last executing test programs: 1m51.934318413s ago: executing program 0 (id=946): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@updpolicy={0x1fc, 0x19, 0x1, 0x0, 0x0, {{@in6=@private2, @in=@multicast1, 0x0, 0x3, 0x0, 0x0, 0xa, 0x0, 0x20, 0x8}, {0x0, 0x0, 0x0, 0x100000000000000, 0x7, 0x0, 0x0, 0x1d}, {0x0, 0x0, 0x0, 0x2dd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@tmpl={0x144, 0x5, [{{@in=@dev={0xac, 0x14, 0x14, 0x3b}, 0x4d3, 0x2b}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0xc}, 0x0, 0x3, 0x0, 0xff, 0x0, 0x1000}, {{@in=@empty, 0x0, 0x2b}, 0x0, @in=@local, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff}, {{@in6=@ipv4={'\x00', '\xff\xff', @local}, 0x0, 0x3c}, 0x2, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x1, 0x2}, {{@in6=@mcast2, 0x0, 0x3c}, 0x2, @in6=@mcast2, 0x0, 0x2, 0x0, 0x0, 0x401, 0x3, 0x278b6a28}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x32}, 0x2, @in6=@mcast1, 0x0, 0x4}]}]}, 0x1fc}, 0x1, 0x0, 0x0, 0x24040185}, 0x0) 1m51.812348614s ago: executing program 0 (id=947): io_setup(0x3ff, &(0x7f00000000c0)=0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2e, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbf7}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00', r1}, 0x10) r3 = signalfd4(r2, 0x0, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x14, &(0x7f0000000000)={0x0, 0xea60}, 0x42) io_submit(r0, 0x2, &(0x7f00000004c0)=[&(0x7f00000001c0)={0x0, 0x4, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x6, 0x129, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffffc}]) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000140)=@o_path={&(0x7f0000000100)='./file0\x00', r3, 0x4000, r3}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000096ca077900"/20, @ANYRES32=0x0, @ANYBLOB="0000000008290400240012800b000100697036746e6c00001400028006001200"], 0x44}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4000000) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) 1m50.957399278s ago: executing program 0 (id=956): r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1m50.899350419s ago: executing program 0 (id=958): r0 = perf_event_open$cgroup(&(0x7f0000000200)={0x5, 0x80, 0x8, 0x6, 0xe, 0x7, 0x0, 0xf0dd, 0x10c05, 0x6, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, @perf_config_ext={0x6, 0xc257}, 0x10b251, 0xf188, 0x6, 0x0, 0xffffffffffff8089, 0xf5f, 0x557, 0x0, 0x3, 0x0, 0x101}, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x6) perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0x2d, 0x4, 0xfd, 0x0, 0x0, 0x4, 0x514, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={&(0x7f0000000040), 0x8}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0x0, 0x0, 0x4000, 0x0, 0x10001}, 0x0, 0xffffffffffffffff, r0, 0xb) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='gre0\x00', 0x10) sendmmsg$inet(r1, &(0x7f0000001f00)=[{{&(0x7f00000001c0)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f0000001980)=[{&(0x7f0000000200)="a90500040000746400009e150451160200000064", 0x14}, {0x0, 0xfd}], 0x2}}], 0x1, 0x4004040) ioctl$BTRFS_IOC_GET_FEATURES(r1, 0x80189439, &(0x7f0000000300)) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000080), 0x67, 0x52b, &(0x7f0000000a00)="$eJzs3V9rLGcZAPBnNrvHk3NymlS90IK12krOQc9u0tg2eFEriF4V1HpfY7IJIZtsyG7ak1BMDn4AQUQFr/TGG8EPIEjBGy9FKOi1oqKInuqFF9qR2Z1Nc5L913aTTZPfDybzvjPvzPO8G2Z2ZmeYCeDKeiIiXoiIt9I0vRMR0/n0Qj7EYXvI2r354LXlbEgiTV/6RxJJPq2zriQf38wXux4RX/tyxDeT03Ebe/sbS7VadSevV5qb25XG3v7d9c2ltepadWthYf7ZxecWn1mcG0k/b0XE81/8y/e/89MvPf/Lz7z6x5f/dvtbWVpT+fzj/XiHiv1mtrtean0WxxfYeZfBLqJiq4e5yW4tJk5NuX/GOQEA0F12jP/BiPhkRNyJ6ZjofzgLAAAAvA+ln5+K/yYRaXfXekwHAAAA3kcKrXtgk0I5vxdgKgqFcrl9D++H40ahVm80P71a391aad8rOxOlwup6rTqX3ys8E6Ukq8+3ym/Xnz5RX4iIRyPie9OTrXp5uV5bGfePHwAAAHBF3Dxx/v/v6fb5f8fBOJMDAAAARmdm3AkAAAAAZ27Y8/8bZ5wHAAAAcHZc/wcAAIBL7SsvvpgNaef91yuv7O1u1F+5u1JtbJQ3d5fLy/Wd7fJavb7Wembf5qD11er17c/G1u69SrPaaFYae9djs7671Xx5/aFXYAMAAADn6NGPv/77JCIOPzfZGjLXhlt0yGbARVU8KiX5uMtm/YdH2uM/n1NSwLmYGHcCwNgUx50AMDalcScAjF0yYH7Pm3d+k48/Mdp8AACA0Zv9aO/r/4W+Sx72nw1ceDZiuLpc/4erq3X9f9g7eR0swKVSGnQE0HebPxhxNsA4vOfr/wOl6TtKCAAAGLmp1pAUysVOvVAolyNutV4LUEpW12vVuYh4JCJ+N136QFafb7VMBp4zAAAAAAAAAAAAAAAAAAAAAAAAAABtaZpECgAAAFxqEYW/Jr9qP8t/dvqpqZO/D1xL/jMd+StCX/3RSz+4t9Rs7sxn0/95NL35w3z60+P4BQMAAACuhAEv8H9Y5zy9cx4PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKP05oPXljvDecb9+xciYqZb/GJcb42vRykibvwrieKx5ZKImBhB/Mnsz0e6xU+ytI5Cdos/OYL4h/f7xo/D/FPoFv/mCOLDVfZ6tv95odv2V4gnWuPu218x4qH6u9V7/xdH+7+JHtv/rSFjPPbGzys949+PeKx4Kv5BFqETP+kR/8kh43/j6/v7vealP46Y7fr9k3SaZHvIqDQ3tyuNvf2765tLa9W16tbCwvyzi88tPrM4V1ldr1Xzv11jfPdjv3irX/9v9Ig/M6D/T51a27WuMf73xr0HH2oXS93i336yS/xf/yRvcTp+If/u+1RezubPdsqH7fJxj//st4/36/9Kj/4P+v/f7rXSE+589dt/GrIpAHAOGnv7G0u1WnXn0hays/QhG2dHZxciZ4XzKRyMdIVpmqbZNvUe1pPERfhYWoVx75kAAIBRe/ugf9yZAAAAAAAAAAAAAAAAAAAAwNV1Ho8TOxnz8KiUjOIR2gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAI/H/AAAA///s19ky") r2 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) r3 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1b0000000000000000000000040000", @ANYRES32, @ANYBLOB="e90500000400000000000000d7ffffffffffffff", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="05000000000000000500"/28], 0x50) write$binfmt_register(r3, &(0x7f0000000440)={0x3a, 'syz2', 0x3a, 'M', 0x3a, 0x0, 0x3a, 'usrjquota=', 0x3a, '', 0x3a, './file2', 0x3a, [0x46]}, 0x32) fsconfig$FSCONFIG_CMD_RECONFIGURE(r2, 0x7, 0x0, 0xf4ffffff, 0x0) 1m50.63631473s ago: executing program 0 (id=962): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) io_setup(0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x5, 0x2000000000000217, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xc94284a3061bb7fe, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000240)=0x7) setpgid(0x0, r1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000ac0)={&(0x7f0000000b00)='kmem_cache_free\x00', r0, 0x0, 0x1034}, 0x18) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000000), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) sendmsg$can_bcm(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r3}, 0x10, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0000000000000f42", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000004"], 0x20000600}}, 0x0) 1m50.520563131s ago: executing program 0 (id=964): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000900)={&(0x7f0000000380)='kmem_cache_free\x00', r1}, 0x18) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) socket$inet6(0xa, 0x3, 0x3a) write$tun(r2, &(0x7f0000000f00)=ANY=[@ANYBLOB="000086dd0000110000080000000060ec970000382cc7fe8000000000000000000000400000aaff0200000000000000000000000000013a"], 0x6e) recvmsg(0xffffffffffffffff, 0x0, 0x0) 1m50.519743341s ago: executing program 32 (id=964): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000900)={&(0x7f0000000380)='kmem_cache_free\x00', r1}, 0x18) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) socket$inet6(0xa, 0x3, 0x3a) write$tun(r2, &(0x7f0000000f00)=ANY=[@ANYBLOB="000086dd0000110000080000000060ec970000382cc7fe8000000000000000000000400000aaff0200000000000000000000000000013a"], 0x6e) recvmsg(0xffffffffffffffff, 0x0, 0x0) 1m34.742738607s ago: executing program 3 (id=1199): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f3bbb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68000000000000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465a932b77a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900ff0000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80af740b5b7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48bc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd3170400000085be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890cec55bf404e4e1f74b7eed82571be54c72d978cf906df08f11f1c4042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9f0390a6f01e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5eaff07000000000000b99c9cc0ad1857216f000000009191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a798de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270b939b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf01cfaed9ef0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546bb2e51935ab9067ec3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f626602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df902aeec50e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd6d89f80a4377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f000000000100000000d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fb03b84f63e022fe755f4007a4a899eaf52c4f491f1e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c7167d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c2499ce3ffe2fef03f7cdd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba3c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63e4581d5cc41cbde2ba66adc1168070c8c6e18a6a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c3340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b909006f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f1400010000ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1b0100448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f949170ef8cb9c13c12138116bca7a8c59363799be7005c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2c74664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677eff7c5c568a89d6e36b165c39132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae1676384ff799783f55d7e5a1a0920300000000000000d98440c355927629f2bcf9dc405a18ca0264400abf38e90000000000000000008faf2cddffbfa69bf32eb718e88ec75603ed7c7a8825ce0f27a114bd7a4ab74d0c7b8d90ccc1c3ca6620def782e24d75aed70eb676437f62677a69e0994cd82d72e95493c830fe9515329f40b7025326dec33a527c5d999298eaa3690fd0d38a02fc6e0bc16dbe19f353027edc014411e1138087221492f5d5e5cc9d0a1acd3f581eda9a807aa0e609f935f626d96351e0ff116686cbeb8939feecd5dac8cf45101942cc7cec21b7f337df5431bcf7e504b7c427f70a10e1cb8993a661306a0576b638a0171e6800b5b35589d676eb30ed1a72e8f7b057eb281c4504195635b6b285ebaba019913a2520e43ed790231f047f7d3789c10ae7d724929f77aec1d33d9587580268ee14396f71e7ef588cb2560d6bd0795a9b97281229eb16de086553469fad7214ffc3e416f8b8e442dce1d37f9b1c88a5d8a8d9f2fe45bd8df213ecb4194c8554aea13cadcd502e51f6fec80418e772b5bd8d0228949058038b185909ee542848680f9ad43f4057d676d5e21ae3d7e0e4a28c04f112a94707f032b35915e42993ff148291b8babe026646ee41905992db217561b90811c4702a14f312fe5d2ae7257db6be1034cc1c346b76a853ce274bf0435e18f7e86c660c18c80f30505dd4cf2ae2a1893b83c62d61bfeadc1f913e4cab2b897e096dd3fe3525090410cb23bab36cdf200a36014032cf6e5121803c5a0c4a273a19f340163fc6265425d513a1294b8439276394945d94a589708e32a1cb30f1fa4b2f08e01dc5e8c6732e6dc59b5c8cb400000000000000592c9b68f09c8f5ddb20b4ae08b4d9df548e5ed6cd47b91a4bea8b6aa52edf64576aef1e43f2958437fdc20fbbd0d4e13d8cce1193b2f9b4f107e25af178d056e1b1e40bd75b013f7484fae0bc447b1ffaf34819fe3ad1a634c94345e26e1e68dec08723a37b05d1594a66a4718a51d4d67fc880c9d640f4eacc509873f1a103c87f69"], &(0x7f0000000100)='GPL\x00'}, 0x41) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x404, &(0x7f0000000440)={[{@errors_remount}, {@resuid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@barrier}, {@lazytime}, {@quota}]}, 0x1, 0x42f, &(0x7f0000000940)="$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") ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @dev}, {0x306, @local}, 0x48, {0x2, 0x0, @dev}}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x200) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) renameat2(0xffffffffffffff9c, &(0x7f0000000600)='./file1/file4/file5\x00', 0xffffffffffffff9c, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00'}) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="3b0000cee0853a43546b5302ce89aafa30a41a00", @ANYRES16=r1, @ANYBLOB="010000000000000000001a0000000c00018008000100", @ANYRES32=r5, @ANYRESHEX=r2], 0x20}, 0x1, 0x0, 0x0, 0xc040}, 0xc001) 1m34.386345098s ago: executing program 3 (id=1205): syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000440)=ANY=[@ANYRESHEX=0x0], &(0x7f0000000140)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/cgroup.procs\x00', 0xa0142, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00'}, 0x18) r2 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r2, &(0x7f0000000600)=[{{&(0x7f0000000680)={0x2, 0x4e32, @local}, 0x10, 0x0, 0x0, 0x0, 0x80}}, {{&(0x7f00000010c0)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f00000012c0)=ANY=[], 0x28}}], 0x2, 0x4000004) preadv(r1, &(0x7f00000006c0)=[{&(0x7f0000000a40)=""/247, 0xf7}], 0x1, 0xc, 0xcb) r3 = socket$key(0xf, 0x3, 0x2) r4 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') write$binfmt_format(r5, &(0x7f0000000700)='-1\x00', 0x3) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0xb, &(0x7f0000005300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000005c0)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x41, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x29}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r6}, 0x10) write$UHID_CREATE(r4, &(0x7f0000000a00)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000300)=""/18, 0x12, 0x3, 0x0, 0xd1, 0x0, 0xc04}}, 0x120) write$UHID_DESTROY(r4, &(0x7f0000000040), 0x4) sendmsg$key(r3, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="020300030f000000000700000000000005000900e000000001d78771b90bd8a3b4914783c587c7ab18285f7a55d53e6e9bfdac550000000003000600000000000200000000000000000000060000000002000100000000000000020d00000000030005000000000002"], 0x78}, 0x1, 0x7}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYRES8=r4], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = inotify_init1(0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r8, &(0x7f0000000100)={0xa, 0x4e22, 0x6}, 0x1c) listen(r8, 0x3) setsockopt$SO_BINDTODEVICE(r8, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f00000008c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c2000001080045200028006500000f06907864010101ac1414aa00004e22", @ANYBLOB="7a3c146e07319a36bfd9ded8175e8a5d3581949618a01e5278fe42e5eb9ae73324b24199c923abad8fb9e3188b09b2f142556763971625e35918290b07cf534ffab18ba41323f53cf1c487ffd349e303671cffb1d0b101f54cec27454e0698a654929ecd92a9ed13007abcd9fb763f0f69198ad9770224e8bff8d127299390ae58b7c0fe2f31af1b51c7c50ca0b2f77d1a2f0b8deca78156361966661402df2108079846b9d1966609", @ANYRES32=0x41424344, @ANYRESDEC=r3], 0x0) syz_emit_ethernet(0x36, 0x0, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x1) inotify_add_watch(r7, &(0x7f00000000c0)='.\x00', 0xa4000061) read(r7, &(0x7f0000002040)=""/76, 0x4c) open(&(0x7f00000001c0)='.\x00', 0x30000, 0xa5) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) 1m33.740562302s ago: executing program 3 (id=1211): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000040), 0x81, r1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r2, 0x0, 0x6}, 0x18) ioctl$TIOCMIWAIT(r0, 0x5453, 0x0) (fail_nth: 5) 1m33.685257312s ago: executing program 3 (id=1214): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f0000000080), 0x1, 0x519, &(0x7f0000000340)="$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") open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[@ANYBLOB="20000000020000000b"], 0x8840) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000240), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000c0000004300000040000000c0"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100), &(0x7f00000001c0), 0x10f0, r4}, 0x38) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r5], 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x10) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0), &(0x7f0000000640), 0x16c5, r4}, 0x38) getsockname$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000002c0)=0x14) sendmsg$FOU_CMD_GET(r2, &(0x7f0000000900)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000300)={&(0x7f0000000880)={0x74, r3, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_PEER_V6={0x14, 0x9, @dev={0xfe, 0x80, '\x00', 0x1a}}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x3b}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @local}, @FOU_ATTR_PEER_V4={0x8, 0x8, @local}, @FOU_ATTR_IFINDEX={0x8, 0xb, r7}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e24}]}, 0x74}}, 0x4040000) r8 = syz_clone(0x23802400, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r8, 0x0) fcntl$lock(r1, 0x25, &(0x7f0000000040)={0x0, 0x3, 0x8, 0x9, r8}) 1m33.265722125s ago: executing program 3 (id=1220): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000140)="5500000018007f5f00fe01b2a4a2809302060000fd41fd01020400000a00120002002800000019002d007fffffff0022de1330d54400009b84136ef75afb83de066a5900e1baac968300000000f2ff000001000000", 0x55}], 0x1, 0x0, 0x0, 0x7a000000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000bf080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) syz_read_part_table(0x5d8, &(0x7f0000000000)="$eJzs2z9ok2kcB/BfqiF3OrgIBy6nDg6HHCiOZlBJoqKQi3aRGxQUETNFECIXEHTQDIoZxNFFhCz9MzXN0Kmlhc690qFHoUOXO9ql0KU5Qp9yUG64QHogfD7w8uN53u/z/J4H3vUNvmkj8Vev18tERC8X8d2Aq0fbheKN0+UrlbsRmf5m8fvPP/zSf/NjSvR37Tubxqtp/OXzse7brevZ9sqd7XP3Z5sj+8eJiJcRcfxrZ3QY9+NwjeXnTrx6XSu9q+efLJca62+WFm+PbxYqnVvN1sTN7LWHKTef6tFUn0U9XsTTeBDVqMajqA2p/6f22oXdU6X21OPLO8Xu+5mLKVf+Z8mgH/lA/Z+f+XCv1bh6fvLkx0v16YXKxpG9XDU3zK4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAByWsfzciVeva6V39XwuItbfLC3eHt8sVDq3mq2Jm9lrD1NuPtWjqT6LeryIp/EgqlGNR1Hb37DX+y9tv/+X/k+WS431T+21C7unSu2px5d3it33MxdTrjysCx9wsP/zMx/utRpXz0+e/HipPr1Q2Tiyl6vmDukAAAAAAAAAAAAAAAAAAAAAEBGF4o3T5SuVuxGZ+DUifvrzt5H+fC/9755JubOprqb5L5+Pdd9uXc+2V+5sn7s/2/wjzb9Mz/GvndH//TIM7O8AAAD//84vlKM=") 1m32.101744001s ago: executing program 3 (id=1235): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r0}, 0x18) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702000000b7040000000000008500000058"], 0x0}, 0x94) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1d, 0xc, &(0x7f0000000280)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x18) close(0xffffffffffffffff) (async) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) close(0xffffffffffffffff) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8923, &(0x7f00000000c0)={'bond_slave_0\x00', @random="013301300508"}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000300)=ANY=[@ANYRESDEC, @ANYRESHEX=0x0, @ANYRESDEC], &(0x7f0000000080)='GPL\x00', 0x10000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb}, 0x94) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, 0x0) (async) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) unshare(0x2040400) (async) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000000)='./bus\x00', 0x2000404, &(0x7f00000007c0)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYRES64=0x0, @ANYRESHEX, @ANYRESHEX, @ANYRESDEC], 0x1, 0x2b8, &(0x7f0000000ac0)="$eJzs3NFLU38Yx/Hn5/y5OdEtiKCgeqibuhm6/oAaoRANCnNSXQTHPKux0ybnDGMRuZvotr9DuuwuqP4Bb6Kb7ruTIOjGi+gbnrPpmU6durml7xfIeXae74fzdZvybLCt3n/7rJj3UnmrIgMxlQGRmqyJJNeruv/qxwG/HpKwmlwd+fXt/L0HD29nstnJadWpzMy1tKqOXfz4/OW7S58rI7Pvxz5EZSX5aPVn+vvK0MrZ1T8zTwueFjwtlStq6Vy5XLHmHFvnC14xpXrXsS3P1kLJs92mft4pLyxU1SrNj8YXXNvz1CpVtWhXtVLWiltV64lVKGkqldLRuJxsg22syS1PT1uZHdsm0tEdoeuGW5103UytdTO3fAR7AgAAfWb3+T+Y9Xee/7OzwXE/8/+Zved/Eeb/Lqk13dpj/sex4LoZK17/+23G/A8AAAAAAAAAAAAAAAAAAAAAwL9gzZiEMSaxfqyf8m9HRSQmIqbe7/E20SXhx9+EfvZ4/K/3aLvosNAH92IizpvF3GIuOAb9TF4K4ogt45KQ3/7zoS6op25lJ8fVl5RPzlI9v7SYi0i0kW9ItspfODUR5LU5/7/Ew9dPS0JOt75+umV+SK5cDuVTkpAvj6Usjsz7z+vN/KsJ1Zt3slvyw/46AAAAAACOg5Ru2Pb63e/7C2KyvR/kQ+8PGGOWdnt/YMvr60E5185XVAIAAAAAgEPzqi+KluPY7gGKqIgcIt75whiR3m8jIv1xbzQXN0SkD7ZxVEVMRIIzepD4j414WynTxppBEen53bKPotf/mQAAAAB02ubQv4/Q19dd3BEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACdPu98H1li/rdVo7BIPXS5y5L8gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0Ef+BgAA//+4IRyf") prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x972, &(0x7f0000006680)) (async) r4 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) fsync(r4) (async) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/resume', 0x169a82, 0x109) sendfile(r5, r5, 0x0, 0xb) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000008500000023000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r6}, 0x10) (async) r7 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x458, 0x0, 0x2b8, 0xb0000010, 0x2, 0x5c8f0200, 0x388, 0x3a8, 0x3a8, 0x388, 0x3a8, 0x3, 0x0, {[{{@ipv6={@private1, @local, [], [], 'vlan1\x00', 'veth0_to_team\x00'}, 0x0, 0x248, 0x290, 0x700, {}, [@common=@inet=@hashlimit3={{0x158}, {'geneve1\x00', {0xf1, 0x0, 0x33, 0x0, 0x10000000, 0x1, 0x7fffffff}}}, @common=@unspec=@limit={{0x48}, {0x0, 0x3}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x206, 'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b8) 1m32.003758871s ago: executing program 33 (id=1235): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r0}, 0x18) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702000000b7040000000000008500000058"], 0x0}, 0x94) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1d, 0xc, &(0x7f0000000280)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x18) close(0xffffffffffffffff) (async) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) close(0xffffffffffffffff) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8923, &(0x7f00000000c0)={'bond_slave_0\x00', @random="013301300508"}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000300)=ANY=[@ANYRESDEC, @ANYRESHEX=0x0, @ANYRESDEC], &(0x7f0000000080)='GPL\x00', 0x10000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb}, 0x94) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, 0x0) (async) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) unshare(0x2040400) (async) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000000)='./bus\x00', 0x2000404, &(0x7f00000007c0)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYRES64=0x0, @ANYRESHEX, @ANYRESHEX, @ANYRESDEC], 0x1, 0x2b8, &(0x7f0000000ac0)="$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") prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x972, &(0x7f0000006680)) (async) r4 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) fsync(r4) (async) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/resume', 0x169a82, 0x109) sendfile(r5, r5, 0x0, 0xb) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000008500000023000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r6}, 0x10) (async) r7 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x458, 0x0, 0x2b8, 0xb0000010, 0x2, 0x5c8f0200, 0x388, 0x3a8, 0x3a8, 0x388, 0x3a8, 0x3, 0x0, {[{{@ipv6={@private1, @local, [], [], 'vlan1\x00', 'veth0_to_team\x00'}, 0x0, 0x248, 0x290, 0x700, {}, [@common=@inet=@hashlimit3={{0x158}, {'geneve1\x00', {0xf1, 0x0, 0x33, 0x0, 0x10000000, 0x1, 0x7fffffff}}}, @common=@unspec=@limit={{0x48}, {0x0, 0x3}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x206, 'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b8) 1m19.917217057s ago: executing program 6 (id=1371): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x2000000, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001080)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000088500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) socket$kcm(0x10, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x39) socket$inet(0x2, 0x4000000000000001, 0x0) r3 = socket$inet(0x2, 0x801, 0x0) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) shutdown(r3, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000cc0)='kmem_cache_free\x00'}, 0x18) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)=ANY=[@ANYBLOB="04010000100007000000000000000000ff020000000000000000000000000001e00000020000000000000008000000004e200000000000000000000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000002b000000fc00000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000001000000000feffffffffffffff0951000001000000090000000000000000000000000000000000200000000000070000000000000000000000000000000000040000000000e80a000000000000000000000a000200700000000000100014000e"], 0x104}}, 0x0) 1m19.674853568s ago: executing program 6 (id=1372): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='\v\x00\x00'], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x2, 0x1) r2 = socket(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001a80)}], 0x1}, 0x894) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x2) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, 0x0) sched_setscheduler(0x0, 0x2, 0x0) getpid() bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={0x0}, 0x18) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {0x3}, {}, {0x2, 0x1}}, [@TCA_RATE={0x6, 0x5, {0xa2, 0x1c}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40098}, 0x4000000) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xfffffffffffffe54, 0x0, 0x1, 0x0, 0x0, 0x14}, 0x4010) sendmsg$inet(r1, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0xffff, @remote}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000180)="08007715e050e9ce", 0x8}, {0x0}], 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101027f00000100000000001c00000000000000000000002a"], 0x40}, 0x20000000) openat$selinux_policy(0xffffffffffffff9c, 0x0, 0x0, 0x0) unshare(0x2020600) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) 1m19.38209139s ago: executing program 6 (id=1375): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) listen(0xffffffffffffffff, 0x0) r1 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r1, 0x0, 0x0) sendto$l2tp(r1, &(0x7f0000000280), 0x0, 0x8000, &(0x7f0000000240)={0x2, 0x0, @loopback}, 0x10) recvfrom$l2tp(r1, 0x0, 0x0, 0x60, 0x0, 0xfffffffffffffe56) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000780)='./file0\x00', 0x0, &(0x7f00000007c0), 0x1, 