last executing test programs: 2m21.326676414s ago: executing program 4 (id=1240): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a310000000014000780050015000c00000008001240000000000500050002000000050004000000000010000300686173683a69702c6d6163"], 0x5c}}, 0x0) io_uring_setup(0x9, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r1, @ANYBLOB], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)={0xc0, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0xa1, 0xe, {{{}, {}, @broadcast}, 0x0, @random=0x4, 0x9, @void, @val, @void, @void, @void, @val={0x5, 0x75, {0x3, 0xbb, 0x3, "b85d0c6052924ca34d709d6e57b588efc77bb9e80344b70c183372ac4cef8518fe6c1608804e31051dd559179840f35f13c868dbe82183145e088745363dcb6dcf216c7a1ab70a8d7df88acc45fd7dfb947d44df3aa6df16af3e189334f4ab6cfbdfde63d0047659745b83b39c1049c90caf"}}, @void, @void, @void, @void, @void, @void, @void}}]]}, 0xc0}, 0x1, 0x0, 0x0, 0x84}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000000140), r5) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f00000009c0)) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={0x0, 0x58}, 0x1, 0x0, 0x0, 0x80}, 0x20000010) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r6) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, r7, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@void, @void}}}, 0x14}}, 0x4000054) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r5, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x1c, r7, 0x100, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000004}, 0x8894) sendmsg$NL80211_CMD_GET_INTERFACE(r2, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x70908280}, 0xc, &(0x7f00000003c0)={&(0x7f0000000280)={0x1c, r4, 0x200, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) sendmsg$rds(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={0xffffffffffffffff, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000800)={0xffffffffffffffff, &(0x7f0000000780)}, 0x20) r8 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) sendmsg$IPSET_CMD_DESTROY(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000030601020000ffffffff00000a0000010500019873e630eda6986ffe5aaed757fa16cace12925d19932de4c6c1b67e2bea0e530549bf6a35cb54c42caa5fbf3485173c98129f18a933d4bf0118a48356f002ab95ec04b9c5918190fc5bc57aa65e27a3ea187f29ec94cd52914179ac2cc81e82fe6cc4a097878a5d5722dd7e868c6d60c0db6077a4456b90f7049d92"], 0x1c}, 0x1, 0x0, 0x0, 0x4004810}, 0x20004840) 2m21.168522978s ago: executing program 4 (id=1246): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b707000008000000850000006900000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) socket(0x10, 0x3, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x23, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x42, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2000000020008107090f9becdb4cb96b02000020fd000001006400000000", 0x1e}], 0x1, 0x0, 0x0, 0x81000000}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x1208002, &(0x7f0000000100)={[{@grpquota}, {@delalloc}, {@resuid}, {@debug}, {@dioread_nolock}, {}, {@nomblk_io_submit}, {@noauto_da_alloc}]}, 0x1, 0x5d8, &(0x7f00000005c0)="$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") r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r5, 0x0, 0x4}, 0x18) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40041}, 0x4040850) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x76a9bba1a690db0f, 0x0, 0x0, {0xa, 0x0, 0x2005}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3cb140bb}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}]}, @NFTA_CHAIN_POLICY={0x8}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5b5d}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @rand_addr=' \x01\x00'}]}]}, @IFLA_ALT_IFNAME={0x14, 0x35, 'gre0\x00'}]}, 0x50}}, 0x0) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', 0x0, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="380000000314010026bd7000ffdbdf250900020073797a190000000008004100736977001400330076657468305f746f5f6272696467650032b60fb7c3f8e33992a4f907f6990509be1c6a8c18c2fc0a0de8aeabc8515331d72ca72b72732e8941b9b26437e4218c78aa9e3b1875e904e52b"], 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x20004010) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) r8 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300", 0x2c}, 0x48, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x4, r8, r8, 0x0, 0x0) epoll_create(0x4) 2m19.84941306s ago: executing program 4 (id=1250): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'bond0\x00', 0x0}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x8, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESOCT=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e21, @broadcast}, 0x10) ioctl$int_in(r3, 0x5452, &(0x7f0000000000)=0x6) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0x201, 0x0, 0x0) r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x4e, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x2040e, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x2, @perf_config_ext={0x4ac269ba, 0xaea}, 0x11aa0, 0x30, 0x10000, 0x0, 0x18bb, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r4, 0x4008240b, &(0x7f0000002180)={0x2, 0x80, 0x2, 0x8, 0x4, 0x8b, 0x0, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_bp={0x0, 0x1}, 0x106000, 0x1, 0x9eea, 0x3, 0x8000000000000001, 0x80000001, 0x2, 0x0, 0x51, 0x0, 0x8}) shutdown(r3, 0x1) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) r5 = syz_io_uring_setup(0x4b5, &(0x7f0000010400)={0x0, 0x86e1, 0x1, 0x8}, &(0x7f0000010080), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f0000000b40)=[{0x0}, {0x0}], 0x2) ioctl$VT_DISALLOCATE(r2, 0x5608) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r5, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r6, 0x0, 0x80000}, 0x18) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) 2m19.732592952s ago: executing program 4 (id=1251): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) execve(&(0x7f0000000040)='./file0\x00', &(0x7f00000002c0)={[&(0x7f0000000280)]}, &(0x7f0000000400)={[&(0x7f0000000300)='\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='@\x00', &(0x7f00000003c0)='\x00']}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000100)='tasks\x00', 0x2, 0x0) sendmsg$OSF_MSG_REMOVE(r1, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x710}, 0x1, 0x0, 0x0, 0x40000}, 0x90426e515434c9f2) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000180)=0x0) write$cgroup_pid(r2, &(0x7f00000001c0)=r3, 0x12) r4 = io_uring_setup(0x56ab, &(0x7f0000000040)={0x0, 0x36b, 0xc000, 0x4, 0x2e}) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180200008300000000000000000000008500000029000000850000005400000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x14, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ffffffc}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfffffffffffffda2, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x24, &(0x7f0000000000)=0xa, 0x4) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') preadv(r5, &(0x7f0000000080)=[{&(0x7f0000000040)=""/46, 0x2e}], 0x1, 0x0, 0x0) getdents(r5, &(0x7f0000000280)=""/228, 0xe4) r6 = socket(0x10, 0x3, 0x0) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r7, 0x8910, &(0x7f0000000000)={'vlan0\x00', @ifru_mtu=0x6}) ioctl$sock_netdev_private(r7, 0x8914, &(0x7f0000000000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002d40)={0xffffffffffffffff, 0xffffffffffffffff}) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) sendmsg$unix(r8, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001040)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32=0xee01], 0xa0}, 0x4004881) write(r6, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d) sendto$inet6(0xffffffffffffffff, &(0x7f0000000440)='S', 0x1, 0x24008004, &(0x7f0000000140)={0xa, 0x4e23, 0x3, @remote, 0x3510}, 0x1c) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001640)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021040100000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000d8000380d40000800800034000000002c8000b80480001800a00010071756f74610000003800028008000240000000030c0001"], 0x188}, 0x1, 0x0, 0x0, 0x4880}, 0x0) poll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x289}], 0x51, 0x100) 2m19.645708729s ago: executing program 4 (id=1252): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a99985000000040000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003000000018000180140002007665746830"], 0x2c}}, 0x0) 2m19.588271185s ago: executing program 4 (id=1255): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000b40)=""/67}, {&(0x7f0000000400)=""/8}, {&(0x7f0000000680)=""/188}, {&(0x7f0000000bc0)=""/241}, {&(0x7f0000000940)=""/221}], 0x0, &(0x7f0000000a40)=""/192}, 0x8}], 0x3fffffffffffedd, 0x10002, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x3c, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) syz_clone(0x40042700, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x8, &(0x7f0000000900)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000001b000000b700000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2m4.479889223s ago: executing program 32 (id=1255): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000b40)=""/67}, {&(0x7f0000000400)=""/8}, {&(0x7f0000000680)=""/188}, {&(0x7f0000000bc0)=""/241}, {&(0x7f0000000940)=""/221}], 0x0, &(0x7f0000000a40)=""/192}, 0x8}], 0x3fffffffffffedd, 0x10002, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x3c, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) syz_clone(0x40042700, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x8, &(0x7f0000000900)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000001b000000b700000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.365130461s ago: executing program 0 (id=2453): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'bond0\x00', 0x0}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000240), 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x8, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c3000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e21, @broadcast}, 0x10) ioctl$int_in(r2, 0x5452, &(0x7f0000000000)=0x6) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r2, &(0x7f0000000000), 0xffffffffffffff94, 0x201, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x4e, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x2040e, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x2, @perf_config_ext={0x4ac269ba, 0xaea}, 0x11aa0, 0x30, 0x10000, 0x0, 0x18bb, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) shutdown(r2, 0x1) recvfrom$inet(r2, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) r3 = syz_io_uring_setup(0x4b5, &(0x7f0000010400)={0x0, 0x86e1, 0x1, 0x8}, &(0x7f0000010080), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f0000000b40)=[{0x0}, {0x0}], 0x2) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r4, 0x0, 0x80000}, 0x18) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) 2.039845841s ago: executing program 2 (id=2455): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b707000008000000850000006900000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r1}, 0x18) socket(0x10, 0x3, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) pipe2$9p(0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x23, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x42, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2000000020008107090f9becdb4cb96b02000020fd000001006400000000", 0x1e}], 0x1, 0x0, 0x0, 0x81000000}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x1208002, &(0x7f0000000100)={[{@grpquota}, {@delalloc}, {@resuid}, {@debug}, {@dioread_nolock}, {}, {@nomblk_io_submit}, {@noauto_da_alloc}]}, 0x1, 0x5d8, &(0x7f00000005c0)="$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") r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r5, 0x0, 0x4}, 0x18) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40041}, 0x4040850) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x76a9bba1a690db0f, 0x0, 0x0, {0xa, 0x0, 0x2005}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3cb140bb}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}]}, @NFTA_CHAIN_POLICY={0x8}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5b5d}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @rand_addr=' \x01\x00'}]}]}, @IFLA_ALT_IFNAME={0x14, 0x35, 'gre0\x00'}]}, 0x50}}, 0x0) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', 0x0, 0x0, 0x0) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="380000000314010026bd7000ffdbdf250900020073797a190000000008004100736977001400330076657468305f746f5f6272696467650032b60fb7c3f8e33992a4f907f6990509be1c6a8c18c2fc0a0de8aeabc8515331d72ca72b72732e8941b9b26437e4218c78aa9e3b1875e904e52b"], 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x20004010) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) r9 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300", 0x2c}, 0x48, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x4, r9, r9, 0x0, 0x0) epoll_create(0x4) 1.952392879s ago: executing program 0 (id=2456): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'bond0\x00', 0x0}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000240), 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x8, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c3000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e21, @broadcast}, 0x10) ioctl$int_in(r2, 0x5452, &(0x7f0000000000)=0x6) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r2, &(0x7f0000000000), 0xffffffffffffff94, 0x201, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x4e, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x2040e, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x2, @perf_config_ext={0x4ac269ba, 0xaea}, 0x11aa0, 0x30, 0x10000, 0x0, 0x18bb, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) shutdown(r2, 0x1) recvfrom$inet(r2, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) r3 = syz_io_uring_setup(0x4b5, &(0x7f0000010400)={0x0, 0x86e1, 0x1, 0x8}, &(0x7f0000010080), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f0000000b40)=[{0x0}, {0x0}], 0x2) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r4, 0x0, 0x80000}, 0x18) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) 1.930973501s ago: executing program 2 (id=2458): unshare(0x6a040000) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@newtclass={0x24, 0x28, 0x4, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x9, 0x4}, {0x7, 0xb}, {0xb, 0xf}}}, 0x24}}, 0x80000) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x100b28, 0x6, 0xffffffff, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000060000000000000000008500000007000000850000000e00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000012c0)={&(0x7f0000000040)='kfree\x00', r2}, 0x10) add_key(&(0x7f00000001c0)='ceph\x00', 0x0, &(0x7f0000000840)='\x00\x00\x00\x00\x00\x00\x00\x00\x00*\x00\x00', 0xc, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r3}, 0x18) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'wg1\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r5}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r7 = socket$nl_route(0x10, 0x3, 0x0) io_setup(0x6, &(0x7f0000000180)) r8 = socket(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r10) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000f3bb78b40400eeffff11ffffffff000000", @ANYRES32=r11, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x2, 0x8}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000004100)=@newtfilter={0x64, 0x28, 0x575ac7824d421509, 0x70bd2d, 0x4, {0x0, 0x0, 0x0, r11, {0xa}, {0x6}, {0xfff1, 0x3d}}, [@filter_kind_options=@f_bpf={{0x8}, {0x38, 0x2, [@TCA_BPF_ACT={0x34, 0x1, [@m_police={0x30, 0x14, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x64}}, 0x40) sendmsg$nl_route(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000240)=ANY=[@ANYBLOB="e80000006c00010029bd7000fcdbdf2500000000", @ANYRES32, @ANYBLOB="001000008000000008000f002000000014003500726f7365300000000000000000000000a40034801400350070696d367265673000000020000000001400350076657468305f6d614176746170000000140035006d61637674617030020000000000000014003500677265300000000000000000000000001400350076657468305f746f5f626174616476001400350001657468315f6d6163767461700000001400350067726530000000000000000000000000140035006261746164765f736c6176655f31000008000f"], 