last executing test programs: 2m5.293125853s ago: executing program 32 (id=3676): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f60000008500000043000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0x4, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_io_uring_setup(0x1539, &(0x7f00000003c0)={0x0, 0xed32, 0x8, 0x3, 0x397}, &(0x7f0000000440), &(0x7f0000000500)) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r2, 0x2, &(0x7f0000000180), 0xfe) 2m4.632908096s ago: executing program 33 (id=3686): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0x7fff}, 0x18) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f00000006c0), 0x1, 0x512, &(0x7f0000000c40)="$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") 27.884367294s ago: executing program 5 (id=5135): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @broadcast}) 27.883632054s ago: executing program 5 (id=5136): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x49, 0x0, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0xf4) r2 = dup2(r1, r1) ioctl$BLKTRACESETUP(r2, 0xc030128a, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) munlockall() prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f0000000180)}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="4000000010001fff00000000000000f6ff060000", @ANYRES32=0x0, @ANYBLOB="81ffffff00000000180012800e0001007769726567756172640000000400028008000a00", @ANYRES32], 0x40}}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r4}, &(0x7f0000000040), &(0x7f0000000280)}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) ptrace$getregset(0x4204, r6, 0x202, &(0x7f0000000140)={0x0}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0b00000007000000010001000800000001000000", @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000009b166f19cf0b2a91309b2d967b97570809dce17f6592890db64a96e7e1a8fd930b61e2362547d2de9e68568529686fab0ebc136c6766fed917bece9c0ff43feb5aba0a6cf33fe5daaa76f74ee52c8fdc16531fc82207f0fbf9ca", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r7}, &(0x7f0000000040)=0x18, &(0x7f0000000140)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00'}, 0x10) r8 = syz_open_procfs(0x0, &(0x7f0000000140)='cgroup\x00') preadv(r8, &(0x7f00000000c0)=[{&(0x7f0000000480)=""/128, 0x80}], 0x1, 0x12e, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) openat(0xffffffffffffff9c, &(0x7f0000004900)='./file1\x00', 0x4042, 0xf8) r9 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r9, &(0x7f0000000140)='Q', 0x1, 0x202980) 27.661600842s ago: executing program 5 (id=5141): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000040)={[{@minixdf}, {@nobarrier}, {@barrier}]}, 0x67, 0x52b, &(0x7f0000000a00)="$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") r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000085000000050000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0xa8}, 0x18) r1 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) write$binfmt_register(r1, &(0x7f0000000440)={0x3a, 'syz1', 0x3a, 'M', 0x3a, 0x0, 0x3a, 'usrjquota=', 0x3a, '', 0x3a, './file2', 0x3a, [0x46]}, 0x32) fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0) 27.294217602s ago: executing program 5 (id=5146): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a000000020000"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000002c0)=0x1) 27.294047802s ago: executing program 34 (id=5146): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a000000020000"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000002c0)=0x1) 19.914751939s ago: executing program 3 (id=5248): r0 = socket(0x10, 0x3, 0x6) write(r0, &(0x7f0000000100)="1400000052004f7fb3e4bf80a00008ff8100", 0x12) 19.880495062s ago: executing program 3 (id=5250): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080200000e"], 0x50) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r1, 0x0) setuid(r1) fsetxattr$security_capability(r0, &(0x7f0000000000), &(0x7f0000000080)=@v3={0x3000000, [{0xc7a}, {0x80000000}], r1}, 0x18, 0x3) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7030000ec000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="30000000030801000000000100000705000300110000001400048008000140000000000800024000006ece0000000000"], 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000100000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000500000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000180)=0xffffffffffffffff, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000380)={r6, r2, 0x4, r5}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000200)='mm_page_alloc\x00', r5}, 0x10) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r2}, 0x18) lsm_set_self_attr(0x69, 0x0, 0x42, 0x0) 19.748954182s ago: executing program 3 (id=5255): perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x95, 0x3}, 0x100002, 0x0, 0xfffffffc, 0x3, 0x40000, 0x0, 0x1}, 0x0, 0xa, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYBLOB="0000000000000000b70800000000e7057b8af8ff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000fc0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0xe, 0x0, 0x0, 0x0, 0x18}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$kcm(0x10, 0x2, 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x8000) close(r2) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac00800020007000c00050004c00364bc24eab556a705251e618294ff00", 0x40}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r4 = syz_io_uring_setup(0xbc7, &(0x7f00000004c0)={0x0, 0x40f5, 0x80, 0x0, 0x224}, &(0x7f0000000040)=0x0, &(0x7f00000002c0)=0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r7, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, 0x0, 0x0) sendto$inet(r7, 0x0, 0x0, 0x20000844, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003d40)=[{{0x0, 0x0, 0x0}, 0x7fff}], 0x1, 0x2, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000300)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x2, 0xa3d8, &(0x7f00000005c0)=[{&(0x7f0000000240)="5db5bd", 0x3}], 0x81, 0x8, 0x1, {0x2}}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r4, 0x47f8, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000080), 0x6, 0x5fc, &(0x7f0000000c00)="$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") r8 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, 0x0) connect$nfc_raw(r8, &(0x7f0000000180)={0x27, 0x0, 0x0, 0x4}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1aca421, &(0x7f00000008c0)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) 18.979605165s ago: executing program 3 (id=5266): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x49, 0x0, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0xf4) r2 = dup2(r1, r1) ioctl$BLKTRACESETUP(r2, 0xc030128a, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) munlockall() prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f0000000180)}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="4000000010001fff00000000000000f6ff060000", @ANYRES32=0x0, @ANYBLOB="81ffffff00000000180012800e0001007769726567756172640000000400028008000a00", @ANYRES32], 0x40}}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r4}, &(0x7f0000000040), &(0x7f0000000280)}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$getregset(0x4204, r6, 0x202, &(0x7f0000000140)={0x0}) 18.710075636s ago: executing program 0 (id=5273): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0xffff}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000d80)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d00)=ANY=[@ANYBLOB="140000001000010000000000000000000220000a3c000000120a09080000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a"], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) getresuid(&(0x7f00000000c0), &(0x7f0000000100)=0x0, &(0x7f0000000180)=0x0) r4 = getegid() setxattr$system_posix_acl(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='system.posix_acl_access\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000010006000000000002000400", @ANYRES32=r3, @ANYBLOB="02000500", @ANYRES32=r2, @ANYBLOB="02000a00", @ANYRES32=r3, @ANYBLOB="040003000000000008000000", @ANYRES32=r4, @ANYBLOB="10e40000000000000000040000000000"], 0x44, 0x1) setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file1\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) 18.637426872s ago: executing program 3 (id=5276): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x7}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000e41621eb70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r1}, 0x10) r2 = open(&(0x7f0000000240)='./file1\x00', 0x14d142, 0x0) sendfile(r2, r2, 0x0, 0x800000009) 17.878796524s ago: executing program 0 (id=5284): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@acquire={0x128, 0x17, 0x1, 0x0, 0x0, {{@in6=@private0}, @in6=@remote, {@in6=@private0, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {{@in6=@mcast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee00}}}}, 0x128}}, 0x0) 17.878368384s ago: executing program 35 (id=5284): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@acquire={0x128, 0x17, 0x1, 0x0, 0x0, {{@in6=@private0}, @in6=@remote, {@in6=@private0, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {{@in6=@mcast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee00}}}}, 0x128}}, 0x0) 17.718329736s ago: executing program 3 (id=5287): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="60000000100001042cbd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="7b01000001c80400400012800b0001006272696467650000300002800c0020000400000000000000060008"], 0x60}, 0x1, 0x0, 0x0, 0x20008880}, 0x20040844) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCFLSH(r1, 0x540b, 0x1) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000010000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000840)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x18) syz_emit_ethernet(0x43, &(0x7f00000000c0)={@random="e90dacb3d700", @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x3f, 0x35, 0x0, 0xe000, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x21, 0x0, @opaque="5abeb2f6576d093623ad0b681e1bfe1a6083bb46b48246be4d"}}}}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000001a80)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x8}}}}}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0b00000007000000080000000800000005569f796db86b9eb76199e8f70bb8f4c0b77fb92bd6b1516995791657e183e1c938e43562be54a85eb64b3ab824a8f8ea8e945d"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) setpgid(0x0, 0x0) r6 = syz_io_uring_setup(0x27bc, &(0x7f0000000080)={0x0, 0xcfc9, 0x1040, 0x0, 0xef, 0x0, 0x0}, &(0x7f0000000100), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_RESIZE_RINGS(r6, 0x21, &(0x7f0000000200)={0x0, 0x1fc3, 0x40, 0x1, 0xc7}, 0x1) r7 = socket(0x11, 0x3, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r7, &(0x7f0000000180)={0x11, 0x0, r9, 0x1, 0x0, 0x6, @dev}, 0x14) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003600)=[{{&(0x7f0000000300)={0xa, 0x4e21, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xb9df}, 0x1c, &(0x7f0000000cc0)=[{&(0x7f00000000c0)='O', 0x1}], 0x1}}], 0x1, 0x0) shutdown(0xffffffffffffffff, 0x1) setsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000080)={0x0, 0x81, 0x100, 0x8, 0xfff, 0xeb}, 0x14) setsockopt$SO_TIMESTAMPING(r8, 0x1, 0x25, &(0x7f00000003c0)=0x61a1, 0x4) sendmsg$netlink(r7, 0x0, 0x1) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000140)={0x0, 0x1, 0x10, 0x80000000, 0x8}, &(0x7f0000000300)=0x18) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r7, 0x84, 0xa, &(0x7f0000000400)={0x7b16, 0x6, 0x209, 0x4, 0x4, 0xe44c, 0x7f, 0xfffffff7, r10}, 0x20) 17.699294088s ago: executing program 36 (id=5287): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="60000000100001042cbd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="7b01000001c80400400012800b0001006272696467650000300002800c0020000400000000000000060008"], 0x60}, 0x1, 0x0, 0x0, 0x20008880}, 0x20040844) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCFLSH(r1, 0x540b, 0x1) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000010000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000840)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x18) syz_emit_ethernet(0x43, &(0x7f00000000c0)={@random="e90dacb3d700", @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x3f, 0x35, 0x0, 0xe000, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x21, 0x0, @opaque="5abeb2f6576d093623ad0b681e1bfe1a6083bb46b48246be4d"}}}}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000001a80)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x8}}}}}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0b00000007000000080000000800000005569f796db86b9eb76199e8f70bb8f4c0b77fb92bd6b1516995791657e183e1c938e43562be54a85eb64b3ab824a8f8ea8e945d"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) setpgid(0x0, 0x0) r6 = syz_io_uring_setup(0x27bc, &(0x7f0000000080)={0x0, 0xcfc9, 0x1040, 0x0, 0xef, 0x0, 0x0}, &(0x7f0000000100), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_RESIZE_RINGS(r6, 0x21, &(0x7f0000000200)={0x0, 0x1fc3, 0x40, 0x1, 0xc7}, 0x1) r7 = socket(0x11, 0x3, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r7, &(0x7f0000000180)={0x11, 0x0, r9, 0x1, 0x0, 0x6, @dev}, 0x14) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003600)=[{{&(0x7f0000000300)={0xa, 0x4e21, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xb9df}, 0x1c, &(0x7f0000000cc0)=[{&(0x7f00000000c0)='O', 0x1}], 0x1}}], 0x1, 0x0) shutdown(0xffffffffffffffff, 0x1) setsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000080)={0x0, 0x81, 0x100, 0x8, 0xfff, 0xeb}, 0x14) setsockopt$SO_TIMESTAMPING(r8, 0x1, 0x25, &(0x7f00000003c0)=0x61a1, 0x4) sendmsg$netlink(r7, 0x0, 0x1) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000140)={0x0, 0x1, 0x10, 0x80000000, 0x8}, &(0x7f0000000300)=0x18) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r7, 0x84, 0xa, &(0x7f0000000400)={0x7b16, 0x6, 0x209, 0x4, 0x4, 0xe44c, 0x7f, 0xfffffff7, r10}, 0x20) 13.540561075s ago: executing program 9 (id=5289): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000a00)=@newtaction={0x68, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x54, 0x1, [@m_ctinfo={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0xfffff001, 0x7, 0x8, 0x8, 0x3856}}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x3}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x440c0}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r1}, 0x10) r3 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000940), 0x4) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x300, 0x4}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000000)="27031c00160014000000002f1eafacf706e105000000894f00030001ee0b80558ddbba9b37242d29a50ed004484890af0755b798a0aa74c3", 0x38}], 0x1}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETFILTEREBPF(r4, 0x800454e1, 0x0) kexec_load(0x0, 0x1, &(0x7f0000000140)=[{0x0, 0x3e00, 0x116094000, 0x41000000}], 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x18, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x12, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r6, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r7, @ANYBLOB="03032abd7000ffdbdf2506"], 0xec0}}, 0x80) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_trace_dev_match', 0x109000, 0x16a) ioctl$TIOCL_SETSEL(r8, 0x541c, &(0x7f0000000180)={0x2, {0x2, 0x1, 0x5, 0x9, 0x1, 0x3}}) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) r9 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000840)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x10}, 0x18) utimensat(r9, 0x0, 0x0, 0x0) r10 = socket$kcm(0x10, 0x2, 0x10) pwritev2(r1, &(0x7f0000000840)=[{&(0x7f0000000500)="c57f12d6a77e09f25ad43ae119e873f8eb5c10aaa4f981427cb3448f7554d945a102212d85b7988ef4cba6160c4fa50b857b3c7d60ba844b4a0ebf28c1cf4f13fb505f3aaa8a140e2b1a53feb64aacaf7c0119afe1be650182c92b2b9ca3d70c32fe1317ab631a82723a9ee00e9e852dc13c1979fa33a5a9a08f1fa6a8e99724cda4c00a1e19a2e92d58c66959d929b7708a6c4fe6858fff065134f40a7c7473d1eb747a6b66", 0xa6}, {&(0x7f00000005c0)="5d18595abce3c20cc01707ed5ff7ced3f7b5a85feff5d9316f63a4e50fb8adbedf1fd08f3b1cecdbbb8c65b299d21ae746cb0834d55bb79bacb371867a5319478ec80ec0d63dd8d03b74856d6829", 0x4e}, {&(0x7f0000000780)="e9962529b7bbc4ffec16884584fdd266597172973cf8efaee9ef486703b268b533cb98b9e905132b0e0eb439c626e33d13e04893077bf8fa8575f5dc77feda485f9394604d2f1c8ac2f99c610ecc321865e9a444ae04cf3a3bde8550227e65ac9919a3f2131ec87375efb6fa1d1e99d0b1fe9eb3881246626939d65593", 0x7d}, {&(0x7f0000000380)="da2da9127f5b5e1228f268941a0362836151bb447e99a2c809ccda32d8e27a123fc4122740aa2448", 0x28}], 0x4, 0xffffff71, 0x6, 0x19) sendmsg$kcm(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)="2e00000038000511d25a80698c63940d0124fc602f6e35400c000200001ec00037153e370a00018025581d00d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x39c}, 0x0) 13.164375425s ago: executing program 9 (id=5317): perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x95, 0x3}, 0x100002, 0x0, 0xfffffffc, 0x3, 0x40000, 0x0, 0x1}, 0x0, 0xa, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYBLOB="0000000000000000b70800000000e7057b8af8ff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000fc0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0xe, 0x0, 0x0, 0x0, 0x18}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$kcm(0x10, 0x2, 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x8000) close(r2) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac00800020007000c00050004c00364bc24eab556a705251e618294ff00", 0x40}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r4 = syz_io_uring_setup(0xbc7, &(0x7f00000004c0)={0x0, 0x40f5, 0x80, 0x0, 0x224}, &(0x7f0000000040)=0x0, &(0x7f00000002c0)=0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r7, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, 0x0, 0x0) sendto$inet(r7, 0x0, 0x0, 0x20000844, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003d40)=[{{0x0, 0x0, 0x0}, 0x7fff}], 0x1, 0x2, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000300)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x2, 0xa3d8, &(0x7f00000005c0)=[{&(0x7f0000000240)="5db5bd", 0x3}], 0x81, 0x8, 0x1, {0x2}}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r4, 0x47f8, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000080), 0x6, 0x5fc, &(0x7f0000000c00)="$eJzs3c9rHGUfAPDvzCZ5kzavaUXEFsWAhxakaVKLVS+29WAPBQv2IOKhoUlq6PYHTQq2FkzBg4KCiFeRXvwHvEvv3kRQb56FKlJRUOnK7M62m2Q3XdPsTpr5fGCzz/PM7D7PdydP5pmZPDsBlNZ49iON2BVx51QSMdaybDQaC8fz9W7/du109kiiVnv91ySSvKy5fpI/b88zwxHx7dGIRyur6124cvXsdLXW8F7E/sVzF/cvXLm6b/7c9JnZM7Pnpw68cPDQ5ItTB6c2JM7t+fOx4689+fH7bz8/9111XxKH4+TguzOxIo6NMh7jcScPsbV8ICIOZYk2n8vDZguEUGqV/PdxMCIej7Go1HMNYzH/UaGNA3qqVomoASWV6P9QUs1xQPPYvrvj4JM9HpX0z60jjQOg1fEPNM6NxHD92Gjb7aTlyKhxbmPHBtSf1fHPtd2fZ49Ydh7iz7tbZ2AD6ulk6XpEPNEu/qTeth31SLP402XtSCJiMiKG8va98gBtSFrSvTgPs5b1xp9GxOH8OSs/us76x1fk+x0/AOV080i+I1/Kcvf2f9nYozn+iTbjn9E2+671KHr/13n819zfD9fPkacrxmHZmOVE+7ccXFnw04fHPu1Uf+v4L3tk9TfHgv1w63rE7hXxf5AFm49/sviTNts/W+XU4e7qePX7X451WlZ0/LUbEXvaHv/cG5VmqTWuT+6fm6/OTjZ+tq3j62/e+rJT/UXHn23/bR3ib9n+6crXZZ/JxS7r+OrEjXOdlo3eN/7056Gkcbw5lJe8M724eGkqYig5nq/SUn5g7bY012m+Rxb/3mfa9/9lv//Xl7/PSPNPZhcuvnH2dqdl69n+LReT79S6bEMnWfwz99/+q/p/VvZJl3X88eblpzotWyv+kQcJDAAAAAAAAEoorV+DTdKJu+k0nZhozJd9LLal1QsLi8/OXbh8fiZib/3/IQfT5pXusUY+yfJT+f/DNvMHVuSfi4idEfFZZaSenzh9oTpTdPAAAAAAAAAAAAAAAAAAAACwSWzP5/8371P9e6Ux/x8oiV7eYA7Y3PR/KK96/191iyegDOz/obz0fygv/R/KS/+H8tL/obz0fygv/R/KS/8HAAAAgC1p59M3f0wiYumlkfojM5QvMyMItrbBohsAFKZSdAOAwty99G+wD6XT1fj/r/zLAXvfHKAASbvC+uCgtnbnv9n2lQAAAAAAAAAAAABAD+zZ1Xn+v7nBsLWZ9gfl9QDz/311ADzkfPU/lJdjfOB+s/iHOy0w/x8AAAAAAAAAAAAA+ma0/kjSiXwu8Gik6cRExP8jYkcMJnPz1dnJiHgkIn6oDP4vy08V3WgAAAAAAAAAAAAAAAAAAADYYhauXD07Xa3OXmpN/L2qZGsnmndB7UNdL8d/fFUk/f9YRiKi8I3Ss8RAS0kSsZRt+U3RsEsLsTmaUU8U/IcJAAAAAAAAAAAAAAAAAABKqGXucXu7v+hziwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACg/+7d/793iaJjBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeTv8GAAD//7V5QCw=") r8 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, 0x0) connect$nfc_raw(r8, &(0x7f0000000180)={0x27, 0x0, 0x0, 0x4}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1aca421, &(0x7f00000008c0)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) 12.578063742s ago: executing program 9 (id=5321): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = add_key$keyring(&(0x7f0000000080), &(0x7f0000000340)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f00000003c0), &(0x7f0000000480)={'syz', 0x1}, 0x0, 0x0, r2) 12.519516267s ago: executing program 9 (id=5322): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x49, 0x0, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0xf4) r2 = dup2(r1, r1) ioctl$BLKTRACESETUP(r2, 0xc030128a, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$eJzs3c9vG1kdAPCvnThx0uwmu+wBEOyW3YWCqjqJuxut9gDLCSFUCdEjSG1I3CiKHUexU5rQQ3rmikQlTnDkD+DcE3cuCG5cygGJHxGoQeLg1YwnqZvaTdQkdhR/PtJo3ps39fe9pvNe/U3iF8DQuhoRuxExFhF3I2I6u57LjvisfST3Pdt7uLS/93ApF63W7X/l0vbkWnT8mcSV7DWLEfGj70X8NPdy3Mb2ztpitVrZzOqzzdrGbGN758ZqbXGlslJZL5cX5hfmPrn5cfnMxvpebSwrffXpH3e/9fOkW1PZlc5xnKX20AuHcRKjEfGD8wg2ACPZeMYG3RFeSz4i3o6I99PnfzpG0q8mAHCZtVrT0ZrurAMAl10+zYHl8qUsFzAV+Xyp1M7hvROT+Wq90bx+r761vtzOlc1EIX9vtVqZy3KFM1HIJfX5tPy8Xj5SvxkRb0XEL8cn0nppqV5dHuR/fABgiF05sv7/d7y9/gMAl1xx0B0AAPrO+g8Aw8f6DwDDx/oPAMOnvf5PDLobAEAfef8PAMPH+g8AQ+WHt24lR2s/+/zr5fvbW2v1+zeWK421Um1rqbRU39wordTrK+ln9tSOe71qvb4x/1FsPZj59kajOdvY3rlTq2+tN++kn+t9p1JI79rtw8gAgF7eeu/JX3LJivzpRHpEx14OhYH2DDhv+UF3ABiYkUF3ABgYu33B8DrFe3zpAbgkumzR+4Jit18QarVarfPrEnDOrn1J/h+GVUf+308Bw5CR/4fhJf8Pw6vVyp10z/846Y0AwMUmxw/0+P7/29n5d9k3B36yfPSOx+fZKwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYDvb/LWV7gU9FPl8qRbwRETNRyN1brVbmIuLNiPjzeGE8qc8PuM8AwGnl/57L9v+6Nv3h1AtN7145LI5FxM9+fftXDxabzc0/RYzl/j1+cL35OLte7n/vAYDjHazT6bnjjfyzvYdLB0c/+/OP70ZEsR1/f28s9g/jj8Zoei5GISIm/5PL6m25jtzFaew+iogvdht/LqbSHEh759Oj8ZPYb/Q1fv6F+Pm0rX1O/i6+cAZ9gWHzJJl/Puv2/OXjanru/vwX0xnq9LL5L3mppf10Dnwe/2D+G+kx/109aYyP/vD9dmni5bZHEV8ejTiIvd8x/xzEz/WI/+EJ4//1K+++36ut9ZuIa9E9fmes2WZtY7axvXNjtba4UlmprJfLC/MLc5/c/Lg8m+aoZ3uvBv/89PqbvdqS8U/2iF88ZvxfP+H4f/v/uz/+2ivif/ODbvHz8c4r4idr4jdOGH9x8vfFXm1J/OUe4z/u63/9hPGf/m3npW3DAYDBaWzvrC1Wq5VNBYWLX0j+yV6AbnQtfKdfscaie9MvPmg/00eaWq3XitVrxjiLrBtwERw+9BHxv0F3BgAAAAAAAAAAAAAA6Kofv7E06DECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABweX0eAAD//19xzyM=") seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) munlockall() prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f0000000180)}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="4000000010001fff00000000000000f6ff060000", @ANYRES32=0x0, @ANYBLOB="81ffffff00000000180012800e0001007769726567756172640000000400028008000a00", @ANYRES32], 0x40}}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r4}, &(0x7f0000000040), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace$getregset(0x4204, r5, 0x202, &(0x7f0000000140)={0x0}) 12.015702758s ago: executing program 9 (id=5327): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) pipe(0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) 10.156094418s ago: executing program 9 (id=5354): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0xffff}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000d80)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d00)=ANY=[@ANYBLOB="140000001000010000000000000000000220000a3c000000120a09080000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a"], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) getresuid(&(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000180)) getegid() setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file1\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) 10.127051131s ago: executing program 37 (id=5354): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0xffff}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000d80)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d00)=ANY=[@ANYBLOB="140000001000010000000000000000000220000a3c000000120a09080000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a"], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) getresuid(&(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000180)) getegid() setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file1\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) 