0x74c, &(0x7f0000000f40)="$eJzs3E9rHPUbAPBnpknbX5ufG8GDeBIqVqjdpKnakxDxXCj0BdSwmYSQSTZkN7WJAVsPHgRBRfBPL/oOvCiCl9L3oAjeFDwIWtN4EDyszGST6nY3jc2frfXzgck83+/uzvM8u8OXDOxsAP9ZTxZ/koihiLgQEZX2fBoRh8voaMTVjefdXlutra+t1pJotS7eSoqXlXObx0ra++NRviQej4ibgxGn3rg7b2N5ZXYiz7PF9nikObcw0lheOT0zNzGdTWfzY6OjZ8++MPb8c6N71uvbr332y1tfvvz1x+fm/njx1rOTSYyXfUdHH3tp4z0ZjPGO+fn9SNZHrVar1e8aAAC4t7T87zRioNxX4lAZ9XT04CoDAAAA9krrSAsAAAB46CXR7woAAACA/bX5PYDba6u1ze0gv3/w80sRMXzn3uL1rfwD5T3EEUfL+xOOrSd/uzMh2XgZ7MrVaxFxY7zL+Z+0z7/713nnerLL47H3bhTrz3i39S/dWn+iy/ozsPnbCbu0uf6t37X+3cl/qMf6d2GHOY4snvymZ/5rEU8MdMufbOVPeuR/ZYf5Px/67vtej7U+jTgZ3fP/Ndc2vw8xMjWTZ+2/XXOc+OL1U9v1f6xX/mSj/7RH/ws77P+H62PTvdaSIv8zJ7b//Lu9/8U58U67jqK+d9v7YvxeR46nb45+tF3/kz36v9fn/8kO+//qzZUfd/hUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKKURMRRJWt2K07RajTgeEY/FsTSvN5qnpupL85PFYxHDMZhOzeTZaERUNsZJMT5TxnfGYx3jsxHxaES8X/lfOa7W6vlkv5sHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgy/GIGIokrUZEGhG/VdK0Wu13VQAAAMCeG+53AQAAAMC+c/0PAAAADz/X/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMABuHD+fLG11tdWa8V48vLy0mz98unJrDFbnVuqVWv1xYXqdL0+nWfVWn3uXsfL6/WFczG/dGWkmTWaI43llUtz9aX55qWZuYnp7FI2eCBdAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8E8NlVuSViMiLeM0rVYj/h8RwzGYTM3k2WhEPBIR31YGjxTjM/0uGgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgD3XWF6ZncjzbFGwi6BWeyDK+FcGh+KBKEPQEfR7ZQIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoB8ayyuzE3meLTb6XQkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD9lf6URESxnaw8NdT56OHk90q5j4hXr1/84MpEs7l4ppj/dWu++WF7fqwf9QMAAACdNq/TN6/jAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdqqxvDI7kefZ4j4G/e4RAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4P38GAAD///gGznk=") 1m19.167823191s ago: executing program 6 (id=1380): r0 = syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000280)={[{@noload}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x5}}, {@bh}, {@noload}, {@data_err_ignore}, {@usrjquota}]}, 0xfe, 0x44d, &(0x7f0000000900)="$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") openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x141842, 0x0) mount(&(0x7f00000001c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x19000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x400, 0x0, 0x0, 0x1, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000000000000c00002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b73267c1001c2082204a1b00b9000e00f0bc00f0ffffff1ef3ff4000fbffffff", [0x4]}) openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x601c2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="18020000000000000000000000000000bf00010001d20d9ee1a50e5053ffd446"], &(0x7f0000000280)='GPL\x00'}, 0x94) ftruncate(r0, 0x5) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000400)) r2 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(r2, 0x0, &(0x7f0000005100)=0x3ff) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, 0x0, 0x310) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000440)={&(0x7f0000000780)=ANY=[], 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x4800) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2b, &(0x7f00000005c0)={0x100004, {{0xa, 0x0, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8000}}, {{0xa, 0x4e24, 0xb50, @empty, 0x80}}}, 0x108) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x20010, 0xffffffffffffffff, 0xfb024000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, &(0x7f0000000400)=0xa) connect$unix(r3, &(0x7f000057eff8)=@abs={0x1, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f0000005040)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000017c0)=""/199, 0xc7}], 0x1, &(0x7f00000018c0)=""/121, 0x79}, 0x4}, {{&(0x7f0000001940)=@ax25={{0x3, @null}, [@default, @netrom, @remote, @rose, @null, @bcast, @bcast, @default]}, 0x80, &(0x7f0000002d80)=[{&(0x7f00000019c0)=""/237, 0xed}, {&(0x7f0000000500)}, {&(0x7f0000001ac0)=""/139, 0x8b}, {&(0x7f0000000580)=""/15, 0xf}, {&(0x7f0000001b80)=""/223, 0xdf}, {&(0x7f0000002d00)=""/81, 0x51}], 0x6, &(0x7f0000001c80)=""/26, 0x1a}, 0x234c}, {{&(0x7f0000002e00)=@qipcrtr, 0x80, &(0x7f0000004fc0)=[{&(0x7f0000002e80)=""/136, 0x88}, {&(0x7f0000002f40)=""/85, 0x55}, {&(0x7f0000002fc0)=""/4096, 0x1000}, {&(0x7f0000003fc0)=""/4096, 0x1000}], 0x4, &(0x7f0000005000)=""/25, 0x19}, 0x10001}], 0x3, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000500)='sched_switch\x00'}, 0x18) sendmsg$AUDIT_SET(r3, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x4040001}, 0x0) r5 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_int(r5, 0x29, 0x19, &(0x7f0000000000)=0x84, 0xfde1) lstat(&(0x7f0000005140)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0/file0/file0\x00', &(0x7f0000000700)) 1m18.635832594s ago: executing program 6 (id=1396): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000700000045000000a400020095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000b80)=ANY=[@ANYBLOB="84010000100001000000000000000000ac1e0101000000000000000000000000fe8000000000000000000000000000aa2000000020000000000000005c000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fe8000000000000000000000000000bb000000146c008f00fc000000000000000000000000800000000000000000000000000000080000000000000000000000fffffffff7ffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000008000000000020004060c00000000000000480003"], 0x184}, 0x1, 0x0, 0x0, 0x400c050}, 0x0) 1m18.333202815s ago: executing program 6 (id=1406): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x2000000, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x40) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x1f, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0x6000000}, 0x8000) 1m18.332979535s ago: executing program 34 (id=1406): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x2000000, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x40) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x1f, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0x6000000}, 0x8000) 1m10.428630628s ago: executing program 4 (id=1511): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000000)='kmem_cache_free\x00', r0, 0x0, 0xd4}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="d400000000010104000006000000000002000000240001801400018008000100e000000108000200ac1414400c0002800500010000000000240002801400018008000100e000000108000200e00000010c0002800500010000000000080007400000000070000d801400080000000000000000000000000000000000080001"], 0xd4}}, 0x0) 1m10.303974099s ago: executing program 4 (id=1515): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(0x0, r0) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000040)=0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000000000000800001b718110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000001a80)={0x1, 0x1, 0x5, 0xfffffffffffffffc}) fstat(0xffffffffffffffff, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r5, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000f1414ac03000000400001802c0004001400010002000000ac14140f00000000000000001400020002000000ffffffff00000000000000000d0001007564703a73"], 0x54}}, 0x0) 1m9.865735611s ago: executing program 4 (id=1525): r0 = socket(0x1e, 0x805, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) io_setup(0x8, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000002c0)={0x0, 0x0}) sched_setscheduler(r2, 0x6, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs={0x0, 0x0, 0x40}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff}) setsockopt$XDP_UMEM_COMPLETION_RING(r5, 0x11b, 0x6, &(0x7f0000000280), 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) r7 = openat$cgroup_freezer_state(r6, &(0x7f0000000080), 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) sendfile(r7, r7, 0x0, 0x8000002) connect$tipc(r0, &(0x7f00000003c0)=@id={0x1e, 0x3, 0x0, {0x4e21, 0x3}}, 0x10) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x3, {0x1, 0x3, 0x1}}, 0x10) close(r0) 1m8.700247508s ago: executing program 4 (id=1544): perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x3fe000000000, 0x6}, 0x0, 0xe, 0x0, 0x6, 0x8, 0x20005, 0x40b, 0x0, 0x0, 0x0, 0x20000006}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000006c0)='./file2\x00', 0x0, &(0x7f0000000700)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@max_batch_time={'max_batch_time', 0x3d, 0xac7}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@errors_remount}, {@nodelalloc}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x5, &(0x7f00000005c0)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kfree\x00', r4}, 0x18) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x404c011}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000000900020073797a310000000008000440000000000900010073797a30000000000800034000000007"], 0x64}}, 0x0) r5 = add_key$keyring(&(0x7f0000000a80), &(0x7f0000000ac0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, r5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYRESOCT=r1, @ANYRESOCT=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x1c, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x10) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x210000000013, &(0x7f00000000c0)=0x6, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f0000000100)='cdg', 0x3) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000780)={'vcan0\x00', 0x0}) bind$can_j1939(0xffffffffffffffff, &(0x7f00000000c0)={0x1d, r8}, 0x18) connect$can_j1939(0xffffffffffffffff, &(0x7f0000000140)={0x1d, r8}, 0x18) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000006c0)={'batadv_slave_1\x00'}) getsockopt$PNPIPE_IFINDEX(r4, 0x113, 0x2, &(0x7f0000000700), &(0x7f0000000740)=0x4) socket$packet(0x11, 0x3, 0x300) 1m8.415237379s ago: executing program 4 (id=1551): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="160000000000000005000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$msdos(&(0x7f0000000080), &(0x7f0000000a80)='./file1\x00', 0x8000, &(0x7f00000025c0)=ANY=[@ANYBLOB="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"], 0x3, 0x15e, &(0x7f00000001c0)="$eJzs27+KE1EUB+AzSdSoTWqxGLCxCmplqUgEcUBRUmilEG0SCZhmtAo+ia0PJ0iqFMIVHUlijMj+mZ3dzfc1OfDjhnuKO5czMK+uvxuPprO306eL6GZZdO5FHsssetGKdlTmAQCcJ8uU4ltKKV2ax+XPkVJqekcAQN3c/wCwf/57/99taGMAQG3M/wCwf56/ePn4flEMnuV5N+LrvByWw+q3yh8+Kga38l9661WLshy2V/ntKs//zC/Eld/5nZ35xbh5o8p/Zg+eFFv51RjV3z4AAADshX6+snO+7/f/zlsb6zfeD2zN75241jmZHgCAg5l9+Dh+PZm8ea9QnNHie0rpEMs/famOwCnp4niLLCKO9j9NP5mAuq0PfdM7AQAAAAAAAAAAAAAA/qXer5HaTbcHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAO/0IAAD//yX+TAI=") r3 = open(&(0x7f0000000180)='./file1\x00', 0x4342, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x110e22fff7) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x49}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x18) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) ftruncate(r3, 0x200) sendfile(r3, r3, 0x0, 0x800000009) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08210340000000045c0000000e0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe8}}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x1ffffdc1, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000ff0018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r7}, 0x10) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$TIOCMIWAIT(r8, 0x5453, 0x0) 1m8.100679341s ago: executing program 4 (id=1555): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0xfffffffffffff001}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000120000000000a03000000800000000000070000000900010073797a30000000007c000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d38001280140001800c000100636f756e7465720004000280200001800e000100636f6e6e6c696d69740000000c00028008000140000000080800034000000110"], 0xc4}}, 0x20050890) 1m8.055905581s ago: executing program 35 (id=1555): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0xfffffffffffff001}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000120000000000a03000000800000000000070000000900010073797a30000000007c000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d38001280140001800c000100636f756e7465720004000280200001800e000100636f6e6e6c696d69740000000c00028008000140000000080800034000000110"], 0xc4}}, 0x20050890) 42.233636811s ago: executing program 7 (id=2053): r0 = fsopen(&(0x7f0000000100)='hugetlbfs\x00', 0x0) (async, rerun: 64) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) (rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x7fff}, 0x18) (async) syz_usbip_server_init(0x2) (async) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) (async) r3 = fsmount(r0, 0x0, 0x0) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r5}, 0x10) (async, rerun: 32) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50) (async, rerun: 32) fchdir(r3) (async) r6 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r8}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r7}, &(0x7f0000000000), &(0x7f0000000180)=r8}, 0x20) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000000)={[{@errors_remount}, {@grpquota}]}, 0x4, 0x4f2, &(0x7f0000000a40)="$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") (async) r9 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x0) ioctl$FS_IOC_SETFLAGS(r9, 0x40086602, &(0x7f00000005c0)) (async) ioctl$EXT4_IOC_MIGRATE(r9, 0x6609) fcntl$setlease(r6, 0x400, 0x2) (async) acct(&(0x7f0000000240)='./file0\x00') 42.024535243s ago: executing program 7 (id=2058): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001000000000000000000e0000002000000000000001000000000ff02000000000000000000000000000100000008000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000fe090000000000000000000000804000020000000000000800000000000000000000000000000000440005000a010101000000000000000000000000000000003c000000000000007f0000010000000000000000000000000200000004"], 0xfc}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=ANY=[@ANYBLOB="ec00000021000100000000002e000000fc020000000000000000000000000001fe80000000000000000000000000003a00000000000000000a0000a02e000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000009c0011000a010101000000000000000000f700007f000001000400000000000000000000fc020000000000000000000000000001000000000000000000000000000000013c04"], 0xec}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 42.008516792s ago: executing program 7 (id=2061): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000c"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000001c0)='kfree\x00', r1, 0x0, 0x5}, 0x18) writev(r2, &(0x7f0000000880)=[{&(0x7f0000000b00)="66dfa2a3b417a7ff26ad7207f21fd92954f7f70e228e46183b3188a415dfbf1bc81f627bc1363d13a3d1ffbdb1f8cc555ae2d0a96cfe1a748ad154967154ca8016352e5adb75f7852a44e8c02cc163c4467cc063c4ff5b31815dcef8832358d364e5eded0a76cd54a26d067452eb4f5c42a9a9998a7ba0aad7e3b3f51ed0843d56211e51a65e70749fbcd5a22c734cc864df13abf91842f7e3ff9573abb20e351138cb71ccaeb152eb6e020ca3fb08f512f05014981629c502d678da2417ee64384c986367d8785dde0dc95aa0292ac43ea2c8345d23", 0xd6}, {&(0x7f0000000440)="c8f1c78e3d0f21d7444625ebc63b8ef6cf303f1ff981a76c6947c2a6b04ee833b4a49f4105a2d9d12972f35653d194450da3f33e1701beffea13a20e275e0ea698e481b434b212e10b8d0aa079398d46f4e7cb1f46ad33142a683a0708fafd", 0x5f}, {&(0x7f00000004c0)="6f0ae5db159cf3fedf931e93b6b523b89a479c2a01791ae5ef27630a18556301f1fc87e914f3c062f8717ea9af2e779a782be0a373775f81673de3c20ff0876d23f3fbe9ae312e1aa6d40733a2f0f3e13764bbd677a1159f11d91a4ac409f3736c9292f92ec7b0b900a08fad99fcf933064ea742800fe546d7eaab299e35421f8aa12d525a542833944e4829e690422c13c101ec139cf4d9dbd3c8e5ee777680df4dcb85362ce8f16f3341ce1d0e9ae813cdfa7f8def8057f8deccf15443c9a9c9fa", 0xc2}, {&(0x7f00000005c0)="b88918cacdc2fc0ae9276bef8ca2ecbe0839ae17e0e3dfe0eb7af050d98314b6e49fbd80e45c1058a49ccef9c3e0273b34ee4f3988545aa66c17bf56996dc1dfd829862662cd0179c602fac2e93be2a078748aab8b54f582ce47e0328c787291e11bbd9a06ce6230c5c86af311d6b13d0ceacf8586b897e5e0b71baf57eafb6c92d9db439d7bf666e0f0441e1cc051449001d886a4ef7bbe74458a528c2e3cecacd06f7b87d09f7409f1b4a02df65740aa88137efffcc02ff7caf1b72aa77aa765fdd2514db7ffcb0c3cb77176f0899503fdc1be10eef300ca43384ae4463e4234ba458039443c84aa4d18ad539a", 0xee}, {&(0x7f0000000340)="3f94ea887639b21c5a3f7f12a7434db3bbf223a78f1f4f53ef3af812372dbee7a006000000ae4e4031396501ff9d09d035c35e5e6cb7b407d503b5b0c13c485de095cf", 0x43}, {&(0x7f0000000a00)="d54dc502d971de089db0e1f787fee1610290077b06240aa19d16ef5840bdeeb4d4007904485358acd41ba4bf956f2095635c36d30100807a133bffc3e351759d57df501b142d09cdb760eab9efd3bb9f5c995a2eddb34a1ded780248c3de3ed4b580c315a25e431b123875a229d3bc80a597a30e0050fe1d8098d37dc45967b2f5991e1ca8b8e4f5391d2076b04d113fed3e654a8ae5984e62c23a6cc09bba7479c25f6b49614812d1c42dc66441c2aebe42fef488d9541735d093083e948f8ca7c1429a07923aadcce229028b2a77a8e198977c6cbfa52fbc9ca44885", 0xdd}, {&(0x7f0000000780)="2dd7b0b6342d6ba23bc78c15b3c9eb68e0fe5de93b8f723b1f498d37727bf4beccc264dc09c8aa4a1f28c3e892499af56ffec046ddd9c8823bf6051d1096fa14e34b9878ea44a3604f03f7d6ed388fe06ca537a631e22cdfd1eeb730b50692bf96de91e8f5d70ae2b127160a4a000d8185fda9abefa692421d97ce1af207e664103410c7f0537960ab6d609fbac31da396c64491e3f4ab7b9c06babde057d4cc1e9a830846781ebaaa404cc85b9ad0403479351035ab50aa5c3b085b3f750c92ddcfd02e541fe2d1767a175c2d99129debf80add18400e75c391f38ea318e47d70ded546b7336f93225cff", 0xeb}], 0x7) (async) r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) (async, rerun: 64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) (rerun: 64) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r4}, &(0x7f0000000180), &(0x7f00000001c0)=r3}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r7 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x45, &(0x7f0000000000)={0x0, 0x0}, 0x10) (async, rerun: 64) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r6}, 0x18) (async, rerun: 64) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c00)=ANY=[@ANYRESOCT=r1, @ANYRES32=r5, @ANYBLOB="db6df06c2c539d1fe8d65411cbb077d19c015e2961aae4d754bf8a8ef2a0039b2d888a113d19ebb19cc8e6541a62be42dd1608f4d9e101507e9794d3d341a7aadc504c786e37bde62c15254af82666823fab8f7a2cd69f996139caa239c9aad64ae7b5e2a8f881d3c3068f91ef2a414a8b59096226b7706c9db12b4092c88472685429fc399f25a3d1a8e0c5759b0414bb4b41e79a7442adddbe9c0849802b73e4320850edbefcf9adfc705e2de5d830cf1c19dee6feabe28d8064334be9dc290c9942ba9fa31da8b8a7a05892f0", @ANYRESDEC=0x0, @ANYRES16=r3, @ANYRESHEX=r3], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r8, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000100000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000000)='./file2\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='nodots,dmask=00000000000000000000003,usefree,nodots,flush,dots,dots,gid=', @ANYRESHEX=0x0, @ANYBLOB], 0x1, 0x214, &(0x7f0000000840)="$eJzs3D1rW1cYB/AjWa6tlhZPhXbpoV3a5bb10qVDS3GhVNCSRCEv0zWWEyFFAl8NksmgOVM+RwhkCWQL+QL+DFmymYDx5Ck3OJKs2NixE0dy4vx+ix6e/z1X5+jARVy9bP5+91ZjNUtW004ozRdC8Y/QDzuFsBCKYaQffnpwZfvOxavX/v2zUlm6MDvsx/jVd4+v377//ZPOF5cf7nYKIYStxWcbX298s/ni0s16FutZbLU7MY3L7XYnXW7W4ko9ayQx/t+spVkt1ltZbW1fvtpsj5861LIspq1ebNR6sdOOnbVeTG+k9VZMkiTOB06lem8nz8NWnuf5XD/kef62JyhMZl5Myyn3n4/c3kU97l5Nn/e71W518DjI//6nsvRLfGVhPGq7263O7OW/DvK4P58Nnw/zxUPzz8KPPwzy3eyv/yoH8nJYmfzyAQAAAADgXErinkPv7yfJUfmgeu3zgQP370vh29K4MzP5pQAAAABHyHrrjbS5Mrs2KJq1Myvmwv7Ob4+GUzxu+M9Pjz9mQsWXwyK843nKIYSjjymGM9+U6RSj75EPO6PfF5xseOl9TaP8gbwao2I+HBaVw3pjbjqbAgAAnC/jN/0nHlKc6IQAAAAAAAAAAAAAAAAAAADgEzSNPzM76zUCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALzJywAAAP//ixdW4w==") (async) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) (async) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000180)={0xffffff, 0x100000}, 0x10) (async) write(0xffffffffffffffff, &(0x7f0000000000)="1c0000001a005f0214f9f407000904ff80000000fe000000000a0000", 0x1c) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8}) (async, rerun: 64) io_uring_enter(0xffffffffffffffff, 0x47bc, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64) write$tun(0xffffffffffffffff, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$binfmt_script(r10, &(0x7f00000004c0), 0x208e24b) (async, rerun: 32) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r8}, &(0x7f0000000540), &(0x7f0000000580)=r9}, 0x20) (async, rerun: 32) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r11) sendmsg$NL80211_CMD_VENDOR(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000740)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="bbfb2bb77000fddbdf27670000000c00990006000000090000000800c400f7ffffff0800c3"], 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x0) (async) ioctl$F2FS_IOC_DECOMPRESS_FILE(r1, 0xf517, 0x0) 41.802196293s ago: executing program 7 (id=2065): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) epoll_pwait2(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000004c0)={[0x1b94]}, 0x8) r1 = socket(0x1e, 0x805, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000480)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x12c5008, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x500, 0x40) r3 = open_tree(r2, &(0x7f0000000300)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r4 = open_tree(r2, &(0x7f0000000100)='\x00', 0x9001) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) connect$tipc(r1, &(0x7f00000003c0)=@id={0x1e, 0x3, 0x0, {0x4e21, 0x3}}, 0x10) close(r1) 41.708173134s ago: executing program 7 (id=2067): rt_sigaction(0x22, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0x14, &(0x7f0000000640)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRESOCT=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$unix(0x1, 0x1, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async, rerun: 32) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (rerun: 32) sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="140100001e0001eb25bd70000000000001"], 0x114}], 0x1}, 0x0) (async) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r5, 0xffffffffffffffff, 0x0) (async) r6 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r6, 0x8982, &(0x7f0000000400)={0x0, 'vlan0\x00', {0x5}}) (async) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000001100000427bd70f1fcdbdf2500000000", @ANYRES32=r1, @ANYBLOB="8014000004210000"], 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x8085) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r7 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x2800, 0x0) recvmsg$can_raw(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000440)=""/184, 0xb8}, {&(0x7f0000000240)=""/67, 0x43}], 0x2, &(0x7f0000000500)=""/241, 0xf1}, 0x21) (async) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) (async) r8 = socket$pppl2tp(0x18, 0x1, 0x1) (async) r9 = socket$inet6_udp(0xa, 0x2, 0x0) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x80000001}, 0x50) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000700)=ANY=[@ANYBLOB="180000f9ff00000000000000fdffffff181100001553e17f7df9efd65098039a043c68f0f4c3cbffff59ed23e1", @ANYRES32=r10, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='f2fs_bmap\x00', r11, 0x0, 0x800}, 0x18) (async) connect$pppl2tp(r8, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r9, {0x2, 0x0, @dev}, 0xfffffffd}}, 0x2e) (async, rerun: 64) connect$pppl2tp(r8, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, r9, {0x2, 0x4e24, @local}, 0x3ff, 0x0, 0x2}}, 0x2e) (rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0x8, &(0x7f0000001cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94) syz_open_dev$evdev(&(0x7f00000003c0), 0x9, 0x145080) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r7, 0x0, 0x800000000000002}, 0x0) 41.046979128s ago: executing program 7 (id=2078): r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e20, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2a}}, 0x1ff, 0x0, 0xffffffff, 0x5, 0x8, 0x81, 0x28}, &(0x7f00000001c0)=0x9c) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000200)={r1, 0xf}, 0x8) r2 = socket(0x10, 0x3, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r3, &(0x7f0000001d00)={&(0x7f00000017c0)={0x2, 0x0, @private=0xa010101}, 0x10, 0x0, 0x0, &(0x7f0000000240)=[@rdma_args={0x48, 0x114, 0x1, {{0x0, 0x2}, {&(0x7f00000001c0)=""/117, 0x75}, &(0x7f0000001b40)=[{&(0x7f0000000140)=""/86, 0xffffff67}], 0x1, 0x0, 0x7}}], 0x48, 0x20000004}, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x8, &(0x7f0000000080)=[{0x0}], 0x1, 0x0, 0x0, 0x5}, 0x2004c000) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f00000000000000000a000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) 40.989007868s ago: executing program 36 (id=2078): r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e20, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2a}}, 0x1ff, 0x0, 0xffffffff, 0x5, 0x8, 0x81, 0x28}, &(0x7f00000001c0)=0x9c) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000200)={r1, 0xf}, 0x8) r2 = socket(0x10, 0x3, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r3, &(0x7f0000001d00)={&(0x7f00000017c0)={0x2, 0x0, @private=0xa010101}, 0x10, 0x0, 0x0, &(0x7f0000000240)=[@rdma_args={0x48, 0x114, 0x1, {{0x0, 0x2}, {&(0x7f00000001c0)=""/117, 0x75}, &(0x7f0000001b40)=[{&(0x7f0000000140)=""/86, 0xffffff67}], 0x1, 0x0, 0x7}}], 0x48, 0x20000004}, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x8, &(0x7f0000000080)=[{0x0}], 0x1, 0x0, 0x0, 0x5}, 0x2004c000) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f00000000000000000a000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) 1.508137492s ago: executing program 8 (id=2852): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0xfffffffffffff001}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000800000000000070000000900010073797a30000000007c000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d38001280140001800c000100636f756e7465720004000280200001800e000100636f6e6e6c696d69740000000c00028008000140000000080800034000000110"], 0xc4}}, 0x20050890) r3 = socket$netlink(0x10, 0x3, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r5, 0x0, 0x10007ffffffff}, 0x18) unshare(0x8000000) semget$private(0x0, 0x4000, 0x555) r6 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0xffffffffffffff22}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r9 = open(&(0x7f0000000040)='./file1\x00', 0x80242, 0x0) fsync(r9) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x1, 0x803, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500, 0x32}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x0, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r12}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000804}, 0x8000) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r13, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000480)={0x14, 0x17, 0xa, 0x801, 0x0, 0x0, {0x5, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x884}, 0x800) socket$nl_route(0x10, 0x3, 0x0) r14 = socket(0x1, 0x803, 0x0) getsockname$packet(r14, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) 