0xe8}}, 0x0) 1.873251456s ago: executing program 5 (id=2459): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1, {0x2}}, './file0\x00'}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r3}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0x0, @empty, 0x4}, {0xa, 0x0, 0xfffffffe, @loopback, 0xfffffffc}, 0xffffffffffffffff, 0x3fc}}, 0x48) 1.853981108s ago: executing program 5 (id=2460): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x200000, &(0x7f0000000200)={[{@stripe={'stripe', 0x3d, 0x4}}, {}, {@nombcache}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@grpjquota}, {}, {@grpjquota}]}, 0x3, 0x57b, &(0x7f0000000800)="$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") flistxattr(r0, &(0x7f0000000000)=""/12, 0xc) setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) 1.72643871s ago: executing program 5 (id=2461): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000fc0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xa8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000009500000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x69}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x8a}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) r3 = memfd_secret(0x80000) r4 = socket$kcm(0x29, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) r7 = eventfd2(0x0, 0x0) r8 = socket$inet_sctp(0x2, 0x1, 0x84) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180), 0x10044, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESOCT=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r8]) io_submit(r6, 0x1, &(0x7f0000000280)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x1, r7}]) shutdown(r5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000040)={r3, r1}) 1.629008189s ago: executing program 0 (id=2464): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) utimes(0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10208}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f0000000800)=@urb_type_control={0x2, {}, 0x2000000b, 0xe0, &(0x7f0000000240)={0x80, 0x0, 0xfffa, 0x4360, 0x300}, 0x8, 0x6, 0x0, 0x0, 0x1, 0x101, 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x100000001}, 0x18) getsockopt(0xffffffffffffffff, 0x200000000114, 0x2716, 0x0, &(0x7f0000000000)) r5 = socket$netlink(0x10, 0x3, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) r7 = socket$inet(0xa, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f00000002c0)=@mangle={'mangle\x00', 0x44, 0x6, 0x410, 0x238, 0x238, 0x238, 0x98, 0x98, 0x378, 0x378, 0x378, 0x378, 0x378, 0x6, 0x0, {[{{@ip={@loopback, @multicast1=0xe0007600, 0x0, 0x0, 'gre0\x00', 'ip6gre0\x00', {}, {}, 0x0, 0x0, 0x11}, 0x7a00, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'wg1\x00', 'nicvf0\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb8, 0x100, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x0, 0x28, 0x0, 0x0, 0x0, 0x1}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@dev={0xfe, 0x80, '\x00', 0x18}, 'veth0_virt_wifi\x00', {0x7}}}}, {{@ip={@rand_addr, @private, 0xffffffff, 0xff, 'syzkaller0\x00', 'veth1_to_team\x00', {}, {0xff}}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@ip={@empty, @empty, 0xff000000, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x4, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x470) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r8, 0x1, 0x200000, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40840d4}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f00000003c0)={[{@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {@journal_dev={'journal_dev', 0x3d, 0x1}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@errors_remount}, {@nouid32}]}, 0x1, 0x441, &(0x7f00000011c0)="$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") 1.628485489s ago: executing program 1 (id=2465): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x200000000006, 0x2, 0x4, 0x7ffc0002}]}) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) writev(r1, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}], 0x1) 1.627993169s ago: executing program 2 (id=2466): fsopen(0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00"/13], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00', r1}, 0x10) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r3 = fcntl$dupfd(r2, 0x406, r2) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x3, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x4}]}) socket(0x80000000000000a, 0x2, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) socket(0x1e, 0x4, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x880) 1.561741745s ago: executing program 5 (id=2467): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x6}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000004180)=ANY=[@ANYBLOB="02000000040000000700000002"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r1}, 0x18) r2 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x5}, 0x1c) sendmsg(r2, &(0x7f00000000c0)={0x0, 0x952b, &(0x7f0000000100)=[{&(0x7f0000000000)="2b10", 0xffbd}], 0x1, 0x0, 0x0, 0x2c}, 0x4) (fail_nth: 1) 1.516456909s ago: executing program 1 (id=2468): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) (async) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2060, 0x0) fcntl$setlease(r2, 0x400, 0x0) (async) fcntl$setlease(r2, 0x400, 0x0) fsetxattr$trusted_overlay_redirect(r2, &(0x7f0000000040), 0x0, 0x0, 0x0) fremovexattr(r2, &(0x7f00000000c0)=@known='trusted.overlay.redirect\x00') (async) fremovexattr(r2, &(0x7f00000000c0)=@known='trusted.overlay.redirect\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095", @ANYRESHEX=r2], &(0x7f0000000200)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x7ffff}, 0x94) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095", @ANYRESHEX=r2], &(0x7f0000000200)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x7ffff}, 0x94) syz_emit_ethernet(0x1386, &(0x7f0000001580)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb86dd60e17ace13503a00fe8000000000000000000000000000aa000000000000000000000000000000001610040802100600fc000000000000000000000000000000ff020000000000000000000000000001fe880000000000000000000000000001ff01000000000000000000000000000120010000000000000000000000000000fc020000000000000000000000000000fe8000000000000000000000000000bb000000000000000000000000000000013b09000000000000064043e99be092ce76037315cd94b3caa23e6c9612a8660997cd4b2ecbd52ec48dd0890e19957f891f09977896cf7e4c003db097cdcbd0cc3c8a1cb583babfd0fcc104010001010000010000000000002c3b00000000000005020006c91000000000000000000000000000000000c910fc02000000000000000000000000000004010807500000000012070600ffffffffffffffff0400000000000000400000000000000007000000000000004d3a00000000000003000000000000000101000000000000040000000000000008000000000000000738000000000c0406004a04000000000000f7ffffffffffffff47010000000000007f000000000000000700000000000000050000000000000007f60025da43d67f489bb3e957c13c8daef5d665df493e1af1ce97846e2b379955fb5ddb477e8299920cb8c3984b23242f7f1d4732c0fdb0050292bbe89c9c7a01a6e8a010dcb16164a8c8aa0f17ac0b4ae7624a8a363d220ce5306a72f2fa02dd748d1402d0615a5b38decdef3b93eec5b4081aa94a3531286ed8a5498f88e86be333ea7fda3ce75e8ecaf43db417389113feeeebec149cb64bd6c66d326acb2f9201cb5c53532cd557d0d81d363f3db0fb22bf68e8efc7a7c0811397a0888f5a8b7b44ed4034e52b486a82b1f0aeeab959f302860b9934e0138f55737ff1b974801474567f95a69ca6a123d67310aabc3a8440d88931170401f7072800000002080309000000000000000000090000000000000003000000000000000000000000000000000000008910020c0000000000000000000000000000000000000001ff020000000000000000000000000001fe80000000000000000000000000000dfc010000000000000000000000000000fc0000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000fc010000000000000000000000000000a57bad3826b847cf5fb6df26ff117ef4d01887f0c397f21743247c9b6f7de53a8843a5eb9286b4b4a3f3ffe3cbf974195e1fc59d0d8915ae187020a9292f844ea012f37c238b781ac44e6b73bf93fcfe3978e6b52118a87e713630fdd58162675ce82db379bd9eabcfe0554f8c3b0243c5627f175d9003c3a223a0a45ac15cf333b6e19065a99e5d771a17559992073c3728380d654cc2a6834439ced0df58a278f2c5e372fd606626805c5abf777bf9b50e98812041f6338987838e674c0d51b3f0322d498d47deab3883573adbcee7f45faa9d68461f566e916c6c1906c1081cd9a863f2404890ee57a4d8116fdbbdea75b9e45f87037aad99cfe9353cca334745850a90c886603875b3103f636e8e549a17afc180876d3abfc9e3cb3fc874f5f6f3cbc743e08dcb2c7c3ed7fd2bda10ee22ef2aac77824c27612b1b654e707639664320a61c2266db086bcd4e5f036ce745b479d4907aad8036070f3994a3e6d988c366837d50471b4647aae1cc49c9a77364f19cca84dc3953484a8e1976d1da655078b7ec3ba27013dc38488610fb4e5f2bc596d20c361d63a6de82fdeb6f22a713494daa50707782ede609706ca167ddb2f80fb3ac3deded8ec58ba60efa816aebd44c174e0461a4bacea4fd097373581a1c1035085fbecf23e0ca355962394debd24e7167c0f0425d1a04bf1bfb1f60b4fd26215b2044cb24cacae45cd25fcc39790623aa1bd17042fae0f904b8871e0f3ba85795c8e370f373708cf185568e4ad1b89b05e0d569a8f32e55a9d3df60998ca332d4f4e3dbdfd9141eda991f995515b95e63e89b3dc8dd440f624bf99eedaba6239cb656108c492ce4047f19206b6dc0a4ef308da635198d2e65bc6eca4c5b599ac075c3b6b5c58f1b548d6f9206eaa5506d77db1d1f41bea87795967872da8e6504abc21a3c0bbd972723efca83b73eb0975ba1902339da80376356d7c92cf1cb1b87a174586f4970cd54ce1a577096ba828c933d7acac7ce6c707a98c77bd810ba71a506ff7b2b9830bf5503bdc4bb6ead22771369b5e8066d819b47b33795f4f4acfabf133c73a6380dc102d2b15e8d48db7c9f8b9b45c4996a6ae0ed7a7039ad319f60d78f0731adf5ebb4679d838603cd4b3aabce4258805130f4f791f10e09974d4182aeb53672837c4353dad434202c98bced4eb5d109505303f9dc19330cfdb7857305a77857a8d1042fb632065b1169674ff0b8bb389e97c9e1ecf42edfaffa707275e102235baf39918f3be765edf1018db2f1692c43af5ebcb362289c94d8073884902e1fb1fcda9819f6b0cbe0b42ee78a6ac1030e69a3445847b85d1792a9a05cce7d6610ec193e4ca9421236cde81f393b933a74c8330cf33a1a96bbe0db8708e33d9f46d5cb117f6814b22a85813f47023c937f1f80c95397c8a4ca861df2ebb3d3768f29ae9000e2e6656b2fe7a51caddf479feb74fae1640aca35c90b64164153bf1bd455b53991be3d0fd65a2f7c8c11a5204d05d178d28be6c29d6f1b76049bbaba9f1cc6460259cffad9ab5c866ed03291e3304079fc305464f8bc86b83211a3681c8c7dff00c44fde6dfa7f53feac30dec6e140d70dc8cf3e815ddbc07ca9418e2de19b9987fa0fb419a263a0ca8bd603bb49c634c110db49c9d0dba2d1cb034cdc05747511c61037d2a1e47c94f27a1950e9853e3c926721f04178146f6f411d2ed51005fc37e9ebbec8c22e8b3339d5da397597e66ab7d5ec83aeae559020a906ce1eb143a89272d9001d46b15bd335be48a59fe46cc07545c18cfddf295f8249a33807042e23465aa957cc6bea37cd67f2db82cbfd6d06e08756ee8c7b3416b942e4919ce6965e7343d52be5adc43ab39cd18d4a4c30e216d6d65a14bdd1fa240bca8ce67fad5dd60725037d711d560152535b3af706c9b9ece8d02da6def493b6e19e07440bd0048458cb7ccc7c0d480906ed38adf6ef3e458a8785aba11b932d7ec35e11961a792d2c1d18fdfb718225728ca890915cf69b5119d73d0e52460f249b68e23d7406b61f9073da1b564fd5e18ea91ec3c8bc45a68bf5ec9a4c1d7f9fb74597a3d1893f3130d0a70ed8e610c10533dbe7e45b303da330ae8fe90e6cc8b07e4c57a9d77a369f1881d3d008c38180dae03c6a791184ad74d00ccf0f57629b50af4c74a32d4cf7bee338c9258efb7fc06246b5effb06264ad2fb24e6a53e84c5dd343befffc19282c7effc49c5351fac32a27739fb4cb96984f49a05c41b39a2fc76b563551dd896a73cf17bed5f61558b4a337bc8f2d9d6f301470592523642a06335b15f0895b07445c9688e9745a8d27ad4dc689b991f3be75162fd4398ac76bccd496ec116982accef2164a5504e45d3338a94a330b9d3b79a8e496b75e6778a6b085322bfea09cef282878820cbbc4735318c6e52a2174338e2cdd5e152f8fc31c23c99a53825ca612d5d57ad8014d6252e64ffaed911363cb981a948ff42900087bfd0082f06b24b32d5a08ac15a962079b21c086a1bcdb0d57c389346eb180f0c5d8e19a0efe95cb995959e2db7d13cb61c41bb67ff00679e3693f8b7aa4d047db229915a83a7d65d5c3d25ee7db321bf9dae1622a270f6cb677779c73ea57b775641fd143cbab3e2aa6400a56272bc77f053fd01f62a8694b3f4639078d1a5ddd3945ec40dc06839e0141e34b0a644bd074e9510e48bff0c4c1f342c3f30ee18b2948047e3769bed338b8ee4dc58d2a31fc8d5d46a25f0fbebf18bd0fca3aa3ab09720a2d729b9ece1a5a66dec414457f0234f65c8fd62a864269065d68d4bb98958eb1f1e248b42e8ba0d8f48e83b764cc41f50d9405e8eab20b6be162f4f525b8118acd583b9612c0e51d9919f869bd8d8a7453d59f85a5770096cfece9cd7994390e285711d86b60ae1b10ab3d554b2e983053b3b06dc584ddb36d1885a7ce84c116375d7e7775f3bc7d39e8ea935ba565a40e96db642250dbc7246268b9cf63cc697f67278b94ce8525904a81e8dfc03b6ce210bca0a4545b4aff2d715e9c3e711e03abf50149033b5c6d62ec1a0e3fade31bf32a70d7864dafc68eb96447f99d05c00e1d5c5426ccb67cfb769e9646bfd043b7e7b5f096d2d8a5b92bc28c1f85f7d115ba0de5a4c46171b301f722d896e14a31e2e4b3f18e746d022f2a46086d3c4ab9266f040a9cf62dfab6ab355227727076f8789868167844b1532aa37635c4a1cc962c334fc6ffb924ab9e3f58c3aeb646f1103cca1f4c964fca7dabe98c3b1132fdb80e3773bc6b433002845ebe5a725be53ea5b985cdaae3b7611ee5721a9d09c68643306cdef0cf6b7bf7c9726239ab2916920a83a0a649e166806c28560f2349f8ce3afce160866a03db9fea7e165a647f5f2df2e3d7113b47c1b16a4a5b87dc460a0e3736b812f8d312b7f4f11e1a15e86a888ea5f13dbab73ca745462d9958f034b9e5357b08aab33f295bc72cdf7ac3d3cbb33090c4b2ec02a628039bfee6025c3091390fd1709ad7bbefa56a797ef53d3bedcbfe8c00df2078c4d7cd40c580f605e4c97ed15e0faf2f697b84faa9fb31074d60e92cdc41c47d56a5b9da25dbb15146644dc1eb852720d37c76f0dc54db4c0cd6b9f3c856a7a162e11141d5cf3a8730ee10ba95398fd0dfe8caf76d73fa673dc1253ffed8981310a04ccb1003ca56927a4c3eab1c2d50ea8fbe92f2a1484eac5e31f5c4812409443fba75413be787282cbaaeb39ef41ae07c3b9ea8ff7fcec1ccce5a53d3a8049e12d52822dfeffd39139f0476867669f1cdfe1bf5a1dad7b1a44f4dcac767e3de3c5e9c918bec1705c88edbc1066c924b43dcf8fd8b4100710997e3b26a170b92db2e445b0f9258e1538b22bd82bc4e031a24589f9a56b78b905671301cd958d9f3415f7ac7f868884b3eda960f0ece6bd0dae7c19d0733a5ab58383595f94c3539799256fe11fdbdba5c6fcb6298845daa6d918026728439fc2d69947794ad28b492210eb1f9afbd7e89bbeafb2f3e82ad23043689c0b8fb9df04fd4db41ed1d2a91e156617e975d6bcbebeb342acf9581174533b87bd0ced73baf594e9263258c5c54cf25f10f4e6572dd83f3e9f7b7fa76bb857e05f6d3ce6c851c5f787045f1bf2956a726e38b2d000e5ce832565f107eba66c88965cae4074665856bf8848ed7b4a238e237b6b273bac9b280da4607d777a323967fc7ac026032516294e85a6726f1bbb64df1e19001f78e09f179a92592c3aa3d954cb874b67a8f4416886e92009e99989dfe43b35f5452c4de49e80d6747d540870e7988f991c2b65414996a33d80656ec7920a3f2eb74cf55035208e4662ac9c53e5e8f0f5bce18b097e99943a3ec6713bd39cdae046c237452832e01263bede77babfa8a8b0b73e4164ffde8852c9fa5827a6f4e4f83faab5892253bdc8778cbf84688982dafb181655f5b3d20f509b2450ca91724806f75ef9c8d28a99a71fde5f8594b243ba54ce8c94c5c7acff536e4e47901ceac20585900f91cad511e54b4b06d0ed6f4fb5306abdb8ece212f2bd01712a26292e656783321ca65ea878e85f8a8384bedcbd51a007d18b38abace9c824ab60f267c431113f91016618a780ab03be3e59f9298044ed14862a3a766a8dbcceb3cf0e935e4767a87a279714a424d817e16bc36930a9874aee323fc564f9d455a000e64f1a7f18267bf2916c7f61114666d0270522031a663f3f873ab28b9813c92081c1bdabc3238ee0aa3e2a413aafdbaedb4fd6793e2a8c92ea46632ba86909999d9dfc4f127bf858c604550daa2a4d448c03fe4d2347c29fe85268654a6540ab6340f2bc2f0eb63937933be62764d8eb92d982a71cd8beaa34a2f6c6fb43446536a27fa0bdd82e64b88f0d4e5345ddd00894d72eaf24f8e2be86bb070ac484301b490d42de11f373a01fdf31bb67be0f4f60bd2c497e0f056f9c5e408c63c3c35e573df90bc0286b9818e8d0907671577a6b244d04d4fc73d5515a51abe98dc27f5f1a882f94810fc09725aa0122270a8e96db4bc2b1cb084a1280cc5f84b30a7968caad20027c28993c3f241fd87bb62935d4c0f188423656708b996130bf46703fa0b55c47a1e218dc0639d6ffbbbd62e947a6cbcd0d276a8a2266772ff407fcbfee5750b2a8e19a5b2efbba418634fedfe693f250fc5dc78e96604dd9e19939dd381edb69a96f3b3b3850563f2221376cbf8c516a4d7caa7366d7c008aa9b23d801b4872e3c7d88ab5db56fa4f4fba478077e7f452bf75e10b7b442383e1d7bbd1dfa826ded6f6f7e0a24918d9f7f49329e03f6b020440fc46faac22dafc507ad5a86ffd418b6244dfce4d53fa67d172ce4d2bed36c28bf07673060ac60345dfffc33decfa90d59219d60219958dc77afc9d8411c7693017e9896d4284b556ff61a0e68680f748133710a4fe3438fc8ca08d17fab3b28d4820464d07fcbe27b5b461352f3ef5bded71b8e589f8ab870f1838dc9e271db598369c2088acfca51c030ae4e45f4a43c0faefb7e589bb8712c6876a13ee4e8a7fe5402515a416c84185effb96e428dca47efa8a6b4aa099f5ce153851ba831a9eec7d0642060a3e2f41882afdf4af7bad5b5a1879bb686ebfa5240df14c026c3ebd6051f793d9299a0c71afa779ef2fbb41e62de907cca20790a4141450cd5c2d7e4558ad13902c03beecd12ace958d74aaa970e9b19429e8954765ebd7e4c591a14f72819a5dd2097cca1abec3725b7cd55ba763d7d69c8352eac58d7b268941428a725a6ca742584f1a7e93490acf3716f7f"], 