10.115376662s ago: executing program 7 (id=5358): syz_mount_image$msdos(&(0x7f0000000080), &(0x7f0000000000)='./file2\x00', 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='nodots,dmask=00000000000000000000003,usefree,nodots,flush,dots,dots,gid=', @ANYRESOCT, @ANYBLOB], 0x1, 0x214, &(0x7f0000000840)="$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") unshare(0x2c020400) socket(0x18, 0x1, 0x1) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000002140)={@map, 0xffffffffffffffff, 0x15, 0x10}, 0x20) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f00000007c0)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="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", @ANYBLOB="fe2ecf20a9a17bd2ed7e803f830375c150a1f848f604c2c1f932d2b7163be4b2b9a5bd521d185cfbee555b27608594beba6325923aaf5db74cff01000053db92c6c5fcbba0abd975fc76bea49b00513afc856ed89d3fadeda307ca587354322803b0983cc65725ae7f45fb95e7cdb28c6b886959b7dde2c87c73f6008cf6eed7861f24b7423704b95f3d05b92d3d7ff9d392833ecd02443320b60131a350360fcc1d659e2a03cb469caf0498bacae0735a161345b3d71a55f14ef636b6f832c7a6071fce83904dfd871b6d8e03648dbaa3a039eb5673792cae80335732030f9aeabaf3bb3cc4ca5fe75271d69b2e78beb2b81fc3cf3a18a7ae93a3cdbe6599b99408275e2b4b4477c6fcf4806134e839e13533ec000000000000006a1c000000000000000000000000000000000000000000000000000069c3288311b7414705e975eb3f1b77a120", @ANYRES32], 0x8, 0x2eb, &(0x7f00000004c0)="$eJzs3E1PE10UwPHTF0pbAmXx5DGaGG50o5sJVNdKYyAxNpEgNb4kJgNMtenYkpkGU2NEV26NH8IFYcmORPkCbNzpxo07NiYuZGEc0+kMhTKAlNIi/H8JmcPce6b3zgzk3AnD+r23T4t5W8vrFQnHlYRERDZEBiUsvpC3DbtxTLZ6JZf7fnw+f+f+g1uZbHZsUqnxzNSVtFJqYOjDsxcJr9tKr6wNPlr/nv629v/a2fXfU08KtirYqlSuKF1Nl79W9GnTULMFu6gpNWEaum2oQsk2rHp7ud6eN8tzc1Wll2b7k3OWYdtKL1VV0aiqSllVrKqKPNYLJaVpmupPCvaTW5yc1DMtJs+0eTA4IpaV0SMiktjRklvsyoAAAEBXNdf/YVHtrP+XLqxW+u4uD3j1/0osqP6/+qV+rG31f1xEAut///MD63/9YPX/zorodDlU/Y/jYSi2Y1eoEdYarYye9H5+Xa8fLg27AfU/AAAAAAAAAAAAAAAAAAAAAAD/gg3HSTmOk/K3/leviMRFxP8+IDUiIte7MGS00SGuP06Axot70QER8818bj5X33odVkXEFEOGJSW/3PvBU4v9N49UzaB8NBe8/IX5XMRtyeSl4OaPSKpHmvMdZ/xmdmxE1W3P75Hk1vy0pOS/4Px0YH5MLl3ckq9JSj7NSFlMmXXH0ch/OaLUjdvZpvyE2w8AAAAAgJNAU5sC1++atlt7PX9zfd38fCDSWF8PB67Po3Iu2t25AwAAAABwWtjV50XdNA1rjyAh+/dpPYge0ZH9Gf5tlv+3DEc30z0C/8O3NcW9nW0/LaEDnJZdgrC0kjVUm4067Cz8x0a79ZGJ0c5fQTc48+79z/Yd8NpyfJ+Zth5E9r4Bejr2CwgAAABAxzSKfn/PaHcHBAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAKdSJ/47W7TkCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAx8WfAAAA//+SWQVN") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x22) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xfecc) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$inet6_sctp(0xa, 0x1, 0x84) socket$kcm(0x10, 0x2, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x100810, 0x0, 0x100, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x0, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x25}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0xa9, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x2000000407fff, 0xaea}, 0x14105, 0x0, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0x8002}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0xb) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/user\x00') socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000140)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000005c0)='cpuacct.usage_percpu\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000019c0)}, 0x12000) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'dummy0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8946, &(0x7f0000000080)) 9.699321765s ago: executing program 7 (id=5363): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r1}, 0x18) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@acquire={0x16c, 0x17, 0x1, 0x0, 0x0, {{@in6=@private0}, @in6=@remote, {@in6=@private0, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {{@in6=@mcast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, [@tmpl={0x44, 0x5, [{{@in6=@private2, 0x0, 0x3c}, 0x0, @in=@multicast2}]}]}, 0x16c}}, 0x0) 9.664981188s ago: executing program 7 (id=5365): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = open$dir(&(0x7f00000001c0)='./bus/file0\x00', 0x200000, 0x39) open_tree(r1, &(0x7f0000000200)='./file1\x00', 0x8000) r2 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_proto_private(r2, 0x89e0, &(0x7f0000001080)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3, 0x0, 0x7}, 0x18) syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000000)='./bus\x00', 0x280008a, &(0x7f0000000240)=ANY=[@ANYBLOB='shortname=lower,shortname=win95,rodir,iocharset=default,uni_xlate=0,nonumtail=1,utf8=0,flush,rodir,shortname=win95,shortname=winnt,shortname=win95,showexec,uni_xlate=0,utf8=0,utf8=0,uni_xlate=0,shortname=mixed,\x00'], 0x97, 0x2b4, &(0x7f0000000600)="$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") r4 = open(&(0x7f0000000240)='./file1\x00', 0x14d142, 0x0) ftruncate(r4, 0x2007ffc) sendfile(r4, r4, 0x0, 0x800000009) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x24000880}, 0x800) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, 0x0, 0x0) 9.207493775s ago: executing program 7 (id=5370): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x49, 0x0, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0xf4) r2 = dup2(r1, r1) ioctl$BLKTRACESETUP(r2, 0xc030128a, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) munlockall() prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f0000000180)}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="4000000010001fff00000000000000f6ff060000", @ANYRES32=0x0, @ANYBLOB="81ffffff00000000180012800e0001007769726567756172640000000400028008000a00", @ANYRES32], 0x40}}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r4}, &(0x7f0000000040), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace$getregset(0x4204, r5, 0x202, &(0x7f0000000140)={0x0}) 8.360262883s ago: executing program 7 (id=5380): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$eJzs3c9rHFUcAPDvbJL+1qZQinqQQA9WajdN4o8KQutRtFjQe12SaSjZdEt2U5pYaHuwFy9SBBEL4h/g3WPxH/CvKGihSAl68BKZzWy7TbL5uXW3zucD0743M5s3b998335nZ5cNoLBGsn9KEa9GxDdJxOG2bYORbxxZ2W/p8Y3JbEliefmzP5NI8nWt/ZP8/4N55ZWI+PWriJOlte3WFxZnKtVqOpfXRxuzV0frC4unLs9WptPp9Mr4xMSZdybG33/v3a719c0Lf3//6f2Pznx9fOm7nx8euZvEuTiUb2vvxy7caq+MxEj+nAzFuVU7jnWhsX6S9PoA2JGBPM6HIpsDDsdAHvXA/9/NiFgGCioR/1BQrTygdW3fpevgF8ajD1cugNb2f3DlvZHY17w2OrCUPHNllF3vDneh/ayNX/64dzdbYpP3IW52oT2Allu3I+L04ODa+S/J57+dO91883hjq9so2usP9NL9LP95a738p/Qk/4l18p+D68TuTmwe/6WHXWimoyz/+2Dd/PfJ1DU8kNdeauZ8Q8mly9X0dES8HBEnYmhvVt/ofs6ZpQfLnba153/ZkrXfygXz43g4uPfZx0xVGpXd9Lndo9sRrz3Nf5NYM//va+a6q8c/ez4ubLGNY+m91ztt27z/7bqfAS//FPHGuuP/9I5WsvH9ydHm+TDaOivW+uvOsd86tb+9/ndfNv4HNu7/cNJ+v7a+/TZ+3PdP2mnbTs//PcnnzfKefN31SqMxNxaxJ/lk7frxp49t1Vv7Z/0/cXzj+W+9839/RHyxxf7fOXqn4679MP5T2xr/7RcefPzlD53a39r4v90sncjXbGX+2+oB7ua5AwAAAAAAgH5TiohDkZTKT8qlUrm88vmOo3GgVK3VGycv1eavTEXzu7LDMVRq3ek+3PZ5iLH887Ct+viq+kREHImIbwf2N+vlyVp1qtedBwAAAAAAAAAAAAAAAAAAgD5xsMP3/zO/D/T66IDnzk9+Q3FtGv/d+KUnoC95/YfiEv9QXOIfikv8Q3GJfygu8Q/FJf6huMQ/AAAAAAAAAAAAAAAAAAAAAAAAAAAAdNWF8+ezZXnp8Y3JrD51bWF+pnbt1FRanynPzk+WJ2tzV8vTtdp0NS1P1mY3+3vVWu3q2HjMXx9tpPXGaH1h8eJsbf5K4+Ll2cp0ejEd+k96BQAAAAAAAAAAAAAAAAAAAC+W+sLiTKVaTecUOhbORl8cxo4LyWajfDY/GXbUxGDvO6jwHAo9npgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoM2/AQAA///fKTPH") socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0xffff}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file1\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) 7.879985722s ago: executing program 7 (id=5386): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="01000000060000000800000008"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='xen_mmu_pmd_clear\x00', 0xffffffffffffffff, 0x0, 0xb}, 0x18) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040), &(0x7f00000004c0), 0xce, r0}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={r0, &(0x7f0000000040), &(0x7f0000000280)=""/201}, 0x20) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={&(0x7f0000000100), 0x1}, 0x107242, 0x10000, 0xfffffffd, 0x9, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0xcc04, &(0x7f0000000880)=ANY=[@ANYBLOB='dots,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c6e6f646f74732c646f74732c74696d655f6f66667365743d3078303030303030303030303030303264382c646f74732c646f74732c6e6f646f74732c6e6f646f74732c646f74732c646f74732c6e6f646f74732c6e6f646f74732c636865636b3d72656c617865642c666c7573682c64656275672c646f74732c73686f77657865632c6e6f646f74732c6572726f72733d636f6e74696e75652c646f74732c71756965742c003fa5bfd3e968f92d300444698c6f8d94d8b46ce3ce652bc8f6"], 0x1, 0x220, &(0x7f0000000440)="$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") mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/udplite\x00') socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @broadcast}) 7.879680422s ago: executing program 38 (id=5386): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="01000000060000000800000008"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='xen_mmu_pmd_clear\x00', 0xffffffffffffffff, 0x0, 0xb}, 0x18) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040), &(0x7f00000004c0), 0xce, r0}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={r0, &(0x7f0000000040), &(0x7f0000000280)=""/201}, 0x20) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={&(0x7f0000000100), 0x1}, 0x107242, 0x10000, 0xfffffffd, 0x9, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0xcc04, &(0x7f0000000880)=ANY=[@ANYBLOB='dots,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c6e6f646f74732c646f74732c74696d655f6f66667365743d3078303030303030303030303030303264382c646f74732c646f74732c6e6f646f74732c6e6f646f74732c646f74732c646f74732c6e6f646f74732c6e6f646f74732c636865636b3d72656c617865642c666c7573682c64656275672c646f74732c73686f77657865632c6e6f646f74732c6572726f72733d636f6e74696e75652c646f74732c71756965742c003fa5bfd3e968f92d300444698c6f8d94d8b46ce3ce652bc8f6"], 0x1, 0x220, &(0x7f0000000440)="$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") mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/udplite\x00') socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @broadcast}) 7.742657394s ago: executing program 6 (id=5391): socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) r3 = socket$netlink(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r4, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) 7.147668822s ago: executing program 6 (id=5396): socket$inet6_udp(0xa, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000011000077f75229e924acf3753c9040b3bb01fd595078eab52a731815a61f59de1fdbaf50f489ae5de13e83d1613d6438ece78f559f9c5b2c67e5e75c1bf22cc2c4d9344cf2b8aefce4be82b692263b9921cd7e092719f44a709772e7923746dc7da2aa1416d3473a39858bcdbd0e0b8e9f127d82604c982561ac3fb88544624d713ac0cb9acdc7a842ab6d", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000070000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000820000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000efffffff850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='sys_enter\x00', r2}, 0x10) tgkill(0x0, 0x0, 0x13) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, 0x0}, 0x0) openat$rfkill(0xffffffffffffff9c, 0x0, 0x40900, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000600)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af3650400420008001d001931a0e69ee517d34460bc0600e8ea2c0000a705251e6182949a3651f60a84c9f4d4938000e70e4509c5bb937762376e5eb58a72", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x10) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000740)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x43}}, 0x10) setsockopt$inet_udp_int(r4, 0x11, 0x67, &(0x7f0000000000)=0x507, 0x4) sendmmsg$inet(r4, &(0x7f0000000600)=[{{&(0x7f0000000c00)={0x2, 0x4e20, @multicast2}, 0x10, 0x0}}], 0x1, 0x2000c044) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = socket$inet(0x2, 0x4, 0x8001) setsockopt$inet_msfilter(r6, 0x0, 0x29, &(0x7f00000006c0)=ANY=[@ANYBLOB="0a0101020000000000000000060000e7ab1414bbffffffffac14142100000000e000000164010102"], 0x28) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x18) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, 0x0, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r7, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e0000000000000000001800028014000380"], 0x44}}, 0x0) sendto$inet(r4, &(0x7f00000000c0)="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", 0xffe3, 0x0, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000000780)={{{@in6=@dev, @in=@multicast2}}, {{@in=@loopback}, 0x0, @in=@remote}}, &(0x7f0000000680)=0xe8) io_setup(0x3, &(0x7f00000003c0)) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x5400, 0x0) 6.904349441s ago: executing program 6 (id=5398): syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000040)={[{@noquota}]}, 0x1, 0x775, &(0x7f0000001180)="$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") open(&(0x7f0000000a80)='./bus\x00', 0x200001, 0x86) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000500000002"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x800, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x10, &(0x7f0000000040)={[{@usrjquota}]}, 0x1, 0x3e7, &(0x7f0000000480)="$eJzs3E1vG0UfAPD/bl7apn1qV3oOvFwsQCISImnSFqgEEhEXDu2JHjhixWmJ6jSoMRKtIl4E4gYSiA8AB+AjcIQD3wHOwAEqRSgHUm5Ga+86Jn5pQx0skt9PGnlmZ+OZ9WTWu+PZCeDIqkTEixExERFnI6KUb0/zEO+2Q7bfzvbm8p/bm8tJNJuv/J5Ekm8r3ivJX0/mbzCbRqQfJPFon3I3bt2+Xq3XV27m6fnG2hvzG7duP726Vr22cm3lxuIz585fuPDcxcVnR3asW2vJR098demXTz6sffrDb9+Ws/qeyvO6j2NUKlHpfCZ7XRx1YWN2vCueTI6xIgAADJXm1/6Trev/UkzE7sVbKT7+fqyVAwAAAEai2SxeAQAAgMMrce8PAAAAh1wxD2Bne3O5CGOcjsC/bGspIsrt9r+bh3bOZOeZ3qk9z/eOUiUiXj5+eTELcUDPYQMAAAAcZd8ttRf+6x3/S+Ohrv1ORMRMsbbfCFX2pHvHf9I7Iy6SLltLEc9HxN2e8b+02KU8kaf+1xoqnEqurtZXzkbE6YiYjaljWXphSBlvP3b960F53eN/n//86kJWfva6u0d6Z/LY3/+mVm1UH+SY2bX1XsQjk/3aP+mM+Xavk/lPvLa688KgvKz9s/YuQm/7c5CaX0Q82bf/765cmgxfn3W+dT6YL84KvX469eX7g8rv7v9ZyMovfgvg4GX9f2Z4+7fWye2s17ux/zK++ePyj4Py7t3+/c//08mVVgWn821vVRuNmwsR08ml3u3+mzqKz6P4vLL2n328//d/cf2X5N/9p7vWh+4x5AfCl945c2VQnv4/Xln71/bV//cfeX3m4dlB5d9f/z/fqkzxJq7/7u1+G2jc9QQAAAAAAABgNNLW3L4knevE03Rurj3P9/8xk9bXNxpPXV1/80atPQewHFNpMdOr1DUfdKH9GHknvbgnfS4izkTEZ6UTrfTc8nq9Nu6DBwAAgCPi5ID7/8yvAx/2AAAAAP5zyuOuAAAAAHDg3P8DAADAofYg6/qLiIgc1si4z0wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAR9tfAQAA///8h8MD") r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x10, 0x803, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x70, 0x2c, 0xd27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r6, {0xc, 0x4}, {}, {0xfff2, 0xf}}, [@filter_kind_options=@f_flow={{0x9}, {0x40, 0x2, [@TCA_FLOW_EMATCHES={0x3c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfffc}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x9, 0x1, 0x0, 0x0, {{0x7, 0x7, 0x2}, {{0x0, 0x1, 0x0, 0x1}, {0x0, 0x1, 0x1, 0x1}}}}, @TCF_EM_META={0x18, 0x2, 0x0, 0x0, {{0xfffb, 0x4, 0x2}}}]}]}]}}]}, 0x70}}, 0x20040054) write(r2, &(0x7f0000000740)="cc", 0x1) sendfile(r2, r1, 0x0, 0x3ffff) openat(0xffffffffffffff9c, &(0x7f0000000240)='./bus\x00', 0x1c5902, 0x2d) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x1}, 0x38) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x2}, 0x18) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000001600), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_PORTS(r7, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001640)={0x1c, r8, 0x1}, 0x1c}}, 0x0) 6.639917943s ago: executing program 1 (id=5400): socket$inet6_udp(0xa, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000011000077f75229e924acf3753c9040b3bb01fd595078eab52a731815a61f59de1fdbaf50f489ae5de13e83d1613d6438ece78f559f9c5b2c67e5e75c1bf22cc2c4d9344cf2b8aefce4be82b692263b9921cd7e092719f44a709772e7923746dc7da2aa1416d3473a39858bcdbd0e0b8e9f127d82604c982561ac3fb88544624d713ac0cb9acdc7a842ab6d", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000070000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000820000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000efffffff850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='sys_enter\x00', r2}, 0x10) tgkill(0x0, 0x0, 0x13) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, 0x0}, 0x0) openat$rfkill(0xffffffffffffff9c, 0x0, 0x40900, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000600)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af3650400420008001d001931a0e69ee517d34460bc0600e8ea2c0000a705251e6182949a3651f60a84c9f4d4938000e70e4509c5bb937762376e5eb58a72", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x10) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000740)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x43}}, 0x10) setsockopt$inet_udp_int(r4, 0x11, 0x67, &(0x7f0000000000)=0x507, 0x4) sendmmsg$inet(r4, &(0x7f0000000600)=[{{&(0x7f0000000c00)={0x2, 0x4e20, @multicast2}, 0x10, 0x0}}], 0x1, 0x2000c044) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = socket$inet(0x2, 0x4, 0x8001) setsockopt$inet_msfilter(r6, 0x0, 0x29, &(0x7f00000006c0)=ANY=[@ANYBLOB="0a0101020000000000000000060000e7ab1414bbffffffffac14142100000000e000000164010102"], 0x28) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x18) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, 0x0, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r7, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e0000000000000000001800028014000380"], 0x44}}, 0x0) sendto$inet(r4, &(0x7f00000000c0)="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", 0xffe3, 0x0, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000000780)={{{@in6=@dev, @in=@multicast2}}, {{@in=@loopback}, 0x0, @in=@remote}}, &(0x7f0000000680)=0xe8) io_setup(0x3, &(0x7f00000003c0)) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x5400, 0x0) 6.630828993s ago: executing program 1 (id=5401): r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r2, 0x0, 0x400007}, 0x18) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x3, 0x40) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r5, 0x0, 0x2}, 0x18) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.current\x00', 0x275a, 0x0) r6 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r6) syz_usb_disconnect(r3) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e20, @dev}, 0x10) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x800, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200a}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r8}, 0x10) close(r0) 5.970481437s ago: executing program 6 (id=5403): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x49, 0x0, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0xf4) r2 = dup2(r1, r1) ioctl$BLKTRACESETUP(r2, 0xc030128a, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) munlockall() prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f0000000180)}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="4000000010001fff00000000000000f6ff060000", @ANYRES32=0x0, @ANYBLOB="81ffffff00000000180012800e0001007769726567756172640000000400028008000a00", @ANYRES32], 0x40}}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r4}, &(0x7f0000000040), &(0x7f0000000280)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace$getregset(0x4204, r5, 0x202, &(0x7f0000000140)={0x0}) 5.694707439s ago: executing program 6 (id=5404): syz_mount_image$ext4(&(0x7f00000007c0)='ext4\x00', &(0x7f0000000d00)='./file1\x00', 0x40, &(0x7f0000000d40)={[{@auto_da_alloc}, {@nodioread_nolock}, {@nobarrier}, {@sysvgroups}, {@jqfmt_vfsold}]}, 0x1, 0x576, &(0x7f0000000140)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000440)='kfree\x00', r1, 0x0, 0x5}, 0x18) creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000), 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000800)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000280)=@chain) 5.176104851s ago: executing program 1 (id=5407): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) ioctl$USBDEVFS_REAPURB(r2, 0x4008550c, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) fcntl$addseals(r3, 0x409, 0x0) perf_event_open(0x0, 0x0, 0xfffaffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x91c, 0x4156, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xfffffffffffffff8, 0x1}, 0x12640, 0x0, 0xfffffffe, 0x6, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) r5 = fsopen(&(0x7f0000001500)='binfmt_misc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) fsmount(r5, 0x0, 0x6) fsconfig$FSCONFIG_CMD_RECONFIGURE(r5, 0x7, 0x0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f0000000040)={{0x0, 0x1, 0x8, 0x1, 0x3}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='kfree\x00'}, 0x18) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000009385000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x3f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r6}, 0x10) r7 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r7, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10, &(0x7f0000000200)=[{&(0x7f00000004c0)='\b\x00', 0x2}, {&(0x7f00000001c0)="cd999003213ed00594e945e4f8", 0x4}], 0x2, &(0x7f00000001c0)=ANY=[], 0x10}, 0x200000c1) close(r4) bpf$MAP_CREATE(0x0, 0x0, 0x50) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, r9, 0x9c3fa077fa966179, 0x4, 0x0, {{0x7e}, {@void, @void}}}, 0x14}}, 0x0) 4.907582083s ago: executing program 1 (id=5411): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x49, 0x0, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0xf4) r2 = dup2(r1, r1) ioctl$BLKTRACESETUP(r2, 0xc030128a, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) munlockall() prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f0000000180)}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="4000000010001fff00000000000000f6ff060000", @ANYRES32=0x0, @ANYBLOB="81ffffff00000000180012800e0001007769726567756172640000000400028008000a00", @ANYRES32], 0x40}}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r4}, &(0x7f0000000040), &(0x7f0000000280)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace$getregset(0x4204, r5, 0x202, &(0x7f0000000140)={0x0}) 4.795423142s ago: executing program 6 (id=5412): perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000200)) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f00000017c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0xc) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @empty}}}}) r3 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r3, {}, 0xa}}, 0x26) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0c00000004000000040000000900008000000000", @ANYRES32=r4], 0x48) 4.794916622s ago: executing program 39 (id=5412): perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000200)) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f00000017c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0xc) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @empty}}}}) r3 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r3, {}, 0xa}}, 0x26) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0c00000004000000040000000900008000000000", @ANYRES32=r4], 0x48) 4.494122386s ago: executing program 1 (id=5417): r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r2, 0x0, 0x400007}, 0x18) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x3, 0x40) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r5, 0x0, 0x2}, 0x18) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.current\x00', 0x275a, 0x0) r6 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r6) syz_usb_disconnect(r3) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e20, @dev}, 0x10) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x800, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200a}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r8}, 0x10) close(r0) 3.860325548s ago: executing program 1 (id=5424): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = socket$kcm(0x10, 0x2, 0x4) socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac00800020007000c000500", 0x2e}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r2 = syz_io_uring_setup(0xbc7, &(0x7f00000004c0)={0x0, 0x40f5, 0x80, 0x0, 