="syz.3.2913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=252 compat=0 ip=0x7fb6a02ef749 code=0x7ffc0000 [ 160.579689][T14280] EXT4-fs (loop6): 1 truncate cleaned up [ 160.585571][ T29] audit: type=1326 audit(3911141297.339:6601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14285 comm="syz.3.2913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6a02ef749 code=0x7ffc0000 [ 160.609287][ T29] audit: type=1326 audit(3911141297.339:6602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14285 comm="syz.3.2913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb6a02ef749 code=0x7ffc0000 [ 160.632907][ T29] audit: type=1326 audit(3911141297.339:6603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14285 comm="syz.3.2913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6a02ef749 code=0x7ffc0000 [ 160.656930][ T29] audit: type=1326 audit(3911141297.339:6604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14285 comm="syz.3.2913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb6a02ef749 code=0x7ffc0000 [ 160.680488][ T29] audit: type=1326 audit(3911141297.339:6605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14285 comm="syz.3.2913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6a02ef749 code=0x7ffc0000 [ 160.704548][ T29] audit: type=1326 audit(3911141297.339:6606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14285 comm="syz.3.2913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb6a02ef749 code=0x7ffc0000 [ 160.911873][T14324] loop6: detected capacity change from 0 to 1024 [ 160.922583][T14324] EXT4-fs: inline encryption not supported [ 160.945074][T14324] EXT4-fs mount: 69 callbacks suppressed [ 160.945101][T14324] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 160.950530][T14331] vxcan3: entered promiscuous mode [ 160.963436][T14324] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4193: comm syz.6.2922: Allocating blocks 385-513 which overlap fs metadata [ 160.966199][T14324] EXT4-fs (loop6): pa ffff8881071debd0: logic 16, phys. 129, len 24 [ 160.968637][T14331] vxcan3: entered allmulticast mode [ 160.982589][T14324] EXT4-fs error (device loop6): ext4_mb_release_inode_pa:5444: group 0, free 0, pa_free 8 [ 160.995488][T14324] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 52 with error 28 [ 161.018463][T14324] EXT4-fs (loop6): This should not happen!! Data will be lost [ 161.018463][T14324] [ 161.028258][T14324] EXT4-fs (loop6): Total free blocks count 0 [ 161.034298][T14324] EXT4-fs (loop6): Free/Dirty block details [ 161.040274][T14324] EXT4-fs (loop6): free_blocks=128 [ 161.045432][T14324] EXT4-fs (loop6): dirty_blocks=0 [ 161.050484][T14324] EXT4-fs (loop6): Block reservation details [ 161.056517][T14324] EXT4-fs (loop6): i_reserved_data_blocks=0 [ 161.090170][T14343] xt_CT: You must specify a L4 protocol and not use inversions on it [ 161.113656][T14343] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.164020][T14343] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.213980][T14343] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.303711][T14343] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.361583][ T31] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.381541][ T4850] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.406459][ T4850] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.417434][T14374] can0: slcan on ttyS3. [ 161.432283][ T4850] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.469079][T14387] loop6: detected capacity change from 0 to 1024 [ 161.476430][T14387] EXT4-fs: inline encryption not supported [ 161.482498][T14374] can0 (unregistered): slcan off ttyS3. [ 161.497457][T14387] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 161.535085][T14387] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4193: comm syz.6.2936: Allocating blocks 385-513 which overlap fs metadata [ 161.653625][T14395] usb usb1: check_ctrlrecip: process 14395 (syz.2.2937) requesting ep 01 but needs 81 [ 161.663324][T14395] usb usb1: usbfs: process 14395 (syz.2.2937) did not claim interface 0 before use [ 161.708079][T14397] usb usb1: check_ctrlrecip: process 14397 (syz.2.2938) requesting ep 01 but needs 81 [ 161.717824][T14397] usb usb1: usbfs: process 14397 (syz.2.2938) did not claim interface 0 before use [ 161.730881][T14387] EXT4-fs (loop6): pa ffff8881071f5e70: logic 16, phys. 129, len 24 [ 161.739049][T14387] EXT4-fs error (device loop6): ext4_mb_release_inode_pa:5444: group 0, free 0, pa_free 8 [ 161.767525][T14387] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 52 with error 28 [ 161.780054][T14387] EXT4-fs (loop6): This should not happen!! Data will be lost [ 161.780054][T14387] [ 161.789838][T14387] EXT4-fs (loop6): Total free blocks count 0 [ 161.795982][T14387] EXT4-fs (loop6): Free/Dirty block details [ 161.801877][T14387] EXT4-fs (loop6): free_blocks=128 [ 161.807075][T14387] EXT4-fs (loop6): dirty_blocks=0 [ 161.812123][T14387] EXT4-fs (loop6): Block reservation details [ 161.818194][T14387] EXT4-fs (loop6): i_reserved_data_blocks=0 [ 161.981247][T14406] pim6reg: entered allmulticast mode [ 161.997722][T14406] pim6reg: left allmulticast mode [ 162.114892][T14420] __nla_validate_parse: 21 callbacks suppressed [ 162.114912][T14420] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2946'. [ 162.142517][T14418] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2945'. [ 162.163203][T14420] xt_CT: You must specify a L4 protocol and not use inversions on it [ 162.204146][T14420] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 162.214133][T14420] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.263151][T14428] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2944'. [ 162.353609][T14420] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 162.363702][T14420] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.426380][T14420] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 162.437607][T14420] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.467984][T14444] FAULT_INJECTION: forcing a failure. [ 162.467984][T14444] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 162.481284][T14444] CPU: 1 UID: 0 PID: 14444 Comm: syz.2.2951 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 162.481372][T14444] Tainted: [W]=WARN [ 162.481380][T14444] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 162.481391][T14444] Call Trace: [ 162.481398][T14444] [ 162.481407][T14444] __dump_stack+0x1d/0x30 [ 162.481434][T14444] dump_stack_lvl+0xe8/0x140 [ 162.481457][T14444] dump_stack+0x15/0x1b [ 162.481553][T14444] should_fail_ex+0x265/0x280 [ 162.481587][T14444] should_fail+0xb/0x20 [ 162.481601][T14444] should_fail_usercopy+0x1a/0x20 [ 162.481620][T14444] _copy_from_user+0x1c/0xb0 [ 162.481695][T14444] io_submit_one+0x52/0x11d0 [ 162.481761][T14444] __se_sys_io_submit+0xfb/0x280 [ 162.481905][T14444] __x64_sys_io_submit+0x43/0x50 [ 162.481987][T14444] x64_sys_call+0x2d6c/0x3000 [ 162.482011][T14444] do_syscall_64+0xd2/0x200 [ 162.482066][T14444] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 162.482132][T14444] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 162.482164][T14444] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.482188][T14444] RIP: 0033:0x7fb6f658f749 [ 162.482206][T14444] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 162.482228][T14444] RSP: 002b:00007fb6f4ff7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 162.482405][T14444] RAX: ffffffffffffffda RBX: 00007fb6f67e5fa0 RCX: 00007fb6f658f749 [ 162.482420][T14444] RDX: 0000200000000040 RSI: 0000000000000001 RDI: 00007fb6f7322000 [ 162.482435][T14444] RBP: 00007fb6f4ff7090 R08: 0000000000000000 R09: 0000000000000000 [ 162.482450][T14444] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 162.482464][T14444] R13: 00007fb6f67e6038 R14: 00007fb6f67e5fa0 R15: 00007ffed5178d78 [ 162.482484][T14444] [ 162.684049][T14420] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 162.694030][T14420] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.770395][T14448] loop2: detected capacity change from 0 to 1024 [ 162.776192][ T361] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 162.785089][ T361] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.796824][ T361] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 162.802675][T14448] EXT4-fs: inline encryption not supported [ 162.805119][ T361] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.823450][ T361] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 162.831936][ T361] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.843133][T14448] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 162.865782][ T361] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 162.873170][T14448] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4193: comm syz.2.2952: Allocating blocks 385-513 which overlap fs metadata [ 162.874168][ T361] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.898213][T14448] EXT4-fs (loop2): pa ffff8881071dec40: logic 16, phys. 129, len 24 [ 162.906375][T14448] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5444: group 0, free 0, pa_free 8 [ 162.958345][T14448] EXT4-fs error (device loop2): mb_free_blocks:2017: group 0, inode 15: block 337:freeing already freed block (bit 21); block bitmap corrupt. [ 163.023796][T14468] netlink: 92 bytes leftover after parsing attributes in process `syz.2.2952'. [ 163.043384][T14468] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2952'. [ 163.123423][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.176334][T14479] x_tables: ip_tables: REDIRECT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 163.198163][T14481] usb usb1: check_ctrlrecip: process 14481 (syz.6.2960) requesting ep 01 but needs 81 [ 163.207845][T14481] usb usb1: usbfs: process 14481 (syz.6.2960) did not claim interface 0 before use [ 163.332826][T14512] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2963'. [ 163.354720][T14512] xt_CT: You must specify a L4 protocol and not use inversions on it [ 163.376709][T14512] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.443812][T14512] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.503801][T14512] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.583834][T14512] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.962945][T14556] loop0: detected capacity change from 0 to 1024 [ 163.985411][T14556] EXT4-fs: inline encryption not supported [ 164.008757][T14556] netlink: 92 bytes leftover after parsing attributes in process `syz.0.2969'. [ 164.017944][T14556] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2969'. [ 164.062729][T14566] bond1: up delay (1024) is not a multiple of miimon (100), value rounded to 1000 ms [ 164.072390][T14566] bond1: down delay (4) is not a multiple of miimon (100), value rounded to 0 ms [ 164.213105][T14604] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2971'. [ 164.519396][T14615] loop0: detected capacity change from 0 to 2048 [ 164.564667][T14615] Alternate GPT is invalid, using primary GPT. [ 164.571055][T14615] loop0: p2 p3 p7 [ 164.789729][T14644] loop0: detected capacity change from 0 to 1024 [ 164.810299][T14644] EXT4-fs: inline encryption not supported [ 164.845214][T14644] netlink: 92 bytes leftover after parsing attributes in process `syz.0.2983'. [ 164.882558][T14650] sch_tbf: burst 22 is lower than device lo mtu (65550) ! [ 164.997144][T14658] bridge_slave_1: left allmulticast mode [ 165.002932][T14658] bridge_slave_1: left promiscuous mode [ 165.008640][T14658] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.024398][T14658] bridge_slave_0: left allmulticast mode [ 165.030093][T14658] bridge_slave_0: left promiscuous mode [ 165.035868][T14658] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.240308][T14682] loop2: detected capacity change from 0 to 1024 [ 165.247315][T14682] EXT4-fs: inline encryption not supported [ 165.273124][ T29] kauditd_printk_skb: 299 callbacks suppressed [ 165.273142][ T29] audit: type=1326 audit(3911141302.089:6906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14679 comm="syz.0.2995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d1bf4f749 code=0x7ffc0000 [ 165.312321][ T29] audit: type=1326 audit(3911141302.089:6907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14679 comm="syz.0.2995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=252 compat=0 ip=0x7f7d1bf4f749 code=0x7ffc0000 [ 165.332281][T14682] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 165.335883][ T29] audit: type=1326 audit(3911141302.089:6908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14679 comm="syz.0.2995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d1bf4f749 code=0x7ffc0000 [ 165.372393][ T29] audit: type=1326 audit(3911141302.089:6909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14679 comm="syz.0.2995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7d1bf4f749 code=0x7ffc0000 [ 165.396336][ T29] audit: type=1326 audit(3911141302.089:6910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14679 comm="syz.0.2995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d1bf4f749 code=0x7ffc0000 [ 165.419982][ T29] audit: type=1326 audit(3911141302.089:6911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14679 comm="syz.0.2995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7d1bf4f749 code=0x7ffc0000 [ 165.427467][T14682] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4193: comm syz.2.2996: Allocating blocks 385-513 which overlap fs metadata [ 165.443565][ T29] audit: type=1326 audit(3911141302.089:6912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14679 comm="syz.0.2995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d1bf4f749 code=0x7ffc0000 [ 165.481071][ T29] audit: type=1326 audit(3911141302.089:6913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14679 comm="syz.0.2995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7d1bf4f749 code=0x7ffc0000 [ 165.489633][T14692] EXT4-fs (loop2): pa ffff8881071f5f50: logic 16, phys. 129, len 24 [ 165.504490][ T29] audit: type=1326 audit(3911141302.089:6914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14679 comm="syz.0.2995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d1bf4f749 code=0x7ffc0000 [ 165.504522][ T29] audit: type=1326 audit(3911141302.089:6915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14679 comm="syz.0.2995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7d1bf4f749 code=0x7ffc0000 [ 165.512554][T14692] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5444: group 0, free 0, pa_free 8 [ 165.581722][T14692] EXT4-fs error (device loop2): mb_free_blocks:2017: group 0, inode 15: block 337:freeing already freed block (bit 21); block bitmap corrupt. [ 165.626185][ T361] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.626890][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.650601][ T361] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.664775][ T361] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.673411][ T361] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.770448][T14725] FAULT_INJECTION: forcing a failure. [ 165.770448][T14725] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 165.784065][T14725] CPU: 0 UID: 0 PID: 14725 Comm: syz.2.3004 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 165.784110][T14725] Tainted: [W]=WARN [ 165.784116][T14725] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 165.784146][T14725] Call Trace: [ 165.784153][T14725] [ 165.784161][T14725] __dump_stack+0x1d/0x30 [ 165.784181][T14725] dump_stack_lvl+0xe8/0x140 [ 165.784199][T14725] dump_stack+0x15/0x1b [ 165.784214][T14725] should_fail_ex+0x265/0x280 [ 165.784299][T14725] should_fail+0xb/0x20 [ 165.784313][T14725] should_fail_usercopy+0x1a/0x20 [ 165.784331][T14725] _copy_to_user+0x20/0xa0 [ 165.784353][T14725] simple_read_from_buffer+0xb5/0x130 [ 165.784437][T14725] proc_fail_nth_read+0x10e/0x150 [ 165.784463][T14725] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 165.784488][T14725] vfs_read+0x1a8/0x770 [ 165.784507][T14725] ? vt_ioctl+0x75f/0x18a0 [ 165.784562][T14725] ? __rcu_read_unlock+0x4f/0x70 [ 165.784616][T14725] ? __fget_files+0x184/0x1c0 [ 165.784699][T14725] ksys_read+0xda/0x1a0 [ 165.784721][T14725] __x64_sys_read+0x40/0x50 [ 165.784781][T14725] x64_sys_call+0x27c0/0x3000 [ 165.784800][T14725] do_syscall_64+0xd2/0x200 [ 165.784818][T14725] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 165.784841][T14725] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 165.784947][T14725] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.784966][T14725] RIP: 0033:0x7fb6f658e15c [ 165.785000][T14725] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 165.785016][T14725] RSP: 002b:00007fb6f4ff7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 165.785034][T14725] RAX: ffffffffffffffda RBX: 00007fb6f67e5fa0 RCX: 00007fb6f658e15c [ 165.785046][T14725] RDX: 000000000000000f RSI: 00007fb6f4ff70a0 RDI: 0000000000000004 [ 165.785059][T14725] RBP: 00007fb6f4ff7090 R08: 0000000000000000 R09: 0000000000000000 [ 165.785112][T14725] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 165.785123][T14725] R13: 00007fb6f67e6038 R14: 00007fb6f67e5fa0 R15: 00007ffed5178d78 [ 165.785141][T14725] [ 166.111121][T14739] loop2: detected capacity change from 0 to 1024 [ 166.111644][T14731] loop6: detected capacity change from 0 to 512 [ 166.127084][T14731] ------------[ cut here ]------------ [ 166.132670][T14731] EA inode 11 i_nlink=2 [ 166.132890][T14731] WARNING: CPU: 1 PID: 14731 at fs/ext4/xattr.c:1058 