0x0) socket$inet_udp(0x2, 0x2, 0x0) (async) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000dd0000000000003b810000850000006d000000a50000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='kfree\x00', r5}, 0x10) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000002600000007"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r7}, 0x10) (async) r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r7}, 0x10) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000400, 0x0, 0x0, 0x0, &(0x7f0000000180)) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x5, 0x0) (async) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x5, 0x0) umount2(&(0x7f0000000300)='./file0/../file0\x00', 0x3) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYRESDEC=r6, @ANYRES8=r8, @ANYRES8=r6], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4008040) sendmsg$NFT_BATCH(r9, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a54000000030a0fdb00000000000000000a0060050900030073797a30000000000900010073797a310000000014000480080002403cb140bb08000140000000030a000700726f757465000000080005400000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20008050) (async) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20008050) close_range(r4, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000340)={0xffffffffffffffff, r1, 0x0, 0x10, &(0x7f0000000300)='kmem_cache_free\x00'}, 0x30) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000400)=ANY=[@ANYBLOB="4000000078279082e8ed58737bdbf09262aca1265da4e82fcde08f43cf09af8fb7715b9d01668034c7319b6e02019b64b1d2e38cdd92188b73c961a10335d7d90796e799f4fdf34c7e9f719766d5dd4b055fb63a284214865668a486cc8d5afe0adb0e4b2d48bca72783069d12a15706ed605cbd404d81455a9c47f98ed8586407600a47ea3b8fbc6cd4d49c36c4bea91f070ace04fe33d3d27b29e6bf253c329766b1a2737c9c337eb50778943b5b2251dd7270", @ANYRES16=r10, @ANYBLOB="0100000000000003000008000000180001801400020073797a5f74756e00000000000000000014000280100003800c0001800800010000000000"], 0x40}, 0x1, 0x0, 0x0, 0xc010}, 0x0) 1.269109892s ago: executing program 1 (id=2469): fsopen(0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00"/11], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00', r1}, 0x10) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r3 = fcntl$dupfd(r2, 0x406, r2) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x3, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x4}]}) socket(0x80000000000000a, 0x2, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) socket(0x1e, 0x4, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x880) 1.268474122s ago: executing program 5 (id=2470): bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x13, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='sys_enter\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f00000001c0)='mm_vmscan_lru_isolate\x00', r3, 0x0, 0x7fffffffffffffff}, 0xffffffffffffff50) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r2}, 0x8) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000000)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='locks_get_lock_context\x00', r4}, 0x10) gettid() r5 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='sched_switch\x00', r9}, 0x18) unshare(0x62040200) 969.84757ms ago: executing program 3 (id=2472): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r0, @ANYBLOB="06001500070000000c00168008"], 0x38}}, 0x10) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000180)={'wg1\x00', 0x0}) sendmsg$inet(r1, &(0x7f0000000280)={&(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10, &(0x7f0000000140)=[{&(0x7f00000000c0)="9383e0b55b9b9b8e5f40329d3b60b30f2e3be44fb61ae2baec264ea4b84c5bfce5944c484fb55342bca8a1c38bfe203a86f95fa0ce5d0c30587a7a91117e7afda7cb4f2a9fd5db08244dadbcdedd80c9", 0x50}, {&(0x7f0000000040)="262a987098f6248b438ff611f095", 0xe}], 0x2, &(0x7f00000001c0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x2}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xfc}}, @ip_ttl={{0x14, 0x0, 0x2, 0xc9}}, @ip_ttl={{0x14, 0x0, 0x2, 0x6}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @broadcast, @local}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x9}}], 0x98}, 0x800) 861.46091ms ago: executing program 3 (id=2473): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="38000b001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r0, @ANYBLOB="06001500070000000c00168008"], 0x38}}, 0x10) 693.311176ms ago: executing program 3 (id=2474): removexattr(0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$ethtool(0x0, r1) getsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f0000000380)={@multicast2, @local}, &(0x7f00000003c0)=0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYRES32=r3, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000", @ANYRES32=r3], 0x48}, 0x1, 0x0, 0x0, 0x48800}, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000400)={'wg2\x00'}) r4 = socket(0x1d, 0x2, 0x6) epoll_create(0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000380)={0x1d, r5, 0x1, {0x0, 0x0, 0x1}, 0xfd}, 0x18) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000b40)={'gre0\x00', &(0x7f0000000c00)={'gre0\x00', 0x0, 0x80, 0x40, 0xa, 0x3, {{0x20, 0x4, 0x0, 0x7, 0x80, 0x68, 0x0, 0x10, 0x4, 0x0, @empty, @multicast1, {[@ra={0x94, 0x4}, @noop, @ssrr={0x89, 0x17, 0x70, [@local, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010100, @local, @dev={0xac, 0x14, 0x14, 0x24}]}, @cipso={0x86, 0x12, 0xb9c3e7bb4c8766a6, [{0x7, 0xc, "62a5bc2177bd08b960ff"}]}, @ra={0x94, 0x4, 0x1}, @cipso={0x86, 0x37, 0x3, [{0x7, 0x12, "6b890f086022a5adabc88f975cbf77d5"}, {0x6, 0xf, "a97ac6529edf0928c36ce77a99"}, {0x5, 0x9, "11314e8eebb939"}, {0x0, 0x2}, {0x7, 0x5, "19e991"}]}]}}}}}) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000800)={{{@in=@initdev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@initdev}}, &(0x7f0000000bc0)=0xe8) quotactl$Q_SETQUOTA(0x80000000c0001400, &(0x7f00000007c0)=@loop={'/dev/loop', 0x0}, r6, &(0x7f0000000940)={0x7f, 0x6, 0xa, 0x8, 0x7ea7, 0xffff, 0x7, 0x93, 0x65}) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x3801814, &(0x7f0000000300)={[{@bsdgroups}, {@jqfmt_vfsv1}, {@dax_inode}, {@minixdf}, {@journal_checksum}, {@journal_checksum}]}, 0xc1, 0x7e9, &(0x7f00000017c0)="$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") 692.420925ms ago: executing program 2 (id=2475): unshare(0x6c000200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="c8000000", @ANYRES16=0xffffffffffffffff, @ANYBLOB="000228bd7000fedbdf25460000000800010070636900110002003030"], 0xc8}, 0x1, 0x0, 0x0, 0x20008001}, 0x4080) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="310300000000fcdbdf250900000008000300", @ANYRES32=r3, @ANYBLOB="080006"], 0x24}}, 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c000000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0x1ffffffffffffdf4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000000000b703000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r5}, 0x10) setitimer(0x0, 0x0, 0x0) unshare(0x0) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000080), 0xc, &(0x7f00000004c0)={&(0x7f0000000c40)=ANY=[@ANYBLOB="66020000", @ANYRES16=0x0, @ANYBLOB="010027bd7000fddbdf25060000000c00018008000100", @ANYRES32=r3, @ANYBLOB="2000018008000300010000001400020076657468305f746f5f627269646765006800018008000300020000001400020069705f767469300000000000000000000800030001000000080003000200000014000200767863616e3100000000000000000000080003000000000008000100", @ANYRES32=r3, @ANYRESHEX=r6, @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r3, @ANYBLOB="140002006d6163766c616e310000000000000000280001800800030003000000140002006272696467655f736c6176655f31000008000100", @ANYRES32=r3, @ANYBLOB="3400018008000100", @ANYRES32=r3, @ANYBLOB="1400020076657468310000000000000000000000140002006970766c616e3100000000000000000060000180140002006c6f000000000000000000000000000008000100", @ANYRES32=r3, @ANYBLOB="140002006e72300000000000000000000000000014000200766c616e3100000000000000000000000800030000000000080003000000000008000300020000003800018008000100", @ANYRES32=r3, @ANYBLOB="06000000ba136f1b436eae55a14490cc0e14b453432228b894d49b61a85031aac350cb161249ccab5fa64564315055dc779b0f04668e5f2bc88be79d1c00f56c0a6383a6894605db83", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="1400020076657468315f746f5f6873720000000008000100", @ANYRES32=r3, @ANYBLOB], 0x21c}, 0x1, 0x0, 0x0, 0x40}, 0x24000001) r7 = socket$caif_stream(0x25, 0x1, 0x0) writev(r7, &(0x7f0000000940)=[{&(0x7f00000003c0)="e5", 0x1}], 0x1) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000005c0)='/sys/kernel/rcu_stall_count', 0x40200, 0x1a) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r8, &(0x7f00000000c0)={0xe000001a}) finit_module(r8, 0x0, 0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYRESHEX=r4], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES64=r4, @ANYRESDEC=r8, @ANYRESDEC=r4, @ANYRESHEX, @ANYRESOCT=r0, @ANYRES32=r0, @ANYRESHEX=r4], 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200}, 0x65) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r9}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) clock_adjtime(0x0, &(0x7f00000006c0)={0x5, 0xf423f, 0x0, 0x0, 0x1, 0x1002c43, 0x9fe, 0x2800000000000, 0x0, 0x7, 0x0, 0x2902, 0x20, 0x800ffffffff, 0x8, 0x0, 0x8000000000000000, 0x0, 0x0, 0x7, 0x0, 0x1, 0x0, 0x0, 0x1ff}) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r8, &(0x7f0000000000)) r10 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r10, 0x0, 0x61, &(0x7f0000000000)={'filter\x00', 0x4}, 0x68) 602.919454ms ago: executing program 3 (id=2476): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) unshare(0x6a040000) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000040000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0, 0x0, 0x1}, 0x18) mmap(&(0x7f00009ad000/0x2000)=nil, 0x2000, 0x2000006, 0x8031, r0, 0x94175000) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0xf) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r3, &(0x7f00000007c0)={0xa, 0x4e23, 0x0, @loopback, 0x1170}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x62) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) sendmsg$inet(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000b80)='n', 0x1}], 0x1}, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000040)={0x4, 0x9, 0x728, 0x6}, 0x14) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000100)=@gcm_128={{0x304}, '\x00\x00\x00\x00@\x00', "252432e72844858a068b92a5a810f4dc", "11802ff5", "5aee41448c84afb7"}, 0x28) close_range(r2, 0xffffffffffffffff, 0x0) sendto$inet(r1, 0x0, 0x0, 0xc806, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) 564.958627ms ago: executing program 0 (id=2477): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'bond0\x00', 0x0}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x8, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000", @ANYRESOCT=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e21, @broadcast}, 0x10) ioctl$int_in(r3, 0x5452, &(0x7f0000000000)=0x6) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0x201, 0x0, 0x0) r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x4e, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x2040e, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x2, @perf_config_ext={0x4ac269ba, 0xaea}, 0x11aa0, 0x30, 0x10000, 0x0, 0x18bb, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r4, 0x4008240b, &(0x7f0000002180)={0x2, 0x80, 0x2, 0x8, 0x4, 0x8b, 0x0, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_bp={0x0, 0x1}, 0x106000, 0x1, 0x9eea, 0x3, 0x8000000000000001, 0x80000001, 0x2, 0x0, 0x51, 0x0, 0x8}) shutdown(r3, 0x1) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) r5 = syz_io_uring_setup(0x4b5, &(0x7f0000010400)={0x0, 0x86e1, 0x1, 0x8}, &(0x7f0000010080), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f0000000b40)=[{0x0}, {0x0}], 0x2) ioctl$VT_DISALLOCATE(r2, 0x5608) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r5, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r6, 0x0, 0x80000}, 0x18) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) 452.635378ms ago: executing program 1 (id=2478): socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020047b1af8ff00000000bfa100000000000007010000f8ffffffb7020000080000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000020000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000006c0)='kfree\x00', r2}, 0x18) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r4, {0x1}}, './file0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000dd0000000000003b810000850000006d000000a50000005000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000500)='ext4_mballoc_alloc\x00', r1}, 0x18) set_mempolicy(0x3, &(0x7f0000000000)=0x3, 0x80000000) mlockall(0x2) r5 = shmget$private(0x0, 0x400000, 0x8, &(0x7f000000e000/0x400000)=nil) shmctl$SHM_LOCK(r5, 0xb) shmat(r5, &(0x7f0000ffd000/0x1000)=nil, 0x7000) shmctl$SHM_UNLOCK(r5, 0xc) r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r6, &(0x7f0000000080)={0xa, 0x0, 0x3, 0x1, 0xfe}, 0x8) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'ip6_vti0\x00'}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newtclass={0x70, 0x28, 0x300, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xe, 0x3}, {0x1, 0xffe0}, {0x7, 0xfff3}}, [@tclass_kind_options=@c_qfq={{0x8}, {0x24, 0x2, [@TCA_QFQ_LMAX={0x8, 0x2, 0x9}, @TCA_QFQ_LMAX={0x8, 0x2, 0x7ff}, @TCA_QFQ_WEIGHT={0x8, 0x1, 0x1}, @TCA_QFQ_WEIGHT={0x8}]}}, @tclass_kind_options=@c_sfq={0x8}, @TCA_RATE={0x6, 0x5, {0x7, 0x2}}, @TCA_RATE={0x6, 0x5, {0xd, 0x81}}, @TCA_RATE={0x6, 0x5, {0xd, 0xf8}}]}, 0x70}}, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000002c0)={'bridge0\x00', 0x0}) getresuid(&(0x7f0000000680), &(0x7f0000000700)=0x0, &(0x7f0000000740)) sendmsg$netlink(r3, &(0x7f0000000b80)={&(0x7f0000000640)=@kern={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000a00)=[{&(0x7f0000000940)={0x18, 0x12, 0x4, 0x70bd2d, 0x25dfdbfe, "", [@typed={0x8, 0x143, 0x0, 0x0, @uid=r10}]}, 0x18}, {&(0x7f0000000980)={0x20, 0x29, 0x200, 0x70bd26, 0x25dfdbfc, "", [@nested={0x10, 0x3e, 0x0, 0x1, [@typed={0xc, 0xd4, 0x0, 0x0, @u64=0x10000}]}]}, 0x20}], 0x2, &(0x7f0000000b40)=[@rights={{0x14, 0x1, 0x1, [r3]}}], 0x18, 0x18}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000006080)=@delchain={0x24, 0x66, 0x221, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff2}, {}, {0xb, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20004800) 416.120841ms ago: executing program 5 (id=2479): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x30004001) r1 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x22c01) syz_io_uring_setup(0x81b, &(0x7f0000000380)={0x0, 0x6e8, 0x10000, 0xfff7ffff, 0x179}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r2, r3, 0x0) socket$key(0xf, 0x3, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x4052}, 0x18) r4 = open(&(0x7f0000000000)='./bus\x00', 0x1050c1, 0x170) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) stat(&(0x7f0000000480)='./bus\x00', &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0}) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) r7 = io_uring_setup(0x20001d49, &(0x7f0000000340)={0x0, 0x7a08, 0x40, 0x3, 0x220}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0xffffffff}, @NFTA_NG_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, '#'}]}], {0x14}}, 0x8c}}, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000600)={0xffffffffffffffff}) recvmmsg(r9, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000a00)=""/85, 0x55}], 0x1}, 0x2b46}, {{&(0x7f0000000580)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000000240)=[{&(0x7f00000002c0)=""/15, 0xf}], 0x1, &(0x7f0000000680)=""/165, 0xa5}, 0xfffffe01}], 0x2, 0x1, 0x0) close_range(r7, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r6}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0xc2f00, 0x4d, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000980)='mm_page_free\x00', r10}, 0x18) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000003, 