0x224}, &(0x7f0000000040)=0x0, &(0x7f00000002c0)=0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b70300000000000085000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kmem_cache_free\x00', r5, 0x0, 0xffffffffffffeffd}, 0x18) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r6, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f00000005c0)='syz_tun\x00', 0x10) sendto$inet(r6, 0x0, 0x0, 0x20000844, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x8e, &(0x7f0000000340)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x1a, 0x4, 0x0, 0x2, 0x80, 0x64, 0x0, 0x0, 0x6, 0x0, @remote, @local, {[@timestamp_addr={0x44, 0x54, 0x84, 0x1, 0x8, [{@local, 0x8}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x8}, {@private=0xa010101, 0x4}, {@empty}, {@loopback, 0x10}, {@remote, 0x5}, {@remote, 0xf}, {@rand_addr=0x64010101, 0x4}, {@private=0xa010100, 0x6}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4}]}]}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x6, 0x10, 0x0, 0x0, 0x0, {[@sack_perm={0x4, 0x2}]}}}}}}}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000300)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x2, 0xa3d8, &(0x7f00000005c0)=[{&(0x7f0000000240)="5db5bd", 0x3}], 0x81, 0x8, 0x1, {0x2}}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r2, 0x47f8, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000080), 0x6, 0x5fc, &(0x7f0000000c00)="$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") syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000000)) syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1aca421, &(0x7f00000008c0)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) 3.821101441s ago: executing program 40 (id=5424): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = socket$kcm(0x10, 0x2, 0x4) socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac00800020007000c000500", 0x2e}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r2 = syz_io_uring_setup(0xbc7, &(0x7f00000004c0)={0x0, 0x40f5, 0x80, 0x0, 0x224}, &(0x7f0000000040)=0x0, &(0x7f00000002c0)=0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b70300000000000085000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kmem_cache_free\x00', r5, 0x0, 0xffffffffffffeffd}, 0x18) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r6, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f00000005c0)='syz_tun\x00', 0x10) sendto$inet(r6, 0x0, 0x0, 0x20000844, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x8e, &(0x7f0000000340)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x1a, 0x4, 0x0, 0x2, 0x80, 0x64, 0x0, 0x0, 0x6, 0x0, @remote, @local, {[@timestamp_addr={0x44, 0x54, 0x84, 0x1, 0x8, [{@local, 0x8}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x8}, {@private=0xa010101, 0x4}, {@empty}, {@loopback, 0x10}, {@remote, 0x5}, {@remote, 0xf}, {@rand_addr=0x64010101, 0x4}, {@private=0xa010100, 0x6}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4}]}]}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x6, 0x10, 0x0, 0x0, 0x0, {[@sack_perm={0x4, 0x2}]}}}}}}}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000300)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x2, 0xa3d8, &(0x7f00000005c0)=[{&(0x7f0000000240)="5db5bd", 0x3}], 0x81, 0x8, 0x1, {0x2}}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r2, 0x47f8, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000080), 0x6, 0x5fc, &(0x7f0000000c00)="$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") syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000000)) syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1aca421, &(0x7f00000008c0)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) 2.456885251s ago: executing program 4 (id=5450): r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x3, 0x40) bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r1, 0x0, 0x2}, 0x18) syz_usb_disconnect(r0) 1.680405034s ago: executing program 4 (id=5458): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x48, 0x0, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_USERDATA={0xf, 0x6, "8e62af19a316d480082915"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x12e0, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0xffff}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xffffffff}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPRESSIONS={0x12a4, 0x12, 0x0, 0x1, [{0x54, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_BASE={0x8}, @NFTA_PAYLOAD_CSUM_TYPE={0x8, 0x6, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_CSUM_TYPE={0x8, 0x6, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_CSUM_TYPE={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_PAYLOAD_CSUM_TYPE={0x8}, @NFTA_PAYLOAD_SREG={0x8, 0x5, 0x1, 0x0, 0x13}, @NFTA_PAYLOAD_CSUM_OFFSET={0x8, 0x7, 0x1, 0x0, 0xced6}, @NFTA_PAYLOAD_CSUM_FLAGS={0x8, 0x8, 0x1, 0x0, 0x1}]}}}, {0xc, 0x1, 0x0, 0x1, @rt={{0x7}, @void}}, {0x44, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_XFRM_DIR={0x5, 0x3, 0x1}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_XFRM_SPNUM={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_XFRM_DIR={0x5}]}}}, {0x54, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x48, 0x2, 0x0, 0x1, [@NFTA_LOG_PREFIX={0x9, 0x2, 0x1, 0x0, 'syz2\x00'}, @NFTA_LOG_LEVEL={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_LOG_LEVEL={0x8, 0x5, 0x1, 0x0, 0x3}, @NFTA_LOG_GROUP={0x6, 0x1, 0x1, 0x0, 0x101}, @NFTA_LOG_GROUP={0x6, 0x1, 0x1, 0x0, 0xd}, @NFTA_LOG_LEVEL={0x8, 0x5, 0x1, 0x0, 0x3}, @NFTA_LOG_SNAPLEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_LOG_SNAPLEN={0x8, 0x3, 0x1, 0x0, 0x6a3}]}}}, {0x11a8, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x1198, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x9a, 0x3, "513869911671e9a3fbc444cca55005192fe76c1864fdab7e02bbaf4019d615593080de992689b385752c90e7c31feca89a7b7805df0a9169bef57ba76bca47bd4bf60a14b0c5c7e5620c63000b40edacf461dc44e15effc00f741e0701b992d250b1d8fb9f907f08cccf2dc1896e3586ba04f176a9a7a926937ad6f96b1b3944019c796366b488f2b512eafcbc1a229908e59ef3986a"}, @NFTA_TARGET_NAME={0xd, 0x1, 'CONNMARK\x00'}, @NFTA_TARGET_NAME={0x7, 0x1, 'HL\x00'}, @NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TARGET_INFO={0x4b, 0x3, "89e5aadcdf694f4376c42152f93f03bb040000007944603039aad674fc3531541ae3d0fb4235475e610936fe77c44ae985506ff90c99a36398f122faffa0372d9d6f6acee37b74"}, @NFTA_TARGET_INFO={0x48, 0x3, "98a4723d2f12da7695a95c5e603d08934304b5d2ce61868ba0d7c0d2e1b45b74064bcc688baa4722c5737ae96c1be9122187244b674fb6de859e41310f4dbfd85a567f3c"}, @NFTA_TARGET_NAME={0xc, 0x1, 'NFQUEUE\x00'}, @NFTA_TARGET_INFO={0x33, 0x3, "8e8e3d840faef260e6b7d7fd01a73156099d388134580838b409f532fb1ead0217276fba737399caf47081a34a81ca"}, @NFTA_TARGET_INFO={0x1004, 0x3, "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"}]}}}]}]}], {0x14, 0x10}}, 0x1350}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r1, 0x4004662b, &(0x7f00000017c0)=0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), 0xffffffffffffffff) syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x22400049, &(0x7f0000000180)={[{@dioread_nolock}, {@noinit_itable}, {@nomblk_io_submit}, {@noblock_validity}, {@data_err_abort}, {@data_err_ignore}, {@jqfmt_vfsv0}, {@barrier_val={'barrier', 0x3d, 0xd95a}}, {@debug}]}, 0x1, 0x47a, &(0x7f00000002c0)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r4, 0x41009432, &(0x7f0000000740)={@desc={0x1, 0x0, @desc2}}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x20000000000001d2, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000001000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x30, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffff52, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000000c"], 0x24}}, 0x0) 1.544874155s ago: executing program 4 (id=5460): r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x3, 0x40) bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r1, 0x0, 0x2}, 0x18) syz_usb_disconnect(r0) 1.263878588s ago: executing program 2 (id=5465): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000001850000001b000000b70000000000070095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x40, 0x81) mount$9p_fd(0x0, &(0x7f0000006a00)='./file0\x00', &(0x7f0000006a40), 0x4001, &(0x7f0000006b40)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) sendmsg$AUDIT_USER_AVC(r3, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, 0x453, 0x800, 0x70bd28, 0x25dfdbfc, "8f0029fe5cf19591267fe1b520d2c4069a85d3da8dfdac76e467499b19ee15c933aa511299fa0783fd4e814c2a", ["", "", "", ""]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x24004844) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffefffff6, 0x20031, 0xffffffffffffffff, 0x73ca9000) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r4, 0xc020f509, &(0x7f0000000200)={r2, 0x7fff, 0xe, 0x40}) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r5 = io_uring_setup(0x1694, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) 794.362156ms ago: executing program 4 (id=5466): r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x3, 0x40) bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r1, 0x0, 0x2}, 0x18) syz_usb_disconnect(r0) 746.83837ms ago: executing program 5 (id=5413): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x49, 0x0, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0xf4) r2 = dup2(r1, r1) ioctl$BLKTRACESETUP(r2, 0xc030128a, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) munlockall() prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f0000000180)}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="4000000010001fff00000000000000f6ff060000", @ANYRES32=0x0, @ANYBLOB="81ffffff00000000180012800e0001007769726567756172640000000400028008000a00", @ANYRES32], 0x40}}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r4}, &(0x7f0000000040), &(0x7f0000000280)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace$getregset(0x4204, r5, 0x202, &(0x7f0000000140)={0x0}) 490.63343ms ago: executing program 5 (id=5469): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x48, 0x0, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_USERDATA={0xf, 0x6, "8e62af19a316d480082915"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x12e0, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0xffff}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xffffffff}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPRESSIONS={0x12a4, 0x12, 0x0, 0x1, [{0x54, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_BASE={0x8}, @NFTA_PAYLOAD_CSUM_TYPE={0x8, 0x6, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_CSUM_TYPE={0x8, 0x6, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_CSUM_TYPE={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_PAYLOAD_CSUM_TYPE={0x8}, @NFTA_PAYLOAD_SREG={0x8, 0x5, 0x1, 0x0, 0x13}, @NFTA_PAYLOAD_CSUM_OFFSET={0x8, 0x7, 0x1, 0x0, 0xced6}, @NFTA_PAYLOAD_CSUM_FLAGS={0x8, 0x8, 0x1, 0x0, 0x1}]}}}, {0xc, 0x1, 0x0, 0x1, @rt={{0x7}, @void}}, {0x44, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_XFRM_DIR={0x5, 0x3, 0x1}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_XFRM_SPNUM={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_XFRM_DIR={0x5}]}}}, {0x54, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x48, 0x2, 0x0, 0x1, [@NFTA_LOG_PREFIX={0x9, 0x2, 0x1, 0x0, 'syz2\x00'}, @NFTA_LOG_LEVEL={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_LOG_LEVEL={0x8, 0x5, 0x1, 0x0, 0x3}, @NFTA_LOG_GROUP={0x6, 0x1, 0x1, 0x0, 0x101}, @NFTA_LOG_GROUP={0x6, 0x1, 0x1, 0x0, 0xd}, @NFTA_LOG_LEVEL={0x8, 0x5, 0x1, 0x0, 0x3}, @NFTA_LOG_SNAPLEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_LOG_SNAPLEN={0x8, 0x3, 0x1, 0x0, 0x6a3}]}}}, {0x11a8, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x1198, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x9a, 0x3, "513869911671e9a3fbc444cca55005192fe76c1864fdab7e02bbaf4019d615593080de992689b385752c90e7c31feca89a7b7805df0a9169bef57ba76bca47bd4bf60a14b0c5c7e5620c63000b40edacf461dc44e15effc00f741e0701b992d250b1d8fb9f907f08cccf2dc1896e3586ba04f176a9a7a926937ad6f96b1b3944019c796366b488f2b512eafcbc1a229908e59ef3986a"}, @NFTA_TARGET_NAME={0xd, 0x1, 'CONNMARK\x00'}, @NFTA_TARGET_NAME={0x7, 0x1, 'HL\x00'}, @NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TARGET_INFO={0x4b, 0x3, "89e5aadcdf694f4376c42152f93f03bb040000007944603039aad674fc3531541ae3d0fb4235475e610936fe77c44ae985506ff90c99a36398f122faffa0372d9d6f6acee37b74"}, @NFTA_TARGET_INFO={0x48, 0x3, "98a4723d2f12da7695a95c5e603d08934304b5d2ce61868ba0d7c0d2e1b45b74064bcc688baa4722c5737ae96c1be9122187244b674fb6de859e41310f4dbfd85a567f3c"}, @NFTA_TARGET_NAME={0xc, 0x1, 'NFQUEUE\x00'}, @NFTA_TARGET_INFO={0x33, 0x3, "8e8e3d840faef260e6b7d7fd01a73156099d388134580838b409f532fb1ead0217276fba737399caf47081a34a81ca"}, @NFTA_TARGET_INFO={0x1004, 0x3, "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"}]}}}]}]}], {0x14, 0x10}}, 0x1350}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r1, 0x4004662b, &(0x7f00000017c0)=0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), 0xffffffffffffffff) syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x22400049, &(0x7f0000000180)={[{@dioread_nolock}, {@noinit_itable}, {@nomblk_io_submit}, {@noblock_validity}, {@data_err_abort}, {@data_err_ignore}, {@jqfmt_vfsv0}, {@barrier_val={'barrier', 0x3d, 0xd95a}}, {@debug}]}, 0x1, 0x47a, &(0x7f00000002c0)="$eJzs3EtvG0UcAPD/rpOUPtK4pTxaCjWUiohC0qQFeuACAqkXJCQ4wDGkoSp1W9QEiVYVLQiVI+ITAEckPgEnuCDgBOIKd4RUoV4oHJDR2ruJkzghseM4xb+ftPbMvmZmZ8c7u2M7gL5VyV6SiF0R8UtEjDSii1eoNN5u37o6/detq9NJ1Gqv/JHU1/vz1tXpYtVd+fvOfJ+jaUT6YRLXW6Q7e/nKualqdeZSHh+fO//2+OzlK0+ePT91ZubMzIXJkydPHJ945unJpzaknMNZXg+8d/Hg/lOvf/LSdC3e+P7LLP+lfHlzORrKHadZiUrUarVaumjuUP31SMd731qGm8LJQA8zwrpk539WXYP19j8SpViovJF48YOeZg7oquz6tGfZ3MZVMT2S1JcD/1fraePJQDdzAmyu4oqf3f8W0+b2QHrr5nONG6Cs3LfzqbFkILL79qTcuGMvdSn9XRHx2vW/P82maPkcAgBgY32d9X+eaNX/S+PepvV252ND5Yg4GhF7I+LuiNgXEfdE1Ne9LyLuX2f6lSXx5f2fn7a3VbA1yvp/z+ZjW4v7f/OjNuVSHhuul38wefNsdeZYfkxGY3BbFp9YJY1vXvj545WWVZr6f9mUpV/0BfN8/D6wbfE2p6fmpjopc7Ob70ccGGhV/mR+JCCJiP0RcaCN/WfH7OzjXxzMwrt3Ll/+3+VfxQaMM9U+j3isUf/XY0n5C0kjpZXGJ8fviurMsfHirFjuhx9vvNwcH2wKd1T+DZDV/46W539e/qIZFOO1s+tP48avH614T9Pu+T+UvFoPD+Xz3p2am7s0ETGUz1g0f3Jh2yJerJ+Vf/RwU/nn00qzz7h/PstjD0REdhI/GBEPRcShPO8PR8QjEXF4lfJ/9/yjb61+hHpb/6dXq/+IctI8Xt9GoHTu269WSn9t9X+iHhrN56zl82+tGezk2AEAAMCdIq2PQSfp2Hw4TcfGGt/h3xc70urF2bmjlXjnwunGWHU5BtPiSddI0/PQifzZcBGfXBI/HhF76t802l6Pj01frA73uvDQ53au0P4zv3XrSy/A1rGucbSke/kANp/fa0L/0v6hf2n/0L+0f+hfrdr/tYjbPcgKsMlc/6F/af/Qv7R/6F/aP/Sl5T+JL/5upZ1f+i8E9p7qaPM+CpS6tOdo/tOOLgQi7fmhaz+QboVsHMoD2yJirVtd62qdLj1/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA7nz/BgAA//9Fe+BO") r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r4, 0x41009432, &(0x7f0000000740)={@desc={0x1, 0x0, @desc2}}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x20000000000001d2, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000001000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x30, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffff52, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000000c"], 0x24}}, 0x0) 490.13234ms ago: executing program 0 (id=5426): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0xfffffffc, 0xff, 0x80000000}, 0x1c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) dup2(r1, r0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xb, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000540), 0x84) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r3, 0x0) perf_event_open(&(0x7f0000000400)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x1e, 0x12, r4, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) close_range(r5, 0xffffffffffffffff, 0x0) 416.833496ms ago: executing program 2 (id=5472): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = add_key$keyring(&(0x7f0000000080), &(0x7f0000000340)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f00000003c0), &(0x7f0000000480)={'syz', 0x1}, 0x0, 0x0, r2) 402.073667ms ago: executing program 2 (id=5473): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f00000002c0)='GPL\x00'}, 0x94) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x103040, 0x0) r0 = openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) pwrite64(r0, &(0x7f0000000000)="3703c70f70e244b7878fedf0c0c6c2ff2f524255d61dbfb25921e3d3686454b93e5842722103c5c67b0da4173b9e63544ee1f32fc67080b7b83c0a31253733872b", 0x41, 0x2) 374.8464ms ago: executing program 2 (id=5475): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0xffff}, 0x18) mount$bpf(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080), 0x800000, &(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRESHEX, @ANYBLOB=',fscontext=system_u,\x00']) 303.758056ms ago: executing program 0 (id=5477): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x800, &(0x7f0000000180), 0x1, 0x293, &(0x7f0000000780)="$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") mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00', r0}, 0x10) chmod(0x0, 0x4) set_mempolicy_home_node(&(0x7f0000417000/0x2000)=nil, 0x2000, 0x0, 0x0) 276.806778ms ago: executing program 2 (id=5479): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x49, 0x0, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0xf4) r2 = dup2(r1, r1) ioctl$BLKTRACESETUP(r2, 0xc030128a, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) munlockall() prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f0000000180)}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="4000000010001fff00000000000000f6ff060000", @ANYRES32=0x0, @ANYBLOB="81ffffff00000000180012800e0001007769726567756172640000000400028008000a00", @ANYRES32], 0x40}}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) ptrace$getregset(0x4204, r6, 0x202, &(0x7f0000000140)={0x0}) 225.000942ms ago: executing program 0 (id=5481): syz_mount_image$ext4(&(0x7f00000007c0)='ext4\x00', &(0x7f0000000d00)='./file1\x00', 0x40, &(0x7f0000000d40)={[{@auto_da_alloc}, {@nodioread_nolock}, {@nobarrier}, {@sysvgroups}, {@jqfmt_vfsold}]}, 0x1, 0x576, &(0x7f0000000140)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000440)='kfree\x00', r1, 0x0, 0x5}, 0x18) creat(&(0x7f00000000c0)='./file0\x00', 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000800)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r3 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000280)=@chain={'key_or_keyring:', r3}) 205.065243ms ago: executing program 8 (id=5482): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18090000002300810000000000000000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x9, 0x0, 0x0, 0x40f00, 0x46, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8001}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x4, [@enum={0x3, 0x1, 0x0, 0xf, 0x4000000, [{}]}]}, {0x0, [0x0, 0x0]}}, &(0x7f0000002200)=""/4110, 0x30, 0x100e, 0x1}, 0x28) r1 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) write$selinux_validatetrans(r1, &(0x7f0000000180)=ANY=[@ANYBLOB='system_u:object_r:semanage_t system_u:object_r:fixed_disk_device_t:s0 00'], 0x79) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b00e4cb9ea3370b9d4756bc6c000000002300008070a6ffec", @ANYRES32, @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r3}, 0x10) add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) r4 = socket(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0xffffffff, 0xff}, 0x0, 0x0, 0x800000, 0x6, 0x2, 0xcb, 0xffff, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@newqdisc={0x58, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0xffffffb1, 0x1, {0xaa6, 0x10001, 0x3, 0x6, 0x1800, 0x0, 0x7a3d, 0xffff, 0x6}}}}]}, 0x58}}, 0x0) dup(r4) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000900)=@newtaction={0xa0, 0x30, 0xb, 0x5, 0x0, {}, [{0x8c, 0x1, [@m_ct={0x88, 0x1, 0x0, 0x0, {{0x7}, {0x60, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x80000001, 0x0, 0x0, 0x0, 0x400}}, @TCA_CT_ACTION={0x6, 0x3, 0x19}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @private=0xa010102}, @TCA_CT_LABELS={0x14, 0x7, "e142a1dc6b3a3dd0aaeb9317676b63d2"}, @TCA_CT_MARK={0x8, 0x5, 0x9}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e24}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e22}, @TCA_CT_MARK_MASK={0x8, 0x6, 0x8000}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x8890}, 0x40) mount(0x0, &(0x7f0000000d80)='.\x00', 0x0, 0x2200020, 0x0) 161.080177ms ago: executing program 0 (id=5483): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x200000000000000, 0x0) openat$cgroup_procs(r1, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) openat$cgroup(r1, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x8, &(0x7f0000002480)=ANY=[], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2, 0x0, 0x4000000}, 0x18) prctl$PR_SET_NAME(0xf, &(0x7f0000000000)='}\\)\\\x00') r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000300)={'#! ', '', [{0x20, 'memory.events\x00'}]}, 0x13) perf_event_open(&(0x7f0000000140)={0x8, 0x80, 0x7, 0x0, 0x0, 0x3, 0x82, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0xf}, 0x8080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x10000000000007}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0xfe, 0x82, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_bp={&(0x7f0000000080)}, 0x400, 0x200000000000, 0x0, 0x0, 0x0, 0x1fffffff, 0x0, 0x0, 0x40, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 144.614608ms ago: executing program 8 (id=5484): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000030000008500000086000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = add_key$keyring(&(0x7f0000000080), &(0x7f0000000340)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f00000003c0), &(0x7f0000000480)={'syz', 0x1}, 0x0, 0x0, r2) 128.40799ms ago: executing program 8 (id=5485): syz_mount_image$ext4(&(0x7f00000007c0)='ext4\x00', &(0x7f0000000d00)='./file1\x00', 0x40, &(0x7f0000000d40)={[{@auto_da_alloc}, {@nodioread_nolock}, {@nobarrier}, {@sysvgroups}, {@jqfmt_vfsold}]}, 0x1, 0x576, &(0x7f0000000140)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={0x0, r1, 0x0, 0x5}, 0x18) creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000), 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000800)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r3 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000280)=@chain={'key_or_keyring:', r3}) 77.376984ms ago: executing program 2 (id=5486): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f00000002c0)='GPL\x00'}, 0x94) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x103040, 0x0) r0 = openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) pwrite64(r0, &(0x7f0000000000)="3703c70f70e244b7878fedf0c0c6c2ff2f524255d61dbfb25921e3d3686454b93e5842722103c5c67b0da4173b9e63544ee1f32fc67080b7b83c0a31253733872b", 0x41, 0x2) 67.236834ms ago: executing program 8 (id=5487): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 52.941786ms ago: executing program 4 (id=5488): r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r2, 0x0, 0x400007}, 0x18) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) syz_open_dev$evdev(&(0x7f00000000c0), 0x3, 0x40) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r4, 0x0, 0x2}, 0x18) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.current\x00', 0x275a, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000100)=0x100000001) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e20, @dev}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x800, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200a}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x10) close(r0) 23.227988ms ago: executing program 8 (id=5489): r0 = socket$inet_smc(0x2b, 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) ioctl$int_in(r0, 0x5421, &(0x7f0000000100)=0x100000001) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e20, @dev}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) close(r0) 14.520759ms ago: executing program 4 (id=5490): r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r2, 0x0, 0x400007}, 0x18) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x3, 0x40) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r5, 0x0, 0x2}, 0x18) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.current\x00', 0x275a, 0x0) r6 