1.263506844s ago: executing program 8 (id=2855): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = io_uring_setup(0x1d48, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x1ff, 0x402) ioctl$USBDEVFS_REAPURB(r1, 0x4008550c, 0x0) 1.256135833s ago: executing program 2 (id=2857): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000300), &(0x7f00000002c0)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0xd, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000001600000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010076657468305f746f5f687372000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c0003801400010076657468305f746f5f68737200000000140001"], 0xfc}}, 0x0) 1.178897304s ago: executing program 2 (id=2859): bind$inet(0xffffffffffffffff, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x10002) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) creat(&(0x7f0000000100)='./bus\x00', 0x8c) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) open(&(0x7f0000000000)='./bus\x00', 0xe340, 0x103) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000002"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$eJzs3c9vFFUcAPDvbH/QUrSFGBUP0sQYSJSWFjDEeICrIQ3+iBcvVloQKdDQGi2aUBK8mBgvxph48iD+F0rkyklPHrx4MiREDUcT18x2pnTb2ZYubacyn0+y9M17O7w33X773r6+NxtAZQ2m/9Qi9kbEdBLRn8wvlnVGVji48Lx7f39yOn0kUa+/8WcSSZaXPz/JvvZlJ/dExM8/JbGnY2W9M3NXzo9PTU1ezo6HZy9MD8/MXTl47sL42cmzkxdHXxo9dvTI0WMjh9q6rqsFeSevv/9h/2djb3/3zT/JyPe/jSVxPF7Nnrj0OjbKYAw2vifJyqK+YxtdWUk6sp+TpS9x0llig1iX/PXrioinoj864v6L1x+fvlZq44BNVU8i6kBFJeIfKiofB+Tv7Ze/D66VMioBtsLdEwsTACvjv3NhbjB6GnMDO+8lsXRaJ4mI9mbmmu2KiNu3xq6fuTV2PTZpHg4oNn8tIp4uiv+kEf8D0RMDjfivNcV/Oi44lX1N819vs/7lU8XiH7bOQvz3rBr/0SL+31kS/++2Wf/g/eR7vU3x39vuJQEAAAAAAEBl3TwRES8W/f2/trj+JwrW//RFxPENqH9w2fHKv//X7mxANUCBuyciXilc/1vLV/8OdGSpxxrrAbqSM+emJg9FxOMRcSC6dqTHI6vUcfDzPV+3KhvM1v/lj7T+29lawKwddzp3NJ8zMT47/rDXDUTcvRbxTOH632Sx/08K+v/098H0A9ax5/kbp1qVrR3/wGapfxuxv7D/v3/XimT1+3MMN8YDw/moYKVnP/7ih1b1txv/bjEBDy/t/3euHv8DydL79cysv47Dc531VmXtjv+7kzcbt5zpzvI+Gp+dvTwS0Z2c7Ehzm/JH199meBTl8ZDHSxr/B55bff6vaPzfGxHzy/7v5K/mPcW5J//t+71Ve4z/oTxp/E+sq/9ff2L0xsCPrep/sP7/SKOvP5DlmP+DBV/lYdrdnF8Qjp1FRVvdXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4FNQiYlcktaHFdK02NBTRFxFPxM7a1KWZ2RfOXPrg4kRa1vj8/1r+Sb/9C8dJ/vn/A0uOR5cdH46I3RHxZUdv43jo9KWpibIvHgAAAAAAAAAAAAAAAAAAALaJvhb7/1N/dJTdOmDTdZbdAKA0BfH/SxntALae/h+qS/xDdYl/qC7xD9Ul/qG6xD9Ul/iH6hL/AAAAAADwSNm97+avSUTMv9zbeKS6s7KuUlsGbLZa2Q0ASuMWP1Bdlv5AdXmPDyRrlPe0PGmtM1czffohTgYAAAAAAAAAAACAytm/1/5/qCr7/6G67P+H6sr3/+8ruR3A1vMeH4g1dvIX7v9f8ywAAAAAAAAAAAAAYCPNzF05Pz41NXlZ4q3t0YytTNTr9avpT8F2ac//PJEvhd8u7VmWyPf6PdhZ5f1OAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmv0XAAD//xYSJMU=") r2 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x389b0d52417bb201) pwritev2(r2, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x69000}], 0x1, 0x7000, 0x0, 0x3) 1.143820234s ago: executing program 2 (id=2863): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) ustat(0x6, &(0x7f0000000000)) 1.090990774s ago: executing program 2 (id=2865): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$netlink(0xffffffffffffffff, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x360, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x290, 0xffffffff, 0xffffffff, 0x290, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@remote, @loopback, [0xff, 0xff, 0xff, 0xff], [0xff000000, 0xff, 0xff], 'team_slave_0\x00', 'netdevsim0\x00', {}, {0xff}, 0x29, 0x3, 0x5, 0x60}, 0x0, 0x1a0, 0x1c8, 0x60030000, {0x0, 0xff000029}, [@common=@inet=@recent0={{0xf8}, {0x9, 0x0, 0x24, 0x0, 'syz1\x00', 0x7}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x1000}}}, {{@ipv6={@remote, @dev={0xfe, 0x80, '\x00', 0x19}, [0xffffff00, 0xffffffff, 0x0, 0xffffff00], [0x0, 0xffffff00, 0xffffffff, 0xff000000], 'netpci0\x00', 'bridge_slave_1\x00', {}, {0xff}, 0x2b, 0x2, 0x5, 0x5}, 0x0, 0xa8, 0xc8}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 973.512315ms ago: executing program 2 (id=2867): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a00)=ANY=[@ANYBLOB="5c0100001000130700000000fcdbdf25e0000001000000000000000000000000ff020000000000000000000000000001000400004e2100020000000021000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="fc010000000000000000000000000000000004d632000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000090000000000000001000000ffffffff0000000000000000010000800000000043050000000000000400000000000000ffffffffffffff7f000000000000000001000000000000000000000000000000000000002cbd70000035000002000000500000000000000060001200726663343130362867636d28616573292900"/201, @ANYRES32, @ANYBLOB="00f0ba95b3d965e510000000386ace485d6ae005655840a8dcba9145372181ce"], 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2014) 828.181256ms ago: executing program 2 (id=2868): r0 = socket$inet6(0xa, 0x5, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a385000000700000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="180059cf3f4c0000000018110000", @ANYRES32=r2, @ANYRESDEC=r2], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='kfree\x00', r3, 0x0, 0x2}, 0x18) r4 = socket$key(0xf, 0x3, 0x2) r5 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x531, &(0x7f0000000640)="$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") sendmsg$key(r4, &(0x7f0000000400)={0x10000000, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=ANY=[@ANYBLOB="020e0080150000000000000000000000030005000000000002004e24ac1e00010000100000000000030006003c000000020000fc34000000000000000000000001001800000000000800120000000200fcffffff000000000600330000000000000000000000eafffd8000000000000000000000000000aa000000000000000000000000000000000400"], 0xa8}}, 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000030000850000001b000000b700000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x18) socket(0x18, 0x1, 0x0) perf_event_open(&(0x7f0000001100)={0x5, 0x80, 0x9, 0x8, 0xb, 0xfb, 0x0, 0x3c, 0xc002, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x18842, 0x0, 0x7fffffff, 0x1, 0x8, 0x3, 0x7, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001f40)={0xffffffffffffffff}) recvmsg$unix(r8, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x0) close_range(r3, r5, 0x2) r9 = io_uring_setup(0x6c4, &(0x7f0000000080)={0x0, 0x4075, 0x18, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r9, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f0000000640)={0x1, &(0x7f0000000680)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r10}, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r11, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r11, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) 731.185626ms ago: executing program 1 (id=2869): syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000540)='./file0\x00', 0x1204018, &(0x7f0000000240)=ANY=[@ANYBLOB="6f76657272696465726f636b7065726d2c6e6f636f6d70726573732c686964652c73657373696f6e3d3078303030303030303030303030303032312c756e686964652c696f636861727365743d63703433372c6f76657272696465726f636b7065726d2c626c6f636b3d3078303030303030303030303030303430302c005fb50aab29cf1d32d24be5ab2a6506aa524c8f1cd5781842ee1c86bee627767fee958f25bb6db8e631262ed8a59d337d730b6698271aeb8c31c1902a7e236e5dd878e6c1352c0c799d8e80d7346f8d2870acebe617c694bbb925d3ab4fb01784c564c03d88c81d2f84f58e8c6ba18548f09fa6"], 0x1, 0x56f, &(0x7f0000000b00)="$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") mbind(&(0x7f00006ca000/0x4000)=nil, 0x4000, 0x1, &(0x7f0000000140)=0x2, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000600), 0x220480) unshare(0x2020600) fremovexattr(r3, &(0x7f0000000340)=@known='user.incfs.metadata\x00') sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c00000007f3ff001300fbffffffffffffff0200", @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006", @ANYRES16=r1], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="5400000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800b00010067656e65766500001c0002800500040008000000050003001100000005000d000100000008000a00", @ANYRES32=r2, @ANYBLOB], 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r5, 0x0, 0x7eda}, 0x18) r6 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000800), 0x8000, 0x0) r7 = dup(r6) ioctl$GIO_UNISCRNMAP(r7, 0x43403d0e, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) fallocate(r8, 0x3, 0x1, 0x8000c62) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r9, @ANYBLOB=',wfdno=', @ANYRESHEX=r10, @ANYBLOB=',access=', @ANYRESDEC=0x0, @ANYBLOB="fdff"]) ioctl$TIOCGSID(r8, 0x5429, &(0x7f0000000000)) mremap(&(0x7f0000000000/0x9000)=nil, 0x600000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x7, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) 596.193817ms ago: executing program 9 (id=2871): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x6, 0xb, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xfdffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x8000d0, &(0x7f0000000100)={[{@bsdgroups}]}, 0x1, 0x58d, &(0x7f0000000bc0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0xa0000, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000001f40)=ANY=[@ANYBLOB="000000004c900200290000000300010000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000020000000000000ffffffffffd9ffff00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff"]) mount(0x0, 0x0, 0x0, 0x0, 0x0) 595.069267ms ago: executing program 5 (id=2872): bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x78) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x78) r1 = gettid() timer_create(0x9, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) (async) timer_create(0x9, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640)=ANY=[@ANYRESOCT=r1, @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) syz_emit_ethernet(0x18d, &(0x7f0000001040)={@broadcast, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0x157, 0x88, 0x0, @remote, @local, {[@routing={0x2f, 0x8, 0x1, 0x1, 0x0, [@remote, @mcast2, @private1={0xfc, 0x1, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2f}}]}, @dstopts={0x1d, 0x2, '\x00', [@pad1, @jumbo={0xc2, 0x4, 0x8}, @enc_lim={0x4, 0x1, 0x1}, @jumbo]}], {0x0, 0x0, 0xef, 0x0, @gue={{0x2}, "397586c1db2ef8dc4c5318cc565ef608ef782a984be06556bde937c094fd3fa4f60c6ac976383b2c11d2a4027714388142c67b1c7097851a6e8a14eec467ba8b00aa36b9a51a97cc04ae0b262226f29fd03de9a684a985a4d3f6d02e6ff3401bae5d0465ebc8ac1170078e584c91d7b1e4d7b10eb3c817094f7f23c0c2e49032bc5ca4d080cfe179772fce74b699bb12665ab0bcccf55166b68bbf3e1956cb7bf89665fed2d359bdeaa80e613406fbfaa44c243f9c40443a03edccf6eaae16d8e2dca90b19714998b7963b6b31f0b21550b2564cfc999a05b2531a71724f49"}}}}}}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000003c0)=0x2) readv(r3, &(0x7f0000000600)=[{&(0x7f00000002c0)=""/135, 0x87}], 0x1) (async) readv(r3, &(0x7f0000000600)=[{&(0x7f00000002c0)=""/135, 0x87}], 0x1) ioctl$TIOCVHANGUP(r3, 0x5437, 0x2) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r4, 0x0, 0x800000000006}, 0x18) r5 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000), 0x1e9182, 0x0) writev(r5, &(0x7f0000000480)=[{&(0x7f0000002500)='\f7', 0x2}, {&(0x7f0000000440)='0', 0x1}, {&(0x7f00000009c0)="82ad4f690e1e5a5ea15d3e11aadf8d2f65031e66a556f4f524c9535cee552f96c5e7d1fe9db445b789440b742a2da771338422c74c2a3ba888b163296d5434af050ccca80e90053a5e8792b3ab40482190223df69a6e70bc832f413ad95e6fb9d5b84288b0d93b6b8398dae0f9bbde05078757b1f4e2e076c97d3f789bb5e1f80b99413f274d864abc73a4b1d8aee50403c25f634001480a158564748099d78d5814953d68406d225c2f01d44f1cc3f1c15e0ba44f0dde059572f8ed12b2d367a8573c92e77bb4da28827aa5914e1f7a6e2ff6ada01214d6f9517424fb2f5299b9fc", 0xe2}], 0x3) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r6, 0x0, 0x5}, 0x18) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r6, 0x0, 0x5}, 0x18) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) (async) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f00000007c0)={[{@nodioread_nolock}, {@errors_remount}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5a}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x3}}]}, 0x1, 0x46f, &(0x7f0000000bc0)="$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") socket$nl_rdma(0x10, 0x3, 0x14) (async) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000580)=ANY=[@ANYBLOB="100000000314010000000000000000001d6f6529db00cda7913ebdaa0887bde1a84540a1cd0216ff855006fe4e02f36d865d0d4add5dca9f2dd0e92674dd5ff414e3e880b5000000000000000000"], 0x10}}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0) close(r9) (async) close(r9) socket$nl_generic(0x10, 0x3, 0x10) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r10) 514.585818ms ago: executing program 9 (id=2873): socket$key(0xf, 0x3, 0x2) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)=ANY=[@ANYBLOB="04010000100007000000000000000000ff020000000000000000000000000001e00000020000000001000000000000004e200000000000000000000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000002b000000fc00000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000001000000000feffffffffffffff0951000001000000090000000000000000000000000000000000200000000000070000000000000000000000000000000000040000000000e80a000000000000000000000a000200700000000000100014000e"], 0x104}}, 0x0) 425.438318ms ago: executing program 9 (id=2874): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000000c0)={'veth0_to_bridge\x00', 0x400}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'pimreg0\x00'}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00'}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) ustat(0x6, &(0x7f0000000000)) 407.180748ms ago: executing program 8 (id=2875): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x1c, 0x140f, 0x1, 0x70bd29, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xc, 0x45, 'rdma_cm\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040004}, 0xc0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0}, &(0x7f0000000140)=0xc) syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x0, &(0x7f0000000180)={[], [{@obj_role={'obj_role', 0x3d, 'ext4\x00'}}, {@dont_appraise}, {@appraise_type}, {@subj_role={'subj_role', 0x3d, '\xd8\x00}#\'/'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'ext4\x00'}}, {@euid_eq={'euid', 0x3d, r1}}]}, 0x1, 0x3dc, &(0x7f00000008c0)="$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") setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f00000003c0), 0x8) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) pwritev2(r2, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0x1}], 0x1, 0x5412, 0x0, 0x8) ioctl$EXT4_IOC_MOVE_EXT(r2, 0x40305829, &(0x7f0000000000)={0x17c04, r2, 0xa, 0xc741, 0x80, 0x1}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0xfffffffe, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1400000030e97ec322af0f0b27423611436ab0dbe7d4bc9913de9b3e042eb53d3032ec383bcb7c773bb00d9d2c13f76c08ada801bbee59ede76e0508c3d8072781264ebf0387035917495af1f6beb31e1bb39312c657c77c951600b032461f84d507145e8ce66c736410f35aaf377a7c6c414911ae428394b86fb9dcbea1557882a0e9aaa7f1d3f5827a63a836eaf5ee946fd84a50e14861bfe3ad430285cf31d3a3fa222be2f80dcfbc", @ANYRES16=r4, @ANYBLOB="08002abd7000fbdbdf2501000000"], 0x14}, 0x1, 0x0, 0x0, 0x4044000}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) setsockopt$PNPIPE_ENCAP(r2, 0x113, 0x1, &(0x7f0000000580), 0x4) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000cc0)={0x564, r4, 0x400, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x2, 0x80}}}}, [@NL80211_ATTR_IE={0x1b8, 0x2a, [@mesh_config={0x71, 0x7, {0x1, 0x1, 0x1, 0x1, 0xffffffffffffffff, 0x8}}, @mesh_config={0x71, 0x7, {0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x40, 0x40}}, @prep={0x83, 0x25, {{0x0, 0x1}, 0x9, 0x2f, @device_a, 0x7, @value=@broadcast, 0x3, 0x8, @device_a, 0x2}}, @channel_switch={0x25, 0x3, {0x0, 0xae, 0xb}}, @tim={0x5, 0x4, {0x9, 0xd, 0x2, "d0"}}, @cf={0x4, 0x6, {0x6, 0xf, 0x2, 0x8000}}, @random_vendor={0xdd, 0xa8, "b34861cefc8bf31e98b3d7c4d78bfa33e1a9162e77bb2e3c82c4e861f11b424736642607a014c2140ea104985c82b668b707f4f0b10444dc8a78b849de09473f32e0cfaf607ce692010708716d41f8d343467284a2c47c10f5d329b47ad6aade08dc54970bd3ea5f1942e15ffcf4501bf989c3633dce779a9e02faaf0091e5d8cd63850f911ba50c528e1eda3c9e17323adcbaf66e0a0ec336e97b1d482f4606a07dca6d2b39d6a4"}, @random_vendor={0xdd, 0x9d, "127db7d19cd06860a0a9d1d87b96b85be0cc3cf6de5782d224a88e19d7720714b7ece18e169133833a962b664a6e626f6979b331d06a7a75fc1ba72916f6314e5f1cb7731b7c6314de38a42126aa4bd12a39972dbad60265a83be710a3127bbcd0d7e465c7982f1de1b3a1bfa8f12acd583484c6e51210d9f30c787fae6983200979c58a50524199414bda732c33b4f8f4c348c2ee08a8fc8b34af3aaa"}, @ht={0x2d, 0x1a, {0x2000, 0x3, 0x2, 0x0, {0x38000000000000, 0x5, 0x0, 0x8, 0x0, 0x0, 0x1}, 0x300, 0x8, 0x3}}, @dsss={0x3, 0x1, 0x6c}]}, @NL80211_ATTR_IE={0x158, 0x2a, [@cf={0x4, 0x6, {0x6, 0x1, 0x86, 0x9}}, @random={0xd, 0xf2, "da43d878a729b4096117c750b61b70f948a17426f8db6668dae8d2127d58ac57d5ff1c7a9df1381411f181a10b2f3529c734aa9d75b93ffcaa3f3c14f53bc5af1dfdad9ac03c070af9f0a62544405461a016bc7dfe7cb7a5445a8bf1d4ac4dd5aae98e8ca101a2c1089d158ee7c3c38695591b8d9f9ac58162887252be473321ca44b0e8ab47232ca3b98265036b12d6a51bcd1f5db8cc73a4c023009b6897a1c6f59f4c7aa6009ef899366c8c0092a95742f0ccaa82092669bb1c5b7d1d08a2c8453de0362aabc419883ae815bb9133cf1f72b3bb334ab180880fa8994ea614b2ceb9d6d98e32a0998ce215284e8ae62fa3"}, @perr={0x84, 0x42, {0xf9, 0x4, [{{0x0, 0x1}, @device_a, 0x9, @value=@device_b, 0x31}, {{0x0, 0x1}, @broadcast, 0x8, @value, 0x2a}, {{}, @broadcast, 0xd, @void, 0x35}, {{}, @device_a, 0x749f, @void, 0xf}]}}, @supported_rates={0x1, 0x6, [{0x1b}, {0x4, 0x1}, {0xb, 0x1}, {0x36, 0x1}, {0xc, 0x1}, {0x30, 0x1}]}, @ibss={0x6, 0x2, 0x7}, @mesh_chsw={0x76, 0x6, {0xf3, 0x0, 0x3a, 0x401}}]}, @NL80211_ATTR_IE={0x120, 0x2a, [@mesh_id={0x72, 0x6}, @mesh_chsw={0x76, 0x6, {0x4, 0x6, 0xe, 0x9}}, @ssid={0x0, 0x6, @default_ap_ssid}, @mic={0x8c, 0x18, {0x990, "07cf0c7cccf5", @long="5131c85de9afef36156bcad42a609505"}}, @chsw_timing={0x68, 0x4, {0xe, 0x9}}, @fast_bss_trans={0x37, 0xa1, {0x8, 0x5, "02ee46d48375361c57b4b40e19ff3776", "bd52c1c4a69ada8469eb00714e0071113d98216a2f0ee895835e9e187cd6ccbd", "bad2248cc5ade80b2445210e87ef6d519b073f85f8c79950dfbe11409e906330", [{0x3, 0x9, "26de581e93f79f1014"}, {0x1, 0x15, "0e2236e75ace515dc7f3c433949656ae5bb6c2d40f"}, {0x3}, {0x2, 0x18, "453615f8368de1f92314880c5ae65b363a4fd2f887ee4460"}, {0x3, 0xf, "b86c9734f5abfa90d365125dbf1393"}]}}, @random={0x6, 0x36, "ac6ed60c58eb606a587ecf8a3c83ac60cc021a73a50ddc93ef98d1cd3f3c373b212d22312375f220cdc388cc74cb6fc5d65d6daca8ee"}, @sec_chan_ofs={0x3e, 0x1, 0x3}, @chsw_timing={0x68, 0x4, {0x6, 0xe}}]}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x35}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x66}, @NL80211_ATTR_IE={0xf2, 0x2a, [@mesh_config={0x71, 0x7, {0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x2, 0x29}}, @challenge={0x10, 0x1, 0xaf}, @ssid={0x0, 0x6, @default_ap_ssid}, @prep={0x83, 0x1f, {{}, 0x55, 0x8, @device_a, 0x1, @void, 0xd, 0x0, @device_b, 0x4}}, @prep={0x83, 0x25, {{0x0, 0x1}, 0x6, 0xff, @device_a, 0x6, @value, 0x71, 0x80000001, @broadcast, 0x5}}, @prep={0x83, 0x25, {{0x0, 0x1}, 0xbf, 0x3, @broadcast, 0x7, @value=@device_b, 0x84, 0x0, @broadcast, 0x1}}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x9, 0x9, 0x7e}}, @measure_req={0x26, 0x60, {0x1, 0xff, 0x9, "e5fff0e9fa9ab1aec8af28fe218deea4dad370ae4e6a7862f89b3b341a53ebc2ea307da55f802855507c74b786240f6db606973971139880e8c7e96584c49cbf168b66e59c29de2db3883c4003d41becab04a80a98bb5774cbb32d70cd"}}, @challenge={0x10, 0x1, 0xa0}]}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x9}]}, 0x564}, 0x1, 0x0, 0x0, 0x20000000}, 0x40840) 406.087278ms ago: executing program 1 (id=2876): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) ustat(0x6, &(0x7f0000000000)) 352.725968ms ago: executing program 5 (id=2877): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0xffffffff, 0x1, 0x0, 0x4, 0x2, 0x18, 0x3, 0x9}}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fdffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x2, 0x0) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x103, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x11c167, 0x0, 0xfffffffc, 0xb95b5ec032cc8e84}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000003b00)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r5}, &(0x7f0000000180), &(0x7f00000001c0)=r4}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r6}, 0x10) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=ANY=[@ANYBLOB="48000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32], 0x48}}, 0x0) r8 = creat(&(0x7f0000000080)='./file0\x00', 0x306) r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000000)='rseq_ip_fixup\x00', r8}, 0x18) statx(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x1000, 0x10, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl_fd$Q_GETNEXTQUOTA(r9, 0xffffffff80000902, r10, &(0x7f0000000640)) quotactl_fd$Q_QUOTAOFF(r2, 0xffffffff80000301, r10, 0x0) unshare(0x22020400) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r7, 0x6628) syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) 350.188808ms ago: executing program 9 (id=2878): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x8f0, &(0x7f0000002400)=0x0) io_submit(r3, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r2, &(0x7f0000000040)="0200ffff0000", 0x6, 0xfffffff4, 0x0, 0x2}]) 336.450119ms ago: executing program 1 (id=2879): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a050039ff000000000000010000000900010073797a300000000048000000030a05020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a3000000000080007006e6174"], 0xcc}, 0x1, 0x0, 0x0, 0x880}, 0x0) 253.232969ms ago: executing program 1 (id=2880): r0 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x110, 0xffffffffffffffff, 0x8000000) (async) r1 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000002, 0x2010, 0xffffffffffffffff, 0x10000000) r2 = socket$isdn(0x22, 0x3, 0x22) (async, rerun: 32) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) (rerun: 32) syz_io_uring_submit(r0, r1, &(0x7f0000000000)=@IORING_OP_SHUTDOWN={0x22, 0x20, 0x0, r2, 0x0, 0x0, 0x1, 0x0, 0x0, {0x0, r3}}) (async, rerun: 64) r4 = socket$inet_sctp(0x2, 0x1, 0x84) (rerun: 64) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000040)={0x0, 0x2, 0x10001, 0x3}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp_SCTP_ASSOCINFO(r4, 0x84, 0x1, &(0x7f00000000c0)={r5, 0x8, 0x8, 0x1, 0x0, 0xfffffff8}, &(0x7f0000000100)=0x14) (async) r7 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000140)='syz0\x00', 0x200002, 0x0) r8 = openat$cgroup_ro(r7, &(0x7f0000000180)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) syz_io_uring_setup(0x4d05, &(0x7f00000001c0)={0x0, 0xe33f, 0x10000, 0x3, 0x246, 0x0, r8}, &(0x7f0000000240), &(0x7f0000000280)) (async) setsockopt$IP_VS_SO_SET_TIMEOUT(r8, 0x0, 0x48a, &(0x7f00000002c0)={0x10000, 0x400, 0x1}, 0xc) (async) socket$kcm(0x29, 0x5, 0x0) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_DEST(r9, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x7c, 0x0, 0x800, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x40, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2d625944d666e0ff}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x4}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7fffffff}]}, 0x7c}, 0x1, 0x0, 0x0, 0x24000000}, 0x80) (async) setsockopt$MRT6_FLUSH(r8, 0x29, 0xd4, &(0x7f0000000440), 0x4) (async, rerun: 32) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r8, 0x89f3, &(0x7f0000000640)={'ip6tnl0\x00', &(0x7f00000005c0)={'syztnl1\x00', 0x0, 0x29, 0x2, 0xb3, 0x6, 0x4, @dev={0xfe, 0x80, '\x00', 0x11}, @mcast2, 0x7, 0x40, 0x6, 0x6}}) (rerun: 32) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000580)={@ifindex=r10, 0x2b, 0x0, 0x5, &(0x7f0000000480)=[0x0, 0x0], 0x2, 0x0, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0], &(0x7f0000000540)=[0x0, 0x0]}, 0x40) (async, rerun: 32) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r8, 0x84, 0x5, &(0x7f0000000680)={r6, @in={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x36}}}}, 0x84) (async, rerun: 32) r12 = signalfd4(r7, &(0x7f0000000740)={[0x9]}, 0x8, 0x800) ioctl$TUNSETVNETBE(r12, 0x400454de, &(0x7f0000000780)=0x1) (async, rerun: 64) ioctl$LOOP_SET_FD(r12, 0x4c00, r7) (async, rerun: 64) setsockopt$inet_opts(r4, 0x0, 0x0, &(0x7f00000007c0)="1bc9fc0ebca9248328bf4b1484f250be176ec2cab58102344ebdb1d72a63f9e5a85e620089d8f521acfe80167a", 0x2d) sendmsg$nl_route_sched(r8, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)=@deltclass={0x5c, 0x29, 0x100, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r11, {0x4, 0x4}, {0xffe0, 0xf}, {0x6, 0xfff1}}, [@TCA_RATE={0x6, 0x5, {0x3, 0x7}}, @tclass_kind_options=@c_mq={0x7}, @TCA_RATE={0x6, 0x5, {0x1, 0x2}}, @tclass_kind_options=@c_drr={{0x8}, {0xc, 0x2, @TCA_DRR_QUANTUM={0x8, 0x1, 0x9a9}}}, @tclass_kind_options=@c_clsact={0xb}]}, 0x5c}, 0x1, 0x0, 0x0, 0x44084}, 0x20048010) (async) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r12, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x5c, 0x140f, 0x100, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x8, 0x45, 'srp\x00'}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xa, 0x45, 'ipoib\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0x48000) ioctl$FIONCLEX(r8, 0x5450) (async) ioctl$EXT4_IOC_GETFSUUID(r12, 0x8008662c, &(0x7f0000000a80)) (async) r13 = syz_genetlink_get_family_id$team(&(0x7f0000000b00), r12) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r8, 0x89f3, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b40)={'ip6tnl0\x00', r10, 0x4, 0xc, 0x6, 0x3, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7169, 0x0, 0x8b1, 0x9}}) sendmsg$TEAM_CMD_OPTIONS_GET(r12, &(0x7f0000001800)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x8010004}, 0xc, &(0x7f00000017c0)={&(0x7f0000000fc0)={0x800, r13, 0x300, 0x70bd27, 0x25dfdbfc, {}, [{{0x8, 0x1, r11}, {0x1c8, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xffff}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r11}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7ff}}, {0x8, 0x6, r14}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r11}}}, {0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x5, 