0x50032, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000007, 0x11, 0xffffffffffffffff, 0xfffff000) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000880)={[{@nolazytime}, {@lazytime}, {@journal_path={'journal_path', 0x3d, './bus'}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}, {@noblock_validity}, {@nodiscard}], [{@obj_user={'obj_user', 0x3d, 'nodiscard'}}, {@fsuuid={'fsuuid', 0x3d, {[0x31, 0x32, 0x34, 0x33, 0x33, 0x66, 0x37, 0x62], 0x2d, [0x66, 0x30, 0x65, 0x1], 0x2d, [0x65, 0x33, 0x38, 0x65], 0x2d, [0x33, 0x34, 0x35, 0x35], 0x2d, [0x61, 0x32, 0x64, 0x63, 0x66, 0x64, 0x35, 0x39]}}}, {@fowner_eq}, {@func={'func', 0x3d, 'FILE_MMAP'}}, {@fowner_eq={'fowner', 0x3d, r5}}]}, 0x0, 0x479, &(0x7f0000001300)="$eJzs3MtvG8UfAPDvOo82fcW/qj+gDyAIEKVA0qSl9MAFBBIHkJDgUI4hSatSt0FNkEhVQUCoHFElTlwQRyT+Ak5wQcAJCQ4c4I4qVaiXFk5Gm91NHdfOw3Xstv58pHVmdtee+Xpn7NmdeAPoWSPpQxKxIyL+iIjhLLtyh5Hsz41rF6f+uXZxKolq9Y2/k/508/VrF6eKXYvnbS8y/RGlT5LY36DcuYULZyYrlZnzeX5s/uy7Y3MLF545fXby1MypmXMTx48fPTL+3LGJZ9sSZxrX9X0fzB7Y+8pbl1+bOnH57Z++SYr46+K4xW8tFTmy2sbHq9WWXvQONJg+7KxZkbUM7gZ9WTeNgaX+Pxx9cfPgDcfLH3e1csCmqlar1fuab16sAvewJLpdA6A7ii/69Py3WDo09LgjXH0hOwFK476RL9mW/ijl+wzUnd+200hEnFj898t0ibWuQwAAtMF36fjn6Ubjv1LUXhfalc+hlCPifxGxOyKORcSeiPh/xNK+90fEAxssv36S5NbxT+lKS4GtUzr+ez6f21o5/itGf1Huy3M7l+IfSE6erswczt+TgzGwJc2Pr1LG9y/9+lmzbbXjv3RJyy/Ggnk9rvRvWfmc6cn5yduJudbVjyL29TeKP1meCUgiYm9E7GuxjNOHvj7QbNva8a+iDfNM1a8insiO/2LUxV9IsvnJcpP5ybGtUZk5PFa0ihiqefnF9ND9/Mul15uVf1vxt0F6/Lc1bP/L8ZeT2vnauY28+hdPpo+X/vy06TlNq+1/MHlzxbr3J+fnz49HDCavZpWuXT9Rt9/Ezf3T+A8+2rj/746b78T+iEgb8YMR8VBEPJzX/ZHfd635Lvz44mPvtB7/5krjn17/8a8ORxQNYWEw8sTymsaJvjM/fLui0HLj+Hc1Pf5Hl1IH8zXr+fxbT7022poBAADgblWKiB2RlEaX06XS6Gj2P/x7YlupMjs3/9TJ2ffOTWe/ESjHQKm40jVccz10PD+tL/ITdfkj+XXjz/uGlvKjU7OV6W4HDz1ue5P+n/qrr9u1Azad32tB79L/oXfp/9C7sv5fe7a/tWt1ATqrwff/UDfqAXReo/H/h+t54o721wXorLr+b9oPeojrf9C7Wun/PjPg3tC/2i2bBztaFaBz5oZi7R/J32uJrRu4QcDdlyjuXLMZRQykreVQRCxciFLXI5XYxES3P5kAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADa478AAAD//9OC4M8=") ioctl$BTRFS_IOC_WAIT_SYNC(r1, 0x40089416, &(0x7f00000001c0)) socket$inet6_tcp(0xa, 0x1, 0x0) syz_clone(0x26801000, 0x0, 0x0, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20048801}, 0x40084) 373.009765ms ago: executing program 3 (id=2480): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000004780)={'wg2\x00', &(0x7f0000000180)=@ethtool_link_settings={0x7, 0xffffffff}}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000003000000018000180140002007665746830"], 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r7, r6, 0x25, 0x0, @void}, 0x10) sendmsg$ETHTOOL_MSG_COALESCE_GET(r2, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0x3c, r4, 0x2, 0x70bd29, 0x25dfdbfb, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r10}, &(0x7f0000000280), &(0x7f0000000240)=r1}, 0x20) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r10, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r8, 0x1, 0x32, &(0x7f00000000c0)=r11, 0x4) r12 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r12, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) unshare(0x40480) r14 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r14, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb0, 0x8, 0x0, 0x0}}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r13}, 0x10) setuid(0xee00) sendmsg$inet(r9, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000600), r3) 350.744597ms ago: executing program 3 (id=2481): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) capset(&(0x7f0000000080)={0xbfe8a23eae0eb1be}, &(0x7f0000000140)={0x7, 0x0, 0x0, 0x8, 0x5987, 0x2}) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x200000, @empty, 0x1}, 0x1c) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYRES16=r2, @ANYRES64=r0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000000034e00bbe00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r5, &(0x7f0000000000)={0x2a, 0x2, 0x7ffe}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='rpc_buf_alloc\x00', r4, 0x0, 0x4}, 0xe) bind$qrtr(r5, &(0x7f00000000c0)={0x2a, 0x1, 0x7fff}, 0xc) semtimedop(0x0, 0x0, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x18) readv(0xffffffffffffffff, &(0x7f00000003c0)=[{0x0}], 0x1) syz_clone(0xe0000011, 0x0, 0x61, 0x0, 0x0, 0x0) listen(r1, 0x0) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r7, &(0x7f0000000180)={0x2, 0x4e23, @private=0xa010100}, 0x10) accept(r1, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) 315.514851ms ago: executing program 1 (id=2482): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x200000000006, 0x2, 0x4, 0x7ffc0002}]}) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) writev(r1, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}], 0x1) 221.015329ms ago: executing program 0 (id=2483): socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020047b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000020000085000000c30000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000006c0)='kfree\x00', r2}, 0x18) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r3, {0x1}}, './file0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000dd0000000000003b810000850000006d000000a50000005000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000500)='ext4_mballoc_alloc\x00', r1}, 0x18) set_mempolicy(0x3, &(0x7f0000000000)=0x3, 0x80000000) mlockall(0x2) r4 = shmget$private(0x0, 0x400000, 0x8, &(0x7f000000e000/0x400000)=nil) shmctl$SHM_LOCK(r4, 0xb) shmat(r4, &(0x7f0000ffd000/0x1000)=nil, 0x7000) shmctl$SHM_UNLOCK(r4, 0xc) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r5, &(0x7f0000000080)={0xa, 0x0, 0x3, 0x1, 0xfe}, 0x8) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'ip6_vti0\x00'}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newtclass={0x70, 0x28, 0x300, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xe, 0x3}, {0x1, 0xffe0}, {0x7, 0xfff3}}, [@tclass_kind_options=@c_qfq={{0x8}, {0x24, 0x2, [@TCA_QFQ_LMAX={0x8, 0x2, 0x9}, @TCA_QFQ_LMAX={0x8, 0x2, 0x7ff}, @TCA_QFQ_WEIGHT={0x8, 0x1, 0x1}, @TCA_QFQ_WEIGHT={0x8}]}}, @tclass_kind_options=@c_sfq={0x8}, @TCA_RATE={0x6, 0x5, {0x7, 0x2}}, @TCA_RATE={0x6, 0x5, {0xd, 0x81}}, @TCA_RATE={0x6, 0x5, {0xd, 0xf8}}]}, 0x70}}, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000002c0)={'bridge0\x00'}) getresuid(&(0x7f0000000680), &(0x7f0000000700), &(0x7f0000000740)) 206.919361ms ago: executing program 1 (id=2484): r0 = socket$inet_udp(0x2, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000000000002) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs={0x0, 0x0, 0xb}, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1d19cb307b3472ab9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x18}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x41000}, 0x94) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r0, &(0x7f0000002a40)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000001400)=""/226, 0xe2}, {0x0}], 0x2}, 0x6}], 0x1, 0x10000, 0x0) 201.451061ms ago: executing program 2 (id=2485): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0xfffffffffffffffc}, 0x18) truncate(&(0x7f0000000900)='./file1\x00', 0x3000000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, 0x3, 0x6, 0x801, 0x0, 0x0, {0x5, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x20004000}, 0x84) 96.895221ms ago: executing program 2 (id=2486): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f0000"], 0x48) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x48) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', r0, 0x0, 0x401}, 0x11) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000400)=[{0x6, 0x1, 0x2, 0x7fff7ffc}]}) lsm_list_modules(&(0x7f00000004c0), &(0x7f0000000000), 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) socket$rds(0x15, 0x5, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xa, 0x2010, r3, 0x72242000) socket$nl_route(0x10, 0x3, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000640)={&(0x7f0000000c00)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="000127bd7000fbdbdf25140000000c00990046000000090000001b00be009ac3db489b3ac38e9cd3aa840d2a9a400e30fe1d6b24b600164a26f51c81be70ee7e1f0c73a16fb56cfb14b5893a36e9126e89758f9828495835c84be950196833b44221cb5b0f7d5a3a992c9314517bc392f483fb5ec7dec1e8f7198d341320b3def792ed7256ab94bced"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newtaction={0x14, 0x30, 0xb, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x6a00}}, 0x14}}, 0x80) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001100010100000000", @ANYRES32=r5], 0x20}, 0x1, 0x0, 0x0, 0x80d5}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000"], 0x0, 0x2000005, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r7}, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r8 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x109480) quotactl_fd$Q_GETQUOTA(r1, 0xffffffff80000700, 0x0, &(0x7f00000005c0)) ioctl$EVIOCGVERSION(r8, 0x8004453f, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xe, 0x7fff0000}]}) syz_usb_connect$printer(0x1, 0x2d, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000680)='./file0\x00', 0x0, &(0x7f0000000b80)={[{@usrquota}, {@resgid}], [{@seclabel}]}, 0x21, 0x4bd, &(0x7f00000006c0)="$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") 0s ago: executing program 0 (id=2487): getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c45, 0x0) fsconfig$FSCONFIG_SET_FD(r0, 0x5, 0x0, 0x0, 0xffffffffffffffff) flock(r0, 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x80) flock(r1, 0x1) flock(r1, 0x2) r2 = dup3(r1, r0, 0x0) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x6, 0x1d, &(0x7f0000000380)=@raw=[@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x40}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @map_val={0x18, 0x9, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0xfffffff7}, @ldst={0x3, 0x2, 0x4, 0x3, 0x2, 0xfffffffffffffff0, 0x3}, @map_val={0x18, 0x4, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x4}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xb}}, @call={0x85, 0x0, 0x0, 0xa}, @alu={0x4, 0x1, 0x3, 0x4, 0x7, 0x80, 0x8}], &(0x7f0000000000)='GPL\x00', 0x0, 0x2a, &(0x7f0000000140)=""/42, 0x40f00, 0x40, '\x00', 0x0, 0x25, r0, 0x8, &(0x7f0000000200)={0x1, 0x3f}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000480)=[r2, r0, r1, r0, r1, r1], &(0x7f00000004c0)=[{0x1, 0x5, 0xd, 0x1}, {0x4, 0x4, 0x5, 0xb}, {0x1, 0x5, 0x8, 0x1}, {0x4, 0x4, 0x10, 0x9}], 0x10, 0xffff}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r3}, 0x94) r5 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) open(&(0x7f0000000040)='./bus\x00', 0x46342, 0x0) mount(&(0x7f0000005440)=@loop={'/dev/loop', 0x0}, 0x0, 0x0, 0x1000, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r6) sendmsg$DEVLINK_CMD_RATE_DEL(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r7, @ANYBLOB="0100000140000021000054"], 0x14}}, 0x4004800) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000000000000000000006dfeff00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r9}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYRESDEC=r6, @ANYRESHEX=r4, @ANYBLOB="fc40aee14bfaa18b2d56b5a6a3233662c3ff341cbf1e721018eab8421a53893d7ae24dc266643df236cea8ac281c", @ANYRESOCT=r9, @ANYRESHEX, @ANYRESHEX=r8, @ANYRES16=r0, @ANYRES8=r5, @ANYRES16=r5], 0x48) mmap(&(0x7f0000332000/0x1000)=nil, 0x1000, 0x3, 0x2010, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x3) mmap(&(0x7f00004f1000/0x4000)=nil, 0x4000, 0x0, 0x8031, 0xffffffffffffffff, 0x4004000) kernel console output (not intermixed with test programs): 003e syscall=241 compat=0 ip=0x7f9cf4abf749 code=0x7ffc0000 [ 247.035696][ T29] audit: type=1326 audit(1767061166.779:72062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9647 comm="syz.3.1999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cf4abf749 code=0x7ffc0000 [ 247.658990][ T9655] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 247.667517][ T9655] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 248.203861][ T9673] set_capacity_and_notify: 2 callbacks suppressed [ 248.203877][ T9673] loop2: detected capacity change from 0 to 1024 [ 248.218221][ T9673] EXT4-fs: Ignoring removed nomblk_io_submit option [ 248.227031][ T9673] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 248.235290][ T9673] System zones: 0-1, 3-36 [ 248.490033][ T9682] loop5: detected capacity change from 0 to 1024 [ 248.514351][ T9682] EXT4-fs: Ignoring removed nomblk_io_submit option [ 248.547207][ T9682] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 248.558436][ T9682] System zones: 0-1, 3-36 [ 248.615600][ T9682] siw: device registration error -23 [ 248.692222][ T9687] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2007'. [ 248.741485][ T9687] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2007'. [ 251.143799][ T9742] loop5: detected capacity change from 0 to 1024 [ 251.165538][ T9742] EXT4-fs: Ignoring removed nomblk_io_submit option [ 251.173931][ T9742] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 251.211789][ T9742] System zones: 0-1, 3-36 [ 251.220536][ T9742] EXT4-fs mount: 35 callbacks suppressed [ 251.220550][ T9742] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 251.282753][ T9746] loop0: detected capacity change from 0 to 2048 [ 251.363928][ T7606] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 251.427854][ T9752] loop0: detected capacity change from 0 to 1024 [ 251.444242][ T9752] EXT4-fs: Ignoring removed nomblk_io_submit option [ 251.485057][ T9752] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 251.493187][ T9752] System zones: 0-1, 3-36 [ 251.500009][ T9756] loop3: detected capacity change from 0 to 1024 [ 251.515852][ T9756] EXT4-fs: Ignoring removed nomblk_io_submit option [ 251.528309][ T9752] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 251.556547][ T9754] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 251.574036][ T9756] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 251.583337][ T9756] System zones: 0-1, 3-36 [ 251.590812][ T9750] netlink: 'syz.2.2021': attribute type 1 has an invalid length. [ 251.606907][ T9756] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 251.609534][ T9750] 8021q: adding VLAN 0 to HW filter on device bond2 [ 251.629981][ T9750] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2021'. [ 251.642491][ T9750] bond2 (unregistering): Released all slaves [ 251.666474][ T9752] siw: device registration error -23 [ 251.720593][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 251.734106][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 251.772833][ T9763] loop5: detected capacity change from 0 to 1024 [ 251.780173][ T9763] EXT4-fs: Ignoring removed nomblk_io_submit option [ 251.805601][ T9763] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 251.813750][ T9763] System zones: 0-1, 3-36 [ 251.836094][ T9763] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 251.850838][ T9770] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 251.865466][ T29] kauditd_printk_skb: 412 callbacks suppressed [ 251.865481][ T29] audit: type=1326 audit(1767061171.949:72475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9761 comm="syz.5.2026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa23350df90 code=0x7ffc0000 [ 251.895255][ T29] audit: type=1326 audit(1767061171.949:72476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9761 comm="syz.5.2026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7fa23350e497 code=0x7ffc0000 [ 251.918698][ T29] audit: type=1326 audit(1767061171.949:72477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9761 comm="syz.5.2026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa23350df90 code=0x7ffc0000 [ 251.942299][ T29] audit: type=1326 audit(1767061171.949:72478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9761 comm="syz.5.2026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa23350f749 code=0x7ffc0000 [ 251.965855][ T29] audit: type=1326 audit(1767061171.949:72479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9761 comm="syz.5.2026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa23350f749 