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r6) syz_usb_disconnect(r3) ioctl$int_in(r0, 0x5421, &(0x7f0000000100)=0x100000001) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e20, @dev}, 0x10) r7 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0xb76e}, 0x100002, 0x0, 0xfffffffc, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r8}, &(0x7f0000000180), &(0x7f00000001c0)=r7}, 0x20) syz_clone3(&(0x7f0000000780)={0x1c3002480, 0x0, 0x0, 0x0, {0x2b}, 0x0, 0x0, 0x0, 0x0}, 0x58) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) statx(0xffffffffffffff9c, 0x0, 0x1000, 0xffff4a9c0080ffff, &(0x7f0000000700)) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r10}, 0x10) close(r0) 0s ago: executing program 8 (id=5491): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) (async) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x16, &(0x7f00000001c0)=0x7f, 0x4) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) rseq(0x0, 0x0, 0x0, 0x0) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, &(0x7f0000000040)}) fstat(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x11, &(0x7f0000000440)={[{@noblock_validity}, {@stripe={'stripe', 0x3d, 0x2}}, {@norecovery}, {@min_batch_time={'min_batch_time', 0x3d, 0x71d}}, {@abort}], [{@uid_lt={'uid<', r1}}, {@smackfsroot={'smackfsroot', 0x3d, '\x00'}}, {@measure}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}, {@mask={'mask', 0x3d, '^MAY_EXEC'}}]}, 0x1, 0x610, &(0x7f0000000a40)="$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") bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) (async) prctl$PR_SCHED_CORE(0x4d, 0x1, 0x0, 0x0, 0x0) (async) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="666c7573682c73686f72746e616d653d6c6f7765722c73686f72746e616d653d6d697865642c756e695f786c6174653d302c6e6f6e756d7461696c3d302c6e6f6e756d7461696c3d302c73686f72746e616d653d77696e6e742c00a56dc300a96c9b20f3fabdcb10cad696323259cc0500e5f91620d7b9aed9e1fa74020a4f00b8ff"], 0x1, 0x246, &(0x7f00000002c0)="$eJzs2s9rHGUYB/BnYqUxJd2Iv2hB+qIH9TI0OXkQSZAWxICijVAF6dRMdMm4G3aWwIrYeNGrf4Jn8ehNkIoXL7n4F3jwlkuOPYgj7aZtElbIInFD8/lc9mHf+cIzvMPLc3h3Xvv2s/W1Ol8r+jGVZTG1GFtxJ4u5mIr7tuKVl67/9vx71z94a2l5+cq7KV1duja/kFI6f+nnD7/44YXb/XPv/3j+p7OxPffRzu5Xf24/u31h5+9rn7br1K5Tp9tPRbrZ7faLm1WZVtv1ep7SO1VZ1GVqd+qyd2B9repubAxS0VmdndnolXWdis4grZeD1O+mfm+Qik+KdifleZ5mZ4L/YuX7O00Tu83jNyK7/9/sH9GK7MmUPbWYPXMje24ru7DbNK3JNsoxebD/TdM88V2cu23/T5V9h/p0RPXN5srmyvB3uL60Fu2ooozL0Yq/4u5nsmdYX31z+crldM9cfF3d2svf2lx57GB+PloxNzo/P8yng/mzMbM/vxCteHp0fmFkfjpefnFfPo9W/P5xdKOK1bibfZj/cj6lN95ePpS/eO85AIBHTZ4eGDm/5fm/rQ/zY8yHh+arM3HxzGTfnYh68Pl6UVVlTzFOcWnc1PTkez4FRZNFnIA2jlb8+svrr56ANvaKxcNHwaRPJv4PDzf9qInp420IAAAAAAAAAACAIznme4XZODfLAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA0+mfAAAA//9X7c9V") timer_create(0x0, 0x0, &(0x7f0000000380)) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) (async) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000240), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x8, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}}]}, &(0x7f0000000300)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x0, r4}, 0x94) (async) r5 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800, 0x8051}, 0x4002, 0x0, 0x0, 0x0, 0x5, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x40082404, 0x0) r6 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$VT_GETMODE(r6, 0x5601, &(0x7f00000002c0)) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r2) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000280)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000bd7000fcdbdf37f935b0693ffcd739f825110000000ce100810800030003000000"], 0x20}, 0x1, 0x0, 0x0, 0x8801}, 0x30040004) (async) pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) (async) ioctl$sock_inet_SIOCSIFFLAGS(r8, 0x8914, &(0x7f0000000080)={'batadv0\x00', 0x2}) (async) socket$vsock_stream(0x28, 0x1, 0x0) (async) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000100), 0x0) (async) lstat(&(0x7f0000000c40)='./file0\x00', &(0x7f0000000c80)) kernel console output (not intermixed with test programs): T51] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.327573][T18507] EXT4-fs: Ignoring removed bh option [ 409.333594][T18507] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 409.342162][T18507] EXT4-fs (loop0): fragment/cluster size (4096) != block size (2048) [ 409.393821][ T51] bridge_slave_1: left allmulticast mode [ 409.399516][ T51] bridge_slave_1: left promiscuous mode [ 409.405358][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 409.423819][ T51] bridge_slave_0: left allmulticast mode [ 409.430027][ T51] bridge_slave_0: left promiscuous mode [ 409.435810][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 409.483863][T18524] loop6: detected capacity change from 0 to 1024 [ 409.498588][T18524] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 409.511486][T18524] ext4 filesystem being mounted at /298/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 409.526234][ T51] bond0 (unregistering): (slave c1ÿ): Releasing backup interface [ 409.537213][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 409.546567][T14086] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 409.547776][ T51] bond0 (unregistering): Released all slaves [ 409.625740][T18535] loop6: detected capacity change from 0 to 1024 [ 409.641483][T18497] chnl_net:caif_netlink_parms(): no params data found [ 409.656240][T18535] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 409.670579][T18535] ext4 filesystem being mounted at /300/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 409.685264][ T51] hsr_slave_0: left promiscuous mode [ 409.692290][ T51] hsr_slave_1: left promiscuous mode [ 409.699354][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 409.706843][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 409.719131][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 409.726597][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 409.734395][T14086] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 409.748045][ T51] veth1_macvtap: left promiscuous mode [ 409.754601][ T51] veth0_macvtap: left promiscuous mode [ 409.760176][ T51] veth1_vlan: left promiscuous mode [ 409.766116][T18546] loop6: detected capacity change from 0 to 512 [ 409.766292][ T51] veth0_vlan: left promiscuous mode [ 409.784924][T18546] EXT4-fs warning (device loop6): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 409.801240][T18546] EXT4-fs (loop6): mount failed [ 409.854723][ T51] team0 (unregistering): Port device team_slave_1 removed [ 409.868085][ T51] team0 (unregistering): Port device team_slave_0 removed [ 409.887646][T18554] loop6: detected capacity change from 0 to 1024 [ 409.895258][T18554] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 409.909241][T18554] EXT4-fs error (device loop6): ext4_map_blocks:814: inode #3: block 1: comm syz.6.5163: lblock 1 mapped to illegal pblock 1 (length 1) [ 409.926584][T18554] EXT4-fs error (device loop6): ext4_acquire_dquot:6933: comm syz.6.5163: Failed to acquire dquot type 0 [ 409.948894][T18554] EXT4-fs error (device loop6): ext4_free_blocks:6696: comm syz.6.5163: Freeing blocks not in datazone - block = 0, count = 4096 [ 409.969427][T18554] EXT4-fs error (device loop6): ext4_read_inode_bitmap:139: comm syz.6.5163: Invalid inode bitmap blk 0 in block_group 0 [ 409.983057][T18497] bridge0: port 1(bridge_slave_0) entered blocking state [ 409.990283][T18497] bridge0: port 1(bridge_slave_0) entered disabled state [ 409.993120][ T41] EXT4-fs error (device loop6): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:2: lblock 1 mapped to illegal pblock 1 (length 1) [ 410.012173][T18554] EXT4-fs error (device loop6) in ext4_free_inode:361: Corrupt filesystem [ 410.021216][T18554] EXT4-fs (loop6): 1 orphan inode deleted [ 410.023581][ T41] EXT4-fs error (device loop6): ext4_release_dquot:6969: comm kworker/u8:2: Failed to release dquot type 0 [ 410.027756][T18497] bridge_slave_0: entered allmulticast mode [ 410.045234][T18497] bridge_slave_0: entered promiscuous mode [ 410.045716][T18562] loop3: detected capacity change from 0 to 1024 [ 410.052375][T18497] bridge0: port 2(bridge_slave_1) entered blocking state [ 410.064615][T18497] bridge0: port 2(bridge_slave_1) entered disabled state [ 410.065464][T18554] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 410.072006][T18497] bridge_slave_1: entered allmulticast mode [ 410.091531][T18497] bridge_slave_1: entered promiscuous mode [ 410.111738][T18554] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 410.121800][T18497] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 410.131940][T18562] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 410.142957][T18497] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 410.158558][T18562] ext4 filesystem being mounted at /382/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 410.170233][T14086] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 410.181954][T18497] team0: Port device team_slave_0 added [ 410.191897][T18497] team0: Port device team_slave_1 added [ 410.207512][T12444] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 410.232577][T18497] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 410.239606][T18497] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 410.265653][T18497] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 410.285565][T18497] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 410.292584][T18497] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 410.319167][T18497] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 410.359831][T18579] loop0: detected capacity change from 0 to 1024 [ 410.384691][T18584] loop3: detected capacity change from 0 to 512 [ 410.391598][T18584] EXT4-fs: Ignoring removed bh option [ 410.398507][T18584] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 410.407175][T18584] EXT4-fs (loop3): fragment/cluster size (4096) != block size (2048) [ 410.409053][T18586] loop1: detected capacity change from 0 to 1024 [ 410.423207][T18587] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5173'. [ 410.430165][T18497] hsr_slave_0: entered promiscuous mode [ 410.439635][T18497] hsr_slave_1: entered promiscuous mode [ 410.446217][T18579] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 410.452915][T18586] EXT4-fs: Ignoring removed orlov option [ 410.464099][T18586] EXT4-fs: Ignoring removed nomblk_io_submit option [ 410.470272][T18591] loop6: detected capacity change from 0 to 512 [ 410.471114][T18579] ext4 filesystem being mounted at /487/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 410.488678][T18591] EXT4-fs (loop6): orphan cleanup on readonly fs [ 410.509954][T11352] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 410.510068][T18591] EXT4-fs error (device loop6): ext4_orphan_get:1418: comm syz.6.5175: bad orphan inode 13 [ 410.529950][T18591] ext4_test_bit(bit=12, block=18) = 1 [ 410.535500][T18591] is_bad_inode(inode)=0 [ 410.539736][T18591] NEXT_ORPHAN(inode)=2130706432 [ 410.544679][T18591] max_ino=32 [ 410.547892][T18591] i_nlink=1 [ 410.553120][T18591] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 410.576063][T18586] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 410.602772][T18599] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5176'. [ 410.620063][T18586] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5174'. [ 410.623197][T14086] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 410.640782][T18586] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5174'. [ 410.662196][T18497] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 410.679183][T18601] loop0: detected capacity change from 0 to 2048 [ 410.689038][T18497] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 410.699489][T18497] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 410.707607][T18586] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 410.710237][T18497] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 410.737701][T18601] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 410.751610][T11613] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 410.771910][T18612] loop6: detected capacity change from 0 to 1024 [ 410.792465][T18612] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 410.813754][T18497] 8021q: adding VLAN 0 to HW filter on device bond0 [ 410.822279][T18612] EXT4-fs error (device loop6): ext4_map_blocks:814: inode #3: block 1: comm syz.6.5178: lblock 1 mapped to illegal pblock 1 (length 1) [ 410.838030][T18612] EXT4-fs error (device loop6): ext4_acquire_dquot:6933: comm syz.6.5178: Failed to acquire dquot type 0 [ 410.850565][T18612] EXT4-fs error (device loop6): ext4_free_blocks:6696: comm syz.6.5178: Freeing blocks not in datazone - block = 0, count = 4096 [ 410.864289][T18612] EXT4-fs error (device loop6): ext4_read_inode_bitmap:139: comm syz.6.5178: Invalid inode bitmap blk 0 in block_group 0 [ 410.869419][T18497] 8021q: adding VLAN 0 to HW filter on device team0 [ 411.104720][T18612] EXT4-fs error (device loop6) in ext4_free_inode:361: Corrupt filesystem [ 411.253324][ T51] EXT4-fs error (device loop6): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:3: lblock 1 mapped to illegal pblock 1 (length 1) [ 411.268784][ T51] EXT4-fs error (device loop6): ext4_release_dquot:6969: comm kworker/u8:3: Failed to release dquot type 0 [ 411.301526][T18612] EXT4-fs (loop6): 1 orphan inode deleted [ 411.307855][T18612] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 411.433895][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 411.437379][T18603] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 411.441004][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 411.464360][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 411.471446][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 411.493826][T14086] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 411.501386][T18497] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 411.513333][T18497] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 411.541548][T18625] loop6: detected capacity change from 0 to 1024 [ 411.550553][T11352] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 411.579413][T18625] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 411.590372][T18625] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 411.619554][T18625] JBD2: no valid journal superblock found [ 411.625364][T18625] EXT4-fs (loop6): Could not load journal inode [ 411.647833][T18625] random: crng reseeded on system resumption [ 411.662342][T18497] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 411.902113][T18497] veth0_vlan: entered promiscuous mode [ 411.918902][T18497] veth1_vlan: entered promiscuous mode [ 411.945404][T18497] veth0_macvtap: entered promiscuous mode [ 411.961001][T18497] veth1_macvtap: entered promiscuous mode [ 411.985310][T18497] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 412.005477][T18497] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 412.018186][ T3442] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.029130][ T3442] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.044413][ T3442] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.057507][ T3442] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.152156][ T30] kauditd_printk_skb: 787 callbacks suppressed [ 412.152231][ T30] audit: type=1400 audit(1755129124.203:42554): avc: denied { mounton } for pid=18497 comm="syz-executor" path="/root/syzkaller.LNasdR/syz-tmp" dev="sda1" ino=2061 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 412.184369][ T30] audit: type=1400 audit(1755129124.203:42555): avc: denied { mount } for pid=18497 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 412.206739][ T30] audit: type=1400 audit(1755129124.203:42556): avc: denied { mount } for pid=18497 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 412.228899][ T30] audit: type=1400 audit(1755129124.203:42557): avc: denied { mounton } for pid=18497 comm="syz-executor" path="/root/syzkaller.LNasdR/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 412.255835][ T30] audit: type=1400 audit(1755129124.203:42558): avc: denied { mounton } for pid=18497 comm="syz-executor" path="/root/syzkaller.LNasdR/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=70238 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 412.304087][ T30] audit: type=1400 audit(1755129124.243:42559): avc: denied { mounton } for pid=18497 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 412.327391][ T30] audit: type=1400 audit(1755129124.243:42560): avc: denied { mount } for pid=18497 comm="syz-executor" name="/" dev="gadgetfs" ino=4638 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 412.508429][ T30] audit: type=1326 audit(1755129124.473:42561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18656 comm="syz.1.5187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a82c8ebe9 code=0x7ffc0000 [ 412.532300][ T30] audit: type=1326 audit(1755129124.473:42562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18656 comm="syz.1.5187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a82c8ebe9 code=0x7ffc0000 [ 412.555908][ T30] audit: type=1326 audit(1755129124.473:42563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18656 comm="syz.1.5187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2a82c8ebe9 code=0x7ffc0000 [ 412.781793][T18661] loop7: detected capacity change from 0 to 1024 [ 412.811618][T18661] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 412.824453][T18661] ext4 filesystem being mounted at /0/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 412.889931][T18670] loop6: detected capacity change from 0 to 512 [ 412.897517][T18670] EXT4-fs: Ignoring removed nomblk_io_submit option [ 412.905380][T18670] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 412.913428][T18670] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=842c01c, mo2=0002] [ 412.932251][T18497] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 412.951825][T18670] EXT4-fs (loop6): couldn't mount RDWR because of unsupported optional features (80) [ 412.961406][T18670] EXT4-fs (loop6): Skipping orphan cleanup due to unknown ROCOMPAT features [ 412.974608][T18676] loop1: detected capacity change from 0 to 256 [ 412.988434][T18670] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 412.995085][T18678] netlink: 24 bytes leftover after parsing attributes in process `syz.7.5193'. [ 413.034491][T18670] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5191'. [ 413.077407][T18685] loop7: detected capacity change from 0 to 512 [ 413.087030][T14086] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 413.207851][T18685] EXT4-fs (loop7): orphan cleanup on readonly fs [ 413.223458][T18685] EXT4-fs error (device loop7): ext4_orphan_get:1418: comm syz.7.5196: bad orphan inode 13 [ 413.243557][T18685] ext4_test_bit(bit=12, block=18) = 1 [ 413.249023][T18685] is_bad_inode(inode)=0 [ 413.253253][T18685] NEXT_ORPHAN(inode)=2130706432 [ 413.258126][T18685] max_ino=32 [ 413.261327][T18685] i_nlink=1 [ 413.266269][T18685] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 413.297869][T18497] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 413.398342][T18694] openvswitch: netlink: Message has 6 unknown bytes. [ 413.432632][T18698] loop1: detected capacity change from 0 to 2048 [ 413.444800][T18698] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 413.519236][T18706] loop7: detected capacity change from 0 to 1024 [ 413.526575][T18706] EXT4-fs: Ignoring removed orlov option [ 413.532359][T18706] EXT4-fs: Ignoring removed nomblk_io_submit option [ 413.545012][T18706] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 413.560255][T18706] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5204'. [ 413.569794][T18706] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5204'. [ 413.580376][T18706] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 413.601151][T18497] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 413.620379][T18711] netlink: 24 bytes leftover after parsing attributes in process `syz.7.5205'. [ 413.651402][T18713] loop7: detected capacity change from 0 to 256 [ 413.759093][T18717] loop0: detected capacity change from 0 to 1024 [ 413.775699][T18717] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 413.799777][T18717] EXT4-fs error (device loop0): ext4_map_blocks:814: inode #3: block 1: comm syz.0.5208: lblock 1 mapped to illegal pblock 1 (length 1) [ 413.834129][T18717] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.5208: Failed to acquire dquot type 0 [ 413.846225][T18717] EXT4-fs error (device loop0): ext4_free_blocks:6696: comm syz.0.5208: Freeing blocks not in datazone - block = 0, count = 4096 [ 413.860305][T18717] EXT4-fs error (device loop0): ext4_read_inode_bitmap:139: comm syz.0.5208: Invalid inode bitmap blk 0 in block_group 0 [ 413.878339][T18717] EXT4-fs error (device loop0) in ext4_free_inode:361: Corrupt filesystem [ 413.888168][T18717] EXT4-fs (loop0): 1 orphan inode deleted [ 413.894651][T18717] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 413.975040][ T3442] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:8: lblock 1 mapped to illegal pblock 1 (length 1) [ 413.989884][ T3442] EXT4-fs error (device loop0): ext4_release_dquot:6969: comm kworker/u8:8: Failed to release dquot type 0 [ 414.007102][T18717] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 414.027509][T11352] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 414.070102][T18725] loop0: detected capacity change from 0 to 1024 [ 414.078482][T18725] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 414.089499][T18725] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 414.253395][T18725] JBD2: no valid journal superblock found [ 414.259236][T18725] EXT4-fs (loop0): Could not load journal inode [ 414.489270][T18725] random: crng reseeded on system resumption [ 414.497040][T11613] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 414.548978][T18735] loop1: detected capacity change from 0 to 1024 [ 414.559236][T18736] loop3: detected capacity change from 0 to 1024 [ 414.564142][T18735] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 414.568450][T18736] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 414.576672][T18735] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 414.587527][T18736] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 414.598986][T18735] JBD2: no valid journal superblock found [ 414.607667][T18736] JBD2: no valid journal superblock found [ 414.612413][T18735] EXT4-fs (loop1): Could not load journal inode [ 414.618130][T18736] EXT4-fs (loop3): Could not load journal inode [ 414.649910][T18736] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 414.668082][T18736] random: crng reseeded on system resumption [ 414.757277][T18744] loop0: detected capacity change from 0 to 256 [ 414.781624][T18735] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 414.799836][T18735] random: crng reseeded on system resumption [ 414.837817][T18750] FAULT_INJECTION: forcing a failure. [ 414.837817][T18750] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 414.850942][T18750] CPU: 1 UID: 0 PID: 18750 Comm: syz.0.5219 Tainted: G W 6.17.0-rc1-syzkaller-00036-gdfc0f6373094 #0 PREEMPT(voluntary) [ 414.851009][T18750] Tainted: [W]=WARN [ 414.851016][T18750] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 414.851034][T18750] Call Trace: [ 414.851042][T18750] [ 414.851052][T18750] __dump_stack+0x1d/0x30 [ 414.851080][T18750] dump_stack_lvl+0xe8/0x140 [ 414.851105][T18750] dump_stack+0x15/0x1b [ 414.851201][T18750] should_fail_ex+0x265/0x280 [ 414.851230][T18750] should_fail+0xb/0x20 [ 414.851250][T18750] should_fail_usercopy+0x1a/0x20 [ 414.851341][T18750] _copy_from_user+0x1c/0xb0 [ 414.851445][T18750] __sys_bpf+0x178/0x7b0 [ 414.851497][T18750] __x64_sys_bpf+0x41/0x50 [ 414.851597][T18750] x64_sys_call+0x2aea/0x2ff0 [ 414.851623][T18750] do_syscall_64+0xd2/0x200 [ 414.851650][T18750] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 414.851694][T18750] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 