0x3, 0x6, 0x3}, {0x8001, 0x80, 0x7, 0x8c}, {0x6, 0xd1, 0x9b, 0x7}, {0x76e, 0x6, 0x3, 0x4}, {0xa0, 0x7f, 0x3, 0x3}]}}}]}}, {{0x8, 0x1, r11}, {0x78, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}]}}, {{0x8, 0x1, r10}, {0xb8, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}]}}, {{0x8, 0x1, r10}, {0x1cc, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9fc}}, {0x8}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x0, 0x5c, 0x8, 0xffffffff}, {0x6b7c, 0x9, 0x6}, {0x7214, 0x9, 0x4}]}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r11}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8, 0x1, r11}, {0x14c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r10}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x1, 0x5, 0x56, 0x773}, {0x7, 0xc0, 0x91, 0x3}, {0x3ff, 0x4, 0x8, 0x4}, {0x20, 0x80, 0xff, 0xe}]}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xfff}}, {0x8, 0x6, r10}}}]}}, {{0x8, 0x1, r10}, {0x1ac, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r11}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x93e0}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}]}}]}, 0x800}, 0x1, 0x0, 0x0, 0x4000}, 0x4000080) 252.677659ms ago: executing program 8 (id=2881): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000002340)={0x11, 0xf, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x110000, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000002140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={0x0, r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) ustat(0x6, &(0x7f0000000000)) 248.956729ms ago: executing program 8 (id=2882): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="01000000040000000400000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000000000600000000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703fd83c7523aa9fdd123f9a83e2ccd0219a5b4ffb631008619ba45cb374dc9ea72c01788f319c6942e32a63f1255b298af8587ca7861aa5d111d9829d9b8fd1942abaa7d4c6db152c1a0afc6f506d10c571e16d3e773b9d31afb"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000000000600000000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703fd83c7523aa9fdd123f9a83e2ccd0219a5b4ffb631008619ba45cb374dc9ea72c01788f319c6942e32a63f1255b298af8587ca7861aa5d111d9829d9b8fd1942abaa7d4c6db152c1a0afc6f506d10c571e16d3e773b9d31afb"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000280)='kfree\x00', r2}, 0x18) ioctl$BTRFS_IOC_BALANCE(r2, 0x5000940c, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xf1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xf1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) close(0x3) (async) close(0x3) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r5, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111ae00000000008510000002000000850000000500000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) syz_clone(0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r4, 0x58}, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$inet6_icmp(0xa, 0x2, 0x3a) r8 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x103, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x11c167, 0x0, 0xfffffffa, 0xb95b5ec032cc8e84}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x17, 0x2000000000000242, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r9}, &(0x7f0000000180), &(0x7f00000001c0)=r8}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r9}, &(0x7f0000000180), &(0x7f00000001c0)=r8}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) (async) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r10}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x200000, &(0x7f0000000200)={[{@noblock_validity}, {}, {@sysvgroups}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@jqfmt_vfsv1}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) (async) r11 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) write$binfmt_register(r11, &(0x7f0000000440)={0x3a, 'syz1', 0x3a, 'M', 0x3a, 0x0, 0x3a, 'usrjquota=', 0x3a, '', 0x3a, './file2', 0x3a, [0x46]}, 0x32) sendmsg$inet6(r7, &(0x7f0000000380)={&(0x7f0000000000)={0xa, 0x4e22, 0x480, @private2, 0x7fff}, 0x1c, &(0x7f0000000280)=[{&(0x7f0000000f80)="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", 0x1000}, {&(0x7f0000000180)="393adb3d2425a9685fca0787e60e13284909ef5ad2da1eb91c4f1de44bfc8a6d93a371ac3a573407f5a2c29dd8416e67140cc30cc24abab08fdef5d581dc01331b39aa6b6d177962f48fb97d9db1d12c05d58f990cc7c459d4181c61f6e9f595047c16029802227caef3c76d798e04eba093cfc1e9f40ef1d0b6c949dbf5de4bd77f8edf6a325d20850033b6a9cc00b4f30e2f8ffdc0e666bc", 0x99}, {&(0x7f0000000080)="4d58c7d922ae96d020e5c780e04fdea89cfef337bf0103035e17bd7595df2e21bd9384b5eb9b4e01a60431d2db95be96857f0d338454f6d2", 0x38}], 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="14000000000000002900000008000000f174412800000000a00000000000000029000000370000000810000000000000c204ffffffff987450039092fdf7c08b0621b8d2217def90281fc8cffaef3c7700c8f58ed159353bf3f0f934b1cb06c84ee5ff178821607be41d64f91b840ab630f8e14072e3b6e07e9ad7bca7ff84203748111a48a318b6746779da808125725989bbac9c26008e59fe7e142becb8f85aa7c8574136ca48273859d2c204000000090000000000002000000000000000290000003700000000000000000000000502000900000000"], 0xd8}, 0x90) (async) sendmsg$inet6(r7, &(0x7f0000000380)={&(0x7f0000000000)={0xa, 0x4e22, 0x480, @private2, 0x7fff}, 0x1c, &(0x7f0000000280)=[{&(0x7f0000000f80)="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", 0x1000}, {&(0x7f0000000180)="393adb3d2425a9685fca0787e60e13284909ef5ad2da1eb91c4f1de44bfc8a6d93a371ac3a573407f5a2c29dd8416e67140cc30cc24abab08fdef5d581dc01331b39aa6b6d177962f48fb97d9db1d12c05d58f990cc7c459d4181c61f6e9f595047c16029802227caef3c76d798e04eba093cfc1e9f40ef1d0b6c949dbf5de4bd77f8edf6a325d20850033b6a9cc00b4f30e2f8ffdc0e666bc", 0x99}, {&(0x7f0000000080)="4d58c7d922ae96d020e5c780e04fdea89cfef337bf0103035e17bd7595df2e21bd9384b5eb9b4e01a60431d2db95be96857f0d338454f6d2", 0x38}], 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="14000000000000002900000008000000f174412800000000a00000000000000029000000370000000810000000000000c204ffffffff987450039092fdf7c08b0621b8d2217def90281fc8cffaef3c7700c8f58ed159353bf3f0f934b1cb06c84ee5ff178821607be41d64f91b840ab630f8e14072e3b6e07e9ad7bca7ff84203748111a48a318b6746779da808125725989bbac9c26008e59fe7e142becb8f85aa7c8574136ca48273859d2c204000000090000000000002000000000000000290000003700000000000000000000000502000900000000"], 0xd8}, 0x90) sendmsg$ETHTOOL_MSG_COALESCE_GET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000fbdb0cf81c000000180001801400020074756e6c30"], 0x2c}}, 0x0) 196.488859ms ago: executing program 1 (id=2883): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000000)={[{@errors_remount}, {@grpquota}]}, 0x4, 0x4f2, &(0x7f0000000a40)="$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") perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0xc41e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x7fff, 0x2}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000280)={0x0, 0x2904c, 0x0, 0x10003, '\x00', [{0x0, 0xfffffffc, 0x0, 0x5, 0x0, 0x1500}, {0xffffffff, 0x0, 0x0, 0x2}]}) 196.046319ms ago: executing program 9 (id=2884): r0 = memfd_create(&(0x7f0000000180)='\b\x9dF\xd8\b\xb3~u\xa5\"\xdc\xfdq\xf6c\r;\xfcO\x8c=\x81\xb1\xfa\x8b\x8aWpA\xd4\x98\x85K\x89>N\x8ar\x17O\x0fKR\xe2{mn\xcc\xbf2\xc0\xa7\x14\xd0\xd4\xfe/m\xdf\xb6]\xc2\xaa\x86\xec(\xf7\xcd\xa6\xd9n^.\x13*\xd4\xb8\xe8\xc4\xefb\x14Vx\xc6\xfe\x9e\xee\xe7\xd7E\xe9\t\x83\xdeNX\xec\xe66\x1b\x97$\xee\x845n,B\xd5?\xe5E:+Pm\x1d\xb4\xb8\xeb\xe8Op2\x82\xc7\x0e\x97\x03\xef\x1a\xa5\x00.\x89\b!m\f\xd9\x8b$}\x9f\fX\x81\xa8\xf6\x94\xbc\xed\x80|l]\xe9\xca\xd3\xc9\xa3\x9e\x9cJI\xf1\xa2\xa0\xc4:\x00\x00\x00\x00\x00\x00\b\xfey\bJ\x86\x8d\xdf\x16\xbb3\x85\xf5\xe0zYe\xc2\n\x0f\x87\xc4\x8f\x8e\xec\xee\xcd\f\xe9\xc8\xbc\x97,\xb7!\xf2\x93\xd3\t\xd9=\x93\x1d\x945\x97\x1e\x9d\xa6\xe9\xa6\xf9p,\xf7v>\xcd\xd9\xc4\x1b\x9c(\xb8\x90\xdeg\xbf[n\x82\x96\xaev\xd4\xac \x14\xf0\x18@\xc3\xf1\xe2\x14\x1c\x0f\xa4-\xde\xae\xfa;\xaf\xae\x06\x9ag\x02\x98\xd0C2\xe7?\xfb\xb01\x9d\xf8\xd3Q\xb3\xb2\x18V\xe8\x8c\x87\xf4\t\x1c\x85\xa4\xc1\xb1\xf4k!G\xf5\xbb\xbbs&\xeac\xb3\xafW\x846\v\xb3\xca\xeb\xb7\x9e\x9e#]\x10lj\xaf\xaf\xd1\'{\x11\xaa,\x0f\xc5OY\"\x82\x84\xb6:J\x8c\xf37\x1d\xca\xf1\xef\x9f\xcf\a\xcf\xcb', 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) sendmsg$nl_xfrm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x15c, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in=@multicast1, @in6=@mcast2, 0x4, 0x0, 0x4e21, 0x2, 0x0, 0x0, 0x0, 0x21, 0x0, 0xee00}, {@in6=@private1, 0x4d6, 0x32}, @in=@multicast2, {0x0, 0x0, 0x0, 0x9, 0xffffffff00000001, 0x0, 0x80000001, 0x543}, {0x4, 0x7fffffffffffffff, 0x0, 0x1}, {0x500}, 0x70bd2c, 0x3500, 0x2, 0x0, 0x0, 0x50}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "210466d38547aa140db9a200000000c538c7cb7a"}}, @offload={0xc, 0x1c, {r5, 0x3}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2014) write$binfmt_misc(r2, &(0x7f0000000b00), 0x91) write$UHID_CREATE2(r2, &(0x7f0000000380)={0xb, {'syz0\x00', 'syz1\x00', 'syz0\x00', 0x0, 0x7, 0x6, 0x5, 0xfffffff9, 0xf4}}, 0x118) splice(r1, 0x0, r0, 0x0, 0xfff, 0x1) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000180)={r8, 0x0, 0x0}, 0x20) 195.534079ms ago: executing program 5 (id=2885): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000038c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000003900)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000060000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r1], 0xc4}}, 0x40) 193.507929ms ago: executing program 9 (id=2886): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0xb, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0, 0x0, 0x2000000000}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x18, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000400), 0x101201, 0x0) ioctl$IMADDTIMER(r2, 0x80044940, &(0x7f0000000600)=0x14) ioctl$IMADDTIMER(r2, 0x80044940, &(0x7f0000000080)=0x14) (async) ioctl$IMADDTIMER(r2, 0x80044940, &(0x7f0000000080)=0x14) r3 = socket$netlink(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r4, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r5 = socket(0x2, 0x80805, 0x0) fstat(r5, &(0x7f0000000500)) socket$inet6_sctp(0xa, 0x5, 0x84) (async) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r6, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) socket$inet_sctp(0x2, 0x5, 0x84) (async) r7 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000280)=0x8) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000280)=0x8) socket$inet6_sctp(0xa, 0x1, 0x84) (async) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) dup2(r6, r9) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r6, 0x84, 0x17, &(0x7f00000002c0)=ANY=[@ANYRES32=r8, @ANYBLOB="02"], 0x9) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r9, 0x84, 0x19, &(0x7f0000000140)={r8, 0x2}, 0x8) (async) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r9, 0x84, 0x19, &(0x7f0000000140)={r8, 0x2}, 0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f0000000380)={r8, 0x9, 0xa384}, &(0x7f00000003c0)=0x8) close(r2) (async) close(r2) r10 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r10, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="380000001a00010000000000000000000a000000000000", @ANYBLOB="14"], 0x38}}, 0x0) socket$kcm(0x10, 0x2, 0x0) (async) r11 = socket$kcm(0x10, 0x2, 0x0) r12 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x200040, 0x0) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r12, 0x8008f512, &(0x7f0000000200)) sendmsg$inet(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000035c0)="5c00000013006bcd9e3fe3dc4e48aa31086b8703340000ff1f00000000000000040014000d000a00140000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x240000c0) (async) sendmsg$inet(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000035c0)="5c00000013006bcd9e3fe3dc4e48aa31086b8703340000ff1f00000000000000040014000d000a00140000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x240000c0) 193.207459ms ago: executing program 5 (id=2887): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="0500000004000000080000000b"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000480)='kfree\x00', r1, 0x0, 0x7fffffffffffffff}, 0x18) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000002100)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x6, 0x8, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0x88f6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}}]}, &(0x7f0000000640)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value=0x700}, 0x94) 147.07628ms ago: executing program 5 (id=2888): r0 = socket(0xa, 0x3, 0x3a) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000240)='bbr', 0x3) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0), 0x4) setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000340), 0x4) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x1, 0x6}, 0xc) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000080)=0x6, 0x4) 70.1337ms ago: executing program 1 (id=2889): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000002340)={0x11, 0x0, 0x0, &(0x7f0000002140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) ustat(0x6, &(0x7f0000000000)) 495.76µs ago: executing program 8 (id=2890): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000002340)={0x11, 0xf, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x110000, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000002140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) ustat(0x6, &(0x7f0000000000)) 0s ago: executing program 5 (id=2891): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080), 0x4) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='setgroups\x00') close_range(r1, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff95"], &(0x7f0000000280)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000000}, 0x94) syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000080)='./file2\x00', 0x1808004, &(0x7f0000000040)=ANY=[@ANYRES16=0x0, @ANYRESDEC], 0x4, 0x7cc, &(0x7f0000002200)="$eJzs3U1sHOUZAOB3HJsEI6WIVimKQpgEKgUJzHoNpi4HWNZje2C9a+2uq0RVRSNwkBUHKBS15AJRJWirVlVPPVKu3HqjqtRKPbQ9VSqHXnpD4lRRqX+iqpBczew6/v9JcEIgz2PF3+zsO9/3zmY978za+20AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJHUJyuV0SQa+bfnT6fbq0+2W7M73L/S32/XNes8vm7ciKT4F4cOxUf/6q370urdR4pvJ+NY79axOFQ0h+LibUduf/SLgwMr2++Q0NU6sce4JOL1IqnzZ5eWFl66BolcRz/69RVv8t/l4vt01sw7rXy2Np2leaeVToyPVx6cmeqkU3kj65zpdLPZtN7Oat1WOz1Vvy8dnZgYS7ORM6355vRkrZGtrHzkgWqlMp4+OTKX1dqdVvPBJ6NTn8kbjbw5XcZUK9+NIuaR4on4VN5Nu1ltNk3PLS4tjK3JKtkq1SJodKs7DvSeP8fuvf2DV97/5+JC8YTcbn+T/hOzOjparY6OPzzx8COVymC1Ul2/orJBXI6IgYgi4po8afkM2d8DOHwCA/36H43IoxnzcTrSDV9DETEU9ZiMdrRitlj3l6FNUX0r9f8rD/79TzuNu7b+r1T5O1fvPhpl/T/eu3V8u/q/KYsdv4auKHpPXy/Hq3ExzsfZWIqlWIiX9rf/g/ue8cAn7SFZd2s6smhGHp1oRR6zUSvXpP01aUzEeIxHJZ6OmZiKTqQxFXk0IotOnIlOdCMrn1H1aEcWtehGK9qRxqmox32RxmhMxESMRRpZjMSZaMV8NGM6Hoha2cu5WCwf97ENWR65NX713J8/eKtYvhw0utNuFSdzRdA/dgjaVO53rP/Ly8X5wsYI9f9mdw2O4nB1llfqPwAAAPC5lZSvviflS/x3lUtTeSP7xh627A5eh/QAAACAfVD+5v9Y0QwVS3dFUlz/V7aIfO+65wYAAADsj6R8j10SEcNxd2/pXCzG67EQW70IAAAAAHwGlb//P140wxGvlStWpktx/Q8AAACfEz/Ybo7991fm2O3MHUx+U84BnFyaO31vcqFWxNUuHOht12++frnH7tTR5HC/k7IZH7x4WxIRg/XsWLIy++XHB3vth+X3o6tzCWw313/Sbu+YQOycQHkrfhwnejEnnu21z/bvSXqjDE/ljWyk3mo8Wk6JWPzrvvL84vciitF/2Jw9nMS5xaWFkWdeWHq2zOVS0culC/0JFNfNo7j8hR1zWe4/AnHX1ns8VL4Roz/ucG/cytr9Hyi3/t9yOc/stvufrB3zjTjZizk53GuHV+7pjXmoGHN05NHRqNUOD3Sz091XltfsfT+L0d32fJf/hTfinl7MPafu6TVbZFFdl8Xzm7Oors2i91jEwD5l8daJ107/5/etJBvbLYuxK8hi+UDExiwAPi3nyll/VqvQrWUVKopKoaj/G+rurStb7uFY++/VUXpnGR/3u42INbVuMDZW99W+91bdl6N3RD/ViznVO58YPLpFXalscUR/cfHFP/SP6A+98/NffPP4H39ZjntV1e2duK8X02/ijt9tU2OLff7Jhqr6drHF21uOW5yDdRrVJC5FHPjOhRfjyMuvXnxg8cLZ5xaeW3i+Wh0brzxUqTxcjaHyVKHf7JApADev3T9jZ9uIW/pdJA9td1Xdr3h3XP6TgpF4Jl6IpSjOAO7uxd69edx3iyvxNX+GcP8uV63Daz7h5f5dri1XY6ubY5PYJnZszSP25Z+VzUfX5L8DAK6LkzvU4V3q/+VX5u/f5bp7fS3fcHUc29fyrXz1mj4aAHBzyNofJsPdN5N2O597enRiYrTWncnSdqv+VNrOJ6ezNG92s3Z9ptacztK5dqvbqq+8cDyZddLO/Nxcq91Np1rtNAY6+enyk9/T/ke/d7LZWrOb1ztzjazWydJ6q9mt1bvpZN6pp3PzTzTyzkzWLjfuzGX1fCqv17p5q5l2WvPtejaSpp0sWxOYT2bNbj6VF4vNdK6dz9balyKiMT+bpZNZp97O57qtXocrY+XNqVZ7tux2ZPPu/+16P94AcCN4+dWL588uLS28dHULf91L8Ke9jwDAeqo0AAAAAAAAAAAAAADc+Da/Xa9Y+wneEXhlCwfjmg9xEy18rT8lY29NsXSDJPbpLXzrscfObxfzxGt3zuytn61/UrZ6q+ubhyNuefenvTWPbx/8/f7P3/7s6XsRcRWbLyc7xKw7TNxynQ9LAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALCl/wcAAP//ez9qPw==") r3 = bpf$MAP_CREATE(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r3}, &(0x7f0000000200), &(0x7f0000000280)=r4}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x18) syz_clone3(&(0x7f0000000680)={0x22045000, 0x0, 0x0, 0x0, {0x3}, 0x0, 0x0, 0x0, 0x0}, 0x58) kernel console output (not intermixed with test programs): type=1326 audit(668.949:6313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10109 comm="syz.2.1864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fc5a87fefc9 code=0x7ffc0000 [ 156.159954][ T29] audit: type=1326 audit(668.949:6314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10109 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5a87fefc9 code=0x7ffc0000 [ 156.172467][T10115] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1866'. [ 156.182013][ T29] audit: type=1326 audit(668.949:6315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10109 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5a87fefc9 code=0x7ffc0000 [ 156.213091][ T29] audit: type=1326 audit(668.949:6316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10109 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc5a87fefc9 code=0x7ffc0000 [ 156.224499][T10115] netlink: 'syz.1.1866': attribute type 5 has an invalid length. [ 156.235309][ T29] audit: type=1326 audit(668.949:6317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10109 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5a87fefc9 code=0x7ffc0000 [ 156.265152][ T29] audit: type=1326 audit(668.949:6318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10109 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5a87fefc9 code=0x7ffc0000 [ 156.287685][ T29] audit: type=1326 audit(668.949:6319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10109 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7fc5a87fefc9 code=0x7ffc0000 [ 156.309777][ T29] audit: type=1326 audit(668.949:6320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10109 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5a87fefc9 code=0x7ffc0000 [ 156.367835][T10119] loop2: detected capacity change from 0 to 512 [ 156.378898][T10121] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 156.417930][T10119] EXT4-fs error (device loop2): ext4_orphan_get:1418: comm syz.2.1868: bad orphan inode 11862016 [ 156.429860][T10119] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 156.449746][T10130] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1872'. [ 156.610218][T10154] Set syz1 is full, maxelem 65536 reached [ 156.720994][T10171] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1887'. [ 157.105788][T10184] loop7: detected capacity change from 0 to 512 [ 157.116271][T10184] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 157.155320][ T8378] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.172734][T10189] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 157.221584][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 157.254870][T10197] loop8: detected capacity change from 0 to 1024 [ 157.262388][T10197] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 157.272548][T10197] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 157.283869][T10197] EXT4-fs (loop8): revision level too high, forcing read-only mode [ 157.292498][T10197] EXT4-fs (loop8): orphan cleanup on readonly fs [ 157.299448][T10197] EXT4-fs error (device loop8): ext4_read_inode_bitmap:167: comm syz.8.1896: Inode bitmap for bg 0 marked uninitialized [ 157.312978][T10197] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 157.336185][ T8975] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.416596][T10206] loop7: detected capacity change from 0 to 1024 [ 157.443633][T10206] EXT4-fs (loop7): couldn't mount as ext3 due to feature incompatibilities [ 157.518223][T10218] syzkaller0: entered allmulticast mode [ 157.536507][T10218] syzkaller0: entered promiscuous mode [ 157.589603][T10218] loop2: detected capacity change from 0 to 128 [ 157.670265][T10224] syzkaller0 (unregistering): left allmulticast mode [ 157.677111][T10224] syzkaller0 (unregistering): left promiscuous mode [ 157.688510][T10222] vhci_hcd: invalid port number 255 [ 157.693747][T10222] vhci_hcd: USB_PORT_FEAT_LINK_STATE req not supported for USB 2.0 roothub [ 157.773920][T10232] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 157.809336][T10238] loop5: detected capacity change from 0 to 512 [ 157.859629][T10238] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 157.879414][T10238] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #2: comm syz.5.1910: corrupted inode contents [ 157.901616][T10238] EXT4-fs error (device loop5): ext4_dirty_inode:6517: inode #2: comm syz.5.1910: mark_inode_dirty error [ 157.933601][T10238] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #2: comm syz.5.1910: corrupted inode contents [ 158.041602][T10237] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #2: comm syz.5.1910: corrupted inode contents [ 158.057898][T10237] EXT4-fs error (device loop5): ext4_dirty_inode:6517: inode #2: comm syz.5.1910: mark_inode_dirty error [ 158.069910][T10237] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #2: comm syz.5.1910: corrupted inode contents [ 158.100479][T10237] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #2: comm syz.5.1910: mark_inode_dirty error [ 158.112411][T10263] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 158.113229][T10237] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #2: comm syz.5.1910: corrupted inode contents [ 158.133347][T10237] EXT4-fs error (device loop5): ext4_dirty_inode:6517: inode #2: comm syz.5.1910: mark_inode_dirty error [ 158.160342][ T6617] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.322867][T10289] tmpfs: Unknown parameter 'nr_inodeA' [ 158.359399][T10292] lo: entered allmulticast mode [ 158.385267][T10291] lo: left allmulticast mode [ 158.530716][T10317] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 158.612680][T10327] loop2: detected capacity change from 0 to 512 [ 158.642034][T10336] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 158.642034][T10336] program syz.5.1948 not setting count and/or reply_len properly [ 158.659220][T10336] FAULT_INJECTION: forcing a failure. [ 158.659220][T10336] name failslab, interval 1, probability 0, space 0, times 0 [ 158.672149][T10336] CPU: 1 UID: 0 PID: 10336 Comm: syz.5.1948 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 158.672191][T10336] Tainted: [W]=WARN [ 158.672200][T10336] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 158.672256][T10336] Call Trace: [ 158.672263][T10336] [ 158.672303][T10336] __dump_stack+0x1d/0x30 [ 158.672333][T10336] dump_stack_lvl+0xe8/0x140 [ 158.672357][T10336] dump_stack+0x15/0x1b [ 158.672381][T10336] should_fail_ex+0x265/0x280 [ 158.672407][T10336] should_failslab+0x8c/0xb0 [ 158.672512][T10336] __kmalloc_noprof+0xa5/0x570 [ 158.672609][T10336] ? blk_rq_map_user_iov+0x23e/0x1520 [ 158.672632][T10336] blk_rq_map_user_iov+0x23e/0x1520 [ 158.672727][T10336] blk_rq_map_user_io+0x18f/0x260 [ 158.672753][T10336] ? alloc_pages_mpol+0x217/0x260 [ 158.672775][T10336] ? alloc_pages_noprof+0xa9/0x130 [ 158.672804][T10336] ? sg_build_indirect+0x3a5/0x450 [ 158.672848][T10336] sg_common_write+0xb06/0xc30 [ 158.672897][T10336] sg_write+0x6b5/0x750 [ 158.672951][T10336] vfs_writev+0x406/0x8b0 [ 158.673049][T10336] ? __pfx_sg_write+0x10/0x10 [ 158.673112][T10336] do_writev+0xe7/0x210 [ 158.673158][T10336] __x64_sys_writev+0x45/0x50 [ 158.673264][T10336] x64_sys_call+0x1e9a/0x3000 [ 158.673294][T10336] do_syscall_64+0xd2/0x200 [ 158.673348][T10336] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 158.673377][T10336] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 158.673441][T10336] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.673466][T10336] RIP: 0033:0x7f3d7256efc9 [ 158.673482][T10336] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 158.673503][T10336] RSP: 002b:00007f3d70fd7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 158.673528][T10336] RAX: ffffffffffffffda RBX: 00007f3d727c5fa0 RCX: 00007f3d7256efc9 [ 158.673545][T10336] RDX: 0000000000000002 RSI: 0000200000000080 RDI: 0000000000000007 [ 158.673561][T10336] RBP: 00007f3d70fd7090 R08: 0000000000000000 R09: 0000000000000000 [ 158.673633][T10336] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 158.673712][T10336] R13: 00007f3d727c6038 R14: 00007f3d727c5fa0 R15: 00007ffd89c7e788 [ 158.673738][T10336] [ 158.896561][T10327] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 158.988562][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.038773][T10349] FAULT_INJECTION: forcing a failure. [ 159.038773][T10349] name failslab, interval 1, probability 0, space 0, times 0 [ 159.051545][T10349] CPU: 1 UID: 0 PID: 10349 Comm: syz.7.1952 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 159.051587][T10349] Tainted: [W]=WARN [ 159.051595][T10349] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 159.051611][T10349] Call Trace: [ 159.051618][T10349] [ 159.051626][T10349] __dump_stack+0x1d/0x30 [ 159.051648][T10349] dump_stack_lvl+0xe8/0x140 [ 159.051719][T10349] dump_stack+0x15/0x1b [ 159.051772][T10349] should_fail_ex+0x265/0x280 [ 159.051792][T10349] ? tipc_topsrv_queue_evt+0x1c3/0x300 [ 159.051833][T10349] should_failslab+0x8c/0xb0 [ 159.051882][T10349] __kmalloc_cache_noprof+0x4c/0x4a0 [ 159.051948][T10349] tipc_topsrv_queue_evt+0x1c3/0x300 [ 159.051982][T10349] tipc_sub_report_overlap+0x2ef/0x310 [ 159.052075][T10349] tipc_nametbl_insert_publ+0x86c/0x930 [ 159.052114][T10349] tipc_nametbl_publish+0x112/0x1c0 [ 159.052159][T10349] tipc_sk_publish+0x121/0x200 [ 159.052261][T10349] tipc_sk_join+0x24b/0x2e0 [ 159.052309][T10349] tipc_setsockopt+0x598/0x620 [ 159.052388][T10349] ? __pfx_tipc_setsockopt+0x10/0x10 [ 159.052418][T10349] __sys_setsockopt+0x184/0x200 [ 159.052462][T10349] __x64_sys_setsockopt+0x64/0x80 [ 159.052497][T10349] x64_sys_call+0x20ec/0x3000 [ 159.052590][T10349] do_syscall_64+0xd2/0x200 [ 159.052615][T10349] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 159.052651][T10349] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 159.052702][T10349] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.052730][T10349] RIP: 0033:0x7f6e6873efc9 [ 159.052749][T10349] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 159.052773][T10349] RSP: 002b:00007f6e6719f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 159.052797][T10349] RAX: ffffffffffffffda RBX: 00007f6e68995fa0 RCX: 00007f6e6873efc9 [ 159.052879][T10349] RDX: 0000000000000087 RSI: 000000000000010f RDI: 0000000000000005 [ 159.052895][T10349] RBP: 00007f6e6719f090 R08: 0000000000000010 R09: 0000000000000000 [ 159.052911][T10349] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000002 [ 159.052927][T10349] R13: 00007f6e68996038 R14: 00007f6e68995fa0 R15: 00007ffdafe2ea78 [ 159.052951][T10349] [ 159.156053][T10352] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 159.303950][T10357] __nla_validate_parse: 9 callbacks suppressed [ 159.303968][T10357] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1955'. [ 159.319853][T10357] bridge_slave_1: left allmulticast mode [ 159.325542][T10357] bridge_slave_1: left promiscuous mode [ 159.331291][T10357] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.345253][T10357] bridge_slave_0: left allmulticast mode [ 159.350934][T10357] bridge_slave_0: left promiscuous mode [ 159.356737][T10357] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.380791][T10362] loop7: detected capacity change from 0 to 1024 [ 159.409016][T10365] netlink: 'syz.2.1957': attribute type 1 has an invalid length. [ 159.417382][T10362] EXT4-fs error (device loop7): ext4_acquire_dquot:6945: comm syz.7.1955: Failed to acquire dquot type 0 [ 159.430650][T10362] EXT4-fs error (device loop7): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 159.451035][T10365] bond3: entered promiscuous mode [ 159.467363][T10362] EXT4-fs error (device loop7): ext4_do_update_inode:5632: inode #13: comm syz.7.1955: corrupted inode contents [ 159.468994][T10365] 8021q: adding VLAN 0 to HW filter on device bond3 [ 159.488032][T10362] EXT4-fs error (device loop7): ext4_dirty_inode:6517: inode #13: comm syz.7.1955: mark_inode_dirty error [ 159.500924][T10362] EXT4-fs error (device loop7): ext4_do_update_inode:5632: inode #13: comm syz.7.1955: corrupted inode contents [ 159.517996][T10368] 8021q: adding VLAN 0 to HW filter on device bond3 [ 159.529090][T10368] bond3: (slave wireguard5): The slave device specified does not support setting the MAC address [ 159.539710][T10368] bond3: (slave wireguard5): Setting fail_over_mac to active for active-backup mode [ 159.549611][T10362] EXT4-fs error (device loop7): __ext4_ext_dirty:206: inode #13: comm syz.7.1955: mark_inode_dirty error [ 159.561136][T10362] EXT4-fs error (device loop7): ext4_do_update_inode:5632: inode #13: comm syz.7.1955: corrupted inode contents [ 159.573637][T10362] EXT4-fs error (device loop7) in ext4_orphan_del:301: Corrupt filesystem [ 159.575389][T10368] bond3: (slave wireguard5): making interface the new active one [ 159.590385][T10368] wireguard5: entered promiscuous mode [ 159.597853][T10362] EXT4-fs error (device loop7): ext4_do_update_inode:5632: inode #13: comm syz.7.1955: corrupted inode contents [ 159.611991][T10368] bond3: (slave wireguard5): Enslaving as an active interface with an up link [ 159.623012][T10362] EXT4-fs error (device loop7): ext4_truncate:4637: inode #13: comm syz.7.1955: mark_inode_dirty error [ 159.625965][T10365] bond3: (slave wireguard6): The slave device specified does not support setting the MAC address [ 159.658134][T10365] bond3: (slave wireguard6): Enslaving as a backup interface with an up link [ 159.671021][T10362] EXT4-fs error (device loop7) in ext4_process_orphan:343: Corrupt filesystem [ 159.682008][T10362] EXT4-fs (loop7): 1 truncate cleaned up [ 159.700369][T10362] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 159.716258][T10381] xt_hashlimit: max too large, truncated to 1048576 [ 159.723045][T10381] xt_hashlimit: Unknown mode mask 2000000, kernel too old? [ 159.728992][T10365] SELinux: ebitmap: truncated map [ 159.737668][T10365] SELinux: failed to load policy [ 159.744017][T10357] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 159.764447][ T8378] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.868886][T10388] tmpfs: Bad value for 'mpol' [ 160.135431][T10413] netlink: 156 bytes leftover after parsing attributes in process `syz.8.1971'. [ 160.144891][T10413] netlink: 156 bytes leftover after parsing attributes in process `syz.8.1971'. [ 160.155200][T10418] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 160.271724][T10432] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 160.327253][T10438] lo: entered allmulticast mode [ 160.369132][T10436] lo: left allmulticast mode [ 160.419829][T10442] netlink: 'syz.1.1986': attribute type 27 has an invalid length. [ 160.434094][T10446] loop5: detected capacity change from 0 to 512 [ 160.473303][T10442] batadv0: left promiscuous mode [ 160.478410][T10442] batadv0: left allmulticast mode [ 160.491266][T10446] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 160.516521][T10446] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 160.543796][T10442] batman_adv: batadv0: Interface deactivated: veth1_vlan [ 160.558249][T10442] ipvlan0: left allmulticast mode [ 160.563523][T10442] veth0_vlan: left allmulticast mode [ 160.589565][T10453] loop2: detected capacity change from 0 to 4096 [ 160.600747][T10442] netdevsim netdevsim1 netdevsim0: left allmulticast mode [ 160.615101][ T3418] lo speed is unknown, defaulting to 1000 [ 160.620983][ T3418] syz2: Port: 1 Link DOWN [ 160.631515][ T4984] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 160.640678][ T4984] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.650120][ T4984] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 160.650541][T10453] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 160.659240][ T4984] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.659630][ T4984] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 160.690019][ T4984] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.690207][ T4984] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 160.690249][ T4984] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.718348][ T6617] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.817683][T10470] lo: entered allmulticast mode [ 160.841090][T10469] lo: left allmulticast mode [ 160.995201][T10479] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2000'. [ 161.549118][T10494] loop7: detected capacity change from 0 to 164 [ 161.586380][T10494] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2007'. [ 161.601522][T10499] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2008'. [ 161.676845][T10504] netlink: 80 bytes leftover after parsing attributes in process `syz.5.2010'. [ 161.753424][ T29] kauditd_printk_skb: 497 callbacks suppressed [ 161.753442][ T29] audit: type=1400 audit(674.719:6816): avc: denied { bind } for pid=10507 comm="syz.5.2011" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 161.780857][T10508] usb usb7: usbfs: process 10508 (syz.5.2011) did not claim interface 0 before use [ 161.797538][ T29] audit: type=1400 audit(674.759:6817): avc: denied { write } for pid=10507 comm="syz.5.2011" name="001" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 161.865276][ T29] audit: type=1400 audit(674.819:6818): avc: denied { wake_alarm } for pid=10512 comm="syz.8.2012" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 161.888364][T10515] netlink: 7 bytes leftover after parsing attributes in process `syz.8.2013'. [ 161.902885][T10515] netlink: 7 bytes leftover after parsing attributes in process `syz.8.2013'. [ 161.956233][T10525] tipc: Enabling of bearer rejected, failed to enable media [ 161.965854][T10527] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2017'. [ 161.975052][T10527] netlink: 'syz.5.2017': attribute type 5 has an invalid length. [ 161.988272][ T29] audit: type=1400 audit(674.959:6819): avc: denied { write } for pid=10524 comm="syz.1.2016" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 162.010283][T10529] tipc: New replicast peer: 255.255.255.255 [ 162.016495][T10529] tipc: Enabled bearer , priority 10 [ 162.019262][ T29] audit: type=1400 audit(674.959:6820): avc: denied { unmount } for pid=8378 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 162.079088][ T29] audit: type=1326 audit(675.019:6821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10531 comm="syz.2.2019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5a87fefc9 code=0x7ffc0000 [ 162.087200][T10532] tipc: Enabling of bearer rejected, already enabled [ 162.102049][ T29] audit: type=1326 audit(675.019:6822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10531 comm="syz.2.2019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5a87fefc9 code=0x7ffc0000 [ 162.132739][ T29] audit: type=1326 audit(675.019:6823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10531 comm="syz.2.2019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5a87fefc9 code=0x7ffc0000 [ 162.155933][ T29] audit: type=1326 audit(675.019:6824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10531 comm="syz.2.2019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5a87fefc9 code=0x7ffc0000 [ 162.179289][ T29] audit: type=1326 audit(675.019:6825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10531 comm="syz.2.2019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc5a87fd810 code=0x7ffc0000 [ 162.219120][T10544] SELinux: Context system_u:object_r:ldconfig_exec_t:s0 is not valid (left unmapped). [ 162.251903][T10548] loop2: detected capacity change from 0 to 1024 [ 162.261161][T10548] EXT4-fs (loop2): filesystem is read-only [ 162.544746][ T4984] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 162.556820][ T4984] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 162.568257][T10585] loop2: detected capacity change from 0 to 8192 [ 162.577733][ T4984] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 162.599380][T10585] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 162.618047][ T4984] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 162.822381][T10612] syz_tun: entered allmulticast mode [ 162.862676][T10612] loop5: detected capacity change from 0 to 1024 [ 162.893168][T10612] EXT4-fs: Ignoring removed orlov option [ 162.969319][T10611] syz_tun: left allmulticast mode [ 163.088609][T10628] lo speed is unknown, defaulting to 1000 [ 163.338826][T10652] FAULT_INJECTION: forcing a failure. [ 163.338826][T10652] name failslab, interval 1, probability 0, space 0, times 0 [ 163.351907][T10652] CPU: 0 UID: 0 PID: 10652 Comm: syz.2.2066 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 163.351995][T10652] Tainted: [W]=WARN [ 163.352001][T10652] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 163.352017][T10652] Call Trace: [ 163.352024][T10652] [ 163.352033][T10652] __dump_stack+0x1d/0x30 [ 163.352143][T10652] dump_stack_lvl+0xe8/0x140 [ 163.352166][T10652] dump_stack+0x15/0x1b [ 163.352184][T10652] should_fail_ex+0x265/0x280 [ 163.352209][T10652] ? nsim_nexthop_event_nb+0x93/0x1f70 [ 163.352301][T10652] should_failslab+0x8c/0xb0 [ 163.352334][T10652] __kmalloc_cache_noprof+0x4c/0x4a0 [ 163.352369][T10652] nsim_nexthop_event_nb+0x93/0x1f70 [ 163.352398][T10652] ? should_failslab+0x8c/0xb0 [ 163.352511][T10652] ? __kmalloc_cache_noprof+0x249/0x4a0 [ 163.352555][T10652] ? __pfx_nsim_nexthop_event_nb+0x10/0x10 [ 163.352586][T10652] blocking_notifier_call_chain+0x9b/0x1f0 [ 163.352697][T10652] call_nexthop_notifiers+0x103/0x210 [ 163.352736][T10652] rtm_new_nexthop+0x38be/0x45f0 [ 163.352768][T10652] ? __rtnl_unlock+0x95/0xb0 [ 163.352847][T10652] ? netdev_run_todo+0x7b4/0x810 [ 163.352914][T10652] ? __pfx_rtm_new_nexthop+0x10/0x10 [ 163.352953][T10652] rtnetlink_rcv_msg+0x5fe/0x6d0 [ 163.352986][T10652] ? avc_has_perm_noaudit+0x1b1/0x200 [ 163.353034][T10652] netlink_rcv_skb+0x123/0x220 [ 163.353078][T10652] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 163.353166][T10652] rtnetlink_rcv+0x1c/0x30 [ 163.353223][T10652] netlink_unicast+0x5c0/0x690 [ 163.353280][T10652] netlink_sendmsg+0x58b/0x6b0 [ 163.353308][T10652] ? __pfx_netlink_sendmsg+0x10/0x10 [ 163.353352][T10652] __sock_sendmsg+0x145/0x180 [ 163.353387][T10652] ____sys_sendmsg+0x345/0x4e0 [ 163.353528][T10652] ___sys_sendmsg+0x17b/0x1d0 [ 163.353574][T10652] __sys_sendmmsg+0x178/0x300 [ 163.353615][T10652] __x64_sys_sendmmsg+0x57/0x70 [ 163.353658][T10652] x64_sys_call+0x1c4a/0x3000 [ 163.353681][T10652] do_syscall_64+0xd2/0x200 [ 163.353700][T10652] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 163.353753][T10652] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 163.353796][T10652] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.353826][T10652] RIP: 0033:0x7fc5a87fefc9 [ 163.353909][T10652] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 163.353933][T10652] RSP: 002b:00007fc5a7267038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 163.353958][T10652] RAX: ffffffffffffffda RBX: 00007fc5a8a55fa0 RCX: 00007fc5a87fefc9 [ 163.353971][T10652] RDX: 04000000000001f2 RSI: 0000200000000000 RDI: 0000000000000003 [ 163.353983][T10652] RBP: 00007fc5a7267090 R08: 0000000000000000 R09: 0000000000000000 [ 163.353995][T10652] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 163.354007][T10652] R13: 00007fc5a8a56038 R14: 00007fc5a8a55fa0 R15: 00007ffcf7e706c8 [ 163.354109][T10652] [ 163.989583][T10676] loop5: detected capacity change from 0 to 1024 [ 164.039674][T10676] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 164.049862][T10676] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 164.061349][T10676] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 164.069782][T10676] EXT4-fs (loop5): orphan cleanup on readonly fs [ 164.080425][T10676] EXT4-fs error (device loop5): ext4_read_inode_bitmap:167: comm syz.5.2076: Inode bitmap for bg 0 marked uninitialized [ 164.096988][T10676] EXT4-fs mount: 3 callbacks suppressed [ 164.097008][T10676] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 164.178682][ T6617] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.225218][T10693] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 164.256981][ T4984] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 164.277467][ T4984] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 164.287354][ T4984] bond0 (unregistering): Released all slaves [ 164.371972][T10689] lo speed is unknown, defaulting to 1000 [ 164.668666][T10709] bond2 (unregistering): Released all slaves [ 164.849815][ T4984] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 164.857605][ T4984] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 164.913916][ T4984] team0 (unregistering): Port device team_slave_1 removed [ 164.929863][ T4984] team0 (unregistering): Port device team_slave_0 removed [ 164.966649][T10716] netlink: 'syz.1.2089': attribute type 10 has an invalid length. [ 164.977843][T10716] bond0: (slave dummy0): Releasing backup interface [ 164.989299][T10716] team0: Failed to send options change via netlink (err -105) [ 164.997050][T10716] team0: Port device dummy0 added [ 165.004207][T10716] netlink: 'syz.1.2089': attribute type 10 has an invalid length. [ 165.021396][T10716] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 165.031187][T10716] team0: Failed to send options change via netlink (err -105) [ 165.039223][T10716] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 165.048546][T10716] team0: Port device dummy0 removed [ 165.055666][T10716] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 165.095108][T10689] chnl_net:caif_netlink_parms(): no params data found [ 165.158286][T10730] syzkaller1: entered promiscuous mode [ 165.163821][T10730] syzkaller1: entered allmulticast mode [ 165.178353][T10689] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.185492][T10689] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.202878][T10689] bridge_slave_0: entered allmulticast mode [ 165.209510][T10689] bridge_slave_0: entered promiscuous mode [ 165.227388][T10689] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.234607][T10689] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.243164][T10689] bridge_slave_1: entered allmulticast mode [ 165.250347][T10689] bridge_slave_1: entered promiscuous mode [ 165.301464][T10727] __nla_validate_parse: 7 callbacks suppressed [ 165.301479][T10727] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2093'. [ 165.321661][T10689] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 165.361171][T10689] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 165.439758][T10689] team0: Port device team_slave_0 added [ 165.450153][T10689] team0: Port device team_slave_1 added [ 165.468566][T10689] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 165.475699][T10689] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 165.501857][T10689] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 165.514279][T10689] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 165.521286][T10689] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 165.547356][T10689] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 165.579330][T10689] hsr_slave_0: entered promiscuous mode [ 165.585890][T10689] hsr_slave_1: entered promiscuous mode [ 165.592105][T10689] debugfs: 'hsr0' already exists in 'hsr' [ 165.598053][T10689] Cannot create hsr debugfs directory [ 165.674346][T10689] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 165.685636][T10689] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 165.709543][T10689] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 165.719182][T10689] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 165.736766][T10689] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.743918][T10689] bridge0: port 2(bridge_slave_1) entered forwarding state [ 165.745373][T10748] loop2: detected capacity change from 0 to 128 [ 165.751254][T10689] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.764630][T10689] bridge0: port 1(bridge_slave_0) entered forwarding state [ 165.827525][T10689] 8021q: adding VLAN 0 to HW filter on device bond0 [ 165.840358][ T4984] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.849664][ T4984] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.868423][T10689] 8021q: adding VLAN 0 to HW filter on device team0 [ 165.872757][T10762] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 165.888347][T10689] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 165.898983][T10689] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 165.918813][ T4986] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.926066][ T4986] bridge0: port 1(bridge_slave_0) entered forwarding state [ 165.947299][ T4986] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.954674][ T4986] bridge0: port 2(bridge_slave_1) entered forwarding state [ 166.007505][T10689] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 166.058596][T10781] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2106'. [ 166.068377][T10781] IPVS: Error connecting to the multicast addr [ 166.074958][T10778] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2106'. [ 166.084900][T10778] IPVS: Error connecting to the multicast addr [ 166.240465][T10689] veth0_vlan: entered promiscuous mode [ 166.248882][T10689] veth1_vlan: entered promiscuous mode [ 166.273539][T10689] veth0_macvtap: entered promiscuous mode [ 166.282457][T10689] veth1_macvtap: entered promiscuous mode [ 166.301321][T10689] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 166.313610][T10689] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 166.322096][T10817] xt_hashlimit: max too large, truncated to 1048576 [ 166.326444][ T4986] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.328951][T10817] xt_hashlimit: Unknown mode mask 340, kernel too old? [ 166.341882][ T4986] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.376182][ T4986] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.397215][ T4986] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.406448][T10822] loop5: detected capacity change from 0 to 512 [ 166.428852][T10822] EXT4-fs (loop5): orphan cleanup on readonly fs [ 166.442718][T10830] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2081'. [ 166.452209][T10822] EXT4-fs error (device loop5): ext4_orphan_get:1418: comm syz.5.2116: bad orphan inode 13 [ 166.464634][T10822] ext4_test_bit(bit=12, block=18) = 1 [ 166.470178][T10822] is_bad_inode(inode)=0 [ 166.474413][T10822] NEXT_ORPHAN(inode)=2130706432 [ 166.479415][T10822] max_ino=32 [ 166.482778][T10822] i_nlink=1 [ 166.489667][T10822] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 166.529809][ T6617] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.627350][T10852] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2125'. [ 166.644495][T10852] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2125'. [ 166.653723][T10852] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2125'. [ 166.694921][T10857] loop9: detected capacity change from 0 to 1024 [ 166.701598][T10857] EXT4-fs: Ignoring removed orlov option [ 166.712715][T10857] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 166.728729][T10857] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.788635][T10869] netlink: 7 bytes leftover after parsing attributes in process `syz.9.2131'. [ 166.800779][T10869] netlink: 7 bytes leftover after parsing attributes in process `syz.9.2131'. [ 166.809903][ T29] kauditd_printk_skb: 293 callbacks suppressed [ 166.809954][ T29] audit: type=1326 audit(679.779:7119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10865 comm="syz.1.2130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65f909efc9 code=0x7ffc0000 [ 166.839395][ T29] audit: type=1326 audit(679.779:7120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10865 comm="syz.1.2130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f65f909efc9 code=0x7ffc0000 [ 166.862563][ T29] audit: type=1326 audit(679.779:7121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10865 comm="syz.1.2130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65f909efc9 code=0x7ffc0000 [ 166.885868][ T29] audit: type=1326 audit(679.779:7122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10865 comm="syz.1.2130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f65f909d810 code=0x7ffc0000 [ 166.909192][ T29] audit: type=1326 audit(679.779:7123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10865 comm="syz.1.2130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65f909efc9 code=0x7ffc0000 [ 166.932487][ T29] audit: type=1326 audit(679.779:7124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10865 comm="syz.1.2130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f65f909efc9 code=0x7ffc0000 [ 166.955706][ T29] audit: type=1326 audit(679.779:7125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10865 comm="syz.1.2130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65f909efc9 code=0x7ffc0000 [ 167.109141][ T29] audit: type=1400 audit(680.079:7126): avc: denied { module_load } for pid=10880 comm="syz.9.2135" path="/sys/kernel/notes" dev="sysfs" ino=213 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=system permissive=1 [ 167.142954][T10882] netlink: 'syz.1.2132': attribute type 10 has an invalid length. [ 167.197932][T10885] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 167.213964][ T29] audit: type=1400 audit(680.159:7127): avc: denied { create } for pid=10884 comm="syz.8.2136" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 167.300855][ T29] audit: type=1326 audit(680.239:7128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10883 comm="syz.9.2137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc041b5efc9 code=0x7ffc0000 [ 167.711951][T10901] loop2: detected capacity change from 0 to 512 [ 167.718856][T10899] loop5: detected capacity change from 0 to 1024 [ 167.751272][T10899] EXT4-fs: Ignoring removed orlov option [ 167.812754][T10899] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 167.827943][T10901] EXT4-fs warning (device loop2): ext4_xattr_inode_get:560: inode #11: comm syz.2.2141: EA inode hash validation failed [ 167.861031][T10899] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.885861][T10901] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #15: comm syz.2.2141: corrupted inode contents [ 167.937526][T10901] EXT4-fs error (device loop2): ext4_dirty_inode:6517: inode #15: comm syz.2.2141: mark_inode_dirty error [ 167.979122][T10901] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #15: comm syz.2.2141: corrupted inode contents [ 167.991796][T10901] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2996: inode #15: comm syz.2.2141: mark_inode_dirty error [ 168.004196][T10901] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2999: inode #15: comm syz.2.2141: mark inode dirty (error -117) [ 168.017151][T10901] EXT4-fs warning (device loop2): ext4_evict_inode:274: xattr delete (err -117) [ 168.029392][T10901] EXT4-fs (loop2): 1 orphan inode deleted [ 168.035727][T10901] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 168.084314][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.089746][T10919] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2147'. [ 168.295444][T10935] xt_bpf: check failed: parse error [ 168.324010][T10938] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=7013 sclass=netlink_route_socket pid=10938 comm=syz.1.2152 [ 168.349941][T10938] team0: Mode changed to "loadbalance" [ 168.376033][T10942] support for cryptoloop has been removed. Use dm-crypt instead. [ 168.425722][T10953] loop8: detected capacity change from 0 to 512 [ 168.433145][T10953] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 168.450773][T10953] EXT4-fs (loop8): 1 truncate