code=0x7ffc0000 [ 251.989420][ T29] audit: type=1326 audit(1767061171.959:72480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9761 comm="syz.5.2026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa23350f749 code=0x7ffc0000 [ 252.013012][ T29] audit: type=1326 audit(1767061171.959:72481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9761 comm="syz.5.2026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa23350f749 code=0x7ffc0000 [ 252.028480][ T9772] loop2: detected capacity change from 0 to 512 [ 252.037042][ T29] audit: type=1326 audit(1767061171.989:72482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9761 comm="syz.5.2026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa23350f749 code=0x7ffc0000 [ 252.064276][ T9763] siw: device registration error -23 [ 252.066512][ T29] audit: type=1326 audit(1767061172.099:72483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9761 comm="syz.5.2026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa23350f749 code=0x7ffc0000 [ 252.095452][ T29] audit: type=1326 audit(1767061172.099:72484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9761 comm="syz.5.2026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa23350f749 code=0x7ffc0000 [ 252.120540][ T9772] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 252.130677][ T9772] EXT4-fs (loop2): orphan cleanup on readonly fs [ 252.137780][ T9772] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4215: comm syz.2.2029: Allocating blocks 41-42 which overlap fs metadata [ 252.151929][ T9772] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4215: comm syz.2.2029: Allocating blocks 41-42 which overlap fs metadata [ 252.166099][ T9772] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm syz.2.2029: Failed to acquire dquot type 1 [ 252.178364][ T7606] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 252.188086][ T9772] EXT4-fs error (device loop2): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 252.203137][ T9772] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #12: comm syz.2.2029: corrupted inode contents [ 252.215635][ T9772] EXT4-fs error (device loop2): ext4_dirty_inode:6502: inode #12: comm syz.2.2029: mark_inode_dirty error [ 252.227291][ T9772] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #12: comm syz.2.2029: corrupted inode contents [ 252.239594][ T9772] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #12: comm syz.2.2029: mark_inode_dirty error [ 252.261292][ T9772] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #12: comm syz.2.2029: corrupted inode contents [ 252.283433][ T9772] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 252.292278][ T9772] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #12: comm syz.2.2029: corrupted inode contents [ 252.304495][ T9772] EXT4-fs error (device loop2): ext4_truncate:4635: inode #12: comm syz.2.2029: mark_inode_dirty error [ 252.315967][ T9772] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 252.325474][ T9772] EXT4-fs (loop2): 1 truncate cleaned up [ 252.331801][ T9772] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 252.716668][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 253.021241][ T9789] loop2: detected capacity change from 0 to 2048 [ 253.076438][ T9791] loop2: detected capacity change from 0 to 2048 [ 253.118900][ T9793] EXT4-fs: Ignoring removed nomblk_io_submit option [ 253.127214][ T9793] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 253.135563][ T9793] System zones: 0-1, 3-36 [ 253.141080][ T9793] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 253.166912][ T9793] siw: device registration error -23 [ 253.197945][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 253.239125][ T9798] set_capacity_and_notify: 1 callbacks suppressed [ 253.239141][ T9798] loop2: detected capacity change from 0 to 1024 [ 253.253029][ T9798] EXT4-fs: Ignoring removed nomblk_io_submit option [ 253.261454][ T9798] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 253.270162][ T9798] System zones: 0-1, 3-36 [ 253.281312][ T9798] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 253.333307][ T9798] siw: device registration error -23 [ 253.359937][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 253.457715][ T9801] netlink: 'syz.3.2039': attribute type 1 has an invalid length. [ 253.475107][ T9801] 8021q: adding VLAN 0 to HW filter on device bond1 [ 253.485774][ T9801] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2039'. [ 253.499767][ T9801] bond1 (unregistering): Released all slaves [ 253.731202][ T9814] loop2: detected capacity change from 0 to 1024 [ 253.745023][ T9814] EXT4-fs: Ignoring removed nomblk_io_submit option [ 253.755346][ T9816] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 253.765589][ T9814] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 253.773939][ T9814] System zones: 0-1, 3-36 [ 253.779811][ T9814] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 253.793011][ T9816] loop0: detected capacity change from 0 to 512 [ 253.806327][ T9816] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 253.817474][ T9816] EXT4-fs (loop0): orphan cleanup on readonly fs [ 253.822054][ T9814] siw: device registration error -23 [ 253.825554][ T9816] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4215: comm syz.0.2044: Allocating blocks 41-42 which overlap fs metadata [ 253.845670][ T9816] EXT4-fs error (device loop0): ext4_acquire_dquot:6986: comm syz.0.2044: Failed to acquire dquot type 1 [ 253.863897][ T9816] EXT4-fs error (device loop0): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 253.907450][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 253.917059][ T9816] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #12: comm syz.0.2044: corrupted inode contents [ 253.937343][ T9816] EXT4-fs error (device loop0): ext4_dirty_inode:6502: inode #12: comm syz.0.2044: mark_inode_dirty error [ 253.985135][ T9821] loop2: detected capacity change from 0 to 1024 [ 253.994419][ T9816] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #12: comm syz.0.2044: corrupted inode contents [ 254.017017][ T9821] EXT4-fs: Ignoring removed nomblk_io_submit option [ 254.042572][ T9816] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #12: comm syz.0.2044: mark_inode_dirty error [ 254.058801][ T9821] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 254.067689][ T9828] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 254.076793][ T9816] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #12: comm syz.0.2044: corrupted inode contents [ 254.083662][ T9828] loop3: detected capacity change from 0 to 512 [ 254.096581][ T9821] System zones: 0-1, 3-36 [ 254.096716][ T9828] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 254.225447][ T9821] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 254.238026][ T9816] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 254.247327][ T9828] EXT4-fs (loop3): orphan cleanup on readonly fs [ 254.254077][ T9816] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #12: comm syz.0.2044: corrupted inode contents [ 254.266735][ T9828] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4215: comm syz.3.2048: Allocating blocks 41-42 which overlap fs metadata [ 254.285353][ T9816] EXT4-fs error (device loop0): ext4_truncate:4635: inode #12: comm syz.0.2044: mark_inode_dirty error [ 254.311175][ T9821] siw: device registration error -23 [ 254.319924][ T9828] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4215: comm syz.3.2048: Allocating blocks 41-42 which overlap fs metadata [ 254.525968][ T9816] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem [ 254.544366][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 254.594739][ T9828] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.2048: Failed to acquire dquot type 1 [ 254.614909][ T9816] EXT4-fs (loop0): 1 truncate cleaned up [ 254.686746][ T9816] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 254.730230][ T9828] EXT4-fs error (device loop3): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 254.848388][ T9828] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #12: comm syz.3.2048: corrupted inode contents [ 254.934988][ T9828] EXT4-fs error (device loop3): ext4_dirty_inode:6502: inode #12: comm syz.3.2048: mark_inode_dirty error [ 254.946658][ T9828] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #12: comm syz.3.2048: corrupted inode contents [ 254.975710][ T9828] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #12: comm syz.3.2048: mark_inode_dirty error [ 254.995277][ T9835] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 255.012301][ T9828] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #12: comm syz.3.2048: corrupted inode contents [ 255.038689][ T9828] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 255.053095][ T9828] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #12: comm syz.3.2048: corrupted inode contents [ 255.065593][ T9828] EXT4-fs error (device loop3): ext4_truncate:4635: inode #12: comm syz.3.2048: mark_inode_dirty error [ 255.077194][ T9828] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem [ 255.086510][ T9828] EXT4-fs (loop3): 1 truncate cleaned up [ 255.092683][ T9828] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 255.103218][ T9835] loop2: detected capacity change from 0 to 512 [ 255.117268][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 255.128157][ T9835] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 255.174507][ T9835] EXT4-fs (loop2): orphan cleanup on readonly fs [ 255.181843][ T9835] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4215: comm syz.2.2049: Allocating blocks 41-42 which overlap fs metadata [ 255.196457][ T9835] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4215: comm syz.2.2049: Allocating blocks 41-42 which overlap fs metadata [ 255.210584][ T9835] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm syz.2.2049: Failed to acquire dquot type 1 [ 255.223759][ T9835] EXT4-fs error (device loop2): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 255.239670][ T9835] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #12: comm syz.2.2049: corrupted inode contents [ 255.252010][ T9835] EXT4-fs error (device loop2): ext4_dirty_inode:6502: inode #12: comm syz.2.2049: mark_inode_dirty error [ 255.263652][ T9835] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #12: comm syz.2.2049: corrupted inode contents [ 255.276782][ T9835] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #12: comm syz.2.2049: mark_inode_dirty error [ 255.289454][ T9835] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #12: comm syz.2.2049: corrupted inode contents [ 255.289646][ T9839] loop0: detected capacity change from 0 to 2048 [ 255.303410][ T9835] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 255.316563][ T9835] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #12: comm syz.2.2049: corrupted inode contents [ 255.328630][ T9835] EXT4-fs error (device loop2): ext4_truncate:4635: inode #12: comm syz.2.2049: mark_inode_dirty error [ 255.340020][ T9835] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 255.349194][ T9835] EXT4-fs (loop2): 1 truncate cleaned up [ 255.355785][ T9835] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 255.382082][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 255.867713][ T9843] netlink: 'syz.5.2052': attribute type 1 has an invalid length. [ 255.907104][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 255.969372][ T9843] 8021q: adding VLAN 0 to HW filter on device bond1 [ 256.016258][ T9851] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2052'. [ 256.083753][ T9851] bond1 (unregistering): Released all slaves [ 256.154327][ T9865] loop2: detected capacity change from 0 to 1024 [ 256.161688][ T9865] EXT4-fs: Ignoring removed nomblk_io_submit option [ 256.170360][ T9865] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 256.179508][ T9865] System zones: 0-1, 3-36 [ 256.186949][ T9865] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 256.213095][ T9865] siw: device registration error -23 [ 256.290406][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 256.302713][ T9872] loop1: detected capacity change from 0 to 512 [ 256.310059][ T9872] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 256.321666][ T9872] EXT4-fs (loop1): orphan cleanup on readonly fs [ 256.330105][ T9872] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4215: comm syz.1.2061: Allocating blocks 41-42 which overlap fs metadata [ 256.344556][ T9872] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4215: comm syz.1.2061: Allocating blocks 41-42 which overlap fs metadata [ 256.358877][ T9872] EXT4-fs error (device loop1): ext4_acquire_dquot:6986: comm syz.1.2061: Failed to acquire dquot type 1 [ 256.370581][ T9872] EXT4-fs error (device loop1): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 256.385431][ T9872] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #12: comm syz.1.2061: corrupted inode contents [ 256.397882][ T9872] EXT4-fs error (device loop1): ext4_dirty_inode:6502: inode #12: comm syz.1.2061: mark_inode_dirty error [ 256.402618][ T9876] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 256.422428][ T9876] loop0: detected capacity change from 0 to 512 [ 256.430065][ T9876] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 256.455619][ T9879] EXT4-fs: Ignoring removed nomblk_io_submit option [ 256.463350][ T9872] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #12: comm syz.1.2061: corrupted inode contents [ 256.476721][ T9879] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 256.485350][ T9876] EXT4-fs (loop0): orphan cleanup on readonly fs [ 256.492537][ T9876] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4215: comm syz.0.2062: Allocating blocks 41-42 which overlap fs metadata [ 256.506710][ T9879] System zones: 0-1, 3-36 [ 256.511432][ T9872] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #12: comm syz.1.2061: mark_inode_dirty error [ 256.523804][ T9879] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 256.536702][ T9876] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4215: comm syz.0.2062: Allocating blocks 41-42 which overlap fs metadata [ 256.558602][ T9872] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #12: comm syz.1.2061: corrupted inode contents [ 256.576698][ T9876] EXT4-fs error (device loop0): ext4_acquire_dquot:6986: comm syz.0.2062: Failed to acquire dquot type 1 [ 256.588595][ T9876] EXT4-fs error (device loop0): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 256.589504][ T9872] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 256.603613][ T9876] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #12: comm syz.0.2062: corrupted inode contents [ 256.613045][ T9872] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #12: comm syz.1.2061: corrupted inode contents [ 256.624549][ T9876] EXT4-fs error (device loop0): ext4_dirty_inode:6502: inode #12: comm syz.0.2062: mark_inode_dirty error [ 256.697885][ T9872] EXT4-fs error (device loop1): ext4_truncate:4635: inode #12: comm syz.1.2061: mark_inode_dirty error [ 256.709120][ T9876] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #12: comm syz.0.2062: corrupted inode contents [ 256.721913][ T9876] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #12: comm syz.0.2062: mark_inode_dirty error [ 256.733752][ T9872] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem [ 256.749318][ T9872] EXT4-fs (loop1): 1 truncate cleaned up [ 256.755443][ T9876] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #12: comm syz.0.2062: corrupted inode contents [ 256.768514][ T9872] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 256.781336][ T9876] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 257.077934][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 257.099905][ T9876] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #12: comm syz.0.2062: corrupted inode contents [ 257.174247][ T9876] EXT4-fs error (device loop0): ext4_truncate:4635: inode #12: comm syz.0.2062: mark_inode_dirty error [ 257.188349][ T9890] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 257.200556][ T9876] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem [ 257.210189][ T9876] EXT4-fs (loop0): 1 truncate cleaned up [ 257.265044][ T9890] EXT4-fs (loop3): orphan cleanup on readonly fs [ 257.273609][ T9890] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4215: comm syz.3.2066: Allocating blocks 41-42 which overlap fs metadata [ 257.287663][ T9890] __quota_error: 582 callbacks suppressed [ 257.287681][ T9890] Quota error (device loop3): write_blk: dquota write failed [ 257.301040][ T9890] Quota error (device loop3): find_free_dqentry: Can't write quota data block 5 [ 257.312369][ T9890] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4215: comm syz.3.2066: Allocating blocks 41-42 which overlap fs metadata [ 257.326428][ T9890] Quota error (device loop3): write_blk: dquota write failed [ 257.333870][ T9890] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 257.343946][ T9890] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.2066: Failed to acquire dquot type 1 [ 257.355553][ T9890] EXT4-fs error (device loop3): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 257.370237][ T9890] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #12: comm syz.3.2066: corrupted inode contents [ 257.392529][ T9890] EXT4-fs error (device loop3): ext4_dirty_inode:6502: inode #12: comm syz.3.2066: mark_inode_dirty error [ 257.404494][ T9876] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 257.415379][ T9890] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #12: comm syz.3.2066: corrupted inode contents [ 257.439043][ T9890] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #12: comm syz.3.2066: mark_inode_dirty error [ 257.445614][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 257.459842][ T9890] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #12: comm syz.3.2066: corrupted inode contents [ 257.474882][ T9890] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 257.485181][ T9890] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #12: comm syz.3.2066: corrupted inode contents [ 257.499109][ T9890] EXT4-fs error (device loop3): ext4_truncate:4635: inode #12: comm syz.3.2066: mark_inode_dirty error [ 257.510911][ T9890] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem [ 257.529125][ T9890] EXT4-fs (loop3): 1 truncate cleaned up [ 257.536709][ T9890] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 257.681978][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 257.805264][ T29] audit: type=1326 audit(1767061177.909:73044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9914 comm="syz.1.2074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe55855f749 code=0x7ffc0000 [ 257.830465][ T29] audit: type=1326 audit(1767061177.929:73045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9914 comm="syz.1.2074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe55855f749 code=0x7ffc0000 [ 257.854051][ T29] audit: type=1326 audit(1767061177.929:73046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9914 comm="syz.1.2074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7fe55855f749 code=0x7ffc0000 [ 257.877683][ T29] audit: type=1326 audit(1767061177.929:73047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9914 comm="syz.1.2074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe55855f749 code=0x7ffc0000 [ 257.884972][ T9918] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 257.901196][ T29] audit: type=1326 audit(1767061177.929:73048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9914 comm="syz.1.2074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe55855f749 code=0x7ffc0000 [ 257.901234][ T29] audit: type=1326 audit(1767061177.929:73049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9914 comm="syz.1.2074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe55855f749 code=0x7ffc0000 [ 258.097074][ T9916] EXT4-fs: Ignoring removed nomblk_io_submit option [ 258.130339][ T9916] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 258.149519][ T9916] System zones: 0-1, 3-36 [ 258.169092][ T9916] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 258.396058][ T9925] siw: device registration error -23 [ 258.405654][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 258.529768][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 258.596476][ T9927] set_capacity_and_notify: 3 callbacks suppressed [ 258.596582][ T9927] loop3: detected capacity change from 0 to 1024 [ 258.629525][ T9927] EXT4-fs: Ignoring removed nomblk_io_submit option [ 258.675849][ T9927] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 258.698547][ T9927] System zones: 0-1, 3-36 [ 258.716950][ T9927] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 258.923242][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 259.290822][ T9941] loop3: detected capacity change from 0 to 1024 [ 259.338412][ T9941] EXT4-fs: Ignoring removed nomblk_io_submit option [ 259.416128][ T9941] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 259.484411][ T9941] System zones: 0-1, 3-36 [ 259.524862][ T9941] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 259.670436][ T9957] loop1: detected capacity change from 0 to 1024 [ 259.698812][ T9961] loop5: detected capacity change from 0 to 1024 [ 259.706520][ T9961] EXT4-fs: Ignoring removed nomblk_io_submit option [ 259.735322][ T9957] EXT4-fs: Ignoring removed nomblk_io_submit option [ 259.760365][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 259.790870][ T9961] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 259.799190][ T9961] System zones: 0-1, 3-36 [ 259.804989][ T9961] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 259.825116][ T9957] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 259.833456][ T9957] System zones: 0-1, 3-36 [ 259.839029][ T9957] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 259.880936][ T9957] siw: device registration error -23 [ 259.904008][ T9961] siw: device registration error -23 [ 260.018109][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 260.048820][ T7606] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 260.798767][ T9986] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 260.811021][ T9986] loop5: detected capacity change from 0 to 512 [ 260.830093][ T9989] loop1: detected capacity change from 0 to 1024 [ 260.841448][ T9989] EXT4-fs: Ignoring removed nomblk_io_submit option [ 260.849307][ T9986] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 260.860375][ T9986] EXT4-fs (loop5): orphan cleanup on readonly fs [ 260.867595][ T9986] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4215: comm syz.5.2091: Allocating blocks 41-42 which overlap fs metadata [ 260.869375][ T9989] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 260.882424][ T9986] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4215: comm syz.5.2091: Allocating blocks 41-42 which overlap fs metadata [ 260.903955][ T9986] EXT4-fs error (device loop5): ext4_acquire_dquot:6986: comm syz.5.2091: Failed to acquire dquot type 1 [ 260.915908][ T9986] EXT4-fs error (device loop5): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 260.930602][ T9986] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #12: comm syz.5.2091: corrupted inode contents [ 260.943316][ T9989] System zones: 0-1, 3-36 [ 260.948797][ T9989] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 260.950585][ T9986] EXT4-fs error (device loop5): ext4_dirty_inode:6502: inode #12: comm syz.5.2091: mark_inode_dirty error [ 261.006243][ T9986] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #12: comm syz.5.2091: corrupted inode contents [ 261.018966][ T9986] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #12: comm syz.5.2091: mark_inode_dirty error [ 261.030473][ T9986] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #12: comm syz.5.2091: corrupted inode contents [ 261.045588][ T9986] EXT4-fs error (device loop5) in ext4_orphan_del:303: Corrupt filesystem [ 261.054370][ T9986] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #12: comm syz.5.2091: corrupted inode contents [ 261.066494][ T9986] EXT4-fs error (device loop5): ext4_truncate:4635: inode #12: comm syz.5.2091: mark_inode_dirty error [ 261.079083][ T9986] EXT4-fs error (device loop5) in ext4_process_orphan:345: Corrupt filesystem [ 261.089192][ T9986] EXT4-fs (loop5): 1 truncate cleaned up [ 261.095617][ T9986] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 261.229788][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 261.400376][T10005] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 261.408896][T10005] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 262.275472][ T7606] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 262.294797][ T29] kauditd_printk_skb: 433 callbacks suppressed [ 262.294814][ T29] audit: type=1326 audit(1767061182.389:73479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10014 comm="syz.0.2101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbddc42f749 code=0x7ffc0000 [ 262.333804][T10016] loop0: detected capacity change from 0 to 1024 [ 262.359953][T10017] loop2: detected capacity change from 0 to 1024 [ 262.372660][T10017] EXT4-fs: Ignoring removed nomblk_io_submit option [ 262.381104][T10016] EXT4-fs: Ignoring removed nomblk_io_submit option [ 262.388566][ T29] audit: type=1326 audit(1767061182.429:73480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10014 comm="syz.0.2101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbddc42f749 code=0x7ffc0000 [ 262.412369][ T29] audit: type=1326 audit(1767061182.429:73481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10014 comm="syz.0.2101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbddc42f749 code=0x7ffc0000 [ 262.436130][ T29] audit: type=1326 audit(1767061182.429:73482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10014 comm="syz.0.2101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbddc42f749 code=0x7ffc0000 [ 262.459738][ T29] audit: type=1326 audit(1767061182.429:73483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10014 comm="syz.0.2101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fbddc42f749 code=0x7ffc0000 [ 262.483340][ T29] audit: type=1326 audit(1767061182.429:73484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10014 comm="syz.0.2101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbddc42f749 code=0x7ffc0000 [ 262.507077][ T29] audit: type=1326 audit(1767061182.429:73485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10014 comm="syz.0.2101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fbddc42f749 code=0x7ffc0000 [ 262.530664][ T29] audit: type=1326 audit(1767061182.429:73486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10014 comm="syz.0.2101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbddc42f749 code=0x7ffc0000 [ 262.554482][ T29] audit: type=1326 audit(1767061182.429:73487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10014 comm="syz.0.2101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbddc42f749 code=0x7ffc0000 [ 262.578093][ T29] audit: type=1326 audit(1767061182.429:73488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10014 comm="syz.0.2101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbddc42f749 code=0x7ffc0000 [ 262.608646][T10017] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 262.617593][T10016] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 262.625768][T10017] System zones: 0-1, 3-36 [ 262.631542][T10017] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 262.644868][T10016] System zones: 0-1, 3-36 [ 262.650923][T10016] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 262.721999][T10020] siw: device registration error -23 [ 262.757134][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 262.817029][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 262.834434][T10027] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 262.858631][T10025] loop5: detected capacity change from 0 to 2048 [ 262.880691][T10027] loop2: detected capacity change from 0 to 512 [ 262.915730][T10027] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 262.925726][T10027] EXT4-fs (loop2): orphan cleanup on readonly fs [ 262.934212][T10027] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4215: comm syz.2.2104: Allocating blocks 41-42 which overlap fs metadata [ 262.949427][T10027] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4215: comm syz.2.2104: Allocating blocks 41-42 which overlap fs metadata [ 262.979592][T10033] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 262.995922][T10027] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm syz.2.2104: Failed to acquire dquot type 1 [ 263.016863][T10027] EXT4-fs error (device loop2): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 263.022610][T10038] EXT4-fs: Ignoring removed nomblk_io_submit option [ 263.032659][T10027] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #12: comm syz.2.2104: corrupted inode contents [ 263.050276][T10027] EXT4-fs error (device loop2): ext4_dirty_inode:6502: inode #12: comm syz.2.2104: mark_inode_dirty error [ 263.062062][T10027] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #12: comm syz.2.2104: corrupted inode contents [ 263.075315][T10027] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #12: comm syz.2.2104: mark_inode_dirty error [ 263.087763][T10027] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #12: comm syz.2.2104: corrupted inode contents [ 263.100001][T10027] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 263.108793][T10027] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #12: comm syz.2.2104: corrupted inode contents [ 263.115718][T10038] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 263.121712][T10027] EXT4-fs error (device loop2): ext4_truncate:4635: inode #12: comm syz.2.2104: mark_inode_dirty error [ 263.140285][T10027] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 263.146389][T10038] System zones: 0-1, 3-36 [ 263.153963][T10027] EXT4-fs (loop2): 1 truncate cleaned up [ 263.160678][T10027] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 263.166929][T10038] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 263.210349][T10038] siw: device registration error -23 [ 263.230187][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 263.721019][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 263.842588][T10057] set_capacity_and_notify: 1 callbacks suppressed [ 263.842602][T10057] loop2: detected capacity change from 0 to 1024 [ 263.873817][T10057] EXT4-fs: Ignoring removed nomblk_io_submit option [ 263.883071][T10057] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 263.891453][T10057] System zones: 0-1, 3-36 [ 263.898351][T10057] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 263.921109][T10057] siw: device registration error -23 [ 263.944256][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 264.009609][T10066] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 264.056428][T10068] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2119'. [ 264.084118][T10070] loop0: detected capacity change from 0 to 1024 [ 264.091563][T10070] EXT4-fs: Ignoring removed nomblk_io_submit option [ 264.162448][T10070] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 264.175804][T10070] System zones: 0-1, 3-36 [ 264.183194][T10070] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 264.210747][T10073] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 264.231429][T10070] siw: device registration error -23 [ 264.278142][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 264.376083][T10077] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2131'. [ 264.403143][T10077] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2131'. [ 264.526638][T10093] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2122'. [ 264.556903][T10093] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2122'. [ 264.721921][T10097] netlink: 'syz.1.2126': attribute type 1 has an invalid length. [ 265.029301][T10101] loop3: detected capacity change from 0 to 1024 [ 