414.851727][T18750] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 414.851779][T18750] RIP: 0033:0x7f36257aebe9 [ 414.851798][T18750] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 414.851825][T18750] RSP: 002b:00007f3624217038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 414.851847][T18750] RAX: ffffffffffffffda RBX: 00007f36259d5fa0 RCX: 00007f36257aebe9 [ 414.851877][T18750] RDX: 0000000000000094 RSI: 00002000000001c0 RDI: 0000000000000005 [ 414.851894][T18750] RBP: 00007f3624217090 R08: 0000000000000000 R09: 0000000000000000 [ 414.851910][T18750] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 414.851925][T18750] R13: 00007f36259d6038 R14: 00007f36259d5fa0 R15: 00007ffd6013e718 [ 414.851943][T18750] [ 415.150975][T18757] openvswitch: netlink: Message has 6 unknown bytes. [ 415.177945][T18755] loop0: detected capacity change from 0 to 1024 [ 415.185449][T18755] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 415.222192][T18759] loop1: detected capacity change from 0 to 1024 [ 415.230465][T18759] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 415.241506][T18759] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 415.253193][T18759] JBD2: no valid journal superblock found [ 415.258944][T18759] EXT4-fs (loop1): Could not load journal inode [ 415.280964][T18755] EXT4-fs error (device loop0): ext4_map_blocks:814: inode #3: block 1: comm syz.0.5221: lblock 1 mapped to illegal pblock 1 (length 1) [ 415.304396][T18755] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.5221: Failed to acquire dquot type 0 [ 415.318785][T18755] EXT4-fs error (device loop0): ext4_free_blocks:6696: comm syz.0.5221: Freeing blocks not in datazone - block = 0, count = 4096 [ 415.338447][T18755] EXT4-fs error (device loop0): ext4_read_inode_bitmap:139: comm syz.0.5221: Invalid inode bitmap blk 0 in block_group 0 [ 415.353088][T18755] EXT4-fs error (device loop0) in ext4_free_inode:361: Corrupt filesystem [ 415.363523][ T110] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:4: lblock 1 mapped to illegal pblock 1 (length 1) [ 415.365161][T18759] random: crng reseeded on system resumption [ 415.389624][T18755] EXT4-fs (loop0): 1 orphan inode deleted [ 415.396002][T18755] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 415.409918][ T110] EXT4-fs error (device loop0): ext4_release_dquot:6969: comm kworker/u8:4: Failed to release dquot type 0 [ 415.422230][T18755] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 415.446892][T11352] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 415.486798][T18767] loop0: detected capacity change from 0 to 512 [ 415.494554][T18767] EXT4-fs: Ignoring removed nobh option [ 415.504056][T18769] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5227'. [ 415.573594][T18767] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #3: comm syz.0.5226: corrupted inode contents [ 415.589731][T18767] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #3: comm syz.0.5226: mark_inode_dirty error [ 415.608436][T18781] loop7: detected capacity change from 0 to 1024 [ 415.616538][T18767] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #3: comm syz.0.5226: corrupted inode contents [ 415.629511][T18781] EXT4-fs (loop7): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 415.640507][T18781] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 415.663157][T18767] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #3: comm syz.0.5226: mark_inode_dirty error [ 415.669166][T18781] JBD2: no valid journal superblock found [ 415.678816][T18767] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.5226: Failed to acquire dquot type 0 [ 415.680390][T18781] EXT4-fs (loop7): Could not load journal inode [ 415.699387][T18767] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.5226: corrupted inode contents [ 415.702020][T18781] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 415.721431][T18767] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #16: comm syz.0.5226: mark_inode_dirty error [ 415.742100][T18781] random: crng reseeded on system resumption [ 415.748504][T18767] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.5226: corrupted inode contents [ 415.761726][T18767] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #16: comm syz.0.5226: mark_inode_dirty error [ 415.785670][T18787] loop1: detected capacity change from 0 to 1024 [ 415.792612][T18787] ext2: Unknown parameter 'usrjquot' [ 415.793431][T18767] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.5226: corrupted inode contents [ 415.816836][T18767] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem [ 415.845551][T18767] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.5226: corrupted inode contents [ 415.865849][T18767] EXT4-fs error (device loop0): ext4_truncate:4666: inode #16: comm syz.0.5226: mark_inode_dirty error [ 415.879967][T18791] loop1: detected capacity change from 0 to 128 [ 415.889030][T18791] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 415.901608][T18791] ext4 filesystem being mounted at /501/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 415.934278][T18767] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem [ 415.950065][T18791] EXT4-fs error (device loop1): ext4_check_dx_root:2203: inode #2: comm syz.1.5234: Corrupt dir, invalid name for '..', running e2fsck is recommended [ 415.966126][T18789] loop7: detected capacity change from 0 to 256 [ 415.972704][T18767] EXT4-fs (loop0): 1 truncate cleaned up [ 415.990854][T18767] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 416.009856][T18789] SELinux: failed to load policy [ 416.020301][T11613] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 416.035705][T18767] ext4 filesystem being mounted at /501/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 416.052094][T18794] loop1: detected capacity change from 0 to 256 [ 416.085551][T18796] loop7: detected capacity change from 0 to 1024 [ 416.115542][T18800] vlan2: entered allmulticast mode [ 416.123652][T18796] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 416.147045][T18796] ext4 filesystem being mounted at /14/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 416.158398][T11352] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 416.196681][T18807] loop0: detected capacity change from 0 to 512 [ 416.213516][T18805] FAULT_INJECTION: forcing a failure. [ 416.213516][T18805] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 416.226732][T18805] CPU: 0 UID: 0 PID: 18805 Comm: syz.1.5240 Tainted: G W 6.17.0-rc1-syzkaller-00036-gdfc0f6373094 #0 PREEMPT(voluntary) [ 416.226768][T18805] Tainted: [W]=WARN [ 416.226776][T18805] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 416.226793][T18805] Call Trace: [ 416.226800][T18805] [ 416.226809][T18805] __dump_stack+0x1d/0x30 [ 416.226898][T18805] dump_stack_lvl+0xe8/0x140 [ 416.226917][T18805] dump_stack+0x15/0x1b [ 416.226934][T18805] should_fail_ex+0x265/0x280 [ 416.227005][T18805] should_fail+0xb/0x20 [ 416.227029][T18805] should_fail_usercopy+0x1a/0x20 [ 416.227057][T18805] _copy_from_user+0x1c/0xb0 [ 416.227155][T18805] ___sys_sendmsg+0xc1/0x1d0 [ 416.227193][T18805] __x64_sys_sendmsg+0xd4/0x160 [ 416.227250][T18805] x64_sys_call+0x191e/0x2ff0 [ 416.227278][T18805] do_syscall_64+0xd2/0x200 [ 416.227326][T18805] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 416.227353][T18805] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 416.227406][T18805] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 416.227428][T18805] RIP: 0033:0x7f2a82c8ebe9 [ 416.227512][T18805] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 416.227534][T18805] RSP: 002b:00007f2a816ef038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 416.227594][T18805] RAX: ffffffffffffffda RBX: 00007f2a82eb5fa0 RCX: 00007f2a82c8ebe9 [ 416.227607][T18805] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 416.227620][T18805] RBP: 00007f2a816ef090 R08: 0000000000000000 R09: 0000000000000000 [ 416.227681][T18805] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 416.227693][T18805] R13: 00007f2a82eb6038 R14: 00007f2a82eb5fa0 R15: 00007ffcf49f79b8 [ 416.227714][T18805] [ 416.230001][T18497] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 416.357029][T18807] msdos: Unknown parameter 'gh' [ 416.471985][T18813] loop1: detected capacity change from 0 to 1024 [ 416.484838][T18813] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 416.495791][T18813] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 416.511814][T18813] JBD2: no valid journal superblock found [ 416.517651][T18813] EXT4-fs (loop1): Could not load journal inode [ 416.552895][T18813] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 416.593537][T18813] random: crng reseeded on system resumption [ 416.653024][T18835] loop0: detected capacity change from 0 to 512 [ 416.660759][T18833] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5250'. [ 416.674274][T18835] journal_path: not usable as path [ 416.679469][T18835] EXT4-fs: error: could not find journal device path [ 416.745199][T18839] loop1: detected capacity change from 0 to 2048 [ 416.795994][T18839] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 416.827845][T18849] loop3: detected capacity change from 0 to 1024 [ 416.838989][T18848] loop7: detected capacity change from 0 to 1024 [ 416.863929][T18849] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 416.925174][T18848] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 416.931379][T18862] loop6: detected capacity change from 0 to 1024 [ 416.943775][T18849] EXT4-fs error (device loop3): ext4_map_blocks:814: inode #3: block 1: comm syz.3.5255: lblock 1 mapped to illegal pblock 1 (length 1) [ 416.944694][T18848] ext4 filesystem being mounted at /18/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 416.968444][T18862] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 416.979466][T18862] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 416.990046][T18849] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.5255: Failed to acquire dquot type 0 [ 416.991635][T18860] loop0: detected capacity change from 0 to 1024 [ 417.003044][T18862] JBD2: no valid journal superblock found [ 417.009257][T18497] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 417.013492][T18862] EXT4-fs (loop6): Could not load journal inode [ 417.022964][T18849] EXT4-fs error (device loop3): ext4_free_blocks:6696: comm syz.3.5255: Freeing blocks not in datazone - block = 0, count = 4096 [ 417.031484][T18860] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 417.046334][T18849] EXT4-fs error (device loop3): ext4_read_inode_bitmap:139: comm syz.3.5255: Invalid inode bitmap blk 0 in block_group 0 [ 417.053277][T18860] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 417.066663][T18862] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 417.076751][T18860] JBD2: no valid journal superblock found [ 417.085338][ T26] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:1: lblock 1 mapped to illegal pblock 1 (length 1) [ 417.091040][T18860] EXT4-fs (loop0): Could not load journal inode [ 417.111576][T18849] EXT4-fs error (device loop3) in ext4_free_inode:361: Corrupt filesystem [ 417.120469][ T26] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u8:1: Failed to release dquot type 0 [ 417.137980][T18862] random: crng reseeded on system resumption [ 417.142369][T18849] EXT4-fs (loop3): 1 orphan inode deleted [ 417.152656][T18849] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 417.178478][ T30] kauditd_printk_skb: 853 callbacks suppressed [ 417.178505][ T30] audit: type=1326 audit(1755129129.233:43406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18859 comm="syz.0.5260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36257aebe9 code=0x7ffc0000 [ 417.209129][T18868] loop7: detected capacity change from 0 to 1024 [ 417.219119][T18860] random: crng reseeded on system resumption [ 417.231068][ T30] audit: type=1326 audit(1755129129.273:43407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18866 comm="syz.0.5260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f36257e14a5 code=0x7ffc0000 [ 417.255023][ T30] audit: type=1326 audit(1755129129.273:43408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18859 comm="syz.0.5260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36257aebe9 code=0x7ffc0000 [ 417.278726][ T30] audit: type=1326 audit(1755129129.273:43409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18859 comm="syz.0.5260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7f36257aebe9 code=0x7ffc0000 [ 417.302381][ T30] audit: type=1326 audit(1755129129.273:43410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18859 comm="syz.0.5260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36257aebe9 code=0x7ffc0000 [ 417.326083][ T30] audit: type=1326 audit(1755129129.273:43411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18859 comm="syz.0.5260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36257aebe9 code=0x7ffc0000 [ 417.349806][ T30] audit: type=1326 audit(1755129129.273:43412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18859 comm="syz.0.5260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f362574add9 code=0x7ffc0000 [ 417.373541][ T30] audit: type=1326 audit(1755129129.273:43413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18859 comm="syz.0.5260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36257aebe9 code=0x7ffc0000 [ 417.397422][ T30] audit: type=1326 audit(1755129129.273:43414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18859 comm="syz.0.5260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f36257aebe9 code=0x7ffc0000 [ 417.421119][ T30] audit: type=1326 audit(1755129129.273:43415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18859 comm="syz.0.5260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36257aebe9 code=0x7ffc0000 [ 417.454737][T18868] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 417.467344][T18844] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 417.477657][T18868] ext4 filesystem being mounted at /19/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 417.506396][T18497] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 417.525562][T12444] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 417.534637][T18872] loop6: detected capacity change from 0 to 512 [ 417.543210][T18872] journal_path: not usable as path [ 417.548366][T18872] EXT4-fs: error: could not find journal device path [ 417.553454][T18874] loop0: detected capacity change from 0 to 512 [ 417.571508][T11613] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 417.582651][T18874] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 417.600523][T18878] loop3: detected capacity change from 0 to 512 [ 417.609783][T18874] ext4 filesystem being mounted at /508/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 417.630964][T18874] wireguard0: entered promiscuous mode [ 417.636596][T18874] wireguard0: entered allmulticast mode [ 417.644528][T18878] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 417.663271][T18878] ext4 filesystem being mounted at /400/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 417.676833][T18888] loop7: detected capacity change from 0 to 1024 [ 417.697518][T18878] wireguard0: entered promiscuous mode [ 417.703042][T18878] wireguard0: entered allmulticast mode [ 417.775898][T18898] netlink: 24 bytes leftover after parsing attributes in process `syz.7.5272'. [ 417.785938][T11352] EXT4-fs error (device loop0): ext4_lookup:1787: inode #12: comm syz-executor: iget: bad i_size value: 2533274857506816 [ 417.799853][T11352] EXT4-fs error (device loop0): ext4_lookup:1787: inode #12: comm syz-executor: iget: bad i_size value: 2533274857506816 [ 417.864728][T12444] EXT4-fs error (device loop3): ext4_lookup:1787: inode #12: comm syz-executor: iget: bad i_size value: 2533274857506816 [ 417.894677][T12444] EXT4-fs error (device loop3): ext4_lookup:1787: inode #12: comm syz-executor: iget: bad i_size value: 2533274857506816 [ 417.987095][T18913] FAULT_INJECTION: forcing a failure. [ 417.987095][T18913] name failslab, interval 1, probability 0, space 0, times 0 [ 417.999905][T18913] CPU: 1 UID: 0 PID: 18913 Comm: syz.7.5279 Tainted: G W 6.17.0-rc1-syzkaller-00036-gdfc0f6373094 #0 PREEMPT(voluntary) [ 418.000002][T18913] Tainted: [W]=WARN [ 418.000012][T18913] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 418.000029][T18913] Call Trace: [ 418.000037][T18913] [ 418.000047][T18913] __dump_stack+0x1d/0x30 [ 418.000069][T18913] dump_stack_lvl+0xe8/0x140 [ 418.000088][T18913] dump_stack+0x15/0x1b [ 418.000105][T18913] should_fail_ex+0x265/0x280 [ 418.000155][T18913] ? alloc_pipe_info+0xae/0x350 [ 418.000258][T18913] should_failslab+0x8c/0xb0 [ 418.000286][T18913] __kmalloc_cache_noprof+0x4c/0x320 [ 418.000391][T18913] alloc_pipe_info+0xae/0x350 [ 418.000425][T18913] splice_direct_to_actor+0x592/0x680 [ 418.000521][T18913] ? kstrtouint_from_user+0x9f/0xf0 [ 418.000595][T18913] ? __pfx_direct_splice_actor+0x10/0x10 [ 418.000620][T18913] ? __rcu_read_unlock+0x4f/0x70 [ 418.000684][T18913] ? get_pid_task+0x96/0xd0 [ 418.000716][T18913] ? avc_policy_seqno+0x15/0x30 [ 418.000761][T18913] ? selinux_file_permission+0x1e4/0x320 [ 418.000787][T18913] do_splice_direct+0xda/0x150 [ 418.000812][T18913] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 418.000847][T18913] do_sendfile+0x380/0x650 [ 418.000931][T18913] __x64_sys_sendfile64+0x105/0x150 [ 418.000971][T18913] x64_sys_call+0x2bb0/0x2ff0 [ 418.001000][T18913] do_syscall_64+0xd2/0x200 [ 418.001079][T18913] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 418.001159][T18913] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 418.001187][T18913] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 418.001223][T18913] RIP: 0033:0x7fa0895debe9 [ 418.001240][T18913] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 418.001303][T18913] RSP: 002b:00007fa08803f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 418.001329][T18913] RAX: ffffffffffffffda RBX: 00007fa089805fa0 RCX: 00007fa0895debe9 [ 418.001346][T18913] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000006 [ 418.001359][T18913] RBP: 00007fa08803f090 R08: 0000000000000000 R09: 0000000000000000 [ 418.001371][T18913] R10: 0000000800000009 R11: 0000000000000246 R12: 0000000000000001 [ 418.001387][T18913] R13: 00007fa089806038 R14: 00007fa089805fa0 R15: 00007fff05c08c48 [ 418.001414][T18913] [ 418.455596][T15021] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 418.569935][T18924] loop7: detected capacity change from 0 to 1024 [ 418.608960][T18924] ext4 filesystem being mounted at /31/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 418.694364][T18931] loop7: detected capacity change from 0 to 1024 [ 418.701117][T18931] EXT4-fs: Ignoring removed orlov option [ 418.706829][T18931] EXT4-fs: Ignoring removed nomblk_io_submit option [ 418.730808][T18931] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 418.847254][T18943] loop1: detected capacity change from 0 to 1024 [ 418.864355][T18943] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 418.875321][T18943] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 418.932587][T18943] JBD2: no valid journal superblock found [ 418.932792][ T110] bridge_slave_1: left allmulticast mode [ 418.938401][T18943] EXT4-fs (loop1): Could not load journal inode [ 418.944080][ T110] bridge_slave_1: left promiscuous mode [ 418.956148][ T110] bridge0: port 2(bridge_slave_1) entered disabled state [ 418.978745][T18943] random: crng reseeded on system resumption [ 418.986415][ T110] bridge_slave_0: left allmulticast mode [ 418.992081][ T110] bridge_slave_0: left promiscuous mode [ 418.997796][ T110] bridge0: port 1(bridge_slave_0) entered disabled state [ 419.165554][ T110] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 419.176174][ T110] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 419.185539][ T110] bond0 (unregistering): Released all slaves [ 419.239425][T18928] chnl_net:caif_netlink_parms(): no params data found [ 419.375129][ T110] hsr_slave_0: left promiscuous mode [ 419.400695][ T110] hsr_slave_1: left promiscuous mode [ 419.506556][ T110] team0 (unregistering): Port device team_slave_1 removed [ 419.527028][ T110] team0 (unregistering): Port device team_slave_0 removed [ 419.709149][T18928] bridge0: port 1(bridge_slave_0) entered blocking state [ 419.716306][T18928] bridge0: port 1(bridge_slave_0) entered disabled state [ 419.733237][T18928] bridge_slave_0: entered allmulticast mode [ 419.739846][T18928] bridge_slave_0: entered promiscuous mode [ 419.758885][T18928] bridge0: port 2(bridge_slave_1) entered blocking state [ 419.766155][T18928] bridge0: port 2(bridge_slave_1) entered disabled state [ 419.773463][T18928] bridge_slave_1: entered allmulticast mode [ 419.780081][T18928] bridge_slave_1: entered promiscuous mode [ 419.832983][T18928] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 419.868442][T18928] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 419.882767][T18946] chnl_net:caif_netlink_parms(): no params data found [ 419.899090][T18978] loop1: detected capacity change from 0 to 1024 [ 419.947777][T18928] team0: Port device team_slave_0 added [ 419.964929][T18928] team0: Port device team_slave_1 added [ 419.997441][T18928] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 420.004558][T18928] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 420.031026][T18928] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 420.045494][T18978] ext4 filesystem being mounted at /516/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 420.079339][T18928] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 420.086434][T18928] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 420.112448][T18928] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 420.158997][T18946] bridge0: port 1(bridge_slave_0) entered blocking state [ 420.166146][T18946] bridge0: port 1(bridge_slave_0) entered disabled state [ 420.282501][T18946] bridge_slave_0: entered allmulticast mode [ 420.289154][T18946] bridge_slave_0: entered promiscuous mode [ 420.301333][T18991] loop7: detected capacity change from 0 to 1024 [ 420.312228][T18946] bridge0: port 2(bridge_slave_1) entered blocking state [ 420.319350][T18946] bridge0: port 2(bridge_slave_1) entered disabled state [ 420.326758][T18991] EXT4-fs: Ignoring removed orlov option [ 420.332697][T18991] EXT4-fs: Ignoring removed nomblk_io_submit option [ 420.333297][T18946] bridge_slave_1: entered allmulticast mode [ 420.346617][T18946] bridge_slave_1: entered promiscuous mode [ 420.370670][T18991] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 420.389765][T18928] hsr_slave_0: entered promiscuous mode [ 420.405038][T18928] hsr_slave_1: entered promiscuous mode [ 420.418196][T18928] debugfs: 'hsr0' already exists in 'hsr' [ 420.424036][T18928] Cannot create hsr debugfs directory [ 420.430904][T18946] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 420.440622][T18995] loop7: detected capacity change from 0 to 128 [ 420.449535][T18946] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 420.452330][T18995] FAULT_INJECTION: forcing a failure. [ 420.452330][T18995] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 420.471989][T18995] CPU: 0 UID: 0 PID: 18995 Comm: syz.7.5298 Tainted: G W 6.17.0-rc1-syzkaller-00036-gdfc0f6373094 #0 PREEMPT(voluntary) [ 420.472045][T18995] Tainted: [W]=WARN [ 420.472051][T18995] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 420.472064][T18995] Call Trace: [ 420.472072][T18995] [ 420.472082][T18995] __dump_stack+0x1d/0x30 [ 420.472110][T18995] dump_stack_lvl+0xe8/0x140 [ 420.472136][T18995] dump_stack+0x15/0x1b [ 420.472153][T18995] should_fail_ex+0x265/0x280 [ 420.472247][T18995] should_fail_alloc_page+0xf2/0x100 [ 420.472292][T18995] __alloc_frozen_pages_noprof+0xff/0x360 [ 420.472379][T18995] alloc_pages_mpol+0xb3/0x250 [ 420.472447][T18995] folio_alloc_noprof+0x97/0x150 [ 420.472530][T18995] filemap_alloc_folio_noprof+0x66/0x210 [ 420.472576][T18995] __filemap_get_folio+0x28f/0x6b0 [ 420.472620][T18995] cont_write_begin+0x5c8/0x970 [ 420.472696][T18995] ? should_fail_ex+0x30/0x280 [ 420.472724][T18995] fat_write_begin+0x4f/0xe0 [ 420.472753][T18995] ? __pfx_fat_get_block+0x10/0x10 [ 420.472780][T18995] cont_write_begin+0x1b0/0x970 [ 420.472831][T18995] ? strcmp+0x22/0x50 [ 420.472864][T18995] fat_write_begin+0x4f/0xe0 [ 420.472893][T18995] ? __pfx_fat_get_block+0x10/0x10 [ 420.472922][T18995] generic_perform_write+0x181/0x490 [ 420.473012][T18995] __generic_file_write_iter+0x9e/0x120 [ 420.473045][T18995] ? __pfx_generic_file_write_iter+0x10/0x10 [ 420.473085][T18995] generic_file_write_iter+0x8d/0x2f0 [ 420.473127][T18995] ? _parse_integer+0x27/0x40 [ 420.473196][T18995] ? kstrtoull+0x111/0x140 [ 420.473223][T18995] ? kstrtouint+0x76/0xc0 [ 420.473244][T18995] ? kstrtouint_from_user+0x9f/0xf0 [ 420.473337][T18995] ? 