cleaned up [ 168.459030][T10953] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 168.487659][T10955] lo speed is unknown, defaulting to 1000 [ 168.522604][ T8975] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.647109][T10970] vlan0: entered allmulticast mode [ 168.769383][T10977] ip6gre1: entered promiscuous mode [ 168.775297][T10977] ip6gre1: entered allmulticast mode [ 168.824384][T10983] xt_connbytes: Forcing CT accounting to be enabled [ 168.837736][T10983] set match dimension is over the limit! [ 168.848690][T10981] netlink: 'syz.9.2171': attribute type 1 has an invalid length. [ 168.987915][T10998] loop5: detected capacity change from 0 to 512 [ 169.013100][T11002] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 169.027277][T10998] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 169.047960][T10998] usb usb9: usbfs: interface 0 claimed by hub while 'syz.5.2176' sets config #0 [ 169.187032][T11022] bridge_slave_0: left allmulticast mode [ 169.192751][T11022] bridge_slave_0: left promiscuous mode [ 169.198826][T11022] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.208826][T11022] bridge_slave_1: left allmulticast mode [ 169.214843][T11022] bridge_slave_1: left promiscuous mode [ 169.220773][T11022] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.236447][T11022] bond0: (slave bond_slave_0): Releasing backup interface [ 169.253494][T11022] bond0: (slave bond_slave_1): Releasing backup interface [ 169.273617][T11022] team0: Port device team_slave_0 removed [ 169.286075][T11022] team0: Port device team_slave_1 removed [ 169.293411][T11022] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 169.300965][T11022] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 169.310983][T11022] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 169.318480][T11022] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 169.334067][T11022] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 169.669664][T11024] Set syz1 is full, maxelem 65536 reached [ 169.728807][T11037] netlink: 'syz.1.2191': attribute type 1 has an invalid length. [ 169.744314][T11037] 8021q: adding VLAN 0 to HW filter on device bond2 [ 169.855135][ T6617] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.976310][T11052] bond1: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 169.987564][T11052] bond1 (unregistering): Released all slaves [ 170.140668][T11070] loop5: detected capacity change from 0 to 512 [ 170.166614][T11070] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 170.207969][T11072] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=11072 comm=syz.2.2205 [ 170.285523][ T6617] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.349148][T11087] xt_hashlimit: max too large, truncated to 1048576 [ 170.356631][T11085] __nla_validate_parse: 14 callbacks suppressed [ 170.356649][T11085] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2209'. [ 170.550584][T11101] loop2: detected capacity change from 0 to 256 [ 170.594632][T11103] netlink: 96 bytes leftover after parsing attributes in process `syz.9.2215'. [ 170.605703][T11105] loop5: detected capacity change from 0 to 512 [ 170.627074][T11105] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 170.668699][T11105] ip6gre2: entered promiscuous mode [ 170.745203][ T6617] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.919867][T11103] loop9: detected capacity change from 0 to 32768 [ 170.962453][T11120] lo speed is unknown, defaulting to 1000 [ 170.985366][T11103] loop9: p1 p2 p3 < > p4 < p5 p6 > [ 170.990923][T11103] loop9: p1 start 460800 is beyond EOD, truncated [ 170.997563][T11103] loop9: p2 size 83886080 extends beyond EOD, truncated [ 171.017829][T11103] loop9: p5 start 460800 is beyond EOD, truncated [ 171.024352][T11103] loop9: p6 size 83886080 extends beyond EOD, truncated [ 171.055577][T11124] netlink: 36 bytes leftover after parsing attributes in process `syz.8.2221'. [ 171.125616][T11130] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2225'. [ 171.142582][T11133] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2226'. [ 171.365437][T11153] lo: entered allmulticast mode [ 171.375326][T11152] lo: left allmulticast mode [ 171.406548][T11166] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 171.451022][T11169] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 171.517973][T11181] loop9: detected capacity change from 0 to 512 [ 171.536641][T11181] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 171.581943][T11169] netlink: 19 bytes leftover after parsing attributes in process `syz.8.2239'. [ 171.593765][T10689] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.621900][T11189] loop9: detected capacity change from 0 to 1024 [ 171.629339][T11191] FAULT_INJECTION: forcing a failure. [ 171.629339][T11191] name failslab, interval 1, probability 0, space 0, times 0 [ 171.629866][T11189] EXT4-fs: Ignoring removed orlov option [ 171.642562][T11191] CPU: 1 UID: 0 PID: 11191 Comm: syz.8.2246 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 171.642657][T11191] Tainted: [W]=WARN [ 171.642709][T11191] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 171.642725][T11191] Call Trace: [ 171.642732][T11191] [ 171.642744][T11191] __dump_stack+0x1d/0x30 [ 171.642779][T11191] dump_stack_lvl+0xe8/0x140 [ 171.642860][T11191] dump_stack+0x15/0x1b [ 171.642886][T11191] should_fail_ex+0x265/0x280 [ 171.642914][T11191] ? tipc_topsrv_queue_evt+0x1c3/0x300 [ 171.642953][T11191] should_failslab+0x8c/0xb0 [ 171.642995][T11191] __kmalloc_cache_noprof+0x4c/0x4a0 [ 171.643071][T11191] tipc_topsrv_queue_evt+0x1c3/0x300 [ 171.643112][T11191] tipc_sub_report_overlap+0x2ef/0x310 [ 171.643161][T11191] tipc_nametbl_insert_publ+0x86c/0x930 [ 171.643233][T11191] tipc_nametbl_publish+0x112/0x1c0 [ 171.643290][T11191] tipc_sk_publish+0x121/0x200 [ 171.643437][T11191] tipc_sk_join+0x24b/0x2e0 [ 171.643475][T11191] tipc_setsockopt+0x598/0x620 [ 171.643508][T11191] ? __pfx_tipc_setsockopt+0x10/0x10 [ 171.643581][T11191] __sys_setsockopt+0x184/0x200 [ 171.643707][T11191] __x64_sys_setsockopt+0x64/0x80 [ 171.643804][T11191] x64_sys_call+0x20ec/0x3000 [ 171.643847][T11191] do_syscall_64+0xd2/0x200 [ 171.643874][T11191] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 171.643962][T11191] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 171.644008][T11191] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.644039][T11191] RIP: 0033:0x7f219ca1efc9 [ 171.644083][T11191] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 171.644110][T11191] RSP: 002b:00007f219b487038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 171.644136][T11191] RAX: ffffffffffffffda RBX: 00007f219cc75fa0 RCX: 00007f219ca1efc9 [ 171.644154][T11191] RDX: 0000000000000087 RSI: 000000000000010f RDI: 0000000000000007 [ 171.644172][T11191] RBP: 00007f219b487090 R08: 0000000000000010 R09: 0000000000000000 [ 171.644190][T11191] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000002 [ 171.644234][T11191] R13: 00007f219cc76038 R14: 00007f219cc75fa0 R15: 00007fffd0ae88b8 [ 171.644265][T11191] [ 171.980611][T11189] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 172.000257][T11189] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.571825][T11211] loop2: detected capacity change from 0 to 512 [ 172.605161][T11211] EXT4-fs: Ignoring removed bh option [ 172.666084][T11211] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 172.796916][T11220] loop8: detected capacity change from 0 to 512 [ 172.815118][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.865804][T11220] EXT4-fs (loop8): revision level too high, forcing read-only mode [ 172.892522][T11220] EXT4-fs (loop8): failed to initialize system zone (-117) [ 172.932436][T11220] EXT4-fs (loop8): mount failed [ 172.957142][T11229] loop9: detected capacity change from 0 to 512 [ 173.106610][T11233] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2257'. [ 173.122867][T11229] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 173.154395][ T29] kauditd_printk_skb: 323 callbacks suppressed [ 173.154415][ T29] audit: type=1326 audit(686.119:7452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11237 comm="syz.8.2262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f219ca1efc9 code=0x7ffc0000 [ 173.183720][ T29] audit: type=1326 audit(686.119:7453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11237 comm="syz.8.2262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f219ca1efc9 code=0x7ffc0000 [ 173.206965][ T29] audit: type=1326 audit(686.119:7454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11237 comm="syz.8.2262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f219ca1efc9 code=0x7ffc0000 [ 173.230951][ T29] audit: type=1326 audit(686.119:7455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11237 comm="syz.8.2262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f219ca1efc9 code=0x7ffc0000 [ 173.254051][ T29] audit: type=1326 audit(686.119:7456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11237 comm="syz.8.2262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f219ca1efc9 code=0x7ffc0000 [ 173.277514][ T29] audit: type=1326 audit(686.119:7457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11237 comm="syz.8.2262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f219ca1efc9 code=0x7ffc0000 [ 173.300506][ T29] audit: type=1326 audit(686.119:7458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11237 comm="syz.8.2262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f219ca1efc9 code=0x7ffc0000 [ 173.323532][ T29] audit: type=1326 audit(686.119:7459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11237 comm="syz.8.2262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f219ca1efc9 code=0x7ffc0000 [ 173.346645][ T29] audit: type=1326 audit(686.119:7460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11237 comm="syz.8.2262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f219ca1efc9 code=0x7ffc0000 [ 173.369555][ T29] audit: type=1326 audit(686.119:7461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11237 comm="syz.8.2262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f219ca1efc9 code=0x7ffc0000 [ 173.453677][T11242] loop2: detected capacity change from 0 to 2048 [ 173.479270][T10689] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.603258][T11242] EXT4-fs (loop2): failed to initialize system zone (-117) [ 173.617958][T11242] EXT4-fs (loop2): mount failed [ 173.635153][T11242] loop2: detected capacity change from 0 to 256 [ 173.650908][T11242] bio_check_eod: 40 callbacks suppressed [ 173.650924][T11242] syz.2.2263: attempt to access beyond end of device [ 173.650924][T11242] loop2: rw=2049, sector=256, nr_sectors = 100 limit=256 [ 173.730694][T11250] vlan2: entered allmulticast mode [ 174.116950][T11257] netlink: 40 bytes leftover after parsing attributes in process `syz.9.2268'. [ 174.308294][T11269] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 174.393886][T11272] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2275'. [ 174.395946][T11273] netlink: 'syz.5.2273': attribute type 10 has an invalid length. [ 174.412934][T11273] team0: Port device dummy0 added [ 174.423297][T11273] netlink: 'syz.5.2273': attribute type 10 has an invalid length. [ 174.431979][T11273] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 174.509718][T11273] team0: Failed to send options change via netlink (err -105) [ 174.544564][T11273] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 174.582566][T11273] team0: Port device dummy0 removed [ 174.597153][T11273] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 174.845636][T11310] loop5: detected capacity change from 0 to 128 [ 174.856949][T11310] EXT4-fs warning (device loop5): ext4_init_metadata_csum:4635: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 174.870511][T11310] EXT4-fs (loop5): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 174.903451][T11314] tipc: Enabling of bearer rejected, already enabled [ 174.966872][T11320] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2293'. [ 175.088698][T11330] loop8: detected capacity change from 0 to 512 [ 175.295625][T11342] xt_hashlimit: max too large, truncated to 1048576 [ 175.339344][T11344] loop9: detected capacity change from 0 to 512 [ 175.355553][T11346] x_tables: duplicate underflow at hook 1 [ 175.408449][T11344] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 175.461466][T11363] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 175.481365][T11367] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 175.482117][T10689] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.549775][T11375] lo speed is unknown, defaulting to 1000 [ 175.599860][T11378] loop8: detected capacity change from 0 to 1024 [ 175.634623][T11378] EXT4-fs (loop8): filesystem is read-only [ 176.032048][T11405] loop8: detected capacity change from 0 to 512 [ 176.041240][T11405] EXT4-fs warning (device loop8): ext4_xattr_inode_get:546: inode #11: comm syz.8.2324: ea_inode file size=7 entry size=6 [ 176.054917][T11405] EXT4-fs error (device loop8): ext4_do_update_inode:5632: inode #15: comm syz.8.2324: corrupted inode contents [ 176.071039][T11405] EXT4-fs error (device loop8): ext4_dirty_inode:6517: inode #15: comm syz.8.2324: mark_inode_dirty error [ 176.083201][T11405] EXT4-fs error (device loop8): ext4_do_update_inode:5632: inode #15: comm syz.8.2324: corrupted inode contents [ 176.095820][T11405] EXT4-fs error (device loop8): ext4_xattr_delete_inode:2996: inode #15: comm syz.8.2324: mark_inode_dirty error [ 176.110844][T11405] EXT4-fs error (device loop8): ext4_xattr_delete_inode:2999: inode #15: comm syz.8.2324: mark inode dirty (error -117) [ 176.123884][T11405] EXT4-fs warning (device loop8): ext4_evict_inode:274: xattr delete (err -117) [ 176.133228][T11405] EXT4-fs (loop8): 1 orphan inode deleted [ 176.139814][T11405] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 176.236143][ T8975] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.417618][T11418] __nla_validate_parse: 1 callbacks suppressed [ 176.417633][T11418] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2328'. [ 176.567343][T11424] FAULT_INJECTION: forcing a failure. [ 176.567343][T11424] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 176.580719][T11424] CPU: 1 UID: 0 PID: 11424 Comm: syz.2.2330 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 176.580753][T11424] Tainted: [W]=WARN [ 176.580761][T11424] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 176.580781][T11424] Call Trace: [ 176.580788][T11424] [ 176.580798][T11424] __dump_stack+0x1d/0x30 [ 176.580865][T11424] dump_stack_lvl+0xe8/0x140 [ 176.580886][T11424] dump_stack+0x15/0x1b [ 176.580905][T11424] should_fail_ex+0x265/0x280 [ 176.580928][T11424] should_fail+0xb/0x20 [ 176.580950][T11424] should_fail_usercopy+0x1a/0x20 [ 176.581035][T11424] strncpy_from_user+0x25/0x230 [ 176.581114][T11424] strncpy_from_user_nofault+0x68/0xf0 [ 176.581144][T11424] bpf_probe_read_compat_str+0xb4/0x130 [ 176.581178][T11424] bpf_prog_95f2e3557e98b35e+0x3e/0x44 [ 176.581195][T11424] bpf_trace_run2+0x107/0x1c0 [ 176.581286][T11424] ? p9_client_create+0x55d/0xbc0 [ 176.581319][T11424] ? p9_client_create+0x55d/0xbc0 [ 176.581372][T11424] __traceiter_kfree+0x2e/0x50 [ 176.581402][T11424] ? p9_client_create+0x55d/0xbc0 [ 176.581502][T11424] kfree+0x351/0x400 [ 176.581532][T11424] ? strsep+0x1d/0x100 [ 176.581646][T11424] p9_client_create+0x55d/0xbc0 [ 176.581695][T11424] v9fs_session_init+0xf7/0xde0 [ 176.581738][T11424] ? avc_has_perm_noaudit+0x1b1/0x200 [ 176.581830][T11424] ? should_fail_ex+0xdb/0x280 [ 176.581854][T11424] ? v9fs_mount+0x51/0x5c0 [ 176.581881][T11424] ? should_failslab+0x8c/0xb0 [ 176.581919][T11424] ? __kmalloc_cache_noprof+0x249/0x4a0 [ 176.581987][T11424] v9fs_mount+0x67/0x5c0 [ 176.582007][T11424] ? selinux_capable+0x31/0x40 [ 176.582149][T11424] ? __pfx_v9fs_mount+0x10/0x10 [ 176.582182][T11424] legacy_get_tree+0x78/0xd0 [ 176.582217][T11424] vfs_get_tree+0x57/0x1d0 [ 176.582252][T11424] do_new_mount+0x24d/0x660 [ 176.582283][T11424] ? security_capable+0x83/0x90 [ 176.582378][T11424] path_mount+0x4a5/0xb70 [ 176.582415][T11424] ? user_path_at+0x109/0x130 [ 176.582440][T11424] __se_sys_mount+0x28c/0x2e0 [ 176.582470][T11424] ? fput+0x8f/0xc0 [ 176.582495][T11424] __x64_sys_mount+0x67/0x80 [ 176.582601][T11424] x64_sys_call+0x2b51/0x3000 [ 176.582630][T11424] do_syscall_64+0xd2/0x200 [ 176.582663][T11424] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 176.582721][T11424] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 176.582797][T11424] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.582819][T11424] RIP: 0033:0x7fc5a87fefc9 [ 176.582836][T11424] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 176.582874][T11424] RSP: 002b:00007fc5a7267038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 176.582898][T11424] RAX: ffffffffffffffda RBX: 00007fc5a8a55fa0 RCX: 00007fc5a87fefc9 [ 176.582914][T11424] RDX: 0000200000000b80 RSI: 0000200000000040 RDI: 0000000000000000 [ 176.582930][T11424] RBP: 00007fc5a7267090 R08: 0000200000000580 R09: 0000000000000000 [ 176.582947][T11424] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 176.582963][T11424] R13: 00007fc5a8a56038 R14: 00007fc5a8a55fa0 R15: 00007ffcf7e706c8 [ 176.583042][T11424] [ 176.959362][T11430] nft_compat: unsupported protocol 5 [ 176.977176][T11430] loop5: detected capacity change from 0 to 512 [ 177.024882][T11430] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 177.126288][ T6617] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.158502][T11450] netlink: 7 bytes leftover after parsing attributes in process `syz.1.2341'. [ 177.180923][T11450] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2341'. [ 177.212060][T11454] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 177.250725][T11460] loop9: detected capacity change from 0 to 1024 [ 177.277648][T11460] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 177.303104][T10689] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.396574][ T29] kauditd_printk_skb: 182 callbacks suppressed [ 178.396589][ T29] audit: type=1400 audit(691.369:7644): avc: denied { execute } for pid=11465 comm="syz.5.2347" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=31334 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 178.447959][ T29] audit: type=1400 audit(691.409:7645): avc: denied { setopt } for pid=11475 comm="syz.9.2352" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 178.534063][T11481] loop2: detected capacity change from 0 to 4096 [ 178.552134][T11481] EXT4-fs: Ignoring removed nomblk_io_submit option [ 178.589401][T11481] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 178.647281][T11500] loop8: detected capacity change from 0 to 128 [ 178.663466][T11500] hub 1-0:1.0: USB hub found [ 178.668451][T11500] hub 1-0:1.0: 8 ports detected [ 178.678105][ T29] audit: type=1400 audit(691.649:7646): avc: denied { write } for pid=11497 comm=FF scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 178.703739][ T29] audit: type=1400 audit(691.669:7647): avc: denied { map_create } for pid=11501 comm="syz.5.2363" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 178.722442][ T29] audit: type=1400 audit(691.669:7648): avc: denied { prog_load } for pid=11501 comm="syz.5.2363" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 178.741256][ T29] audit: type=1400 audit(691.669:7649): avc: denied { bpf } for pid=11501 comm="syz.5.2363" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 178.748591][T11484] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2355'. [ 178.761558][ T29] audit: type=1400 audit(691.669:7650): avc: denied { perfmon } for pid=11501 comm="syz.5.2363" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 178.794366][T11505] vlan0: entered allmulticast mode [ 178.802300][ T29] audit: type=1400 audit(691.669:7651): avc: denied { recv } for pid=8975 comm="syz-executor" saddr=10.128.0.163 src=30036 daddr=10.128.0.38 dest=38838 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 178.827650][ T29] audit: type=1400 audit(691.669:7652): avc: denied { unmount } for pid=8975 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 178.919064][ T29] audit: type=1400 audit(691.889:7653): avc: denied { read write } for pid=8975 comm="syz-executor" name="loop8" dev="devtmpfs" ino=108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 178.980206][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.123616][T11518] loop2: detected capacity change from 0 to 512 [ 179.139667][T11518] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 179.165221][T11518] EXT4-fs (loop2): 1 truncate cleaned up [ 179.178277][T11518] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 179.362823][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.503028][T11529] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 179.635441][T11543] bridge0: port 1(gretap0) entered blocking state [ 179.635474][T11542] loop5: detected capacity change from 0 to 4096 [ 179.642225][T11543] bridge0: port 1(gretap0) entered disabled state [ 179.648932][T11542] EXT4-fs: Ignoring removed nomblk_io_submit option [ 179.662222][T11543] gretap0: entered allmulticast mode [ 179.668922][T11543] gretap0: entered promiscuous mode [ 179.676450][T11542] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 179.689308][T11543] bridge0: port 1(gretap0) entered blocking state [ 179.695874][T11543] bridge0: port 1(gretap0) entered forwarding state [ 179.716602][T11547] gretap0: left allmulticast mode [ 179.721717][T11547] gretap0: left promiscuous mode [ 179.726947][T11547] bridge0: port 1(gretap0) entered disabled state [ 179.814593][T11551] netlink: 'syz.5.2379': attribute type 6 has an invalid length. [ 179.945325][T11531] loop2: detected capacity change from 0 to 128 [ 179.975225][ T6617] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.056492][T11575] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11575 comm=syz.9.2389 [ 180.360626][T11603] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2402'. [ 180.382098][T11600] loop9: detected capacity change from 0 to 2048 [ 180.397141][T11600] EXT4-fs: Ignoring removed nomblk_io_submit option [ 180.405778][T11600] EXT4-fs: Mount option(s) incompatible with ext3 [ 180.420816][T11610] loop5: detected capacity change from 0 to 512 [ 180.430185][T11610] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 180.476232][T11611] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 180.504922][T11611] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 180.810207][T11626] lo speed is unknown, defaulting to 1000 [ 180.971327][T11627] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2407'. [ 181.254788][T11632] netlink: 'syz.2.2411': attribute type 10 has an invalid length. [ 181.265821][T11633] netlink: 'syz.2.2411': attribute type 10 has an invalid length. [ 181.278157][T11633] team0: Port device dummy0 added [ 181.284153][T11633] netlink: 'syz.2.2411': attribute type 10 has an invalid length. [ 181.296742][T11633] team0: Port device dummy0 removed [ 181.304746][T11633] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 181.492071][T11636] netlink: 19 bytes leftover after parsing attributes in process `syz.2.2412'. [ 181.780339][T11649] tipc: Started in network mode [ 181.785475][T11649] tipc: Node identity , cluster identity 4711 [ 181.791924][T11649] tipc: Failed to obtain node identity [ 181.797644][T11649] tipc: Enabling of bearer rejected, failed to enable media [ 182.019834][T11658] netlink: 76 bytes leftover after parsing attributes in process `syz.5.2421'. [ 182.055309][T11661] xt_bpf: check failed: parse error [ 182.510831][T11672] netlink: 1 bytes leftover after parsing attributes in process `syz.2.2426'. [ 182.588910][T11677] bond0: (slave dummy0): Releasing backup interface [ 182.600973][T11677] bond0: (slave bond_slave_0): Releasing backup interface [ 182.611243][T11677] bond0: (slave bond_slave_1): Releasing backup interface [ 182.623440][T11677] team0: Port device team_slave_0 removed [ 182.631223][T11677] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 182.640370][T11677] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 182.649689][T11677] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 182.811566][T11679] lo speed is unknown, defaulting to 1000 [ 182.938925][T11680] loop9: detected capacity change from 0 to 1024 [ 182.969425][T11680] EXT4-fs (loop9): ext4_check_descriptors: Checksum for group 0 failed (58532!