ext4_xattr_inode_update_ref+0x36a/0x380 [ 166.142432][T14739] EXT4-fs: inline encryption not supported [ 166.147329][T14731] Modules linked in: [ 166.157041][T14731] CPU: 1 UID: 0 PID: 14731 Comm: syz.6.3007 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 166.168517][T14731] Tainted: [W]=WARN [ 166.172353][T14731] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 166.182437][T14731] RIP: 0010:ext4_xattr_inode_update_ref+0x36a/0x380 [ 166.189054][T14731] Code: 90 49 8d 7e 40 e8 06 f8 b8 ff 4d 8b 6e 40 4c 89 e7 e8 1a f3 b8 ff 41 8b 56 48 48 c7 c7 76 d5 55 86 4c 89 ee e8 f7 f3 67 ff 90 <0f> 0b 90 90 e9 ff fe ff ff e8 78 f2 b5 03 0f 1f 84 00 00 00 00 00 [ 166.193443][T14739] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 166.208739][T14731] RSP: 0018:ffffc900057135a0 EFLAGS: 00010246 [ 166.208764][T14731] RAX: 6e1f5a272479e100 RBX: ffff888119882468 RCX: 0000000000080000 [ 166.235927][T14731] RDX: ffffc9000cde1000 RSI: 0000000000003bfa RDI: 0000000000003bfb [ 166.243989][T14731] RBP: 0000000000000002 R08: 0001c90005713427 R09: 0000000000000000 [ 166.251987][T14731] R10: 00000000ffffffff R11: 0000000000000002 R12: ffff888119882418 [ 166.260111][T14731] R13: 000000000000000b R14: ffff8881198823d0 R15: 0000000000000001 [ 166.268282][T14731] FS: 00007fdcf0b976c0(0000) GS:ffff8882aef11000(0000) knlGS:0000000000000000 [ 166.277266][T14731] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 166.283983][T14731] CR2: 00007fdcf2112a60 CR3: 000000011ba66000 CR4: 00000000003506f0 [ 166.292431][T14731] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 166.300427][T14731] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 166.308658][T14731] Call Trace: [ 166.312050][T14731] [ 166.315043][T14731] ext4_xattr_set_entry+0x77f/0x1020 [ 166.320462][T14731] ext4_xattr_ibody_set+0x184/0x3c0 [ 166.325810][T14731] ext4_expand_extra_isize_ea+0xcbb/0x11f0 [ 166.331670][T14731] __ext4_expand_extra_isize+0x246/0x280 [ 166.337431][T14731] __ext4_mark_inode_dirty+0x29d/0x3f0 [ 166.343204][T14731] ext4_evict_inode+0x80e/0xd90 [ 166.348196][T14731] ? __pfx_ext4_evict_inode+0x10/0x10 [ 166.353626][T14731] evict+0x2e3/0x550 [ 166.357617][T14731] ? __dquot_initialize+0x146/0x7c0 [ 166.363001][T14731] iput+0x4ed/0x650 [ 166.366841][T14731] ext4_process_orphan+0x1a9/0x1c0 [ 166.371977][T14731] ext4_orphan_cleanup+0x6a8/0xa00 [ 166.377244][T14731] ext4_fill_super+0x3483/0x3810 [ 166.382398][T14731] ? snprintf+0x86/0xb0 [ 166.386586][T14731] ? set_blocksize+0x1a8/0x310 [ 166.391369][T14731] ? sb_set_blocksize+0xe3/0x100 [ 166.396341][T14731] ? setup_bdev_super+0x30e/0x370 [ 166.401484][T14731] ? __pfx_ext4_fill_super+0x10/0x10 [ 166.406928][T14731] get_tree_bdev_flags+0x291/0x300 [ 166.410734][T14739] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4193: comm syz.2.3010: Allocating blocks 385-513 which overlap fs metadata [ 166.412131][T14731] ? __pfx_ext4_fill_super+0x10/0x10 [ 166.412167][T14731] get_tree_bdev+0x1f/0x30 [ 166.432807][T14739] EXT4-fs (loop2): pa ffff8881071f5f50: logic 16, phys. 129, len 24 [ 166.435986][T14731] ext4_get_tree+0x1c/0x30 [ 166.444044][T14739] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5444: group 0, free 0, pa_free 8 [ 166.448522][T14731] vfs_get_tree+0x57/0x1d0 [ 166.463255][T14731] do_new_mount+0x24d/0x660 [ 166.467788][T14731] path_mount+0x4a5/0xb70 [ 166.472163][T14731] ? user_path_at+0x109/0x130 [ 166.476870][T14731] __se_sys_mount+0x28c/0x2e0 [ 166.481612][T14731] __x64_sys_mount+0x67/0x80 [ 166.486377][T14731] x64_sys_call+0x2b51/0x3000 [ 166.488977][T14739] EXT4-fs error (device loop2): mb_free_blocks:2017: group 0, inode 15: block 337:freeing already freed block (bit 21); block bitmap corrupt. [ 166.491069][T14731] do_syscall_64+0xd2/0x200 [ 166.510412][T14731] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 166.516548][T14731] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 166.522384][T14731] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.528406][T14731] RIP: 0033:0x7fdcf2130eea [ 166.532871][T14731] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 166.552619][T14731] RSP: 002b:00007fdcf0b96e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 166.561098][T14731] RAX: ffffffffffffffda RBX: 00007fdcf0b96ef0 RCX: 00007fdcf2130eea [ 166.569218][T14731] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007fdcf0b96eb0 [ 166.577327][T14731] RBP: 0000200000000180 R08: 00007fdcf0b96ef0 R09: 0000000000800700 [ 166.585449][T14731] R10: 0000000000800700 R11: 0000000000000246 R12: 00002000000001c0 [ 166.593483][T14731] R13: 00007fdcf0b96eb0 R14: 000000000000046f R15: 000000000000002c [ 166.601467][T14731] [ 166.604508][T14731] ---[ end trace 0000000000000000 ]--- [ 166.610411][T14731] EXT4-fs error (device loop6): ext4_xattr_inode_iget:441: inode #18: comm syz.6.3007: iget: bad extra_isize 90 (inode size 256) [ 166.610746][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.633396][T14731] EXT4-fs (loop6): Remounting filesystem read-only [ 166.633778][T14751] xt_CT: You must specify a L4 protocol and not use inversions on it [ 166.649033][T14731] EXT4-fs warning (device loop6): ext4_evict_inode:274: xattr delete (err -30) [ 166.659156][T14731] EXT4-fs (loop6): 1 orphan inode deleted [ 166.673673][T14750] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 166.682772][T14731] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 166.683699][T14750] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.784021][T14750] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 166.793859][T14750] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.809217][T14768] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.853427][T14750] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 166.863248][T14750] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.903471][ T7275] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.914842][T14768] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.964232][T14750] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 166.974118][T14750] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.014276][T14768] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.054768][ T12] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 167.063188][ T12] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.083373][ T361] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 167.091704][ T361] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.101619][T14768] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.128595][ T361] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 167.136921][ T361] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.162290][ T361] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 167.170528][ T361] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.205820][T14792] __nla_validate_parse: 10 callbacks suppressed [ 167.205873][T14792] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3019'. [ 167.221263][ T361] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.230144][T14792] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3019'. [ 167.240068][ T361] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.258718][ T361] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.277705][ T361] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.333040][T14821] loop0: detected capacity change from 0 to 1024 [ 167.360272][ T1575] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.380778][T14821] EXT4-fs: inline encryption not supported [ 167.397399][T14821] netlink: 92 bytes leftover after parsing attributes in process `syz.0.3022'. [ 167.406766][T14821] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3022'. [ 167.430150][T14828] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3020'. [ 167.440988][ T1575] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.513592][ T1575] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.566676][ T1575] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.665925][T14844] tipc: Trying to set illegal importance in message [ 167.680599][T14844] sch_tbf: burst 22 is lower than device lo mtu (65550) ! [ 167.762324][T14823] chnl_net:caif_netlink_parms(): no params data found [ 167.817832][T14973] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3030'. [ 167.837659][T14973] xt_CT: You must specify a L4 protocol and not use inversions on it [ 167.848829][T14823] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.856159][T14823] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.863604][T14823] bridge_slave_0: entered allmulticast mode [ 167.870482][T14823] bridge_slave_0: entered promiscuous mode [ 167.878262][T14973] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.901374][T14823] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.908563][T14823] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.935226][T14823] bridge_slave_1: entered allmulticast mode [ 167.947296][T15011] loop6: detected capacity change from 0 to 1024 [ 167.954758][T15011] EXT4-fs: inline encryption not supported [ 167.961989][T14823] bridge_slave_1: entered promiscuous mode [ 167.969825][T14973] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.984385][T15011] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 168.001933][T15011] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4193: comm syz.6.3033: Allocating blocks 385-513 which overlap fs metadata [ 168.020194][T15011] EXT4-fs (loop6): pa ffff8881071f5f50: logic 16, phys. 129, len 24 [ 168.021196][T14823] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 168.028431][T15011] EXT4-fs error (device loop6): ext4_mb_release_inode_pa:5444: group 0, free 0, pa_free 8 [ 168.028836][T15011] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 52 with error 28 [ 168.060116][T15011] EXT4-fs (loop6): This should not happen!! Data will be lost [ 168.060116][T15011] [ 168.069890][T15011] EXT4-fs (loop6): Total free blocks count 0 [ 168.076087][T15011] EXT4-fs (loop6): Free/Dirty block details [ 168.081991][T15011] EXT4-fs (loop6): free_blocks=128 [ 168.087175][T15011] EXT4-fs (loop6): dirty_blocks=0 [ 168.092245][T15011] EXT4-fs (loop6): Block reservation details [ 168.098254][T15011] EXT4-fs (loop6): i_reserved_data_blocks=0 [ 168.121351][T14973] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.136368][T15011] netlink: 92 bytes leftover after parsing attributes in process `syz.6.3033'. [ 168.148488][T14823] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 168.157801][T15011] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3033'. [ 168.202989][T14973] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.241846][T14823] team0: Port device team_slave_0 added [ 168.256559][T14823] team0: Port device team_slave_1 added [ 168.304727][ T361] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.320901][T14823] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 168.328215][T14823] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 168.354181][T14823] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 168.365774][T14823] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 168.372758][T14823] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 168.398930][T14823] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 168.416906][ T361] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.469678][T14823] hsr_slave_0: entered promiscuous mode [ 168.476070][T14823] hsr_slave_1: entered promiscuous mode [ 168.482294][T14823] debugfs: 'hsr0' already exists in 'hsr' [ 168.488148][T14823] Cannot create hsr debugfs directory [ 168.493856][ T31] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.544064][ T361] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.562239][T15161] loop0: detected capacity change from 0 to 1024 [ 168.575641][T15161] EXT4-fs: inline encryption not supported [ 168.604934][T15161] netlink: 92 bytes leftover after parsing attributes in process `syz.0.3044'. [ 168.614467][T15161] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3044'. [ 168.644592][T15221] FAULT_INJECTION: forcing a failure. [ 168.644592][T15221] name failslab, interval 1, probability 0, space 0, times 0 [ 168.657268][T15221] CPU: 1 UID: 0 PID: 15221 Comm: syz.0.3046 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 168.657330][T15221] Tainted: [W]=WARN [ 168.657336][T15221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 168.657347][T15221] Call Trace: [ 168.657414][T15221] [ 168.657423][T15221] __dump_stack+0x1d/0x30 [ 168.657493][T15221] dump_stack_lvl+0xe8/0x140 [ 168.657515][T15221] dump_stack+0x15/0x1b [ 168.657530][T15221] should_fail_ex+0x265/0x280 [ 168.657617][T15221] should_failslab+0x8c/0xb0 [ 168.657642][T15221] kmem_cache_alloc_node_noprof+0x57/0x4a0 [ 168.657669][T15221] ? __alloc_skb+0x101/0x320 [ 168.657724][T15221] __alloc_skb+0x101/0x320 [ 168.657756][T15221] netlink_alloc_large_skb+0xbf/0xf0 [ 168.657791][T15221] netlink_sendmsg+0x3cf/0x6b0 [ 168.657865][T15221] ? __pfx_netlink_sendmsg+0x10/0x10 [ 168.657883][T15221] __sock_sendmsg+0x145/0x180 [ 168.657928][T15221] ____sys_sendmsg+0x31e/0x4e0 [ 168.658001][T15221] ___sys_sendmsg+0x17b/0x1d0 [ 168.658078][T15221] __x64_sys_sendmsg+0xd4/0x160 [ 168.658103][T15221] x64_sys_call+0x191e/0x3000 [ 168.658129][T15221] do_syscall_64+0xd2/0x200 [ 168.658153][T15221] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 168.658243][T15221] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 168.658279][T15221] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.658347][T15221] RIP: 0033:0x7f7d1bf4f749 [ 168.658365][T15221] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 168.658383][T15221] RSP: 002b:00007f7d1a9b7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 168.658402][T15221] RAX: ffffffffffffffda RBX: 00007f7d1c1a5fa0 RCX: 00007f7d1bf4f749 [ 168.658414][T15221] RDX: 0000000020000004 RSI: 0000200000000440 RDI: 0000000000000006 [ 168.658426][T15221] RBP: 00007f7d1a9b7090 R08: 0000000000000000 R09: 0000000000000000 [ 168.658481][T15221] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 168.658496][T15221] R13: 00007f7d1c1a6038 R14: 00007f7d1c1a5fa0 R15: 00007ffd33f23948 [ 168.658556][T15221] [ 169.031238][T15236] loop0: detected capacity change from 0 to 2048 [ 169.038085][T15236] ext4: Unknown parameter 'smackfshat' [ 169.090586][T15250] loop0: detected capacity change from 0 to 512 [ 169.194620][T15259] xt_CT: You must specify a L4 protocol and not use inversions on it [ 169.216746][T15259] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.283713][T15259] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.318513][T15267] loop0: detected capacity change from 0 to 512 [ 169.335661][T15259] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.413753][T15259] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.485214][T15281] loop3: detected capacity change from 0 to 1024 [ 169.500127][T15281] EXT4-fs: inline encryption not supported [ 169.547276][T15281] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 169.584885][T15281] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4193: comm syz.3.3056: Allocating blocks 385-513 which overlap fs metadata [ 169.619839][T15281] EXT4-fs (loop3): pa ffff8881071f5e70: logic 16, phys. 129, len 24 [ 169.627930][T15281] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5444: group 0, free 0, pa_free 8 [ 169.643067][ T3479] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 169.650515][ T3479] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 169.658014][ T3479] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 169.665816][T15281] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 52 with error 28 [ 169.678219][T15281] EXT4-fs (loop3): This should not happen!! Data will be lost [ 169.678219][T15281] [ 169.687995][T15281] EXT4-fs (loop3): Total free blocks count 0 [ 169.694108][T15281] EXT4-fs (loop3): Free/Dirty block details [ 169.700058][T15281] EXT4-fs (loop3): free_blocks=128 [ 169.705221][T15281] EXT4-fs (loop3): dirty_blocks=0 [ 169.710290][T15281] EXT4-fs (loop3): Block reservation details [ 169.716344][T15281] EXT4-fs (loop3): i_reserved_data_blocks=0 [ 169.723929][ T3479] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 169.731370][ T3479] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 169.738835][ T3479] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 169.746269][ T3479] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 169.753825][ T3479] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 169.761225][ T3479] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 169.768705][ T3479] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 169.786508][ T3479] hid-generic 0000:0000:0000.0001: hidraw0: HID v8.00 Device [syz0] on syz0 [ 169.808373][T15308] loop3: detected capacity change from 0 to 2048 [ 169.834150][T15308] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 169.891544][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.913204][T15317] loop3: detected capacity change from 0 to 128 [ 169.920512][T15317] vfat filesystem being mounted at /592/file1 supports timestamps until 2107-12-31 (0x10391447e) [ 170.443002][T15335] FAULT_INJECTION: forcing a failure. [ 170.443002][T15335] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 170.456476][T15335] CPU: 1 UID: 0 PID: 15335 Comm: syz.3.3067 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 170.456532][T15335] Tainted: [W]=WARN [ 170.456540][T15335] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 170.456553][T15335] Call Trace: [ 170.456561][T15335] [ 