0xffffffff81000000 [ 420.473353][T18995] ? __rcu_read_unlock+0x4f/0x70 [ 420.473423][T18995] ? avc_policy_seqno+0x15/0x30 [ 420.473454][T18995] ? selinux_file_permission+0x1e4/0x320 [ 420.473558][T18995] ? __pfx_generic_file_write_iter+0x10/0x10 [ 420.473597][T18995] vfs_write+0x527/0x960 [ 420.473627][T18995] __x64_sys_pwrite64+0xfd/0x150 [ 420.473711][T18995] x64_sys_call+0xc4d/0x2ff0 [ 420.473740][T18995] do_syscall_64+0xd2/0x200 [ 420.473774][T18995] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 420.473839][T18995] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 420.473863][T18995] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 420.473885][T18995] RIP: 0033:0x7fa0895debe9 [ 420.473900][T18995] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 420.473986][T18995] RSP: 002b:00007fa08803f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000012 [ 420.474005][T18995] RAX: ffffffffffffffda RBX: 00007fa089805fa0 RCX: 00007fa0895debe9 [ 420.474098][T18995] RDX: 00000000000155c2 RSI: 0000200000000140 RDI: 0000000000000005 [ 420.474111][T18995] RBP: 00007fa08803f090 R08: 0000000000000000 R09: 0000000000000000 [ 420.474123][T18995] R10: 0000000008000c64 R11: 0000000000000246 R12: 0000000000000001 [ 420.474135][T18995] R13: 00007fa089806038 R14: 00007fa089805fa0 R15: 00007fff05c08c48 [ 420.474172][T18995] [ 420.816089][T18946] team0: Port device team_slave_0 added [ 420.832057][T18946] team0: Port device team_slave_1 added [ 420.852600][T18998] loop6: detected capacity change from 0 to 512 [ 420.859435][T18998] msdos: Unknown parameter 'gh' [ 420.871164][T18946] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 420.878191][T18946] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 420.904202][T18946] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 420.924093][T18946] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 420.931132][T18946] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 420.957692][T18946] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 420.978848][T18999] macsec1: entered promiscuous mode [ 420.984146][T18999] bridge0: entered promiscuous mode [ 420.989679][T18999] bridge0: port 3(macsec1) entered blocking state [ 420.996530][T18999] bridge0: port 3(macsec1) entered disabled state [ 421.003126][T18999] macsec1: entered allmulticast mode [ 421.008448][T18999] bridge0: entered allmulticast mode [ 421.018413][T18999] macsec1: left allmulticast mode [ 421.023518][T18999] bridge0: left allmulticast mode [ 421.029318][T18999] bridge0: left promiscuous mode [ 421.056234][T19002] loop7: detected capacity change from 0 to 2048 [ 421.085405][T18928] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 421.096945][T18928] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 421.132826][T18928] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 421.150493][T18928] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 421.171686][T18946] hsr_slave_0: entered promiscuous mode [ 421.178464][T18946] hsr_slave_1: entered promiscuous mode [ 421.186079][T18946] debugfs: 'hsr0' already exists in 'hsr' [ 421.191842][T18946] Cannot create hsr debugfs directory [ 421.198736][T19013] loop1: detected capacity change from 0 to 512 [ 421.210195][T19014] loop6: detected capacity change from 0 to 1024 [ 421.227652][T19013] ext4 filesystem being mounted at /520/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 421.239563][T19014] ext4 filesystem being mounted at /320/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 421.262564][T19013] wireguard0: entered promiscuous mode [ 421.268260][T19013] wireguard0: entered allmulticast mode [ 421.309963][T19028] FAULT_INJECTION: forcing a failure. [ 421.309963][T19028] name failslab, interval 1, probability 0, space 0, times 0 [ 421.322658][T19028] CPU: 1 UID: 0 PID: 19028 Comm: syz.6.5305 Tainted: G W 6.17.0-rc1-syzkaller-00036-gdfc0f6373094 #0 PREEMPT(voluntary) [ 421.322724][T19028] Tainted: [W]=WARN [ 421.322733][T19028] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 421.322750][T19028] Call Trace: [ 421.322758][T19028] [ 421.322768][T19028] __dump_stack+0x1d/0x30 [ 421.322796][T19028] dump_stack_lvl+0xe8/0x140 [ 421.322893][T19028] dump_stack+0x15/0x1b [ 421.322922][T19028] should_fail_ex+0x265/0x280 [ 421.322950][T19028] ? __se_sys_memfd_create+0x1cc/0x590 [ 421.322978][T19028] should_failslab+0x8c/0xb0 [ 421.323010][T19028] __kmalloc_cache_noprof+0x4c/0x320 [ 421.323070][T19028] ? fput+0x8f/0xc0 [ 421.323109][T19028] __se_sys_memfd_create+0x1cc/0x590 [ 421.323138][T19028] __x64_sys_memfd_create+0x31/0x40 [ 421.323206][T19028] x64_sys_call+0x2abe/0x2ff0 [ 421.323234][T19028] do_syscall_64+0xd2/0x200 [ 421.323264][T19028] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 421.323289][T19028] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 421.323328][T19028] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 421.323355][T19028] RIP: 0033:0x7fe9e4c6ebe9 [ 421.323373][T19028] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 421.323417][T19028] RSP: 002b:00007fe9e36d6e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 421.323442][T19028] RAX: ffffffffffffffda RBX: 00000000000004f9 RCX: 00007fe9e4c6ebe9 [ 421.323458][T19028] RDX: 00007fe9e36d6ef0 RSI: 0000000000000000 RDI: 00007fe9e4cf27e8 [ 421.323475][T19028] RBP: 0000200000000200 R08: 00007fe9e36d6bb7 R09: 00007fe9e36d6e40 [ 421.323491][T19028] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000740 [ 421.323507][T19028] R13: 00007fe9e36d6ef0 R14: 00007fe9e36d6eb0 R15: 0000200000000780 [ 421.323528][T19028] [ 421.535818][T18928] 8021q: adding VLAN 0 to HW filter on device bond0 [ 421.536810][T19031] loop6: detected capacity change from 0 to 1024 [ 421.568740][T18946] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 421.578354][T18946] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 421.586681][T19031] ext4 filesystem being mounted at /322/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 421.603915][T18928] 8021q: adding VLAN 0 to HW filter on device team0 [ 421.611006][T18946] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 421.631225][T18946] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 421.643918][ T3442] bridge0: port 1(bridge_slave_0) entered blocking state [ 421.651056][ T3442] bridge0: port 1(bridge_slave_0) entered forwarding state [ 421.668078][ T3418] bridge0: port 2(bridge_slave_1) entered blocking state [ 421.675252][ T3418] bridge0: port 2(bridge_slave_1) entered forwarding state [ 421.738955][T18928] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 421.780840][T18946] 8021q: adding VLAN 0 to HW filter on device bond0 [ 421.798974][T18946] 8021q: adding VLAN 0 to HW filter on device team0 [ 421.809327][ T3442] bridge0: port 1(bridge_slave_0) entered blocking state [ 421.816487][ T3442] bridge0: port 1(bridge_slave_0) entered forwarding state [ 421.835489][ T3442] bridge0: port 2(bridge_slave_1) entered blocking state [ 421.842683][ T3442] bridge0: port 2(bridge_slave_1) entered forwarding state [ 421.879756][T18928] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 421.911461][T18946] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 421.922119][T18946] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 422.087004][T19059] loop7: detected capacity change from 0 to 1024 [ 422.109034][T19059] EXT4-fs (loop7): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 422.120043][T19059] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 422.130872][T18946] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 422.171417][T19059] JBD2: no valid journal superblock found [ 422.177328][T19059] EXT4-fs (loop7): Could not load journal inode [ 422.218484][ T30] kauditd_printk_skb: 314 callbacks suppressed [ 422.218502][ T30] audit: type=1326 audit(1755129134.273:43730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19058 comm="syz.7.5308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa0895dd550 code=0x7ffc0000 [ 422.282964][T19059] random: crng reseeded on system resumption [ 422.309301][T18928] veth0_vlan: entered promiscuous mode [ 422.331524][T18928] veth1_vlan: entered promiscuous mode [ 422.339017][ T30] audit: type=1326 audit(1755129134.303:43731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19058 comm="syz.7.5308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa0895de7eb code=0x7ffc0000 [ 422.362642][ T30] audit: type=1326 audit(1755129134.303:43732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19058 comm="syz.7.5308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fa0895dd84a code=0x7ffc0000 [ 422.386125][ T30] audit: type=1326 audit(1755129134.313:43733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19058 comm="syz.7.5308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0895debe9 code=0x7ffc0000 [ 422.410239][ T30] audit: type=1326 audit(1755129134.313:43734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19058 comm="syz.7.5308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0895debe9 code=0x7ffc0000 [ 422.434000][ T30] audit: type=1326 audit(1755129134.323:43735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19058 comm="syz.7.5308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fa0895debe9 code=0x7ffc0000 [ 422.457762][ T30] audit: type=1326 audit(1755129134.323:43736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19058 comm="syz.7.5308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0895debe9 code=0x7ffc0000 [ 422.481960][ T30] audit: type=1326 audit(1755129134.323:43737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19058 comm="syz.7.5308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0895debe9 code=0x7ffc0000 [ 422.505724][ T30] audit: type=1326 audit(1755129134.323:43738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19058 comm="syz.7.5308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fa0895debe9 code=0x7ffc0000 [ 422.529341][ T30] audit: type=1326 audit(1755129134.323:43739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19058 comm="syz.7.5308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0895debe9 code=0x7ffc0000 [ 422.576057][T18928] veth0_macvtap: entered promiscuous mode [ 422.584303][T18928] veth1_macvtap: entered promiscuous mode [ 422.598096][T18928] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 422.623414][T19075] loop7: detected capacity change from 0 to 1024 [ 422.632434][T18928] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 422.651069][T19075] EXT4-fs (loop7): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 422.662092][T19075] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 422.676417][T19075] JBD2: no valid journal superblock found [ 422.682180][T19075] EXT4-fs (loop7): Could not load journal inode [ 422.688685][ T110] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.699310][ T110] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.713418][ T110] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.722190][ T110] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.735083][T19075] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 422.740060][T18946] veth0_vlan: entered promiscuous mode [ 422.755778][T19075] random: crng reseeded on system resumption [ 422.770418][T18946] veth1_vlan: entered promiscuous mode [ 422.799593][T18946] veth0_macvtap: entered promiscuous mode [ 422.815687][T18946] veth1_macvtap: entered promiscuous mode [ 422.839129][T18946] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 422.855130][T19084] netlink: 24 bytes leftover after parsing attributes in process `syz.8.5285'. [ 422.859736][T18946] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 422.881561][ T41] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.903858][ T41] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.912919][ T41] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.915517][ T41] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.008814][T19093] loop1: detected capacity change from 0 to 512 [ 423.015968][T19093] msdos: Unknown parameter 'gh' [ 423.065960][T19099] loop8: detected capacity change from 0 to 2048 [ 423.109667][T19103] openvswitch: netlink: Message has 6 unknown bytes. [ 423.126521][T19104] macsec1: entered promiscuous mode [ 423.131789][T19104] bridge0: entered promiscuous mode [ 423.143711][T19104] bridge0: port 3(macsec1) entered blocking state [ 423.150225][T19104] bridge0: port 3(macsec1) entered disabled state [ 423.157663][T19104] macsec1: entered allmulticast mode [ 423.163160][T19104] bridge0: entered allmulticast mode [ 423.171760][T19104] macsec1: left allmulticast mode [ 423.176950][T19104] bridge0: left allmulticast mode [ 423.183544][T19104] bridge0: left promiscuous mode [ 423.380084][T19110] loop1: detected capacity change from 0 to 1024 [ 423.424360][T19110] EXT4-fs: Ignoring removed orlov option [ 423.430085][T19110] EXT4-fs: Ignoring removed nomblk_io_submit option [ 423.439170][T19111] loop9: detected capacity change from 0 to 1024 [ 423.462539][T19110] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 423.498398][T19115] FAULT_INJECTION: forcing a failure. [ 423.498398][T19115] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 423.511526][T19115] CPU: 1 UID: 0 PID: 19115 Comm: syz.1.5318 Tainted: G W 6.17.0-rc1-syzkaller-00036-gdfc0f6373094 #0 PREEMPT(voluntary) [ 423.511567][T19115] Tainted: [W]=WARN [ 423.511576][T19115] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 423.511639][T19115] Call Trace: [ 423.511724][T19115] [ 423.511733][T19115] __dump_stack+0x1d/0x30 [ 423.511757][T19115] dump_stack_lvl+0xe8/0x140 [ 423.511781][T19115] dump_stack+0x15/0x1b [ 423.511804][T19115] should_fail_ex+0x265/0x280 [ 423.511829][T19115] should_fail+0xb/0x20 [ 423.511846][T19115] should_fail_usercopy+0x1a/0x20 [ 423.511948][T19115] _copy_from_user+0x1c/0xb0 [ 423.512058][T19115] ___sys_sendmsg+0xc1/0x1d0 [ 423.512165][T19115] __x64_sys_sendmsg+0xd4/0x160 [ 423.512199][T19115] x64_sys_call+0x191e/0x2ff0 [ 423.512226][T19115] do_syscall_64+0xd2/0x200 [ 423.512282][T19115] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 423.512315][T19115] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 423.512348][T19115] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 423.512413][T19115] RIP: 0033:0x7f2a82c8ebe9 [ 423.512432][T19115] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 423.512450][T19115] RSP: 002b:00007f2a816ef038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 423.512469][T19115] RAX: ffffffffffffffda RBX: 00007f2a82eb5fa0 RCX: 00007f2a82c8ebe9 [ 423.512481][T19115] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000005 [ 423.512497][T19115] RBP: 00007f2a816ef090 R08: 0000000000000000 R09: 0000000000000000 [ 423.512563][T19115] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 423.512634][T19115] R13: 00007f2a82eb6038 R14: 00007f2a82eb5fa0 R15: 00007ffcf49f79b8 [ 423.512661][T19115] [ 423.748178][T19111] EXT4-fs (loop9): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 423.772890][T19111] EXT4-fs error (device loop9): ext4_map_blocks:814: inode #3: block 1: comm syz.9.5317: lblock 1 mapped to illegal pblock 1 (length 1) [ 423.802107][T19111] EXT4-fs error (device loop9): ext4_acquire_dquot:6933: comm syz.9.5317: Failed to acquire dquot type 0 [ 423.821696][T19111] EXT4-fs error (device loop9): ext4_free_blocks:6696: comm syz.9.5317: Freeing blocks not in datazone - block = 0, count = 4096 [ 423.841197][T19121] bridge: RTM_NEWNEIGH with invalid ether address [ 423.866916][T19111] EXT4-fs error (device loop9): ext4_read_inode_bitmap:139: comm syz.9.5317: Invalid inode bitmap blk 0 in block_group 0 [ 423.867154][T19111] EXT4-fs error (device loop9) in ext4_free_inode:361: Corrupt filesystem [ 423.867291][T19111] EXT4-fs (loop9): 1 orphan inode deleted [ 423.891166][ T51] EXT4-fs error (device loop9): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:3: lblock 1 mapped to illegal pblock 1 (length 1) [ 423.892226][ T51] EXT4-fs error (device loop9): ext4_release_dquot:6969: comm kworker/u8:3: Failed to release dquot type 0 [ 423.892790][T19109] EXT4-fs (loop9): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 424.009243][T19126] loop9: detected capacity change from 0 to 512 [ 424.053621][T19126] ext4 filesystem being mounted at /3/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 424.114332][T19126] wireguard0: entered promiscuous mode [ 424.114356][T19126] wireguard0: entered allmulticast mode [ 424.231742][T19138] loop1: detected capacity change from 0 to 512 [ 424.240473][T19138] FAULT_INJECTION: forcing a failure. [ 424.240473][T19138] name failslab, interval 1, probability 0, space 0, times 0 [ 424.253290][T19138] CPU: 0 UID: 0 PID: 19138 Comm: syz.1.5324 Tainted: G W 6.17.0-rc1-syzkaller-00036-gdfc0f6373094 #0 PREEMPT(voluntary) [ 424.253326][T19138] Tainted: [W]=WARN [ 424.253382][T19138] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 424.253396][T19138] Call Trace: [ 424.253404][T19138] [ 424.253414][T19138] __dump_stack+0x1d/0x30 [ 424.253442][T19138] dump_stack_lvl+0xe8/0x140 [ 424.253469][T19138] dump_stack+0x15/0x1b [ 424.253568][T19138] should_fail_ex+0x265/0x280 [ 424.253594][T19138] should_failslab+0x8c/0xb0 [ 424.253619][T19138] kmem_cache_alloc_noprof+0x50/0x310 [ 424.253716][T19138] ? getname_flags+0x80/0x3b0 [ 424.253746][T19138] getname_flags+0x80/0x3b0 [ 424.253775][T19138] user_path_at+0x28/0x130 [ 424.253841][T19138] __se_sys_mount+0x25b/0x2e0 [ 424.253870][T19138] ? fput+0x8f/0xc0 [ 424.253984][T19138] __x64_sys_mount+0x67/0x80 [ 424.254015][T19138] x64_sys_call+0x2b4d/0x2ff0 [ 424.254095][T19138] do_syscall_64+0xd2/0x200 [ 424.254130][T19138] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 424.254194][T19138] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 424.254219][T19138] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 424.254243][T19138] RIP: 0033:0x7f2a82c8ebe9 [ 424.254262][T19138] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 424.254299][T19138] RSP: 002b:00007f2a816ef038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 424.254318][T19138] RAX: ffffffffffffffda RBX: 00007f2a82eb5fa0 RCX: 00007f2a82c8ebe9 [ 424.254330][T19138] RDX: 0000000000000000 RSI: 0000200000000d80 RDI: 0000000000000000 [ 424.254343][T19138] RBP: 00007f2a816ef090 R08: 0000000000000000 R09: 0000000000000000 [ 424.254359][T19138] R10: 0000000002200020 R11: 0000000000000246 R12: 0000000000000001 [ 424.254376][T19138] R13: 00007f2a82eb6038 R14: 00007f2a82eb5fa0 R15: 00007ffcf49f79b8 [ 424.254401][T19138] [ 424.490630][T19141] loop7: detected capacity change from 0 to 512 [ 424.498833][T18946] EXT4-fs error (device loop9): ext4_lookup:1787: inode #12: comm syz-executor: iget: bad i_size value: 2533274857506816 [ 424.499032][T19141] msdos: Unknown parameter 'gh' [ 424.518916][T18946] EXT4-fs error (device loop9): ext4_lookup:1787: inode #12: comm syz-executor: iget: bad i_size value: 2533274857506816 [ 424.609844][T19146] bridge0: entered promiscuous mode [ 424.618814][T19146] macsec1: entered promiscuous mode [ 424.632562][T19146] bridge0: port 3(macsec1) entered blocking state [ 424.639394][T19146] bridge0: port 3(macsec1) entered disabled state [ 424.658258][T19146] macsec1: entered allmulticast mode [ 424.663741][T19146] bridge0: entered allmulticast mode [ 424.670823][T19146] macsec1: left allmulticast mode [ 424.676064][T19146] bridge0: left allmulticast mode [ 424.685649][T19149] loop6: detected capacity change from 0 to 256 [ 424.692236][T19146] bridge0: left promiscuous mode [ 424.817176][T19149] bridge_slave_1: left allmulticast mode [ 424.822952][T19149] bridge_slave_1: left promiscuous mode [ 424.828783][T19149] bridge0: port 2(bridge_slave_1) entered disabled state [ 424.839775][T19149] bridge_slave_0: left allmulticast mode [ 424.845574][T19149] bridge_slave_0: left promiscuous mode [ 424.851285][T19149] bridge0: port 1(bridge_slave_0) entered disabled state [ 425.209429][T19163] loop6: detected capacity change from 0 to 1024 [ 425.224212][T19163] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 425.249315][T19163] EXT4-fs error (device loop6): ext4_map_blocks:814: inode #3: block 1: comm syz.6.5335: lblock 1 mapped to illegal pblock 1 (length 1) [ 425.265850][T19160] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 425.279309][T19163] EXT4-fs error (device loop6): ext4_acquire_dquot:6933: comm syz.6.5335: Failed to acquire dquot type 0 [ 425.291433][T19163] EXT4-fs error (device loop6): ext4_free_blocks:6696: comm syz.6.5335: Freeing blocks not in datazone - block = 0, count = 4096 [ 425.305228][T19163] EXT4-fs error (device loop6): ext4_read_inode_bitmap:139: comm syz.6.5335: Invalid inode bitmap blk 0 in block_group 0 [ 425.319720][T19163] EXT4-fs error (device loop6) in ext4_free_inode:361: Corrupt filesystem [ 425.328499][T19163] EXT4-fs (loop6): 1 orphan inode deleted [ 425.334388][ T3418] EXT4-fs error (device loop6): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:6: lblock 1 mapped to illegal pblock 1 (length 1) [ 425.351668][ T3418] EXT4-fs error (device loop6): ext4_release_dquot:6969: comm kworker/u8:6: Failed to release dquot type 0 [ 425.368748][T19163] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 425.423348][T19168] 9pnet_fd: Insufficient options for proto=fd [ 425.475585][T19168] netlink: 32 bytes leftover after parsing attributes in process `syz.7.5336'. [ 425.498395][T19174] loop1: detected capacity change from 0 to 1024 [ 425.505992][T19174] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 425.517054][T19174] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 425.527551][T19174] JBD2: no valid journal superblock found [ 425.533336][T19174] EXT4-fs (loop1): Could not load journal inode [ 425.562147][T19174] random: crng reseeded on system resumption [ 425.668939][T19185] loop1: detected capacity change from 0 to 1024 [ 425.678436][ T3442] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 425.687968][ T3442] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 425.697174][ T3442] bond0 (unregistering): Released all slaves [ 425.714272][T19185] ext4 filesystem being mounted at /532/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 425.781083][ T3442] hsr_slave_0: left promiscuous mode [ 425.786981][ T3442] hsr_slave_1: left promiscuous mode [ 425.795983][ T3442] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 425.813807][ T3442] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 425.826957][T19192] loop6: detected capacity change from 0 to 1024 [ 425.837182][T19192] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 425.848373][T19192] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 425.863476][T19192] JBD2: no valid journal superblock found [ 425.869244][T19192] EXT4-fs (loop6): Could not load journal inode [ 425.880562][T19192] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 425.890621][ T3442] team0 (unregistering): Port device team_slave_1 removed [ 425.905723][ T3442] team0 (unregistering): Port device team_slave_0 removed [ 425.907707][T19192] random: crng reseeded on system resumption [ 425.915955][ T3418] smc: removing ib device syz! [ 426.026448][T19204] FAULT_INJECTION: forcing a failure. [ 426.026448][T19204] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 426.039715][T19204] CPU: 1 UID: 0 PID: 19204 Comm: syz.1.5351 