265.050214][T10101] EXT4-fs: Ignoring removed nomblk_io_submit option [ 265.065056][T10101] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 265.074022][T10101] System zones: 0-1, 3-36 [ 265.087769][T10101] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 265.217364][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 265.352225][T10105] loop0: detected capacity change from 0 to 1024 [ 265.367182][T10105] EXT4-fs: Ignoring removed nomblk_io_submit option [ 265.395921][T10105] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 265.404178][T10105] System zones: 0-1, 3-36 [ 265.419473][T10105] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 265.461848][T10105] siw: device registration error -23 [ 265.575638][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 265.926057][T10113] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 265.934640][T10113] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 266.800228][T10142] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2138'. [ 266.826764][T10145] loop1: detected capacity change from 0 to 1024 [ 266.841637][T10145] EXT4-fs: Ignoring removed nomblk_io_submit option [ 266.846121][T10137] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2138'. [ 266.852809][T10145] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 266.874854][T10145] System zones: 0-1, 3-36 [ 266.898673][T10145] siw: device registration error -23 [ 266.984177][T10150] loop1: detected capacity change from 0 to 1024 [ 267.020069][T10150] EXT4-fs: Ignoring removed nomblk_io_submit option [ 267.035584][T10150] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 267.056437][T10150] System zones: 0-1, 3-36 [ 267.105090][T10150] siw: device registration error -23 [ 267.760821][T10169] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2146'. [ 267.818734][T10169] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2146'. [ 268.124936][ T29] kauditd_printk_skb: 831 callbacks suppressed [ 268.124951][ T29] audit: type=1326 audit(1767061188.229:74316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10181 comm="syz.2.2152" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f196cc3f749 code=0x0 [ 268.284747][ T29] audit: type=1326 audit(1767061188.379:74317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10185 comm="syz.1.2153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe55855f749 code=0x7ffc0000 [ 268.308495][ T29] audit: type=1326 audit(1767061188.379:74318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10185 comm="syz.1.2153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7fe55855f749 code=0x7ffc0000 [ 268.332122][ T29] audit: type=1326 audit(1767061188.379:74319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10185 comm="syz.1.2153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe55855f749 code=0x7ffc0000 [ 268.355805][ T29] audit: type=1326 audit(1767061188.379:74320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10185 comm="syz.1.2153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe55855f749 code=0x7ffc0000 [ 268.379527][ T29] audit: type=1326 audit(1767061188.379:74321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10185 comm="syz.1.2153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe55855f749 code=0x7ffc0000 [ 268.403203][ T29] audit: type=1326 audit(1767061188.379:74322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10185 comm="syz.1.2153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe55855f749 code=0x7ffc0000 [ 268.426869][ T29] audit: type=1326 audit(1767061188.379:74323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10185 comm="syz.1.2153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe55855f749 code=0x7ffc0000 [ 268.450627][ T29] audit: type=1326 audit(1767061188.379:74324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10185 comm="syz.1.2153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe55855f749 code=0x7ffc0000 [ 268.474248][ T29] audit: type=1326 audit(1767061188.379:74325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10185 comm="syz.1.2153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe55855f749 code=0x7ffc0000 [ 268.541279][T10175] netlink: 'syz.3.2149': attribute type 1 has an invalid length. [ 268.573528][T10186] loop1: detected capacity change from 0 to 1024 [ 268.591765][T10180] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2149'. [ 268.602706][T10186] EXT4-fs: Ignoring removed nomblk_io_submit option [ 268.622848][T10186] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 268.635257][T10175] 8021q: adding VLAN 0 to HW filter on device bond1 [ 268.644050][T10186] System zones: 0-1, 3-36 [ 268.720631][T10180] bond1 (unregistering): Released all slaves [ 268.738664][T10186] siw: device registration error -23 [ 268.963591][T10201] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 269.016800][T10199] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 269.025323][T10199] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 269.224406][T10216] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 269.237514][T10216] loop2: detected capacity change from 0 to 512 [ 269.244792][T10216] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 269.255028][T10216] EXT4-fs (loop2): orphan cleanup on readonly fs [ 269.273952][T10216] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4215: comm syz.2.2162: Allocating blocks 41-42 which overlap fs metadata [ 269.291138][T10216] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4215: comm syz.2.2162: Allocating blocks 41-42 which overlap fs metadata [ 269.305181][T10216] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm syz.2.2162: Failed to acquire dquot type 1 [ 269.352605][T10216] EXT4-fs error (device loop2): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 269.369269][T10216] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #12: comm syz.2.2162: corrupted inode contents [ 269.383779][T10216] EXT4-fs error (device loop2): ext4_dirty_inode:6502: inode #12: comm syz.2.2162: mark_inode_dirty error [ 269.395751][T10216] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #12: comm syz.2.2162: corrupted inode contents [ 269.408070][T10216] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #12: comm syz.2.2162: mark_inode_dirty error [ 269.419738][T10216] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #12: comm syz.2.2162: corrupted inode contents [ 269.431955][T10216] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 269.459436][T10216] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #12: comm syz.2.2162: corrupted inode contents [ 269.486836][T10216] EXT4-fs error (device loop2): ext4_truncate:4635: inode #12: comm syz.2.2162: mark_inode_dirty error [ 269.509591][T10216] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 269.528626][T10216] EXT4-fs (loop2): 1 truncate cleaned up [ 270.188311][T10232] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2165'. [ 270.265622][T10229] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2165'. [ 270.949815][T10244] loop3: detected capacity change from 0 to 1024 [ 270.957452][T10244] EXT4-fs: Ignoring removed nomblk_io_submit option [ 270.965721][T10244] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 270.974022][T10244] System zones: 0-1, 3-36 [ 271.046317][T10249] loop3: detected capacity change from 0 to 1024 [ 271.053197][T10249] EXT4-fs: Ignoring removed nomblk_io_submit option [ 271.061772][T10249] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 271.070446][T10249] System zones: 0-1, 3-36 [ 271.247351][T10256] loop0: detected capacity change from 0 to 1024 [ 271.254947][T10256] EXT4-fs: Ignoring removed nomblk_io_submit option [ 271.273548][T10256] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 271.282036][T10256] System zones: 0-1, 3-36 [ 271.297165][T10256] siw: device registration error -23 [ 272.301881][T10282] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2179'. [ 272.380253][T10282] loop0: detected capacity change from 0 to 2048 [ 272.403231][T10289] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 272.414845][T10289] loop5: detected capacity change from 0 to 512 [ 272.424474][T10289] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 272.451063][T10289] EXT4-fs (loop5): orphan cleanup on readonly fs [ 272.458963][T10289] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4215: comm syz.5.2182: Allocating blocks 41-42 which overlap fs metadata [ 272.473073][T10289] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4215: comm syz.5.2182: Allocating blocks 41-42 which overlap fs metadata [ 272.473099][T10292] loop2: detected capacity change from 0 to 1024 [ 272.474037][T10292] EXT4-fs: Ignoring removed nomblk_io_submit option [ 272.507100][T10289] EXT4-fs error (device loop5): ext4_acquire_dquot:6986: comm syz.5.2182: Failed to acquire dquot type 1 [ 272.520803][T10289] EXT4-fs error (device loop5): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 272.528864][T10292] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 272.543618][T10292] System zones: 0-1, 3-36 [ 272.543918][T10299] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2186'. [ 272.553669][T10289] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #12: comm syz.5.2182: corrupted inode contents [ 272.570575][T10289] EXT4-fs error (device loop5): ext4_dirty_inode:6502: inode #12: comm syz.5.2182: mark_inode_dirty error [ 272.582293][T10289] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #12: comm syz.5.2182: corrupted inode contents [ 272.594444][T10289] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #12: comm syz.5.2182: mark_inode_dirty error [ 272.613051][T10289] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #12: comm syz.5.2182: corrupted inode contents [ 272.627813][T10289] EXT4-fs error (device loop5) in ext4_orphan_del:303: Corrupt filesystem [ 272.646868][T10289] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #12: comm syz.5.2182: corrupted inode contents [ 272.662638][T10289] EXT4-fs error (device loop5): ext4_truncate:4635: inode #12: comm syz.5.2182: mark_inode_dirty error [ 272.680257][T10289] EXT4-fs error (device loop5) in ext4_process_orphan:345: Corrupt filesystem [ 272.691579][T10289] EXT4-fs (loop5): 1 truncate cleaned up [ 272.706326][T10292] siw: device registration error -23 [ 273.355576][ T29] kauditd_printk_skb: 242 callbacks suppressed [ 273.355591][ T29] audit: type=1400 audit(1767061193.459:74560): avc: denied { setopt } for pid=10327 comm="syz.5.2194" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 273.421220][T10333] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2196'. [ 273.430270][ T29] audit: type=1400 audit(1767061193.479:74561): avc: denied { connect } for pid=10327 comm="syz.5.2194" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 273.430409][ T29] audit: type=1400 audit(1767061193.499:74562): avc: denied { sqpoll } for pid=10327 comm="syz.5.2194" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 273.469458][ T29] audit: type=1400 audit(1767061193.509:74563): avc: denied { mount } for pid=10327 comm="syz.5.2194" name="/" dev="ramfs" ino=32897 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 273.479613][T10334] loop5: detected capacity change from 0 to 512 [ 273.491936][ T29] audit: type=1400 audit(1767061193.519:74564): avc: denied { getopt } for pid=10329 comm="syz.3.2195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 273.491965][ T29] audit: type=1400 audit(1767061193.519:74565): avc: denied { connect } for pid=10329 comm="syz.3.2195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 273.537799][ T29] audit: type=1400 audit(1767061193.519:74566): avc: denied { name_connect } for pid=10329 comm="syz.3.2195" dest=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 273.561372][T10336] loop0: detected capacity change from 0 to 2048 [ 273.571138][T10334] FAT-fs (loop5): Directory bread(block 199916) failed [ 273.578163][T10334] FAT-fs (loop5): Directory bread(block 199917) failed [ 273.585275][T10334] FAT-fs (loop5): Directory bread(block 199918) failed [ 273.592397][T10334] FAT-fs (loop5): Directory bread(block 199919) failed [ 273.599394][T10334] FAT-fs (loop5): Directory bread(block 199920) failed [ 273.606429][T10334] FAT-fs (loop5): Directory bread(block 199921) failed [ 273.613387][T10334] FAT-fs (loop5): Directory bread(block 199922) failed [ 273.621870][T10334] FAT-fs (loop5): Directory bread(block 199923) failed [ 273.759332][ T29] audit: type=1400 audit(1767061193.859:74567): avc: denied { bind } for pid=10327 comm="syz.5.2194" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 273.927738][T10346] netlink: 'syz.1.2197': attribute type 1 has an invalid length. [ 274.782552][ T29] audit: type=1326 audit(1767061194.799:74568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10340 comm="syz.2.2198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f196cc3f749 code=0x7ffc0000 [ 274.806437][ T29] audit: type=1326 audit(1767061194.799:74569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10340 comm="syz.2.2198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f196cc3f749 code=0x7ffc0000 [ 274.956784][T10359] loop3: detected capacity change from 0 to 1024 [ 274.964159][T10359] EXT4-fs: Ignoring removed nomblk_io_submit option [ 274.987662][T10359] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 275.005135][T10359] System zones: 0-1, 3-36 [ 275.079496][T10354] loop0: detected capacity change from 0 to 1024 [ 275.161567][T10354] EXT4-fs: Ignoring removed nomblk_io_submit option [ 275.186571][T10357] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 275.195260][T10357] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 275.208236][T10354] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 275.216483][T10354] System zones: 0-1, 3-36 [ 277.055451][T10375] netlink: 'syz.0.2207': attribute type 1 has an invalid length. [ 277.070375][T10375] 8021q: adding VLAN 0 to HW filter on device bond1 [ 277.084346][T10375] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2207'. [ 277.096086][T10375] bond1 (unregistering): Released all slaves [ 277.120009][T10384] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2209'. [ 277.148868][T10384] loop2: detected capacity change from 0 to 2048 [ 278.385345][ T29] kauditd_printk_skb: 285 callbacks suppressed [ 278.385360][ T29] audit: type=1400 audit(1767061198.489:74855): avc: denied { read write } for pid=10407 comm="syz.3.2218" name="virtual_nci" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 278.415778][ T29] audit: type=1400 audit(1767061198.489:74856): avc: denied { open } for pid=10407 comm="syz.3.2218" path="/dev/virtual_nci" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 278.511383][T10424] loop0: detected capacity change from 0 to 164 [ 278.519322][T10424] rock: directory entry would overflow storage [ 278.525567][T10424] rock: sig=0x66, size=4, remaining=3 [ 278.535588][T10424] rock: directory entry would overflow storage [ 278.541787][T10424] rock: sig=0x66, size=4, remaining=3 [ 278.554786][ T29] audit: type=1400 audit(1767061198.549:74857): avc: denied { create } for pid=10407 comm="syz.3.2218" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 278.575257][ T29] audit: type=1400 audit(1767061198.549:74858): avc: denied { getopt } for pid=10407 comm="syz.3.2218" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 278.595644][ T29] audit: type=1400 audit(1767061198.549:74859): avc: denied { create } for pid=10407 comm="syz.3.2218" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 278.615353][ T29] audit: type=1400 audit(1767061198.549:74860): avc: denied { ioctl } for pid=10407 comm="syz.3.2218" path="socket:[32616]" dev="sockfs" ino=32616 ioctlcmd=0x940e scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 278.640342][ T29] audit: type=1400 audit(1767061198.549:74861): avc: denied { ioctl } for pid=10407 comm="syz.3.2218" path="socket:[32615]" dev="sockfs" ino=32615 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 278.666014][ T29] audit: type=1400 audit(1767061198.549:74862): avc: denied { read } for pid=10407 