170.456568][T15335] __dump_stack+0x1d/0x30 [ 170.456591][T15335] dump_stack_lvl+0xe8/0x140 [ 170.456629][T15335] dump_stack+0x15/0x1b [ 170.456649][T15335] should_fail_ex+0x265/0x280 [ 170.456687][T15335] should_fail_alloc_page+0xf2/0x100 [ 170.456733][T15335] __alloc_frozen_pages_noprof+0xff/0x360 [ 170.456902][T15335] alloc_pages_mpol+0xb3/0x260 [ 170.456983][T15335] vma_alloc_folio_noprof+0x1aa/0x300 [ 170.457017][T15335] handle_mm_fault+0xec2/0x2be0 [ 170.457041][T15335] ? vma_start_read+0x141/0x1f0 [ 170.457108][T15335] do_user_addr_fault+0x630/0x1080 [ 170.457246][T15335] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 170.457271][T15335] exc_page_fault+0x62/0xa0 [ 170.457304][T15335] asm_exc_page_fault+0x26/0x30 [ 170.457369][T15335] RIP: 0033:0x7fb6a029cc5b [ 170.457387][T15335] Code: c0 8b 87 c0 00 00 00 66 0f 6c c0 85 c0 0f 85 44 01 00 00 c7 87 c0 00 00 00 ff ff ff ff 48 8d 84 24 20 21 00 00 48 8d 7c 24 20 <0f> 29 44 24 40 49 89 e4 48 89 44 24 50 8b 43 74 48 89 9c 24 00 01 [ 170.457408][T15335] RSP: 002b:00007fb69ed2be10 EFLAGS: 00010246 [ 170.457516][T15335] RAX: 00007fb69ed2df30 RBX: 00007fb6a051a640 RCX: 0000000000000000 [ 170.457532][T15335] RDX: 00007fb69ed2df78 RSI: 00007fb6a0350df8 RDI: 00007fb69ed2be30 [ 170.457547][T15335] RBP: 0000000000000009 R08: 0000000000000000 R09: 0000000000000000 [ 170.457559][T15335] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 170.457579][T15335] R13: 00007fb6a0546128 R14: 00007fb6a0546090 R15: 00007ffd40336fd8 [ 170.457596][T15335] [ 170.457605][T15335] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 170.820487][ T4850] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.836198][T15352] loop3: detected capacity change from 0 to 1024 [ 170.851727][ T4850] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.859522][T15352] EXT4-fs: inline encryption not supported [ 170.870828][ T4850] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.882381][T15361] loop6: detected capacity change from 0 to 128 [ 170.889412][ T4850] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.897907][T15361] FAT-fs (loop6): bogus number of FAT sectors [ 170.904107][T15361] FAT-fs (loop6): Can't find a valid FAT filesystem [ 170.944060][ T29] kauditd_printk_skb: 229 callbacks suppressed [ 170.944079][ T29] audit: type=1326 audit(3911141307.759:7145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15371 comm="syz.6.3075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcf212f749 code=0x7ffc0000 [ 170.993669][T15352] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 171.015812][ T29] audit: type=1326 audit(3911141307.789:7146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15371 comm="syz.6.3075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7fdcf212f749 code=0x7ffc0000 [ 171.039416][ T29] audit: type=1326 audit(3911141307.799:7148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15377 comm="syz.6.3075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fdcf2162005 code=0x7ffc0000 [ 171.063005][ T29] audit: type=1326 audit(3911141307.799:7147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15371 comm="syz.6.3075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcf212f749 code=0x7ffc0000 [ 171.087180][ T29] audit: type=1326 audit(3911141307.799:7149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15371 comm="syz.6.3075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcf212f749 code=0x7ffc0000 [ 171.088689][T15352] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4193: comm syz.3.3071: Allocating blocks 385-513 which overlap fs metadata [ 171.111373][ T29] audit: type=1326 audit(3911141307.799:7150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15371 comm="syz.6.3075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=311 compat=0 ip=0x7fdcf212f749 code=0x7ffc0000 [ 171.149044][ T29] audit: type=1326 audit(3911141307.799:7151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15371 comm="syz.6.3075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcf212f749 code=0x7ffc0000 [ 171.159966][T15479] EXT4-fs (loop3): pa ffff8881071decb0: logic 16, phys. 129, len 24 [ 171.173134][ T29] audit: type=1326 audit(3911141307.799:7152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15371 comm="syz.6.3075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcf212f749 code=0x7ffc0000 [ 171.181098][T15479] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5444: group 0, free 0, pa_free 8 [ 171.209636][ T29] audit: type=1326 audit(3911141307.939:7153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15377 comm="syz.6.3075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7fdcf212f749 code=0x7ffc0000 [ 171.239581][T15479] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 52 with error 28 [ 171.252068][T15479] EXT4-fs (loop3): This should not happen!! Data will be lost [ 171.252068][T15479] [ 171.261733][T15479] EXT4-fs (loop3): Total free blocks count 0 [ 171.267874][T15479] EXT4-fs (loop3): Free/Dirty block details [ 171.273799][T15479] EXT4-fs (loop3): free_blocks=128 [ 171.278927][T15479] EXT4-fs (loop3): dirty_blocks=0 [ 171.284044][T15479] EXT4-fs (loop3): Block reservation details [ 171.290062][T15479] EXT4-fs (loop3): i_reserved_data_blocks=0 [ 172.208525][ T29] audit: type=1400 audit(3911141308.169:7154): avc: denied { create } for pid=15362 comm="syz.0.3073" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 172.235396][T15341] chnl_net:caif_netlink_parms(): no params data found [ 172.530519][T15352] __nla_validate_parse: 5 callbacks suppressed [ 172.530538][T15352] netlink: 92 bytes leftover after parsing attributes in process `syz.3.3071'. [ 172.560977][T15395] wireguard0: entered promiscuous mode [ 172.631293][T15352] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3071'. [ 172.708394][T15341] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.715805][T15341] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.746465][T15341] bridge_slave_0: entered allmulticast mode [ 172.754738][T15341] bridge_slave_0: entered promiscuous mode [ 172.800409][T15341] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.807678][T15341] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.851510][T15341] bridge_slave_1: entered allmulticast mode [ 172.890116][T15341] bridge_slave_1: entered promiscuous mode [ 172.961687][T15608] SELinux: Context system_u:object_r:getty_etc_t:s0 is not valid (left unmapped). [ 173.007859][ T1575] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 173.018576][ T1575] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 173.031854][ T1575] bond0 (unregistering): Released all slaves [ 173.043493][ T1575] bond1 (unregistering): Released all slaves [ 173.081199][T15341] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 173.091985][T15341] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 173.113954][ T1575] tipc: Left network mode [ 173.117793][T15341] team0: Port device team_slave_0 added [ 173.125155][T15341] team0: Port device team_slave_1 added [ 173.225304][ T1575] hsr_slave_0: left promiscuous mode [ 173.230834][ T1575] hsr_slave_1: left promiscuous mode [ 173.236471][ T1575] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 173.243878][ T1575] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 173.251404][ T1575] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 173.258871][ T1575] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 173.268515][ T1575] veth1_macvtap: left promiscuous mode [ 173.274111][ T1575] veth0_macvtap: left promiscuous mode [ 173.279768][ T1575] veth1_vlan: left promiscuous mode [ 173.285065][ T1575] veth0_vlan: left promiscuous mode [ 173.336774][ T1575] smc: removing net device hsr0 with user defined pnetid SYZ2 [ 173.353650][ T1575] team0 (unregistering): Port device team_slave_1 removed [ 173.363200][ T1575] team0 (unregistering): Port device team_slave_0 removed [ 173.404434][T15341] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 173.411404][T15341] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 173.437492][T15341] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 173.448731][T15341] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 173.455861][T15341] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 173.481953][T15341] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 173.508868][T15341] hsr_slave_0: entered promiscuous mode [ 173.514949][T15341] hsr_slave_1: entered promiscuous mode [ 173.520920][T15341] debugfs: 'hsr0' already exists in 'hsr' [ 173.526682][T15341] Cannot create hsr debugfs directory [ 173.747428][T14823] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 173.756194][T14823] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 173.765277][T14823] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 