Tainted: G W 6.17.0-rc1-syzkaller-00036-gdfc0f6373094 #0 PREEMPT(voluntary) [ 426.039825][T19204] Tainted: [W]=WARN [ 426.039832][T19204] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 426.039845][T19204] Call Trace: [ 426.039852][T19204] [ 426.039859][T19204] __dump_stack+0x1d/0x30 [ 426.039882][T19204] dump_stack_lvl+0xe8/0x140 [ 426.039902][T19204] dump_stack+0x15/0x1b [ 426.039933][T19204] should_fail_ex+0x265/0x280 [ 426.039954][T19204] should_fail+0xb/0x20 [ 426.039981][T19204] should_fail_usercopy+0x1a/0x20 [ 426.040010][T19204] _copy_from_user+0x1c/0xb0 [ 426.040047][T19204] ___sys_sendmsg+0xc1/0x1d0 [ 426.040087][T19204] __x64_sys_sendmsg+0xd4/0x160 [ 426.040131][T19204] x64_sys_call+0x191e/0x2ff0 [ 426.040159][T19204] do_syscall_64+0xd2/0x200 [ 426.040194][T19204] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 426.040240][T19204] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 426.040272][T19204] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 426.040300][T19204] RIP: 0033:0x7f2a82c8ebe9 [ 426.040319][T19204] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 426.040339][T19204] RSP: 002b:00007f2a816ef038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 426.040422][T19204] RAX: ffffffffffffffda RBX: 00007f2a82eb5fa0 RCX: 00007f2a82c8ebe9 [ 426.040439][T19204] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 426.040452][T19204] RBP: 00007f2a816ef090 R08: 0000000000000000 R09: 0000000000000000 [ 426.040465][T19204] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 426.040477][T19204] R13: 00007f2a82eb6038 R14: 00007f2a82eb5fa0 R15: 00007ffcf49f79b8 [ 426.040498][T19204] [ 426.365103][T19214] loop6: detected capacity change from 0 to 1024 [ 426.415749][T19219] loop7: detected capacity change from 0 to 128 [ 426.422427][T19219] msdos: Bad value for 'gid' [ 426.427156][T19219] msdos: Bad value for 'gid' [ 426.432831][T19214] ext4 filesystem being mounted at /333/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 426.438659][T19219] loop7: detected capacity change from 0 to 128 [ 426.490292][ T41] kworker/u8:2: attempt to access beyond end of device [ 426.490292][ T41] loop7: rw=1, sector=145, nr_sectors = 104 limit=128 [ 426.524068][ T3442] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.536210][ T41] kworker/u8:2: attempt to access beyond end of device [ 426.536210][ T41] loop7: rw=1, sector=257, nr_sectors = 8 limit=128 [ 426.550778][ T41] kworker/u8:2: attempt to access beyond end of device [ 426.550778][ T41] loop7: rw=1, sector=273, nr_sectors = 8 limit=128 [ 426.569164][ T41] kworker/u8:2: attempt to access beyond end of device [ 426.569164][ T41] loop7: rw=1, sector=289, nr_sectors = 8 limit=128 [ 426.609748][T19239] loop6: detected capacity change from 0 to 1024 [ 426.625041][ T3442] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.636462][T19239] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 426.647448][T19239] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 426.658092][ T41] kworker/u8:2: attempt to access beyond end of device [ 426.658092][ T41] loop7: rw=1, sector=305, nr_sectors = 8 limit=128 [ 426.673723][ T41] kworker/u8:2: attempt to access beyond end of device [ 426.673723][ T41] loop7: rw=1, sector=321, nr_sectors = 8 limit=128 [ 426.687291][ T41] kworker/u8:2: attempt to access beyond end of device [ 426.687291][ T41] loop7: rw=1, sector=337, nr_sectors = 8 limit=128 [ 426.700699][T19239] JBD2: no valid journal superblock found [ 426.706492][T19239] EXT4-fs (loop6): Could not load journal inode [ 426.716501][T19239] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 426.733002][T19239] random: crng reseeded on system resumption [ 426.743620][ T41] kworker/u8:2: attempt to access beyond end of device [ 426.743620][ T41] loop7: rw=1, sector=353, nr_sectors = 8 limit=128 [ 426.759435][ T3442] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.770886][ T41] kworker/u8:2: attempt to access beyond end of device [ 426.770886][ T41] loop7: rw=1, sector=369, nr_sectors = 8 limit=128 [ 426.784537][ T41] kworker/u8:2: attempt to access beyond end of device [ 426.784537][ T41] loop7: rw=1, sector=385, nr_sectors = 8 limit=128 [ 426.827616][T19249] loop6: detected capacity change from 0 to 512 [ 426.848813][ T3442] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.859286][T19249] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 426.902656][T19251] loop7: detected capacity change from 0 to 256 [ 426.912399][T19249] EXT4-fs error (device loop6): ext4_get_branch:178: inode #11: block 4294967295: comm syz.6.5364: invalid block [ 426.926564][ T3442] bridge_slave_1: left allmulticast mode [ 426.927046][T19251] FAT-fs (loop7): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 426.932250][ T3442] bridge_slave_1: left promiscuous mode [ 426.942431][T19251] FAT-fs (loop7): Filesystem has been set read-only [ 426.948157][ T3442] bridge0: port 2(bridge_slave_1) entered disabled state [ 426.979474][T19249] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.5364: invalid indirect mapped block 4294967295 (level 1) [ 426.979989][T19251] FAT-fs (loop7): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 427.003706][T19249] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.5364: invalid indirect mapped block 4294967295 (level 1) [ 427.003954][ T3442] bridge_slave_0: left allmulticast mode [ 427.023627][ T3442] bridge_slave_0: left promiscuous mode [ 427.029116][T19251] FAT-fs (loop7): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 427.029320][ T3442] bridge0: port 1(bridge_slave_0) entered disabled state [ 427.048847][T19249] EXT4-fs (loop6): 2 truncates cleaned up [ 427.056391][T19249] EXT4-fs error (device loop6): ext4_inlinedir_to_tree:1314: inode #12: block 7: comm syz.6.5364: path /336/file0/file0: bad entry in directory: rec_len % 4 != 0 - offset=259, inode=4278190093, rec_len=255, size=60 fake=0 [ 427.072713][T19258] FAT-fs (loop7): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 427.094861][T19249] netlink: 'syz.6.5364': attribute type 8 has an invalid length. [ 427.204351][T19267] loop1: detected capacity change from 0 to 1024 [ 427.216282][ T3442] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 427.226869][ T3442] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 427.252790][T19267] ext4 filesystem being mounted at /544/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 427.263938][ T30] kauditd_printk_skb: 632 callbacks suppressed [ 427.264008][ T30] audit: type=1400 audit(1755129139.323:44366): avc: denied { create } for pid=19270 comm="syz.7.5370" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 427.295947][T19271] loop7: detected capacity change from 0 to 512 [ 427.306550][ T3442] bond0 (unregistering): Released all slaves [ 427.316773][T19271] ext4 filesystem being mounted at /51/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 427.330589][ T30] audit: type=1400 audit(1755129139.353:44367): avc: denied { write } for pid=19270 comm="syz.7.5370" name="file0" dev="tmpfs" ino=300 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 427.353217][ T30] audit: type=1400 audit(1755129139.353:44368): avc: denied { open } for pid=19270 comm="syz.7.5370" path="/51/file0" dev="tmpfs" ino=300 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 427.376052][ T30] audit: type=1400 audit(1755129139.353:44369): avc: denied { ioctl } for pid=19270 comm="syz.7.5370" path="/51/file0" dev="tmpfs" ino=300 ioctlcmd=0x128a scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 427.410972][T19160] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.431128][ T30] audit: type=1326 audit(1755129139.483:44370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19248 comm="syz.6.5364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9e4c6ebe9 code=0x7ffc0000 [ 427.454867][ T30] audit: type=1326 audit(1755129139.483:44371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19248 comm="syz.6.5364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9e4c6ebe9 code=0x7ffc0000 [ 427.456851][T19222] chnl_net:caif_netlink_parms(): no params data found [ 427.509148][T19271] wireguard0: entered promiscuous mode [ 427.514766][T19271] wireguard0: entered allmulticast mode [ 427.532146][T19160] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.544706][T19280] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5372'. [ 427.558038][ T3442] hsr_slave_0: left promiscuous mode [ 427.565427][ T3442] hsr_slave_1: left promiscuous mode [ 427.571294][ T3442] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 427.578810][ T3442] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 427.584181][T19284] loop6: detected capacity change from 0 to 1024 [ 427.592724][ T3442] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 427.600188][ T3442] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 427.614479][ T3442] veth1_macvtap: left promiscuous mode [ 427.620058][ T3442] veth0_macvtap: left promiscuous mode [ 427.624402][T19286] loop1: detected capacity change from 0 to 2048 [ 427.626954][ T3442] veth1_vlan: left promiscuous mode [ 427.633801][T19284] ext4 filesystem being mounted at /338/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 427.637381][ T3442] veth0_vlan: left promiscuous mode [ 427.674200][ T30] audit: type=1400 audit(1755129139.733:44372): avc: denied { read open } for pid=19285 comm="syz.1.5375" path="/547/file1/bus" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 427.699212][ T30] audit: type=1400 audit(1755129139.733:44373): avc: denied { write } for pid=19285 comm="syz.1.5375" name="bus" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 427.728784][T19294] FAULT_INJECTION: forcing a failure. [ 427.728784][T19294] name failslab, interval 1, probability 0, space 0, times 0 [ 427.741541][T19294] CPU: 0 UID: 0 PID: 19294 Comm: syz.6.5376 Tainted: G W 6.17.0-rc1-syzkaller-00036-gdfc0f6373094 #0 PREEMPT(voluntary) [ 427.741587][T19294] Tainted: [W]=WARN [ 427.741597][T19294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 427.741622][T19294] Call Trace: [ 427.741630][T19294] [ 427.741640][T19294] __dump_stack+0x1d/0x30 [ 427.741665][T19294] dump_stack_lvl+0xe8/0x140 [ 427.741697][T19294] dump_stack+0x15/0x1b [ 427.741716][T19294] should_fail_ex+0x265/0x280 [ 427.741738][T19294] should_failslab+0x8c/0xb0 [ 427.741763][T19294] kmem_cache_alloc_node_noprof+0x57/0x320 [ 427.741857][T19294] ? __alloc_skb+0x101/0x320 [ 427.741896][T19294] __alloc_skb+0x101/0x320 [ 427.741928][T19294] netlink_alloc_large_skb+0xba/0xf0 [ 427.741987][T19294] netlink_sendmsg+0x3cf/0x6b0 [ 427.742015][T19294] ? __pfx_netlink_sendmsg+0x10/0x10 [ 427.742036][T19294] __sock_sendmsg+0x145/0x180 [ 427.742115][T19294] ____sys_sendmsg+0x31e/0x4e0 [ 427.742148][T19294] ___sys_sendmsg+0x17b/0x1d0 [ 427.742191][T19294] __x64_sys_sendmsg+0xd4/0x160 [ 427.742225][T19294] x64_sys_call+0x191e/0x2ff0 [ 427.742253][T19294] do_syscall_64+0xd2/0x200 [ 427.742310][T19294] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 427.742355][T19294] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 427.742407][T19294] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 427.742429][T19294] RIP: 0033:0x7fe9e4c6ebe9 [ 427.742505][T19294] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 427.742528][T19294] RSP: 002b:00007fe9e36d7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 427.742547][T19294] RAX: ffffffffffffffda RBX: 00007fe9e4e95fa0 RCX: 00007fe9e4c6ebe9 [ 427.742560][T19294] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 427.742572][T19294] RBP: 00007fe9e36d7090 R08: 0000000000000000 R09: 0000000000000000 [ 427.742585][T19294] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 427.742673][T19294] R13: 00007fe9e4e96038 R14: 00007fe9e4e95fa0 R15: 00007fffa50d9a28 [ 427.742696][T19294] [ 427.983516][ T3442] team0 (unregistering): Port device team_slave_1 removed [ 427.993429][ T3442] team0 (unregistering): Port device team_slave_0 removed [ 428.038837][T19160] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.058335][T19300] loop6: detected capacity change from 0 to 512 [ 428.065825][T19300] msdos: Unknown parameter 'gh' [ 428.092118][T19222] bridge0: port 1(bridge_slave_0) entered blocking state [ 428.099330][T19222] bridge0: port 1(bridge_slave_0) entered disabled state [ 428.106657][T19222] bridge_slave_0: entered allmulticast mode [ 428.113140][T19222] bridge_slave_0: entered promiscuous mode [ 428.120020][T19222] bridge0: port 2(bridge_slave_1) entered blocking state [ 428.127222][T19222] bridge0: port 2(bridge_slave_1) entered disabled state [ 428.134559][T19222] bridge_slave_1: entered allmulticast mode [ 428.141553][ T30] audit: type=1400 audit(1755129140.193:44374): avc: denied { remove_name } for pid=18497 comm="syz-executor" name="lost+found" dev="loop7" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 428.144689][T19222] bridge_slave_1: entered promiscuous mode [ 428.165067][ T30] audit: type=1400 audit(1755129140.193:44375): avc: denied { rmdir } for pid=18497 comm="syz-executor" name="lost+found" dev="loop7" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 428.176373][T18497] EXT4-fs error (device loop7): ext4_lookup:1787: inode #12: comm syz-executor: iget: bad i_size value: 2533274857506816 [ 428.208645][T18497] EXT4-fs error (device loop7): ext4_lookup:1787: inode #12: comm syz-executor: iget: bad i_size value: 2533274857506816 [ 428.225141][T19300] macsec1: entered promiscuous mode [ 428.230404][T19300] bridge0: entered promiscuous mode [ 428.251658][T19300] bridge0: port 1(macsec1) entered blocking state [ 428.258631][T19300] bridge0: port 1(macsec1) entered disabled state [ 428.267959][T19300] macsec1: entered allmulticast mode [ 428.273311][T19300] bridge0: entered allmulticast mode [ 428.285867][T19300] macsec1: left allmulticast mode [ 428.291021][T19300] bridge0: left allmulticast mode [ 428.297985][T19300] bridge0: left promiscuous mode [ 428.309053][ T41] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.320649][ T41] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.331729][ T41] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.342942][ T41] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.412011][T19222] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 428.426286][T19222] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 428.481737][T19222] team0: Port device team_slave_0 added [ 428.489481][T19311] loop8: detected capacity change from 0 to 128 [ 428.506124][T19313] netlink: 52 bytes leftover after parsing attributes in process `syz.6.5384'. [ 428.509259][T19222] team0: Port device team_slave_1 added [ 428.524182][T19311] ext4 filesystem being mounted at /8/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 428.575068][T19222] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 428.582044][T19222] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 428.608062][T19222] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 428.622365][T19222] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 428.629459][T19222] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 428.655403][T19222] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 428.745557][T19222] hsr_slave_0: entered promiscuous mode [ 428.752358][T19222] hsr_slave_1: entered promiscuous mode [ 428.758541][T19222] debugfs: 'hsr0' already exists in 'hsr' [ 428.764370][T19222] Cannot create hsr debugfs directory [ 428.775185][ T3442] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.865868][ T3442] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.905248][T19327] SELinux: policydb string does not match my string SE Linux [ 428.913220][T19327] SELinux: failed to load policy [ 428.944385][ T3442] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.967776][T19342] loop8: detected capacity change from 0 to 128 [ 428.979836][T19342] ext4 filesystem being mounted at /10/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 429.027504][ T3442] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 429.060567][T19347] loop8: detected capacity change from 0 to 1024 [ 429.068911][T19347] EXT4-fs (loop8): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 429.079946][T19347] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 429.091431][T19347] JBD2: no valid journal superblock found [ 429.097222][T19347] EXT4-fs (loop8): Could not load journal inode [ 429.100998][T19322] chnl_net:caif_netlink_parms(): no params data found [ 429.115482][T19347] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 429.130730][T19347] random: crng reseeded on system resumption [ 429.152343][T19322] bridge0: port 1(bridge_slave_0) entered blocking state [ 429.159583][T19322] bridge0: port 1(bridge_slave_0) entered disabled state [ 429.166795][T19322] bridge_slave_0: entered allmulticast mode [ 429.173348][T19322] bridge_slave_0: entered promiscuous mode [ 429.183550][T19322] bridge0: port 2(bridge_slave_1) entered blocking state [ 429.190666][T19322] bridge0: port 2(bridge_slave_1) entered disabled state [ 429.198015][T19322] bridge_slave_1: entered allmulticast mode [ 429.207001][T19322] bridge_slave_1: entered promiscuous mode [ 429.224535][T19322] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 429.246843][T19322] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 429.270478][T19355] loop8: detected capacity change from 0 to 1024 [ 429.277598][T19355] EXT4-fs: Ignoring removed orlov option [ 429.283322][T19355] EXT4-fs: Ignoring removed nomblk_io_submit option [ 429.297840][T19322] team0: Port device team_slave_0 added [ 429.310650][T19322] team0: Port device team_slave_1 added [ 429.335929][T19355] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5395'. [ 429.350962][T19322] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 429.358006][T19322] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 429.384093][T19322] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 429.395508][ T3442] bridge_slave_1: left allmulticast mode [ 429.401168][ T3442] bridge_slave_1: left promiscuous mode [ 429.406925][ T3442] bridge0: port 2(bridge_slave_1) entered disabled state [ 429.415818][ T3442] bridge_slave_0: left allmulticast mode [ 429.421479][ T3442] bridge_slave_0: left promiscuous mode [ 429.427293][ T3442] bridge0: port 1(bridge_slave_0) entered disabled state [ 429.505389][ T3442] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 429.515596][ T3442] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 429.525484][ T3442] bond0 (unregistering): Released all slaves [ 429.534404][T19322] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 429.541408][T19322] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 429.567344][T19322] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 429.612948][ T3442] hsr_slave_0: left promiscuous mode [ 429.618418][T19371] loop6: detected capacity change from 0 to 2048 [ 429.627626][ T3442] hsr_slave_1: left promiscuous mode [ 429.631338][T19362] openvswitch: netlink: Message has 6 unknown bytes. [ 429.634063][ T3442] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 429.647074][ T3442] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 429.656902][ T3442] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 429.664351][ T3442] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 429.674794][ T3442] veth1_macvtap: left promiscuous mode [ 429.680318][ T3442] veth0_macvtap: left promiscuous mode [ 429.686027][ T3442] veth1_vlan: left promiscuous mode [ 429.691325][ T3442] veth0_vlan: left promiscuous mode [ 429.759607][ T3442] team0 (unregistering): Port device team_slave_1 removed [ 429.769137][ T3442] team0 (unregistering): Port device team_slave_0 removed [ 429.837819][T19322] hsr_slave_0: entered promiscuous mode [ 429.844077][T19322] hsr_slave_1: entered promiscuous mode [ 429.904906][T19222] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 429.925199][T19389] loop8: detected capacity change from 0 to 2048 [ 429.932583][T19222] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 429.953312][T19222] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 429.963809][T19222] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 430.031584][T19222] 8021q: adding VLAN 0 to HW filter on device bond0 [ 430.046333][T19222] 8021q: adding VLAN 0 to HW filter on device team0 [ 430.059651][ T1437] bridge0: port 1(bridge_slave_0) entered blocking state [ 430.066827][ T1437] bridge0: port 1(bridge_slave_0) entered forwarding state [ 430.080357][ T1437] bridge0: port 2(bridge_slave_1) entered blocking state [ 430.087506][ T1437] bridge0: port 2(bridge_slave_1) entered forwarding state [ 430.173569][T19222] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 430.331290][T19322] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 430.350798][T19322] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 430.392169][T19322] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 430.407341][T19322] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 430.477052][T19222] veth0_vlan: entered promiscuous mode [ 430.495506][T19222] veth1_vlan: entered promiscuous mode [ 430.530241][T19322] 8021q: adding VLAN 0 to HW filter on device bond0 [ 430.556208][T19424] loop6: detected capacity change from 0 to 512 [ 430.565449][T19222] veth0_macvtap: entered promiscuous mode [ 430.580158][T19424] ext4 filesystem being mounted at /348/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 430.591219][T19322] 8021q: adding VLAN 0 to HW filter on device team0 [ 430.605982][T19424] wireguard0: entered promiscuous mode [ 430.611574][T19424] wireguard0: entered allmulticast mode [ 430.622230][ T1437] bridge0: port 1(bridge_slave_0) entered blocking state [ 430.629313][ T1437] bridge0: port 1(bridge_slave_0) entered forwarding state [ 430.638707][ T1437] bridge0: port 2(bridge_slave_1) entered blocking state [ 430.645840][ T1437] bridge0: port 2(bridge_slave_1) entered forwarding state [ 430.656789][T19222] veth1_macvtap: entered promiscuous mode [ 430.671200][T19322] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 430.681711][T19322] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 430.707436][T19222] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 430.717937][T19222] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 430.738341][ T1437] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.753815][ T1437] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.762578][ T1437] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.779702][ T1437] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.813411][T14086] EXT4-fs error (device loop6): ext4_lookup:1787: inode #12: comm syz-executor: iget: bad i_size value: 2533274857506816 [ 430.814533][T19322] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 430.845628][T14086] EXT4-fs error (device loop6): ext4_lookup:1787: inode #12: comm syz-executor: iget: bad i_size value: 2533274857506816 [ 430.903547][T19436] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5357'. [ 430.916415][T19436] loop4: detected capacity change from 0 to 512 [ 430.952591][T19322] veth0_vlan: entered promiscuous mode [ 430.961044][T19322] veth1_vlan: entered promiscuous mode [ 431.005315][T19436] EXT4-fs warning (device loop4): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 431.009734][T19322] veth0_macvtap: entered promiscuous mode [ 431.028206][T19322] veth1_macvtap: entered promiscuous mode [ 431.042272][T19322] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 431.052047][T19322] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 431.131202][ T51] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.141744][ T51] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.215331][ T51] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.347571][ T51] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.541088][T19462] loop4: detected capacity change from 0 to 512 [ 431.566035][T19462] msdos: Unknown parameter 'gh' [ 431.600419][T19465] loop1: detected capacity change from 0 to 512 [ 431.615471][T19466] loop2: detected capacity change from 0 to 1024 [ 431.621116][T19465] ext4 filesystem being mounted