=20869) [ 182.980500][T11685] vhci_hcd: invalid port number 65 [ 182.985734][T11685] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 183.010428][T11680] JBD2: no valid journal superblock found [ 183.016268][T11680] EXT4-fs (loop9): Could not load journal inode [ 183.088839][T11689] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2432'. [ 183.097994][T11689] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2432'. [ 183.127579][T11689] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2432'. [ 183.173143][T11689] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2432'. [ 183.177441][T11691] lo speed is unknown, defaulting to 1000 [ 183.182465][T11689] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2432'. [ 183.217665][T11689] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2432'. [ 183.273613][T11689] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2432'. [ 183.369667][T11700] netlink: 'syz.5.2434': attribute type 3 has an invalid length. [ 183.430358][T11710] loop8: detected capacity change from 0 to 4096 [ 183.455381][T11708] geneve2: entered promiscuous mode [ 183.460751][T11708] geneve2: entered allmulticast mode [ 183.468115][ T29] kauditd_printk_skb: 265 callbacks suppressed [ 183.468165][ T29] audit: type=1400 audit(696.449:7919): avc: denied { write } for pid=11699 comm="syz.5.2434" name="anycast6" dev="proc" ino=4026533462 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 183.505660][T11710] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 183.545355][ T29] audit: type=1400 audit(696.509:7920): avc: denied { setopt } for pid=11719 comm="syz.5.2442" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 183.599602][T11726] netlink: 'syz.5.2442': attribute type 10 has an invalid length. [ 183.624693][T11726] batadv0: entered allmulticast mode [ 183.634557][ T29] audit: type=1400 audit(696.549:7921): avc: denied { setopt } for pid=11721 comm="syz.2.2443" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 183.654868][ T29] audit: type=1400 audit(696.549:7922): avc: denied { write } for pid=11721 comm="syz.2.2443" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 183.676578][T11726] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 183.684911][T11726] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 183.724729][T11734] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 183.739562][T11727] loop5: detected capacity change from 0 to 4096 [ 183.747969][ T29] audit: type=1400 audit(696.679:7923): avc: denied { create } for pid=11728 comm="syz.9.2445" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 183.767131][ T29] audit: type=1400 audit(696.679:7924): avc: denied { setopt } for pid=11728 comm="syz.9.2445" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 183.786521][ T29] audit: type=1326 audit(696.679:7925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11729 comm="syz.2.2446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5a87fefc9 code=0x7ffc0000 [ 183.810098][ T29] audit: type=1326 audit(696.679:7926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11729 comm="syz.2.2446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=136 compat=0 ip=0x7fc5a87fefc9 code=0x7ffc0000 [ 183.833033][ T29] audit: type=1326 audit(696.679:7927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11729 comm="syz.2.2446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5a87fefc9 code=0x7ffc0000 [ 183.856184][ T29] audit: type=1326 audit(696.679:7928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11729 comm="syz.2.2446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5a87fefc9 code=0x7ffc0000 [ 183.884835][T11727] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 183.918146][T11726] netlink: 'syz.5.2442': attribute type 10 has an invalid length. [ 183.927625][T11726] batadv0: entered promiscuous mode [ 183.934981][T11726] bond0: (slave batadv0): Releasing backup interface [ 183.954334][T11726] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 184.058395][ T8975] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 184.091048][T11753] FAULT_INJECTION: forcing a failure. [ 184.091048][T11753] name failslab, interval 1, probability 0, space 0, times 0 [ 184.103859][T11753] CPU: 1 UID: 0 PID: 11753 Comm: syz.8.2452 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 184.103967][T11753] Tainted: [W]=WARN [ 184.103975][T11753] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 184.104008][T11753] Call Trace: [ 184.104015][T11753] [ 184.104023][T11753] __dump_stack+0x1d/0x30 [ 184.104061][T11753] dump_stack_lvl+0xe8/0x140 [ 184.104089][T11753] dump_stack+0x15/0x1b [ 184.104190][T11753] should_fail_ex+0x265/0x280 [ 184.104215][T11753] should_failslab+0x8c/0xb0 [ 184.104261][T11753] __kmalloc_noprof+0xa5/0x570 [ 184.104290][T11753] ? security_bpf_prog_load+0x60/0x140 [ 184.104374][T11753] ? strncpy_from_user+0x13a/0x230 [ 184.104405][T11753] security_bpf_prog_load+0x60/0x140 [ 184.104446][T11753] bpf_prog_load+0xef8/0x1100 [ 184.104563][T11753] ? security_bpf+0x2b/0x90 [ 184.104721][T11753] __sys_bpf+0x469/0x7c0 [ 184.104752][T11753] __x64_sys_bpf+0x41/0x50 [ 184.104789][T11753] x64_sys_call+0x2aee/0x3000 [ 184.104871][T11753] do_syscall_64+0xd2/0x200 [ 184.104892][T11753] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 184.104929][T11753] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 184.104991][T11753] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.105022][T11753] RIP: 0033:0x7f219ca1efc9 [ 184.105046][T11753] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 184.105070][T11753] RSP: 002b:00007f219b487038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 184.105099][T11753] RAX: ffffffffffffffda RBX: 00007f219cc75fa0 RCX: 00007f219ca1efc9 [ 184.105112][T11753] RDX: 0000000000000094 RSI: 0000200000000680 RDI: 0000000000000005 [ 184.105154][T11753] RBP: 00007f219b487090 R08: 0000000000000000 R09: 0000000000000000 [ 184.105167][T11753] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 184.105184][T11753] R13: 00007f219cc76038 R14: 00007f219cc75fa0 R15: 00007fffd0ae88b8 [ 184.105210][T11753] [ 184.367002][T11755] hsr_slave_0: left promiscuous mode [ 184.379488][T11755] hsr_slave_1: left promiscuous mode [ 184.977150][T11805] loop2: detected capacity change from 0 to 512 [ 185.058011][T11805] EXT4-fs warning (device loop2): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 185.106338][T11805] EXT4-fs (loop2): mount failed [ 185.133198][T11803] loop9: detected capacity change from 0 to 1024 [ 185.140595][T11803] EXT4-fs: Ignoring removed orlov option [ 185.146379][T11803] EXT4-fs: Ignoring removed nomblk_io_submit option [ 185.156331][T11821] netlink: 'syz.1.2478': attribute type 6 has an invalid length. [ 185.156689][T11803] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 185.196155][T10689] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 185.457397][T11860] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 185.517910][T11864] lo speed is unknown, defaulting to 1000 [ 185.773004][T11897] xt_hashlimit: max too large, truncated to 1048576 [ 185.834065][T11905] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 185.990762][T11923] loop5: detected capacity change from 0 to 2048 [ 186.046617][T11923] GPT:first_usable_lbas don't match. [ 186.052068][T11923] GPT:34 != 290 [ 186.055601][T11923] GPT: Use GNU Parted to correct GPT errors. [ 186.059348][T11927] loop2: detected capacity change from 0 to 164 [ 186.061778][T11923] loop5: p1 p2 p3 [ 186.075424][T11927] ISOFS: unable to read i-node block [ 186.081244][T11927] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 186.097241][T11929] loop9: detected capacity change from 0 to 1024 [ 186.097571][T11927] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=62215 sclass=netlink_route_socket pid=11927 comm=syz.2.2518 [ 186.104449][T11929] EXT4-fs: Ignoring removed orlov option [ 186.127423][T11929] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a843c118, mo2=0002] [ 186.136103][T11929] System zones: 0-1, 3-12 [ 186.140884][T11929] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 186.157014][T11927] 9p: Unknown access argument 00000000000000000000ýÿ: -22 [ 186.169165][T10689] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 186.205122][T11935] hsr_slave_0: left promiscuous mode [ 186.215440][T11935] hsr_slave_1: left promiscuous mode [ 186.256056][T11940] sg_write: data in/out 12583036/1 bytes for SCSI command 0x1c-- guessing data in; [ 186.256056][T11940] program syz.2.2522 not setting count and/or reply_len properly [ 186.307165][T11944] netlink: 'syz.9.2524': attribute type 9 has an invalid length. [ 186.346843][T11947] loop2: detected capacity change from 0 to 128 [ 186.358669][T11947] vfat: Unknown parameter '/proc/self/attr/current' [ 186.542027][T11960] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 186.657861][T11977] __nla_validate_parse: 15 callbacks suppressed [ 186.657888][T11977] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2537'. [ 186.673317][T11977] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2537'. [ 186.720292][T11982] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2540'. [ 186.852446][T11985] netlink: 7 bytes leftover after parsing attributes in process `syz.1.2542'. [ 186.861729][T11985] netlink: 7 bytes leftover after parsing attributes in process `syz.1.2542'. [ 186.921894][T11995] netdevsim netdevsim5 netdevsim0: entered allmulticast mode [ 186.947104][T11997] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2548'. [ 186.957531][T11998] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=11998 comm=syz.1.2548 [ 187.012360][T12006] loop5: detected capacity change from 0 to 512 [ 187.106775][T12013] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.2554'. [ 187.121494][T12006] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 187.137158][T12006] EXT4-fs error (device loop5): ext4_xattr_block_get:597: inode #15: comm syz.5.2551: corrupted xattr block 32: overlapping e_value [ 187.151384][T12006] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 187.160711][T12006] EXT4-fs error (device loop5): ext4_xattr_block_get:597: inode #15: comm syz.5.2551: corrupted xattr block 32: overlapping e_value [ 187.174905][T12006] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 187.229171][T12027] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 187.238814][T12031] EXT4-fs error (device loop5): ext4_xattr_block_get:597: inode #15: comm syz.5.2551: corrupted xattr block 32: overlapping e_value [ 187.334107][T12033] lo speed is unknown, defaulting to 1000 [ 187.559151][T12031] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 187.676628][T12036] sctp: [Deprecated]: syz.1.2559 (pid 12036) Use of struct sctp_assoc_value in delayed_ack socket option. [ 187.676628][T12036] Use struct sctp_sack_info instead [ 187.718812][T12040] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.2561'. [ 187.871872][T12046] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 187.885160][ T6617] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.098120][T12055] loop8: detected capacity change from 0 to 2048 [ 188.154825][T12055] loop8: p3 < > p4 < > [ 188.159134][T12055] loop8: partition table partially beyond EOD, truncated [ 188.178751][T12055] loop8: p3 start 4284289 is beyond EOD, truncated [ 188.186665][T12060] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.2569'. [ 188.202701][T12055] netlink: 'syz.8.2567': attribute type 13 has an invalid length. [ 188.346494][T12055] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.353788][T12055] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.568197][T12055] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 188.622985][T12055] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 188.807512][T12084] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2574'. [ 188.824772][ T4987] netdevsim netdevsim8 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 188.833962][ T4987] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.852762][ T4987] netdevsim netdevsim8 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 188.861899][ T4987] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.874593][ T29] kauditd_printk_skb: 98 callbacks suppressed [ 188.874612][ T29] audit: type=1400 audit(701.839:8026): avc: denied { connect } for pid=12094 comm=EF5CC00907769FD6D1982CC808452F scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 188.893668][ T4987] netdevsim netdevsim8 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 188.911654][ T4987] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.927564][ T4987] netdevsim netdevsim8 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 188.936654][ T4987] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.946816][ T29] audit: type=1326 audit(701.889:8027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12098 comm="syz.5.2577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d7256efc9 code=0x7ffc0000 [ 188.970018][ T29] audit: type=1326 audit(701.889:8028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12098 comm="syz.5.2577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d7256efc9 code=0x7ffc0000 [ 188.993649][ T29] audit: type=1326 audit(701.899:8029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12098 comm="syz.5.2577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f3d7256efc9 code=0x7ffc0000 [ 189.016752][ T29] audit: type=1326 audit(701.899:8030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12098 comm="syz.5.2577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d7256efc9 code=0x7ffc0000 [ 189.039712][ T29] audit: type=1326 audit(701.899:8031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12098 comm="syz.5.2577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d7256efc9 code=0x7ffc0000 [ 189.063106][ T29] audit: type=1326 audit(701.899:8032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12098 comm="syz.5.2577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3d7256efc9 code=0x7ffc0000 [ 189.086206][ T29] audit: type=1326 audit(701.899:8033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12098 comm="syz.5.2577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d7256efc9 code=0x7ffc0000 [ 189.105466][T12099] netlink: 'syz.5.2577': attribute type 21 has an invalid length. [ 189.109403][ T29] audit: type=1326 audit(701.899:8034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12098 comm="syz.5.2577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3d7256efc9 code=0x7ffc0000 [ 189.140329][ T29] audit: type=1326 audit(701.899:8035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12098 comm="syz.5.2577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d7256efc9 code=0x7ffc0000 [ 189.168116][T12106] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 189.279414][T12113] loop9: detected capacity change from 0 to 512 [ 189.286214][T12113] EXT4-fs: Ignoring removed bh option [ 189.335319][T12113] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 189.371884][T10689] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.382516][T12127] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=53 sclass=netlink_route_socket pid=12127 comm=syz.1.2586 [ 189.397978][T12082] IPVS: starting estimator thread 0... [ 189.415429][T12127] 8021q: adding VLAN 0 to HW filter on device bond3 [ 189.582924][T12128] IPVS: using max 1968 ests per chain, 98400 per kthread [ 189.613730][T12136] tipc: Started in network mode [ 189.618760][T12136] tipc: Node identity ac14140f, cluster identity 4711 [ 189.626407][T12136] tipc: New replicast peer: 255.255.255.83 [ 189.632378][T12136] tipc: Enabled bearer , priority 10 [ 190.523371][T12175] ipt_ECN: cannot use operation on non-tcp rule [ 190.782144][T12082] tipc: Node number set to 2886997007 [ 190.907662][T12199] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 190.968800][T12203] bridge0: port 3(batadv1) entered blocking state [ 190.975482][T12203] bridge0: port 3(batadv1) entered disabled state [ 190.982381][T12203] batadv1: entered allmulticast mode [ 190.993034][T12203] batadv1: entered promiscuous mode [ 191.013893][T12210] syz!: rxe_newlink: already configured on team_slave_0 [ 191.044331][T12210] loop2: detected capacity change from 0 to 1764 [ 191.255320][T12226] 0ªX¹¦À: renamed from caif0 [ 191.267142][T12226] 0ªX¹¦À: entered allmulticast mode [ 191.272630][T12226] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 191.364057][T12235] loop8: detected capacity change from 0 to 2048 [ 191.474729][ T4991] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 191.484121][ T4991] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 191.488033][T12245] netlink: 'syz.9.2634': attribute type 1 has an invalid length. [ 191.627081][T12249] tipc: New replicast peer: 255.255.255.255 [ 191.633292][T12249] tipc: Enabled bearer , priority 10 [ 191.661234][T12251] tipc: Enabling of bearer rejected, already enabled [ 191.895498][T12259] __nla_validate_parse: 12 callbacks suppressed [ 191.895532][T12259] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2640'. [ 191.913459][T12259] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2640'. [ 192.761608][T12288] x_tables: duplicate underflow at hook 1 [ 193.186758][T12300] loop2: detected capacity change from 0 to 512 [ 193.209303][T12300] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 193.404984][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.423814][T12311] lo speed is unknown, defaulting to 1000 [ 193.510862][T12314] lo speed is unknown, defaulting to 1000 [ 193.554712][ T4985] Bluetooth: hci0: Frame reassembly failed (-84) [ 193.709390][T12322] lo speed is unknown, defaulting to 1000 [ 193.884846][ T29] kauditd_printk_skb: 270 callbacks suppressed [ 193.884865][ T29] audit: type=1326 audit(706.859:8306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12334 comm="syz.9.2669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=136 compat=0 ip=0x7fc041b5efc9 code=0x7ffc0000 [ 193.914352][ T29] audit: type=1326 audit(706.859:8307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12334 comm="syz.9.2669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc041b5efc9 code=0x7ffc0000 [ 193.937336][ T29] audit: type=1326 audit(706.859:8308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12334 comm="syz.9.2669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc041b5efc9 code=0x7ffc0000 [ 194.034557][ T29] audit: type=1400 audit(706.969:8309): avc: denied { setopt } for pid=12339 comm="syz.9.2671" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 194.146072][T12343] 9pnet_fd: Insufficient options for proto=fd [ 194.197243][ T29] audit: type=1326 audit(707.169:8310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12344 comm="syz.1.2673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65f909efc9 code=0x7ffc0000 [ 194.262846][T12347] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 194.268893][ T29] audit: type=1326 audit(707.189:8311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12344 comm="syz.1.2673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65f909efc9 code=0x7ffc0000 [ 194.279405][T12347] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 194.293067][ T29] audit: type=1326 audit(707.189:8312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12344 comm="syz.1.2673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f65f909efc9 code=0x7ffc0000 [ 194.329080][ T29] audit: type=1326 audit(707.189:8313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12344 comm="syz.1.2673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65f909efc9 code=0x7ffc0000 [ 194.352515][ T29] audit: type=1326 audit(707.189:8314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12344 comm="syz.1.2673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65f909efc9 code=0x7ffc0000 [ 194.375669][ T29] audit: type=1326 audit(707.189:8315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12344 comm="syz.1.2673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7f65f909efc9 code=0x7ffc0000 [ 194.545357][T12355] netlink: 2 bytes leftover after parsing attributes in process `syz.2.2676'. [ 194.695623][T12359] loop9: detected capacity change from 0 to 128 [ 194.809208][T12361] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 194.877638][T12363] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2680'. [ 194.965723][T12371] loop9: detected capacity change from 0 to 512 [ 194.996912][T12371] EXT4-fs error (device loop9): ext4_xattr_inode_iget:441: inode #18: comm syz.9.2684: iget: bad extra_isize 90 (inode size 256) [ 195.061935][T12371] EXT4-fs (loop9): Remounting filesystem read-only [ 195.070837][T12371] EXT4-fs warning (device loop9): ext4_evict_inode:274: xattr delete (err -30) [ 195.080337][T12371] EXT4-fs (loop9): 1 orphan inode deleted [ 195.086766][T12371] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 195.088296][T12381] lo speed is unknown, defaulting to 1000 [ 195.116985][T10689] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.199354][T12390] loop9: detected capacity change from 0 to 128 [ 195.208066][T12385] lo speed is unknown, defaulting to 1000 [ 195.216319][T12385] lo speed is unknown, defaulting to 1000 [ 195.230742][T12385] lo speed is unknown, defaulting to 1000 [ 195.245410][T12385] infiniband s{z2: RDMA CMA: cma_listen_on_dev, error -98 [ 195.276759][T12379] loop2: detected capacity change from 0 to 512 [ 195.284282][T12385] lo speed is unknown, defaulting to 1000 [ 195.290629][T12390] FAT-fs (loop9): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 195.302921][T12385] lo speed is unknown, defaulting to 1000 [ 195.309091][T12385] lo speed is unknown, defaulting to 1000 [ 195.315371][T12385] lo speed is unknown, defaulting to 1000 [ 195.321664][T12385] lo speed is unknown, defaulting to 1000 [ 195.328071][T12385] lo speed is unknown, defaulting to 1000 [ 195.347438][T12390] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 195.366427][T12379] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 195.625216][ T3647] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 195.631525][ T44] Bluetooth: hci0: command 0x1003 tx timeout [ 195.671784][T12402] loop5: detected capacity change from 0 to 128 [ 195.901992][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.932069][T12413] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2697'. [ 195.941174][T12413] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2697'. [ 195.964416][T12414] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 195.977097][T12413] can0: slcan on ttyS3. [ 196.001462][T12417] netlink: 7 bytes leftover after parsing attributes in process `syz.2.2699'. [ 196.024862][T12410] can0 (unregistered): slcan off ttyS3. [ 196.027376][T12417] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2699'. [ 196.061122][T12419] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2700'. [ 196.086821][T12419] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2700'. [ 196.283692][T12425] loop5: detected capacity change from 0 to 1024 [ 196.335196][T12425] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 196.390524][T12425] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.2702: bg 0: block 112: padding at end of block bitmap is not set [ 196.425361][T12425] EXT4-fs error (device loop5): ext4_free_blocks:6706: comm syz.5.2702: Freeing blocks not in datazone - block = 0, count = 16 [ 196.457317][ T4988] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 28 [ 196.469803][ T4988] EXT4-fs (loop5): This should not happen!! Data will be lost [ 196.469803][ T4988] [ 196.473558][T12445] loop9: detected capacity change from 0 to 128 [ 196.479847][ T4988] EXT4-fs (loop5): Total free blocks count 0 [ 196.493371][ T4988] EXT4-fs (loop5): Free/Dirty block details [ 196.499356][ T4988] EXT4-fs (loop5): free_blocks=16 [ 196.504419][ T4988] EXT4-fs (loop5): dirty_blocks=16 [ 196.509582][ T4988] EXT4-fs (loop5): Block reservation details [ 196.515679][ T4988] EXT4-fs (loop5): i_reserved_data_blocks=1 [ 196.533248][T12445] syz.9.2710: attempt to access beyond end of device [ 196.533248][T12445] loop9: rw=2049, sector=154, nr_sectors = 6 limit=128 [ 196.548407][T12445] syz.9.2710: attempt to access beyond end of device [ 196.548407][T12445] loop9: rw=2049, sector=158, nr_sectors = 2 limit=128 [ 196.561882][T12445] Buffer I/O error on dev loop9, logical block 79, lost async page write [ 196.604566][T12445] syz.9.2710: attempt to access beyond end of device [ 196.604566][T12445] loop9: rw=2049, sector=160, nr_sectors = 2 limit=128 [ 196.618457][T12445] Buffer I/O error on dev loop9, logical block 80, lost async page write [ 196.619251][ T6617] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 196.643105][T12445] syz.9.2710: attempt to access beyond end of device [ 196.643105][T12445] loop9: rw=2049, sector=162, nr_sectors = 88 limit=128 [ 196.664746][T12445] syz.9.2710: attempt to access beyond end of device [ 196.664746][T12445] loop9: rw=2049, sector=138, nr_sectors = 16 limit=128 [ 196.836627][T12465] FAULT_INJECTION: forcing a failure. [ 196.836627][T12465] name failslab, interval 1, probability 0, space 0, times 0 [ 196.849497][T12465] CPU: 0 UID: 0 PID: 12465 Comm: syz.5.2716 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 196.849540][T12465] Tainted: [W]=WARN [ 196.849549][T12465] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 196.849564][T12465] Call Trace: [ 196.849571][T12465] [ 196.849579][T12465] __dump_stack+0x1d/0x30 [ 196.849686][T12465] dump_stack_lvl+0xe8/0x140 [ 196.849746][T12465] dump_stack+0x15/0x1b [ 196.849798][T12465] should_fail_ex+0x265/0x280 [ 196.849825][T12465] ? tipc_group_create_member+0x42/0x270 [ 196.849859][T12465] should_failslab+0x8c/0xb0 [ 196.849956][T12465] __kmalloc_cache_noprof+0x4c/0x4a0 [ 196.850039][T12465] tipc_group_create_member+0x42/0x270 [ 196.850075][T12465] tipc_group_add_member+0x2e/0x40 [ 196.850112][T12465] tipc_nametbl_build_group+0x1b6/0x230 [ 196.850243][T12465] tipc_sk_join+0x240/0x2e0 [ 196.850299][T12465] tipc_setsockopt+0x598/0x620 [ 196.850327][T12465] ? __pfx_tipc_setsockopt+0x10/0x10 [ 196.850379][T12465] __sys_setsockopt+0x184/0x200 [ 196.850425][T12465] __x64_sys_setsockopt+0x64/0x80 [ 196.850469][T12465] x64_sys_call+0x20ec/0x3000 [ 196.850579][T12465] do_syscall_64+0xd2/0x200 [ 196.850605][T12465] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 196.850643][T12465] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.850664][T12465] RIP: 0033:0x7f3d7256efc9 [ 196.850679][T12465] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 196.850754][T12465] RSP: 002b:00007f3d70fb6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 196.850780][T12465] RAX: ffffffffffffffda RBX: 00007f3d727c6090 RCX: 00007f3d7256efc9 [ 196.850797][T12465] RDX: 0000000000000087 RSI: 000000000000010f RDI: 0000000000000006 [ 196.850814][T12465] RBP: 00007f3d70fb6090 R08: 0000000000000010 R09: 0000000000000000 [ 196.850839][T12465] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000001 [ 196.850855][T12465] R13: 00007f3d727c6128 R14: 00007f3d727c6090 R15: 00007ffd89c7e788 [ 196.850882][T12465] [ 197.094292][T12469] netlink: 'syz.5.2718': attribute type 13 has an invalid length. [ 197.147618][T12472] loop5: detected capacity change from 0 to 512 [ 197.163857][T12472] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 197.277798][T12472] EXT4-fs warning (device loop5): ext4_update_dynamic_rev:1137: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 197.291384][T12445] netlink: 172 bytes leftover after parsing attributes in process `syz.9.2710'. [ 197.302277][T12472] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.2719: bg 0: block 248: padding at end of block bitmap is not set [ 197.323798][T12445] siw: device registration error -23 [ 