173.776962][T14823] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 173.797669][T15341] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 173.808645][T15341] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 173.818161][T15341] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 173.828812][T15341] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 173.871330][ T1575] IPVS: stop unused estimator thread 0... [ 173.881159][T14823] 8021q: adding VLAN 0 to HW filter on device bond0 [ 173.891103][ T1575] ------------[ cut here ]------------ [ 173.893207][T14823] 8021q: adding VLAN 0 to HW filter on device team0 [ 173.896654][ T1575] WARNING: CPU: 0 PID: 1575 at net/xfrm/xfrm_state.c:3306 xfrm_state_fini+0x179/0x1f0 [ 173.912995][ T1575] Modules linked in: [ 173.914851][T14823] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 173.916917][ T1575] CPU: 0 UID: 0 PID: 1575 Comm: kworker/u8:7 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 173.927269][T14823] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 173.946484][T15341] 8021q: adding VLAN 0 to HW filter on device bond0 [ 173.949290][ T1575] Tainted: [W]=WARN [ 173.960152][ T1575] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 173.960788][ T4850] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.970272][ T1575] Workqueue: netns cleanup_net [ 173.977295][ T4850] bridge0: port 1(bridge_slave_0) entered forwarding state [ 173.977352][ T1575] [ 173.988598][ T4850] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.989297][ T1575] RIP: 0010:xfrm_state_fini+0x179/0x1f0 [ 173.991622][ T4850] bridge0: port 2(bridge_slave_1) entered forwarding state [ 174.011792][ T1575] Code: 48 8d bb 70 0e 00 00 e8 95 31 b7 fc 48 8b bb 70 0e 00 00 e8 59 e0 c3 fc 5b 41 5e 41 5f 5d e9 3e 6b b5 00 cc e8 38 d8 9b fc 90 <0f> 0b 90 e9 d9 fe ff ff e8 2a d8 9b fc 90 0f 0b 90 4c 89 f7 e8 5e [ 174.013712][T15341] 8021q: adding VLAN 0 to HW filter on device team0 [ 174.031905][ T1575] RSP: 0018:ffffc90001817c60 EFLAGS: 00010293 [ 174.044630][ T1575] RAX: ffffffff84bb7228 RBX: ffff888107f79800 RCX: ffff888102325280 [ 174.052671][ T1575] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff888107f7a640 [ 174.060674][ T1575] RBP: ffffffff86c91100 R08: 0001ffff8684810f R09: 0000000000000000 [ 174.064352][T14823] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 174.068786][ T1575] R10: ffffffff88e99990 R11: 0000000000000001 R12: ffffffff86c91120 [ 174.083688][ T1575] R13: ffff888107f79828 R14: ffff888107f7a640 R15: ffff888107f79800 [ 174.091719][ T1575] FS: 0000000000000000(0000) GS:ffff8882aee11000(0000) knlGS:0000000000000000 [ 174.092122][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.100692][ T1575] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 174.107769][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 174.121636][ T1575] CR2: 00007fdf4c0735c0 CR3: 0000000140fb4000 CR4: 00000000003506f0 [ 174.129725][ T1575] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 174.137761][ T1575] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 174.139769][T15341] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 174.145801][ T1575] Call Trace: [ 174.145811][ T1575] [ 174.145828][ T1575] xfrm_net_exit+0x2d/0x60 [ 174.156355][T15341] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 174.159631][ T1575] ops_undo_list+0x27b/0x410 [ 174.174260][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.177563][ T1575] cleanup_net+0x2f4/0x4f0 [ 174.182192][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 174.200946][ T1575] process_scheduled_works+0x4ce/0x9d0 [ 174.206572][ T1575] worker_thread+0x582/0x770 [ 174.211245][ T1575] ? _raw_spin_unlock_irqrestore+0x2b/0x60 [ 174.217111][ T1575] kthread+0x489/0x510 [ 174.217538][T14823] veth0_vlan: entered promiscuous mode [ 174.221249][ T1575] ? finish_task_switch+0xad/0x2b0 [ 174.231991][ T1575] ? __pfx_worker_thread+0x10/0x10 [ 174.237284][ T1575] ? __pfx_kthread+0x10/0x10 [ 174.238701][T14823] veth1_vlan: entered promiscuous mode [ 174.241896][ T1575] ret_from_fork+0x122/0x1b0 [ 174.252081][ T1575] ? __pfx_kthread+0x10/0x10 [ 174.256739][ T1575] ret_from_fork_asm+0x1a/0x30 [ 174.261624][ T1575] [ 174.264791][ T1575] ---[ end trace 0000000000000000 ]--- [ 174.288421][T15341] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 174.301404][T14823] veth0_macvtap: entered promiscuous mode [ 174.324678][T14823] veth1_macvtap: entered promiscuous mode [ 174.344486][T14823] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 174.356279][T14823] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 174.373029][ T1575] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.391383][T15839] netlink: 32 bytes leftover after parsing attributes in process `+}[@'. [ 174.400133][ T361] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.409437][ T361] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.423424][ T1575] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.443505][T15840] SELinux: ebitmap: truncated map [ 174.448592][T15840] SELinux: failed to load policy [ 174.465100][ T361] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.477499][ T361] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.490173][ T1575] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.564434][ T1575] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.590354][T15858] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3085'. [ 174.617184][T15858] xt_CT: You must specify a L4 protocol and not use inversions on it [ 174.627141][T15855] smc: net device hsr0 applied user defined pnetid SYZ2 [ 174.638928][T15858] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.642556][T15855] smc: net device hsr0 erased user defined pnetid SYZ2 [ 174.681664][T15341] veth0_vlan: entered promiscuous mode [ 174.705508][T15858] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.724110][T15869] loop3: detected capacity change from 0 to 1024 [ 174.741948][T15869] EXT4-fs: inline encryption not supported [ 174.757315][T15341] veth1_vlan: entered promiscuous mode [ 174.767442][T15869] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 174.782874][ T1575] bridge_slave_1: left allmulticast mode [ 174.788547][ T1575] bridge_slave_1: left promiscuous mode [ 174.794335][ T1575] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.796847][T15869] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4193: comm syz.3.3086: Allocating blocks 385-513 which overlap fs metadata [ 174.820755][T15869] EXT4-fs (loop3): pa ffff8881071f5f50: logic 16, phys. 129, len 24 [ 174.822741][ T1575] bridge_slave_0: left allmulticast mode [ 174.829124][T15869] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5444: group 0, free 0, pa_free 8 [ 174.834791][ T1575] bridge_slave_0: left promiscuous mode [ 174.845282][T15869] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 52 with error 28 [ 174.850546][ T1575] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.862857][T15869] EXT4-fs (loop3): This should not happen!! Data will be lost [ 174.862857][T15869] [ 174.879649][T15869] EXT4-fs (loop3): Total free blocks count 0 [ 174.885691][T15869] EXT4-fs (loop3): Free/Dirty block details [ 174.891747][T15869] EXT4-fs (loop3): free_blocks=128 [ 174.896905][T15869] EXT4-fs (loop3): dirty_blocks=0 [ 174.902007][T15869] EXT4-fs (loop3): Block reservation details [ 174.903115][T15888] netlink: 92 bytes leftover after parsing attributes in process `syz.3.3086'. [ 174.908143][T15869] EXT4-fs (loop3): i_reserved_data_blocks=0 [ 174.925633][T15888] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3086'. [ 175.066661][ T1575] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 175.080133][T15896] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3091'. [ 175.090419][ T1575] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 175.104738][ T1575] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 175.114455][ T1575] bond0 (unregistering): Released all slaves [ 175.129845][T15341] veth0_macvtap: entered promiscuous mode [ 175.139968][T15341] veth1_macvtap: entered promiscuous mode [ 175.169258][T15341] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 175.180034][T15341] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 175.198905][ T1575] hsr_slave_0: left promiscuous mode [ 175.205334][ T1575] hsr_slave_1: left promiscuous mode [ 175.211185][ T1575] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 175.218719][ T1575] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 175.231578][ T1575] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 175.239533][ T1575] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 175.252150][ T1575] veth1_macvtap: left promiscuous mode [ 175.263081][ T1575] veth0_macvtap: left promiscuous