at /555/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 431.622575][T19466] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 431.642632][T19465] wireguard0: entered promiscuous mode [ 431.648237][T19465] wireguard0: entered allmulticast mode [ 431.660320][T19466] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.5410: Invalid block bitmap block 0 in block_group 0 [ 431.674402][T19466] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.5410: Failed to acquire dquot type 0 [ 431.699903][T19470] bridge0: entered promiscuous mode [ 431.723194][T19470] macsec1: entered promiscuous mode [ 431.729445][T19470] bridge0: port 3(macsec1) entered blocking state [ 431.735978][T19470] bridge0: port 3(macsec1) entered disabled state [ 431.746652][T19466] EXT4-fs error (device loop2): ext4_free_blocks:6696: comm syz.2.5410: Freeing blocks not in datazone - block = 0, count = 4096 [ 431.771043][T19466] EXT4-fs error (device loop2): ext4_read_inode_bitmap:139: comm syz.2.5410: Invalid inode bitmap blk 0 in block_group 0 [ 431.785634][T19470] macsec1: entered allmulticast mode [ 431.790942][T19470] bridge0: entered allmulticast mode [ 431.797904][T19466] EXT4-fs error (device loop2) in ext4_free_inode:361: Corrupt filesystem [ 431.799635][ T3442] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:8: Failed to release dquot type 0 [ 431.822935][T19470] macsec1: left allmulticast mode [ 431.828052][T19470] bridge0: left allmulticast mode [ 431.833806][T19466] EXT4-fs (loop2): 1 orphan inode deleted [ 431.839790][T19470] bridge0: left promiscuous mode [ 431.864915][T19480] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 431.925227][T19463] infiniband syz2: set active [ 431.929969][T19463] infiniband syz2: added bond0 [ 431.954440][T19463] RDS/IB: syz2: added [ 431.958650][T19463] smc: adding ib device syz2 with port count 1 [ 431.964873][T19490] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5415'. [ 431.965025][T19463] smc: ib device syz2 port 1 has pnetid [ 431.974032][T19490] netlink: 28 bytes leftover after parsing attributes in process `syz.8.5415'. [ 432.017746][T11613] EXT4-fs error (device loop1): ext4_lookup:1787: inode #12: comm syz-executor: iget: bad i_size value: 2533274857506816 [ 432.054493][T11613] EXT4-fs error (device loop1): ext4_lookup:1787: inode #12: comm syz-executor: iget: bad i_size value: 2533274857506816 [ 432.130422][T19500] loop4: detected capacity change from 0 to 1024 [ 432.176955][T19500] ext4 filesystem being mounted at /5/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 432.269357][T19504] loop4: detected capacity change from 0 to 512 [ 432.276175][T19504] EXT4-fs: Ignoring removed nomblk_io_submit option [ 432.294449][T19504] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 432.302406][T19504] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=842c01c, mo2=0002] [ 432.317016][T19504] EXT4-fs (loop4): couldn't mount RDWR because of unsupported optional features (80) [ 432.326683][T19504] EXT4-fs (loop4): Skipping orphan cleanup due to unknown ROCOMPAT features [ 432.370459][T19504] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5421'. [ 432.411229][ T30] kauditd_printk_skb: 177 callbacks suppressed [ 432.411308][ T30] audit: type=1400 audit(1755129144.463:44549): avc: denied { append } for pid=19506 comm="syz.4.5422" name="001" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 432.455051][ T26] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 432.464806][ T26] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 432.470685][ T30] audit: type=1400 audit(1755129144.523:44550): avc: denied { mount } for pid=19506 comm="syz.4.5422" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 432.496919][ T30] audit: type=1400 audit(1755129144.523:44551): avc: denied { create } for pid=19506 comm="syz.4.5422" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 432.516689][ T30] audit: type=1400 audit(1755129144.523:44552): avc: denied { write } for pid=19506 comm="syz.4.5422" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 432.536788][ T26] bond0 (unregistering): Released all slaves [ 432.548670][T12547] syz_tun (unregistering): left allmulticast mode [ 432.643422][ T30] audit: type=1400 audit(1755129144.693:44553): avc: denied { execmem } for pid=19511 comm="syz.4.5423" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 432.698358][ T30] audit: type=1400 audit(1755129144.753:44554): avc: denied { create } for pid=19511 comm="syz.4.5423" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 432.723635][ T30] audit: type=1400 audit(1755129144.753:44555): avc: denied { bind } for pid=19511 comm="syz.4.5423" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 432.764576][ T26] hsr_slave_0: left promiscuous mode [ 432.772017][ T26] hsr_slave_1: left promiscuous mode [ 432.779032][T19516] loop2: detected capacity change from 0 to 1024 [ 432.780100][ T30] audit: type=1400 audit(1755129144.833:44556): avc: denied { mounton } for pid=19520 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 432.793389][ T26] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 432.808219][T19516] EXT4-fs: Ignoring removed orlov option [ 432.820046][T19516] EXT4-fs: Ignoring removed nomblk_io_submit option [ 432.836503][ T26] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 432.866889][ T30] audit: type=1400 audit(1755129144.923:44557): avc: denied { setattr } for pid=19515 comm="syz.2.5425" name="file0" dev="loop2" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 432.892630][ T26] team0 (unregistering): Port device team_slave_1 removed [ 432.902534][T19530] loop4: detected capacity change from 0 to 1024 [ 432.914941][ T26] team0 (unregistering): Port device team_slave_0 removed [ 432.931923][ T30] audit: type=1400 audit(1755129144.983:44558): avc: denied { create } for pid=19531 comm="syz.2.5431" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 432.963654][T19534] loop2: detected capacity change from 0 to 1024 [ 432.971523][T19534] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 432.973408][T19530] ext4 filesystem being mounted at /12/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 432.982692][T19534] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 433.006125][T19476] chnl_net:caif_netlink_parms(): no params data found [ 433.017348][T19534] JBD2: no valid journal superblock found [ 433.023155][T19534] EXT4-fs (loop2): Could not load journal inode [ 433.054855][T19534] random: crng reseeded on system resumption [ 433.116056][T19476] bridge0: port 1(bridge_slave_0) entered blocking state [ 433.123314][T19476] bridge0: port 1(bridge_slave_0) entered disabled state [ 433.130597][T19476] bridge_slave_0: entered allmulticast mode [ 433.137612][T19476] bridge_slave_0: entered promiscuous mode [ 433.145866][T19476] bridge0: port 2(bridge_slave_1) entered blocking state [ 433.152968][T19476] bridge0: port 2(bridge_slave_1) entered disabled state [ 433.160446][T19476] bridge_slave_1: entered allmulticast mode [ 433.181397][T19476] bridge_slave_1: entered promiscuous mode [ 433.212703][T19476] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 433.237107][T19476] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 433.268120][T19565] loop2: detected capacity change from 0 to 1024 [ 433.269783][T19563] loop8: detected capacity change from 0 to 1024 [ 433.282789][T19563] EXT4-fs: Ignoring removed orlov option [ 433.288686][T19563] EXT4-fs: Ignoring removed nomblk_io_submit option [ 433.296552][T19476] team0: Port device team_slave_0 added [ 433.305542][T19565] ext4 filesystem being mounted at /10/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 433.323832][T19476] team0: Port device team_slave_1 added [ 433.371510][T19476] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 433.378527][T19476] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 433.404573][T19476] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 433.416289][T19476] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 433.423387][T19476] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 433.449412][T19476] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 433.489334][T19577] loop2: detected capacity change from 0 to 1024 [ 433.523901][T19577] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 433.534872][T19577] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 433.548280][T19577] JBD2: no valid journal superblock found [ 433.554116][T19577] EXT4-fs (loop2): Could not load journal inode [ 433.562821][T19572] infiniband syz1: set active [ 433.567569][T19572] infiniband syz1: added syz_tun [ 433.576901][T19476] hsr_slave_0: entered promiscuous mode [ 433.585220][T19476] hsr_slave_1: entered promiscuous mode [ 433.591436][T19476] debugfs: 'hsr0' already exists in 'hsr' [ 433.594841][T19577] random: crng reseeded on system resumption [ 433.597305][T19476] Cannot create hsr debugfs directory [ 433.616030][T19572] RDS/IB: syz1: added [ 433.638450][T19572] smc: adding ib device syz1 with port count 1 [ 433.644755][T19572] smc: ib device syz1 port 1 has pnetid [ 433.647737][T19520] chnl_net:caif_netlink_parms(): no params data found [ 433.791261][T19520] bridge0: port 1(bridge_slave_0) entered blocking state [ 433.798485][T19520] bridge0: port 1(bridge_slave_0) entered disabled state [ 433.818679][T19520] bridge_slave_0: entered allmulticast mode [ 433.826761][T19520] bridge_slave_0: entered promiscuous mode [ 433.885855][T19520] bridge0: port 2(bridge_slave_1) entered blocking state [ 433.893039][T19520] bridge0: port 2(bridge_slave_1) entered disabled state [ 433.906982][T19520] bridge_slave_1: entered allmulticast mode [ 433.914422][T19520] bridge_slave_1: entered promiscuous mode [ 433.932644][ T26] bridge_slave_1: left allmulticast mode [ 433.938446][ T26] bridge_slave_1: left promiscuous mode [ 433.944261][ T26] bridge0: port 2(bridge_slave_1) entered disabled state [ 433.958657][ T26] bridge_slave_0: left promiscuous mode [ 433.964456][ T26] bridge0: port 1(bridge_slave_0) entered disabled state [ 434.254925][ T26] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 434.266850][ T26] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 434.276751][ T26] bond0 (unregistering): Released all slaves [ 434.311401][T19520] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 434.341177][T19520] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 434.350792][ T26] tipc: Disabling bearer [ 434.364823][ T26] tipc: Left network mode [ 434.405751][T19520] team0: Port device team_slave_0 added [ 434.416770][T19520] team0: Port device team_slave_1 added [ 434.504946][T19520] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 434.511947][T19520] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 434.537997][T19520] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 434.550617][T19601] loop8: detected capacity change from 0 to 1024 [ 434.560199][T19520] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 434.567337][T19520] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 434.593284][T19520] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 434.606927][T19601] ext4 filesystem being mounted at /22/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 434.622263][ T26] hsr_slave_0: left promiscuous mode [ 434.637694][ T26] hsr_slave_1: left promiscuous mode [ 434.646203][ T26] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 434.653924][ T26] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 434.672480][T19610] loop2: detected capacity change from 0 to 128 [ 434.703571][ T26] team0 (unregistering): Port device team_slave_1 removed [ 434.714805][T19610] ext4 filesystem being mounted at /16/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 434.747310][ T26] team0 (unregistering): Port device team_slave_0 removed [ 434.802318][T19476] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 434.822897][T19520] hsr_slave_0: entered promiscuous mode [ 434.829573][T19520] hsr_slave_1: entered promiscuous mode [ 434.840295][T19520] debugfs: 'hsr0' already exists in 'hsr' [ 434.846181][T19520] Cannot create hsr debugfs directory [ 434.857078][T19620] loop4: detected capacity change from 0 to 512 [ 434.865011][T19620] EXT4-fs: Ignoring removed nomblk_io_submit option [ 434.868147][T19622] loop8: detected capacity change from 0 to 2048 [ 434.873234][T19620] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 434.886085][T19620] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=842c01c, mo2=0002] [ 434.894290][T19620] EXT4-fs (loop4): couldn't mount RDWR because of unsupported optional features (80) [ 434.895014][T19476] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 434.903808][T19620] EXT4-fs (loop4): Skipping orphan cleanup due to unknown ROCOMPAT features [ 434.919033][T19620] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5458'. [ 434.932109][T19476] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 434.946557][T19476] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 434.997321][T19631] SELinux: Context Ü is not valid (left unmapped). [ 435.029392][T19640] loop2: detected capacity change from 0 to 1024 [ 435.046917][T19640] ext4 filesystem being mounted at /19/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 435.099227][T19476] 8021q: adding VLAN 0 to HW filter on device bond0 [ 435.111878][T19476] 8021q: adding VLAN 0 to HW filter on device team0 [ 435.130914][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 435.138125][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 435.150295][ T3418] bridge0: port 2(bridge_slave_1) entered blocking state [ 435.157403][ T3418] bridge0: port 2(bridge_slave_1) entered forwarding state [ 435.251141][T19476] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 435.317513][T19520] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 435.349564][T19520] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 435.361416][T19520] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 435.370929][T19520] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 435.436405][T19520] 8021q: adding VLAN 0 to HW filter on device bond0 [ 435.452120][T19520] 8021q: adding VLAN 0 to HW filter on device team0 [ 435.463613][ T3418] bridge0: port 1(bridge_slave_0) entered blocking state [ 435.470997][ T3418] bridge0: port 1(bridge_slave_0) entered forwarding state [ 435.492604][ T3418] bridge0: port 2(bridge_slave_1) entered blocking state [ 435.499776][ T3418] bridge0: port 2(bridge_slave_1) entered forwarding state [ 435.532098][T19476] veth0_vlan: entered promiscuous mode [ 435.544091][T19476] veth1_vlan: entered promiscuous mode [ 435.566204][T19476] veth0_macvtap: entered promiscuous mode [ 435.574529][T19476] veth1_macvtap: entered promiscuous mode [ 435.611027][T19476] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 435.621636][T19520] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 435.631014][T19476] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 435.646612][ T26] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.658479][ T26] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.671651][ T1437] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.692263][ T1437] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.777104][T19686] loop5: detected capacity change from 0 to 512 [ 435.790834][T19520] veth0_vlan: entered promiscuous mode [ 435.803840][T19520] veth1_vlan: entered promiscuous mode [ 435.810958][T19686] ext4 filesystem being mounted at /0/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 435.819040][T19520] veth0_macvtap: entered promiscuous mode [ 435.830008][T19520] veth1_macvtap: entered promiscuous mode [ 435.834659][T19690] loop8: detected capacity change from 0 to 128 [ 435.847236][T19520] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 435.853240][T19690] ext4 filesystem being mounted at /27/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 435.886092][T19686] wireguard0: entered promiscuous mode [ 435.891609][T19686] wireguard0: entered allmulticast mode [ 435.907251][T19520] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 435.918191][ T1437] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.929445][ T1437] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.940098][ T1437] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.949571][ T1437] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.975892][T19696] netlink: 24 bytes leftover after parsing attributes in process `syz.8.5468'. [ 435.997600][T19476] EXT4-fs error (device loop5): ext4_lookup:1787: inode #12: comm syz-executor: iget: bad i_size value: 2533274857506816 [ 436.012430][T19476] EXT4-fs error (device loop5): ext4_lookup:1787: inode #12: comm syz-executor: iget: bad i_size value: 2533274857506816 [ 436.029774][T19699] ref_ctr increment failed for inode: 0x12 offset: 0x0 ref_ctr_offset: 0x82 of mm: 0xffff888109e185c0 [ 436.051473][T19703] loop8: detected capacity change from 0 to 1024 [ 436.061359][T19699] uprobe: syz.0.5426:19699 failed to unregister, leaking uprobe [ 436.072977][T19703] ext4 filesystem being mounted at /30/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 436.127408][T19713] loop2: detected capacity change from 0 to 1024 [ 436.134201][T19713] EXT4-fs: Ignoring removed orlov option [ 436.139922][T19713] EXT4-fs: Ignoring removed nomblk_io_submit option [ 436.161367][T19713] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 436.175930][T19720] loop0: detected capacity change from 0 to 128 [ 436.192889][T19720] ext4 filesystem being mounted at /1/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 436.239411][T19727] loop2: detected capacity change from 0 to 512 [ 436.258051][T19727] ext4 filesystem being mounted at /26/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 436.276471][T19727] wireguard0: entered promiscuous mode [ 436.282140][T19727] wireguard0: entered allmulticast mode [ 436.294565][T19734] loop0: detected capacity change from 0 to 1024 [ 436.306472][T19736] netlink: 40 bytes leftover after parsing attributes in process `syz.8.5482'. [ 436.315108][T19734] ext4 filesystem being mounted at /2/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 436.380484][T19746] loop8: detected capacity change from 0 to 1024 [ 436.394981][T19746] ext4 filesystem being mounted at /37/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 436.421957][T19322] EXT4-fs error (device loop2): ext4_lookup:1787: inode #12: comm syz-executor: iget: bad i_size value: 2533274857506816 [ 436.435468][T19322] EXT4-fs error (device loop2): ext4_lookup:1787: inode #12: comm syz-executor: iget: bad i_size value: 2533274857506816 [ 436.504658][T19758] ================================================================== [ 436.513073][T19758] BUG: KCSAN: data-race in call_rcu / mas_state_walk [ 436.519794][T19758] [ 436.522130][T19758] write to 0xffff8881040c5110 of 8 bytes by task 19757 on cpu 0: [ 436.529861][T19758] call_rcu+0x44/0x3f0 [ 436.533960][T19758] mas_wmb_replace+0xc6a/0x14a0 [ 436.538839][T19758] mas_wr_store_entry+0x1773/0x2b50 [ 436.544067][T19758] mas_store_prealloc+0x74d/0x9e0 [ 436.549123][T19758] vma_iter_store_new+0x1c5/0x200 [ 436.554180][T19758] vma_complete+0x125/0x580 [ 436.558698][T19758] __split_vma+0x5d9/0x650 [ 436.563173][T19758] vma_modify+0x3f2/0xc80 [ 436.567525][T19758] vma_modify_flags+0x101/0x130 [ 436.572390][T19758] mprotect_fixup+0x2cc/0x570 [ 436.577080][T19758] do_mprotect_pkey+0x6d6/0x980 [ 436.581947][T19758] __x64_sys_mprotect+0x48/0x60 [ 436.586821][T19758] x64_sys_call+0x274e/0x2ff0 [ 436.591600][T19758] do_syscall_64+0xd2/0x200 [ 436.596157][T19758] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 436.602110][T19758] [ 436.604528][T19758] read to 0xffff8881040c5110 of 8 bytes by task 19758 on cpu 1: [ 436.612247][T19758] mas_state_walk+0x2f5/0x650 [ 436.616946][T19758] mas_walk+0x60/0x150 [ 436.621044][T19758] lock_vma_under_rcu+0x8d/0x160 [ 436.626016][T19758] do_user_addr_fault+0x233/0x1090 [ 436.631154][T19758] exc_page_fault+0x62/0xa0 [ 436.635751][T19758] asm_exc_page_fault+0x26/0x30 [ 436.640615][T19758] [ 436.642943][T19758] value changed: 0x00007f55c7526fff -> 0xffffffff85643c50 [ 436.650058][T19758] [ 436.652387][T19758] Reported by Kernel Concurrency Sanitizer on: [ 436.658547][T19758] CPU: 1 UID: 0 PID: 19758 Comm: syz.8.5491 Tainted: G W 6.17.0-rc1-syzkaller-00036-gdfc0f6373094 #0 PREEMPT(voluntary) [ 436.672626][T19758] Tainted: [W]=WARN [ 436.676435][T19758] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 436.686500][T19758] ================================================================== [ 436.702799][T19758] loop8: detected capacity change from 0 to 1024 [ 436.711737][T19758] ext4: Unknown parameter 'uid<00000000000000000000' [ 436.722790][T19761] loop8: detected capacity change from 0 to 128 [ 436.846850][ T41] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.945925][ T41] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 437.016911][ T41] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 437.065106][ T41] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 437.150328][ T41] bridge_slave_1: left allmulticast mode [ 437.156057][ T41] bridge_slave_1: left promiscuous mode [ 437.161771][ T41] bridge0: port 2(bridge_slave_1) entered disabled state [ 437.170977][ T41] bridge_slave_0: left allmulticast mode [ 437.176749][ T41] bridge_slave_0: left promiscuous mode [ 437.182421][ T41] bridge0: port 1(bridge_slave_0) entered disabled state [ 437.266157][ T41] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 437.276254][ T110] smc: removing ib device syz2 [ 437.282496][ T41] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 437.292336][ T41] bond0 (unregistering): Released all slaves [ 437.460838][ T41] hsr_slave_0: left promiscuous mode [ 437.466732][ T41] hsr_slave_1: left promiscuous mode [ 437.472309][ T41] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 437.479878][ T41] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 437.488624][ T41] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 437.496086][ T41] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 437.509137][ T41] veth1_macvtap: left promiscuous mode [ 437.514832][ T41] veth0_macvtap: left promiscuous mode [ 437.520397][ T41] veth1_vlan: left promiscuous mode [ 437.526895][ T41] veth0_vlan: left promiscuous mode [ 437.600264][ T41] team0 (unregistering): Port device team_slave_1 removed [ 437.610808][ T41] team0 (unregistering): Port device team_slave_0 removed [ 437.946693][ T41] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.346306][ T41] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.406715][ T41] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.466766][ T41] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.550890][ T41] bridge_slave_1: left allmulticast mode [ 439.556632][ T41] bridge_slave_1: left promiscuous mode [ 439.562300][ T41] bridge0: port 2(bridge_slave_1) entered disabled state [ 439.570925][ T41] bridge_slave_0: left allmulticast mode [ 439.576639][ T41] bridge_slave_0: left promiscuous mode [ 439.582354][ T41] bridge0: port 1(bridge_slave_0) entered disabled state [ 439.685864][ T41] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 439.695836][ T41] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 439.705464][ T41] bond0 (unregistering): Released all slaves [ 439.803462][ T41] hsr_slave_0: left promiscuous mode [ 439.809318][ T41] hsr_slave_1: left promiscuous mode [ 439.816518][ T41] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 439.823954][ T41] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 439.831685][ T41] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 439.839103][ T41] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 439.853740][ T41] veth1_macvtap: left promiscuous mode [ 439.859322][ T41] veth0_macvtap: left promiscuous mode [ 439.866577][ T41] veth1_vlan: left promiscuous mode [ 439.871818][ T41] veth0_vlan: left promiscuous mode [ 439.944872][ T41] team0 (unregistering): Port device team_slave_1 removed [ 439.957019][ T41] team0 (unregistering): Port device team_slave_0 removed