197.330092][T12472] EXT4-fs error (device loop5): ext4_acquire_dquot:6945: comm syz.5.2719: Failed to acquire dquot type 1 [ 197.359886][T12473] process '/newroot/599/file0' started with executable stack [ 197.395381][T12472] EXT4-fs (loop5): 1 truncate cleaned up [ 197.411822][T12472] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 197.446606][T12472] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2719'. [ 197.474693][ T6617] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 197.506541][ T4986] EXT4-fs error (device loop5): ext4_release_dquot:6981: comm kworker/u8:26: Failed to release dquot type 1 [ 197.581442][T12487] loop2: detected capacity change from 0 to 1024 [ 197.601389][T12492] syzkaller0: entered promiscuous mode [ 197.607226][T12492] syzkaller0: entered allmulticast mode [ 197.624415][T12487] EXT4-fs: Ignoring removed orlov option [ 197.668800][T12487] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 197.719659][T12487] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.741861][T12485] lo speed is unknown, defaulting to 1000 [ 197.758464][T12515] loop8: detected capacity change from 0 to 128 [ 197.814162][T12485] lo speed is unknown, defaulting to 1000 [ 197.865169][T12519] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2732'. [ 197.880247][T12520] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 197.956897][T12485] chnl_net:caif_netlink_parms(): no params data found [ 198.042276][T12528] usb usb7: usbfs: process 12528 (syz.2.2735) did not claim interface 0 before use [ 198.142376][T12485] bridge0: port 1(bridge_slave_0) entered blocking state [ 198.149506][T12485] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.171968][T12485] bridge_slave_0: entered allmulticast mode [ 198.178902][T12485] bridge_slave_0: entered promiscuous mode [ 198.214647][T12485] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.221904][T12485] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.229151][T12485] bridge_slave_1: entered allmulticast mode [ 198.235788][T12485] bridge_slave_1: entered promiscuous mode [ 198.263096][T12485] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 198.277498][T12546] loop5: detected capacity change from 0 to 128 [ 198.286676][T12485] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 198.323729][T12485] team0: Port device team_slave_0 added [ 198.331098][T12485] team0: Port device team_slave_1 added [ 198.352290][T12485] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 198.359309][T12485] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 198.360862][T12545] x_tables: unsorted entry at hook 2 [ 198.385458][T12485] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 198.440551][T12485] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 198.447651][T12485] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 198.474417][T12485] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 198.531892][T12561] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2745'. [ 198.547484][T12485] hsr_slave_0: entered promiscuous mode [ 198.555199][T12485] hsr_slave_1: entered promiscuous mode [ 198.561988][T12485] debugfs: 'hsr0' already exists in 'hsr' [ 198.567912][T12485] Cannot create hsr debugfs directory [ 198.573581][T12559] tipc: Enabled bearer , priority 0 [ 198.657268][T12570] loop8: detected capacity change from 0 to 1024 [ 198.663823][T12570] EXT4-fs: Ignoring removed orlov option [ 198.693478][T12570] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 198.710760][T12570] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.751689][T12581] netlink: 'syz.5.2754': attribute type 10 has an invalid length. [ 198.759696][T12581] ipvlan0: entered allmulticast mode [ 198.765181][T12581] veth0_vlan: entered allmulticast mode [ 198.790407][T12583] loop8: detected capacity change from 0 to 512 [ 198.802947][T12583] ext3: Bad value for 'init_itable' [ 198.808442][T12581] loop5: detected capacity change from 0 to 1024 [ 198.816653][T12581] EXT4-fs: Ignoring removed orlov option [ 198.826321][T12588] loop8: detected capacity change from 0 to 512 [ 198.839786][T12581] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 198.855113][T12581] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.876510][T12595] loop2: detected capacity change from 0 to 1024 [ 198.912850][T12598] xt_CT: You must specify a L4 protocol and not use inversions on it [ 198.940814][T12600] loop5: detected capacity change from 0 to 512 [ 198.948719][T12600] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 198.961757][T12600] EXT4-fs (loop5): 1 truncate cleaned up [ 198.969651][T12600] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 198.978402][T12595] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 199.004087][T12595] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.2758: bg 0: block 112: padding at end of block bitmap is not set [ 199.018977][T12595] EXT4-fs error (device loop2): ext4_free_blocks:6706: comm syz.2.2758: Freeing blocks not in datazone - block = 0, count = 16 [ 199.019938][ T29] kauditd_printk_skb: 220 callbacks suppressed [ 199.020030][ T29] audit: type=1326 audit(711.999:8533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12599 comm="syz.5.2761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f3d7256efc9 code=0x7ffc0000 [ 199.077452][ T29] audit: type=1326 audit(712.009:8534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12599 comm="syz.5.2761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f3d7256efc9 code=0x7ffc0000 [ 199.100581][ T29] audit: type=1326 audit(712.009:8535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12599 comm="syz.5.2761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f3d7256efc9 code=0x7ffc0000 [ 199.123707][ T29] audit: type=1326 audit(712.009:8536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12599 comm="syz.5.2761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f3d7256efc9 code=0x7ffc0000 [ 199.147197][ T29] audit: type=1326 audit(712.009:8537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12599 comm="syz.5.2761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f3d7256efc9 code=0x7ffc0000 [ 199.170413][ T29] audit: type=1326 audit(712.009:8538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12599 comm="syz.5.2761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f3d7256efc9 code=0x7ffc0000 [ 199.193472][ T29] audit: type=1326 audit(712.009:8539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12599 comm="syz.5.2761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f3d7256efc9 code=0x7ffc0000 [ 199.217067][ T29] audit: type=1326 audit(712.009:8540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12599 comm="syz.5.2761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f3d7256efc9 code=0x7ffc0000 [ 199.240209][ T29] audit: type=1326 audit(712.009:8541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12599 comm="syz.5.2761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f3d7256efc9 code=0x7ffc0000 [ 199.263449][ T29] audit: type=1326 audit(712.009:8542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12599 comm="syz.5.2761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f3d7256efc9 code=0x7ffc0000 [ 199.398337][ T4984] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 28 [ 199.409777][T12485] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 199.410690][ T4984] EXT4-fs (loop2): This should not happen!! Data will be lost [ 199.410690][ T4984] [ 199.427445][ T4984] EXT4-fs (loop2): Total free blocks count 0 [ 199.433461][ T4984] EXT4-fs (loop2): Free/Dirty block details [ 199.439631][ T4984] EXT4-fs (loop2): free_blocks=16 [ 199.444906][ T4984] EXT4-fs (loop2): dirty_blocks=16 [ 199.450223][ T4984] EXT4-fs (loop2): Block reservation details [ 199.456282][ T4984] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 199.464248][ T6617] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.465813][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 199.485067][T12485] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 199.500343][T12485] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 199.513490][T12485] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 199.521701][T12623] netlink: 'syz.2.2764': attribute type 10 has an invalid length. [ 199.539637][T12623] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 199.562051][T12635] netlink: 19 bytes leftover after parsing attributes in process `syz.5.2769'. [ 199.572365][T12623] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 199.646546][T12642] loop2: detected capacity change from 0 to 2048 [ 199.653696][T12642] EXT4-fs: Ignoring removed nomblk_io_submit option [ 199.662551][T12485] 8021q: adding VLAN 0 to HW filter on device bond0 [ 199.677752][T12485] 8021q: adding VLAN 0 to HW filter on device team0 [ 199.685107][T12642] EXT4-fs: Mount option(s) incompatible with ext3 [ 199.706511][ T4991] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.713615][ T4991] bridge0: port 1(bridge_slave_0) entered forwarding state [ 199.729922][ T4991] bridge0: port 2(bridge_slave_1) entered blocking state [ 199.737148][ T4991] bridge0: port 2(bridge_slave_1) entered forwarding state [ 199.762841][T12650] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 199.792609][T12650] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 199.821601][T12653] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(10) [ 199.828607][T12653] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 199.836269][T12653] vhci_hcd vhci_hcd.0: Device attached [ 199.849172][T12655] loop5: detected capacity change from 0 to 1024 [ 199.856459][T12655] EXT4-fs: Ignoring removed orlov option [ 199.863014][T12653] xt_hashlimit: max too large, truncated to 1048576 [ 199.879070][T12653] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2775'. [ 199.881491][T12655] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 199.908050][T12662] netlink: 76 bytes leftover after parsing attributes in process `syz.8.2777'. [ 199.928955][T12655] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.954828][T12485] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 199.999341][T12656] vhci_hcd: connection closed [ 199.999553][ T4991] vhci_hcd: stop threads [ 200.008920][ T4991] vhci_hcd: release socket [ 200.013354][ T4991] vhci_hcd: disconnect device [ 200.034578][ T3491] vhci_hcd: vhci_device speed not set [ 200.077918][T12673] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 200.093030][T12678] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 200.113162][T12485] veth0_vlan: entered promiscuous mode [ 200.129826][T12485] veth1_vlan: entered promiscuous mode [ 200.144834][T12680] netlink: 'syz.8.2782': attribute type 3 has an invalid length. [ 200.152794][T12680] netlink: 3 bytes leftover after parsing attributes in process `syz.8.2782'. [ 200.169971][T12485] veth0_macvtap: entered promiscuous mode [ 200.178550][T12485] veth1_macvtap: entered promiscuous mode [ 200.190925][T12485] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 200.203486][T12485] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 200.215532][ T4991] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.240633][ T4991] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.265754][ T4985] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.279110][ T4985] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.302436][T12691] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 200.340085][T12693] loop1: detected capacity change from 0 to 512 [ 200.357083][T12693] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 200.416860][T12699] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2786'. [ 200.427744][T12699] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2786'. [ 200.438792][T12693] sch_tbf: peakrate 7 is lower than or equals to rate 7 ! [ 200.536978][T12485] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.551729][T12703] loop9: detected capacity change from 0 to 1024 [ 200.560753][T12703] EXT4-fs: Ignoring removed orlov option [ 200.569264][T12703] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 200.583171][T12703] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.819788][T12721] loop1: detected capacity change from 0 to 4096 [ 200.830556][T12721] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 200.851809][T12721] dummy0: entered promiscuous mode [ 200.857511][T12721] macsec1: entered promiscuous mode [ 200.925720][T12485] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.962725][T12728] loop1: detected capacity change from 0 to 2048 [ 200.984479][T12728] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 200.991124][T12728] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 200.998836][T12728] vhci_hcd vhci_hcd.0: Device attached [ 201.006005][T12728] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(9) [ 201.012693][T12728] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 201.020506][T12728] vhci_hcd vhci_hcd.0: Device attached [ 201.030541][T12734] vhci_hcd: connection closed [ 201.030738][T12732] vhci_hcd: connection closed [ 201.038734][ T4985] vhci_hcd: stop threads [ 201.047853][ T4985] vhci_hcd: release socket [ 201.052385][ T4985] vhci_hcd: disconnect device [ 201.058240][ T4985] vhci_hcd: stop threads [ 201.062529][ T4985] vhci_hcd: release socket [ 201.067001][ T4985] vhci_hcd: disconnect device [ 201.134273][T12744] loop5: detected capacity change from 0 to 1024 [ 201.142096][T12744] EXT4-fs: Ignoring removed orlov option [ 201.150928][T12744] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 201.164883][T12744] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.335376][T12754] 9pnet_fd: Insufficient options for proto=fd [ 201.346027][T12754] netlink: 'syz.5.2804': attribute type 1 has an invalid length. [ 201.356266][T12754] netlink: 'syz.5.2804': attribute type 1 has an invalid length. [ 201.646697][T12770] netlink: 'syz.9.2807': attribute type 1 has an invalid length. [ 202.335553][T12783] loop5: detected capacity change from 0 to 1024 [ 202.342544][T12783] EXT4-fs: Ignoring removed orlov option [ 202.357826][T12783] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 202.384337][T12783] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.403389][T12788] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 202.573155][T12796] __nla_validate_parse: 9 callbacks suppressed [ 202.573171][T12796] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2816'. [ 202.629385][T12801] netlink: 'syz.1.2818': attribute type 3 has an invalid length. [ 202.651592][T12803] loop9: detected capacity change from 0 to 512 [ 202.668219][T12803] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 202.685020][T12796] EXT4-fs error (device loop9): ext4_do_update_inode:5632: inode #2: comm syz.9.2816: corrupted inode contents [ 202.697437][T12796] EXT4-fs error (device loop9): ext4_dirty_inode:6517: inode #2: comm syz.9.2816: mark_inode_dirty error [ 202.710573][T12796] EXT4-fs error (device loop9): ext4_do_update_inode:5632: inode #2: comm syz.9.2816: corrupted inode contents [ 202.723584][T12796] EXT4-fs error (device loop9): __ext4_ext_dirty:206: inode #2: comm syz.9.2816: mark_inode_dirty error [ 202.759753][T10689] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.957889][T12838] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2832'. [ 202.977971][T12840] loop9: detected capacity change from 0 to 1024 [ 203.013485][T12840] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 203.030102][T12842] loop2: detected capacity change from 0 to 2048 [ 203.047689][T12842] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 203.119054][T12849] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 203.131117][T10689] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.198461][T12849] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 203.356820][T12849] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 203.372344][ T3415] IPVS: starting estimator thread 0... [ 203.399074][T12876] netlink: 'syz.8.2844': attribute type 1 has an invalid length. [ 203.414104][T12876] 8021q: adding VLAN 0 to HW filter on device bond1 [ 203.426262][T12876] loop8: detected capacity change from 0 to 164 [ 203.474738][T12874] IPVS: using max 2256 ests per chain, 112800 per kthread [ 203.535409][T12849] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 203.591779][ T4992] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 203.623860][ T4992] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 203.650769][ T4992] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 203.666042][ T4992] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 203.678363][T12893] lo speed is unknown, defaulting to 1000 [ 203.696314][T12896] netlink: 'syz.8.2852': attribute type 1 has an invalid length. [ 203.708326][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.713991][T12896] 8021q: adding VLAN 0 to HW filter on device bond2 [ 203.769027][T12894] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2852'. [ 203.825200][T12893] lo speed is unknown, defaulting to 1000 [ 203.899768][T12914] loop2: detected capacity change from 0 to 1024 [ 203.906903][T12914] EXT4-fs: Ignoring removed orlov option [ 203.921900][T12914] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 203.937769][T12914] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.037318][T12927] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 204.045848][ T29] kauditd_printk_skb: 303 callbacks suppressed [ 204.045865][ T29] audit: type=1326 audit(717.022:8846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12928 comm="syz.1.2866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6385d3efc9 code=0x7ffc0000 [ 204.077067][ T29] audit: type=1326 audit(717.052:8847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12928 comm="syz.1.2866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6385d3efc9 code=0x7ffc0000 [ 204.101394][ T29] audit: type=1326 audit(717.082:8848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12928 comm="syz.1.2866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f6385d3efc9 code=0x7ffc0000 [ 204.124966][ T29] audit: type=1326 audit(717.082:8849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12928 comm="syz.1.2866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6385d3efc9 code=0x7ffc0000 [ 204.148190][ T29] audit: type=1326 audit(717.082:8850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12928 comm="syz.1.2866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6385d3efc9 code=0x7ffc0000 [ 204.152037][T12932] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2867'. [ 204.181188][ T29] audit: type=1326 audit(717.152:8851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12928 comm="syz.1.2866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=109 compat=0 ip=0x7f6385d3efc9 code=0x7ffc0000 [ 204.204447][ T29] audit: type=1326 audit(717.152:8852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12928 comm="syz.1.2866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6385d3efc9 code=0x7ffc0000 [ 204.227602][ T29] audit: type=1326 audit(717.152:8853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12928 comm="syz.1.2866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=247 compat=0 ip=0x7f6385d3efc9 code=0x7ffc0000 [ 204.257887][T12936] loop2: detected capacity change from 0 to 512 [ 204.275987][T12936] Quota error (device loop2): v2_read_file_info: Free block number 1 out of range (1, 6). [ 204.286838][T12936] EXT4-fs warning (device loop2): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 204.303150][T12936] EXT4-fs (loop2): mount failed [ 204.340891][ T29] audit: type=1326 audit(717.312:8854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12928 comm="syz.1.2866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6385d3efc9 code=0x7ffc0000 [ 204.396343][T12941] loop1: detected capacity change from 0 to 164 [ 204.402874][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811aacbc00: rx timeout, send abort [ 204.402943][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811a1bf000: rx timeout, send abort [ 204.411327][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88811aacbc00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 204.411386][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88811a1bf000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 204.455328][T12941] ISOFS: unable to read i-node block [ 204.455921][T12943] siw: device registration error -23 [ 204.462100][T12941] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 204.481155][T12941] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=62215 sclass=netlink_route_socket pid=12941 comm=syz.1.2869 [ 204.530584][T12946] loop9: detected capacity change from 0 to 512 [ 204.539767][T12948] serio: Serial port ttyS3 [ 204.542104][T12946] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 204.562630][T12941] 9p: Unknown access argument 00000000000000000000ýÿ: -22 [ 204.599800][T10689] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.610028][T12947] loop5: detected capacity change from 0 to 512 [ 204.625455][T12947] EXT4-fs error (device loop5): ext4_xattr_inode_iget:441: inode #18: comm syz.5.2872: iget: bad extra_isize 90 (inode size 256) [ 204.639794][T12947] EXT4-fs (loop5): Remounting filesystem read-only [ 204.648319][T12947] EXT4-fs warning (device loop5): ext4_evict_inode:274: xattr delete (err -30) [ 204.657713][T12947] EXT4-fs (loop5): 1 orphan inode deleted [ 204.663934][T12947] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 204.679086][T12947] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.715457][T12958] loop8: detected capacity change from 0 to 512 [ 204.722587][T12958] ext4: Unknown parameter 'obj_role' [ 204.733387][T12958] netlink: 'syz.8.2875': attribute type 13 has an invalid length. [ 204.754222][T12962] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2877'. [ 204.787868][T12958] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=59696 sclass=netlink_route_socket pid=12958 comm=syz.8.2875 [ 204.889695][T12984] loop1: detected capacity change from 0 to 512 [ 204.924073][T12982] loop8: detected capacity change from 0 to 1024 [ 204.931876][T12982] EXT4-fs: Ignoring removed orlov option [ 204.938360][T12984] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 204.952068][T12993] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.974264][T12997] pim6reg: entered allmulticast mode [ 204.981172][T12997] pim6reg: left allmulticast mode [ 204.985685][T12982] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 204.990302][T13000] netlink: 'syz.9.2886': attribute type 10 has an invalid length. [ 204.999678][T12995] netlink: 'syz.9.2886': attribute type 10 has an invalid length. [ 205.006326][T13000] netlink: 40 bytes leftover after parsing attributes in process `syz.9.2886'. [ 205.014240][T12995] netlink: 40 bytes leftover after parsing attributes in process `syz.9.2886'. [ 205.067786][T12993] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.079555][T12485] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.103084][ T8975] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.126125][T13004] loop5: detected capacity change from 0 to 764 [ 205.133520][ T8975] ================================================================== [ 205.141650][ T8975] BUG: KCSAN: data-race in find_get_block_common / has_bh_in_lru [ 205.149422][ T8975] [ 205.151765][ T8975] read-write to 0xffff888237d26fd0 of 8 bytes by task 13004 on cpu 1: [ 205.159926][ T8975] find_get_block_common+0x4f0/0x960 [ 205.165404][ T8975] bdev_getblk+0x30d/0x3b0 [ 205.169865][ T8975] __bread_gfp+0x51/0x250 [ 205.174217][ T8975] isofs_fill_super+0x3dc/0x1270 [ 205.179275][ T8975] get_tree_bdev_flags+0x291/0x300 [ 205.184405][ T8975] get_tree_bdev+0x1f/0x30 [ 205.188857][ T8975] isofs_get_tree+0x1c/0x30 [ 205.193376][ T8975] vfs_get_tree+0x57/0x1d0 [ 205.197828][ T8975] do_new_mount+0x24d/0x660 [ 205.202348][ T8975] path_mount+0x4a5/0xb70 [ 205.206693][ T8975] __se_sys_mount+0x28c/0x2e0 [ 205.211396][ T8975] __x64_sys_mount+0x67/0x80 [ 205.216017][ T8975] x64_sys_call+0x2b51/0x3000 [ 205.220709][ T8975] do_syscall_64+0xd2/0x200 [ 205.225222][ T8975] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.231216][ T8975] [ 205.233654][ T8975] read to 0xffff888237d26fd0 of 8 bytes by task 8975 on cpu 0: [ 205.241379][ T8975] has_bh_in_lru+0x35/0x1f0 [ 205.246013][ T8975] smp_call_function_many_cond+0x2a9/0xc60 [ 205.251847][ T8975] on_each_cpu_cond_mask+0x3c/0x80 [ 205.256977][ T8975] invalidate_bh_lrus+0x2a/0x30 [ 205.261859][ T8975] invalidate_bdev+0x42/0x70 [ 205.266656][ T8975] ext4_put_super+0x624/0x7d0 [ 205.271453][ T8975] generic_shutdown_super+0xe6/0x210 [ 205.276767][ T8975] kill_block_super+0x2a/0x70 [ 205.281710][ T8975] ext4_kill_sb+0x42/0x80 [ 205.286140][ T8975] deactivate_locked_super+0x75/0x1c0 [ 205.291528][ T8975] deactivate_super+0x97/0xa0 [ 205.296227][ T8975] cleanup_mnt+0x269/0x2e0 [ 205.300694][ T8975] __cleanup_mnt+0x19/0x20 [ 205.305159][ T8975] task_work_run+0x131/0x1a0 [ 205.309770][ T8975] exit_to_user_mode_loop+0xed/0x110 [ 205.315196][ T8975] do_syscall_64+0x1d6/0x200 [ 205.319801][ T8975] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.325712][ T8975] [ 205.328044][ T8975] value changed: 0xffff888106dbd1a0 -> 0xffff88810049dd00 [ 205.335236][ T8975] [ 205.337568][ T8975] Reported by Kernel Concurrency Sanitizer on: [ 205.343815][ T8975] CPU: 0 UID: 0 PID: 8975 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 205.355373][ T8975] Tainted: [W]=WARN [ 205.359186][ T8975] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 205.369428][ T8975] ================================================================== [ 205.412498][T12993] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.488828][T12993] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.531490][ T4984] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.543574][ T4984] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.556292][ T4986] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.568333][ T4986] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0