mode [ 175.269041][ T1575] veth1_vlan: left promiscuous mode [ 175.274705][ T1575] veth0_vlan: left promiscuous mode [ 175.277297][T15916] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3096'. [ 175.323659][T15926] loop6: detected capacity change from 0 to 1024 [ 175.330503][T15926] EXT4-fs: inline encryption not supported [ 175.346396][T15926] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 175.349534][ T1575] smc: removing net device hsr0 with user defined pnetid SYZ2 [ 175.368949][T15926] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4193: comm syz.6.3102: Allocating blocks 385-513 which overlap fs metadata [ 175.383385][ T1575] team0 (unregistering): Port device team_slave_1 removed [ 175.386966][T15926] EXT4-fs (loop6): pa ffff8881071f5e00: logic 16, phys. 129, len 24 [ 175.398549][T15926] EXT4-fs error (device loop6): ext4_mb_release_inode_pa:5444: group 0, free 0, pa_free 8 [ 175.408752][ T1575] team0 (unregistering): Port device team_slave_0 removed [ 175.409045][T15926] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 52 with error 28 [ 175.428432][T15926] EXT4-fs (loop6): This should not happen!! Data will be lost [ 175.428432][T15926] [ 175.438352][T15926] EXT4-fs (loop6): Total free blocks count 0 [ 175.444409][T15926] EXT4-fs (loop6): Free/Dirty block details [ 175.450634][T15926] EXT4-fs (loop6): free_blocks=128 [ 175.453047][T15931] netlink: 92 bytes leftover after parsing attributes in process `syz.6.3102'. [ 175.456037][T15926] EXT4-fs (loop6): dirty_blocks=0 [ 175.465719][T15931] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3102'. [ 175.470182][T15926] EXT4-fs (loop6): Block reservation details [ 175.470199][T15926] EXT4-fs (loop6): i_reserved_data_blocks=0 [ 175.491605][ T52] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.502377][ T52] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.514163][ T52] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.524813][ T52] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.577034][T15938] loop6: detected capacity change from 0 to 512 [ 175.585239][T15938] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 175.599599][T15938] EXT4-fs (loop6): 1 truncate cleaned up [ 175.606259][T15938] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 175.626598][T15944] loop7: detected capacity change from 0 to 512 [ 175.655166][T15944] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 175.667880][T15944] ext4 filesystem being mounted at /1/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 175.700909][T15341] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.760377][ T1575] ------------[ cut here ]------------ [ 175.765980][ T1575] WARNING: CPU: 1 PID: 1575 at net/xfrm/xfrm_state.c:3306 xfrm_state_fini+0x179/0x1f0 [ 175.775658][ T1575] Modules linked in: [ 175.779727][ T1575] CPU: 1 UID: 0 PID: 1575 Comm: kworker/u8:7 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 175.791230][ T1575] Tainted: [W]=WARN [ 175.795081][ T1575] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 175.805178][ T1575] Workqueue: netns cleanup_net [ 175.810061][ T1575] RIP: 0010:xfrm_state_fini+0x179/0x1f0 [ 175.815738][ T1575] Code: 48 8d bb 70 0e 00 00 e8 95 31 b7 fc 48 8b bb 70 0e 00 00 e8 59 e0 c3 fc 5b 41 5e 41 5f 5d e9 3e 6b b5 00 cc e8 38 d8 9b fc 90 <0f> 0b 90 e9 d9 fe ff ff e8 2a d8 9b fc 90 0f 0b 90 4c 89 f7 e8 5e [ 175.835616][ T1575] RSP: 0018:ffffc90001817c60 EFLAGS: 00010293 [ 175.841888][ T1575] RAX: ffffffff84bb7228 RBX: ffff888103826000 RCX: ffff888102325280 [ 175.842640][T15961] loop0: detected capacity change from 0 to 1024 [ 175.850043][ T1575] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff888103826e40 [ 175.857435][T15961] EXT4-fs: inline encryption not supported [ 175.864650][ T1575] RBP: ffffffff86c91100 R08: 0001ffff8684810f R09: 0000000000000000 [ 175.864699][ T1575] R10: ffffc90001817be8 R11: 0001c90001817be8 R12: ffffffff86c91120 [ 175.864715][ T1575] R13: ffff888103826028 R14: ffff888103826e40 R15: ffff888103826000 [ 175.895090][ T1575] FS: 0000000000000000(0000) GS:ffff8882aef11000(0000) knlGS:0000000000000000 [ 175.904084][ T1575] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 175.910695][ T1575] CR2: 0000000000000000 CR3: 0000000006834000 CR4: 00000000003506f0 [ 175.918701][ T1575] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 175.926785][ T1575] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 175.934953][ T1575] Call Trace: [ 175.938328][ T1575] [ 175.941306][ T1575] xfrm_net_exit+0x2d/0x60 [ 175.945941][ T1575] ops_undo_list+0x27b/0x410 [ 175.950628][ T1575] cleanup_net+0x2f4/0x4f0 [ 175.955158][ T1575] process_scheduled_works+0x4ce/0x9d0 [ 175.960636][ T1575] worker_thread+0x582/0x770 [ 175.965262][ T1575] ? _raw_spin_unlock_irqrestore+0x2b/0x60 [ 175.971279][ T1575] kthread+0x489/0x510 [ 175.975447][ T1575] ? finish_task_switch+0xad/0x2b0 [ 175.980592][ T1575] ? __pfx_worker_thread+0x10/0x10 [ 175.985778][ T1575] ? __pfx_kthread+0x10/0x10 [ 175.990476][ T1575] ret_from_fork+0x122/0x1b0 [ 175.995188][ T1575] ? __pfx_kthread+0x10/0x10 [ 175.999886][ T1575] ret_from_fork_asm+0x1a/0x30 [ 176.004713][ T1575] [ 176.007734][ T1575] ---[ end trace 0000000000000000 ]--- [ 176.116038][ T7275] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.125889][T15980] smc: net device hsr0 applied user defined pnetid SYZ2 [ 176.133643][T15980] smc: net device hsr0 erased user defined pnetid SYZ2 [ 176.168142][T15986] loop7: detected capacity change from 0 to 512 [ 176.179896][T15993] loop0: detected capacity change from 0 to 1024 [ 176.188133][T15993] EXT4-fs: inline encryption not supported [ 176.223311][T16003] loop0: detected capacity change from 0 to 512 [ 176.248572][T15986] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 176.263038][T15986] ext4 filesystem being mounted at /7/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 176.284139][ T52] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 176.294011][ T52] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.312348][T16038] smc: net device hsr0 erased user defined pnetid SYZ2 [ 176.320514][T15341] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.343183][ T361] ================================================================== [ 176.351595][ T361] BUG: KCSAN: data-race in copy_process / free_pid [ 176.358205][ T361] [ 176.360536][ T361] read-write to 0xffffffff8685ff98 of 4 bytes by task 16069 on cpu 0: [ 176.368861][ T361] free_pid+0x77/0x180 [ 176.372943][ T361] free_pids+0x7a/0xb0 [ 176.377013][ T361] release_task+0x9a9/0xb60 [ 176.381546][ T361] do_exit+0xd81/0x15c0 [ 176.385800][ T361] call_usermodehelper_exec_async+0x247/0x250 [ 176.391957][ T361] ret_from_fork+0x122/0x1b0 [ 176.396554][ T361] ret_from_fork_asm+0x1a/0x30 [ 176.401328][ T361] [ 176.403739][ T361] read to 0xffffffff8685ff98 of 4 bytes by task 361 on cpu 1: [ 176.411191][ T361] copy_process+0x17fc/0x2000 [ 176.415969][ T361] kernel_clone+0x16c/0x5c0 [ 176.420482][ T361] user_mode_thread+0x7d/0xb0 [ 176.425178][ T361] call_usermodehelper_exec_work+0x41/0x160 [ 176.431075][ T361] process_scheduled_works+0x4ce/0x9d0 [ 176.436635][ T361] worker_thread+0x582/0x770 [ 176.441232][ T361] kthread+0x489/0x510 [ 176.445305][ T361] ret_from_fork+0x122/0x1b0 [ 176.449988][ T361] ret_from_fork_asm+0x1a/0x30 [ 176.454755][ T361] [ 176.457076][ T361] value changed: 0x800000f0 -> 0x800000ef [ 176.462788][ T361] [ 176.465110][ T361] Reported by Kernel Concurrency Sanitizer on: [ 176.471438][ T361] CPU: 1 UID: 0 PID: 361 Comm: kworker/u8:5 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 176.482836][ T361] Tainted: [W]=WARN [ 176.486640][ T361] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 176.496874][ T361] Workqueue: events_unbound call_usermodehelper_exec_work [ 176.503991][ T361] ================================================================== [ 176.536828][T15975] chnl_net:caif_netlink_parms(): no params data found [ 176.557494][ T52] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 176.567339][ T52] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.607318][T15975] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.609826][ T29] kauditd_printk_skb: 213 callbacks suppressed [ 176.609840][ T29] audit: type=1326 audit(3911141313.419:7368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16119 comm="syz.7.3122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf4b2ef749 code=0x7ffc0000 [ 176.614510][T15975] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.620969][ T29] audit: type=1326 audit(3911141313.429:7369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16119 comm="syz.7.3122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=252 compat=0 ip=0x7fdf4b2ef749 code=0x7ffc0000 [ 176.664087][T15975] bridge_slave_0: entered allmulticast mode [ 176.675101][ T29] audit: type=1326 audit(3911141313.459:7370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16119 comm="syz.7.3122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf4b2ef749 code=0x7ffc0000 [ 176.704618][ T29] audit: type=1326 audit(3911141313.459:7371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16119 comm="syz.7.3122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf4b2ef749 code=0x7ffc0000 [ 176.706325][T15975] bridge_slave_0: entered promiscuous mode [ 176.728129][ T29] audit: type=1326 audit(3911141313.459:7372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16119 comm="syz.7.3122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdf4b2ef749 code=0x7ffc0000 [ 176.735767][T15975] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.757446][ T29] audit: type=1326 audit(3911141313.459:7373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16119 comm="syz.7.3122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf4b2ef749 code=0x7ffc0000 [ 176.757478][ T29] audit: type=1326 audit(3911141313.459:7374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16119 comm="syz.7.3122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf4b2ef749 code=0x7ffc0000 [ 176.764697][T15975] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.788540][ T29] audit: type=1326 audit(3911141313.459:7375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16119 comm="syz.7.3122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdf4b2ef749 code=0x7ffc0000 [ 176.812896][T15975] bridge_slave_1: entered allmulticast mode [ 176.819083][ T29] audit: type=1326 audit(3911141313.459:7376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16119 comm="syz.7.3122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf4b2ef749 code=0x7ffc0000 [ 176.819109][ T29] audit: type=1326 audit(3911141313.459:7377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16119 comm="syz.7.3122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf4b2ef749 code=0x7ffc0000 [ 176.897200][T15975] bridge_slave_1: entered promiscuous mode [ 176.912068][T15858] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.938436][T15975] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 176.948970][ T52] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 176.958813][ T52] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.971008][T15975] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 176.993463][T15975] team0: Port device team_slave_0 added [ 176.999931][T15975] team0: Port device team_slave_1 added [ 177.016158][T15975] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 177.023166][T15975] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 177.049332][T15975] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 177.060695][T15975] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 177.067687][T15975] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 177.093772][T15975] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 177.121482][T15975] hsr_slave_0: entered promiscuous mode [ 177.127626][T15975] hsr_slave_1: entered promiscuous mode [ 177.133730][T15975] debugfs: 'hsr0' already exists in 'hsr' [ 177.139461][T15975] Cannot create hsr debugfs directory [ 177.146154][ T52] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 177.156130][ T52] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.238256][ T52] bridge_slave_1: left allmulticast mode [ 177.244053][ T52] bridge_slave_1: left promiscuous mode [ 177.249845][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.257691][ T52] bridge_slave_0: left allmulticast mode [ 177.263480][ T52] bridge_slave_0: left promiscuous mode [ 177.269221][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.373350][ T52] bond2 (unregistering): (slave bridge1): Releasing active interface [ 177.433887][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 177.443488][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 177.453051][ T52] bond0 (unregistering): Released all slaves [ 177.461080][ T52] bond1 (unregistering): Released all slaves [ 177.469139][ T52] bond2 (unregistering): Released all slaves [ 177.477563][ T52] bond3 (unregistering): Released all slaves [ 177.515079][ T52] tipc: Left network mode [ 177.521713][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 177.529190][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 177.536723][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 177.544265][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 177.555774][ T52] veth1_macvtap: left promiscuous mode [ 177.561269][ T52] veth0_macvtap: left promiscuous mode [ 177.687181][T15975] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 177.695695][T15975] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 177.704157][T15975] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 177.712911][T15975] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 177.743619][T15975] 8021q: adding VLAN 0 to HW filter on device bond0 [ 177.755935][T15975] 8021q: adding VLAN 0 to HW filter on device team0 [ 177.766035][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.773118][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 177.785091][ T1575] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.792251][ T1575] bridge0: port 2(bridge_slave_1) entered forwarding state [ 177.850539][T15975] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 177.911102][T15975] veth0_vlan: entered promiscuous mode [ 177.918796][T15975] veth1_vlan: entered promiscuous mode [ 177.932950][T15975] veth0_macvtap: entered promiscuous mode [ 177.940232][T15975] veth1_macvtap: entered promiscuous mode [ 177.950008][T15975] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 177.960751][T15975] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 177.971082][ T37] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.980174][ T37] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.989606][ T37] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.999946][ T37] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.011448][ T52] ------------[ cut here ]------------ [ 178.016983][ T52] WARNING: CPU: 0 PID: 52 at net/xfrm/xfrm_state.c:3306 xfrm_state_fini+0x179/0x1f0 [ 178.026462][ T52] Modules linked in: [ 178.030400][ T52] CPU: 0 UID: 0 PID: 52 Comm: kworker/u8:3 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 178.041885][ T52] Tainted: [W]=WARN [ 178.045869][ T52] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 178.056027][ T52] Workqueue: netns cleanup_net [ 178.060943][ T52] RIP: 0010:xfrm_state_fini+0x179/0x1f0 [ 178.066538][ T52] Code: 48 8d bb 70 0e 00 00 e8 95 31 b7 fc 48 8b bb 70 0e 00 00 e8 59 e0 c3 fc 5b 41 5e 41 5f 5d e9 3e 6b b5 00 cc e8 38 d8 9b fc 90 <0f> 0b 90 e9 d9 fe ff ff e8 2a d8 9b fc 90 0f 0b 90 4c 89 f7 e8 5e [ 178.086282][ T52] RSP: 0018:ffffc900001bbc60 EFLAGS: 00010293 [ 178.092635][ T52] RAX: ffffffff84bb7228 RBX: ffff888103820000 RCX: ffff888101621080 [ 178.100615][ T52] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff888103820e40 [ 178.108632][ T52] RBP: ffffffff86c91100 R08: 0001ffff8684810f R09: 0000000000000000 [ 178.116665][ T52] R10: ffffc900001bbbe8 R11: 0001c900001bbbe8 R12: ffffffff86c91120 [ 178.124762][ T52] R13: ffff888103820028 R14: ffff888103820e40 R15: ffff888103820000 [ 178.133092][ T52] FS: 0000000000000000(0000) GS:ffff8882aee11000(0000) knlGS:0000000000000000 [ 178.142030][ T52] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 178.148905][ T52] CR2: 00007fbd89363e9c CR3: 0000000124a58000 CR4: 00000000003506f0 [ 178.156912][ T52] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 178.164933][ T52] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 178.172945][ T52] Call Trace: [ 178.176253][ T52] [ 178.179268][ T52] xfrm_net_exit+0x2d/0x60 [ 178.183733][ T52] ops_undo_list+0x27b/0x410 [ 178.188395][ T52] cleanup_net+0x2f4/0x4f0 [ 178.192934][ T52] process_scheduled_works+0x4ce/0x9d0 [ 178.198524][ T52] worker_thread+0x582/0x770 [ 178.203138][ T52] kthread+0x489/0x510 [ 178.207271][ T52] ? finish_task_switch+0xad/0x2b0 [ 178.212483][ T52] ? __pfx_worker_thread+0x10/0x10 [ 178.217738][ T52] ? __pfx_kthread+0x10/0x10 [ 178.222357][ T52] ret_from_fork+0x122/0x1b0 [ 178.227063][ T52] ? __pfx_kthread+0x10/0x10 [ 178.231667][ T52] ret_from_fork_asm+0x1a/0x30 [ 178.236576][ T52] [ 178.239764][ T52] ---[ end trace 0000000000000000 ]--- [ 178.654655][T15858] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.697619][ T52] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.708802][ T12] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.719934][ T12] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.731554][ T12] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0