comm="syz.3.2218" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 278.686478][ T29] audit: type=1400 audit(1767061198.559:74863): avc: denied { mount } for pid=10408 comm="syz.1.2216" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 278.708348][ T29] audit: type=1400 audit(1767061198.559:74864): avc: denied { create } for pid=10408 comm="syz.1.2216" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 279.088138][T10427] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 279.409223][T10447] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 279.434693][T10427] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 279.470605][T10447] loop0: detected capacity change from 0 to 512 [ 279.564404][T10447] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 279.640791][T10447] EXT4-fs (loop0): orphan cleanup on readonly fs [ 279.657282][T10447] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4215: comm syz.0.2226: Allocating blocks 41-42 which overlap fs metadata [ 279.676155][T10447] EXT4-fs error (device loop0): ext4_acquire_dquot:6986: comm syz.0.2226: Failed to acquire dquot type 1 [ 279.689679][T10447] EXT4-fs error (device loop0): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 279.694517][T10454] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2228'. [ 279.705855][T10447] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #12: comm syz.0.2226: corrupted inode contents [ 279.713325][T10454] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 279.736470][T10447] EXT4-fs error (device loop0): ext4_dirty_inode:6502: inode #12: comm syz.0.2226: mark_inode_dirty error [ 279.748497][T10447] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #12: comm syz.0.2226: corrupted inode contents [ 279.760688][T10447] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #12: comm syz.0.2226: mark_inode_dirty error [ 279.772331][T10447] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #12: comm syz.0.2226: corrupted inode contents [ 279.784410][T10447] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 279.793395][T10447] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #12: comm syz.0.2226: corrupted inode contents [ 279.821774][T10447] EXT4-fs error (device loop0): ext4_truncate:4635: inode #12: comm syz.0.2226: mark_inode_dirty error [ 279.833145][T10447] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem [ 279.842446][T10447] EXT4-fs (loop0): 1 truncate cleaned up [ 279.866373][T10456] loop2: detected capacity change from 0 to 512 [ 279.883689][T10458] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 279.896061][T10456] EXT4-fs: Ignoring removed mblk_io_submit option [ 279.903095][T10456] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 279.935919][T10456] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.2229: bg 0: block 280: padding at end of block bitmap is not set [ 279.964457][T10456] EXT4-fs (loop2): Remounting filesystem read-only [ 279.975093][T10456] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2857: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 279.988552][T10456] EXT4-fs (loop2): 1 truncate cleaned up [ 280.002122][T10467] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2230'. [ 280.047649][T10469] loop2: detected capacity change from 0 to 1024 [ 280.055015][T10469] EXT4-fs: Ignoring removed nomblk_io_submit option [ 280.065776][T10469] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 280.073905][T10469] System zones: 0-1, 3-36 [ 280.240463][T10477] loop2: detected capacity change from 0 to 1024 [ 280.271655][T10481] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 280.294336][T10481] loop3: detected capacity change from 0 to 512 [ 280.296700][T10484] loop0: detected capacity change from 0 to 1024 [ 280.316442][T10481] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 280.327140][T10484] EXT4-fs: Ignoring removed nomblk_io_submit option [ 280.336703][T10477] EXT4-fs: Ignoring removed nomblk_io_submit option [ 280.355055][T10481] EXT4-fs (loop3): orphan cleanup on readonly fs [ 280.362103][T10477] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 280.373003][T10484] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 280.386975][T10477] System zones: 0-1, 3-36 [ 280.391724][T10484] System zones: 0-1, 3-36 [ 280.397733][T10481] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4215: comm syz.3.2236: Allocating blocks 41-42 which overlap fs metadata [ 280.412157][T10481] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4215: comm syz.3.2236: Allocating blocks 41-42 which overlap fs metadata [ 280.426278][T10493] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2240'. [ 280.448278][T10477] siw: device registration error -23 [ 280.454426][T10484] siw: device registration error -23 [ 280.456706][T10481] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.2236: Failed to acquire dquot type 1 [ 280.481570][T10481] EXT4-fs error (device loop3): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 280.496745][T10481] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #12: comm syz.3.2236: corrupted inode contents [ 280.503785][T10493] loop5: detected capacity change from 0 to 2048 [ 280.515231][T10481] EXT4-fs error (device loop3): ext4_dirty_inode:6502: inode #12: comm syz.3.2236: mark_inode_dirty error [ 280.528484][T10481] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #12: comm syz.3.2236: corrupted inode contents [ 280.552652][T10481] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #12: comm syz.3.2236: mark_inode_dirty error [ 280.564495][T10481] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #12: comm syz.3.2236: corrupted inode contents [ 280.577674][T10481] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 280.587465][T10481] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #12: comm syz.3.2236: corrupted inode contents [ 280.717996][T10481] EXT4-fs error (device loop3): ext4_truncate:4635: inode #12: comm syz.3.2236: mark_inode_dirty error [ 280.741462][T10503] loop0: detected capacity change from 0 to 1024 [ 280.803302][T10503] EXT4-fs: Ignoring removed nomblk_io_submit option [ 280.914405][T10481] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem [ 280.961976][T10481] EXT4-fs (loop3): 1 truncate cleaned up [ 280.969309][T10503] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 280.979045][T10503] System zones: 0-1, 3-36 [ 281.226663][ T3316] EXT4-fs unmount: 34 callbacks suppressed [ 281.226685][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 281.651449][T10355] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 281.660336][T10355] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 281.690017][T10355] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 281.699133][T10355] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 281.728187][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 281.752820][T10524] loop1: detected capacity change from 0 to 1024 [ 281.765339][T10524] EXT4-fs: Ignoring removed nomblk_io_submit option [ 281.774156][T10524] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 281.793949][T10524] System zones: 0-1, 3-36 [ 281.811944][T10524] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 281.849013][T10524] siw: device registration error -23 [ 281.860676][T10534] loop0: detected capacity change from 0 to 1024 [ 281.896178][T10534] EXT4-fs: Ignoring removed nomblk_io_submit option [ 281.911839][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 281.922099][T10534] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 281.930592][T10534] System zones: 0-1, 3-36 [ 281.936380][T10534] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 281.954837][T10538] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2257'. [ 281.984060][T10540] loop1: detected capacity change from 0 to 1024 [ 281.991179][T10540] EXT4-fs: Ignoring removed nomblk_io_submit option [ 282.093409][T10542] netlink: 'syz.5.2253': attribute type 1 has an invalid length. [ 282.116904][T10534] siw: device registration error -23 [ 282.131980][T10540] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 282.164431][T10540] System zones: 0-1, 3-36 [ 282.185021][T10540] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 282.201519][T10541] loop3: detected capacity change from 0 to 2048 [ 282.384235][T10540] siw: device registration error -23 [ 282.465309][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 283.124239][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 283.340872][T10562] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 283.853345][ T29] kauditd_printk_skb: 450 callbacks suppressed [ 283.853363][ T29] audit: type=1400 audit(1767061203.949:75308): avc: denied { ioctl } for pid=10566 comm="syz.2.2265" path="socket:[34059]" dev="sockfs" ino=34059 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 283.901387][T10562] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 283.931122][T10562] ext4 filesystem being mounted at /489/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 283.955722][ T29] audit: type=1400 audit(1767061204.029:75309): avc: denied { sys_module } for pid=10566 comm="syz.2.2265" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 284.009732][ T29] audit: type=1400 audit(1767061204.079:75310): avc: denied { add_name } for pid=10561 comm="syz.3.2263" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 284.030738][ T29] audit: type=1400 audit(1767061204.079:75311): avc: denied { create } for pid=10561 comm="syz.3.2263" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 284.051300][ T29] audit: type=1326 audit(1767061204.079:75312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10561 comm="syz.3.2263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cf4abf749 code=0x7ffc0000 [ 284.074897][ T29] audit: type=1326 audit(1767061204.079:75313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10561 comm="syz.3.2263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cf4abf749 code=0x7ffc0000 [ 284.098531][ T29] audit: type=1326 audit(1767061204.079:75314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10561 comm="syz.3.2263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=441 compat=0 ip=0x7f9cf4abf749 code=0x7ffc0000 [ 284.122184][ T29] audit: type=1326 audit(1767061204.079:75315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10561 comm="syz.3.2263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cf4abf749 code=0x7ffc0000 [ 284.145845][ T29] audit: type=1326 audit(1767061204.079:75316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10561 comm="syz.3.2263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cf4abf749 code=0x7ffc0000 [ 284.169532][ T29] audit: type=1326 audit(1767061204.079:75317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10561 comm="syz.3.2263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9cf4abf749 code=0x7ffc0000 [ 284.219933][T10583] EXT4-fs: Ignoring removed nomblk_io_submit option [ 284.243426][T10583] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 284.251836][T10583] System zones: 0-1, 3-36 [ 284.265826][T10583] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 284.397079][T10583] siw: device registration error -23 [ 284.494063][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 284.511916][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 284.553856][T10598] EXT4-fs: Ignoring removed nomblk_io_submit option [ 284.560144][T10608] EXT4-fs: Ignoring removed mblk_io_submit option [ 284.566717][T10598] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 284.576256][T10598] System zones: 0-1, 3-36 [ 284.582079][T10598] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 284.605208][T10608] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 284.624351][T10598] siw: device registration error -23 [ 284.633471][T10605] EXT4-fs: Ignoring removed nomblk_io_submit option [ 284.646899][T10608] EXT4-fs (loop5): orphan cleanup on readonly fs [ 284.670875][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 284.685347][T10608] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.2277: bg 0: block 280: padding at end of block bitmap is not set [ 284.700796][T10608] EXT4-fs (loop5): Remounting filesystem read-only [ 284.708234][T10608] EXT4-fs warning (device loop5): ext4_expand_extra_isize_ea:2857: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 284.721758][T10608] EXT4-fs (loop5): 1 truncate cleaned up [ 284.728826][T10608] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 284.748062][T10605] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 284.756441][T10605] System zones: 0-1, 3-36 [ 284.765480][T10605] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 284.817563][ T7606] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 284.974796][T10624] netlink: 'syz.1.2278': attribute type 1 has an invalid length. [ 285.558841][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 285.604277][T10633] set_capacity_and_notify: 5 callbacks suppressed [ 285.604298][T10633] loop2: detected capacity change from 0 to 2048 [ 285.797788][T10640] loop5: detected capacity change from 0 to 1024 [ 285.831115][T10640] EXT4-fs: Ignoring removed nomblk_io_submit option [ 285.853283][T10644] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 285.917250][T10640] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 285.952594][T10640] System zones: 0-1, 3-36 [ 285.970756][T10649] loop2: detected capacity change from 0 to 512 [ 285.982443][T10640] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 285.997825][T10644] loop0: detected capacity change from 0 to 512 [ 286.009312][T10649] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 286.041355][T10644] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 286.055264][T10649] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2857: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 286.093846][T10649] EXT4-fs (loop2): 1 truncate cleaned up [ 286.107431][T10649] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 286.124671][T10644] EXT4-fs (loop0): 1 truncate cleaned up [ 286.133900][T10656] siw: device registration error -23 [ 286.143158][T10644] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 286.300048][T10638] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.327308][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 286.408641][T10658] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2292'. [ 286.433473][T10654] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2291'. [ 286.490271][ T7606] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 286.670864][T10638] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.105294][T10638] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.301518][T10638] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.384606][ T7622] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.400399][T10677] netlink: 'syz.5.2298': attribute type 1 has an invalid length. [ 287.415738][ T7622] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.442765][T10678] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2298'. [ 287.467226][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 287.468206][T10677] 8021q: adding VLAN 0 to HW filter on device bond1 [ 287.492503][T10678] bond1 (unregistering): Released all slaves [ 287.504234][ T7622] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.513185][ T7622] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.675858][T10695] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 287.802304][T10698] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2306'. [ 288.097454][T10704] loop5: detected capacity change from 0 to 2048 [ 288.134054][T10706] loop3: detected capacity change from 0 to 1024 [ 288.142508][T10706] EXT4-fs: Ignoring removed nomblk_io_submit option [ 288.166049][T10706] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 288.175500][T10706] System zones: 0-1, 3-36 [ 288.182293][T10706] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 288.245180][T10704] loop5: p1 p3 p4 [ 288.252884][T10704] loop5: p4 size 589824 extends beyond EOD, truncated [ 288.284078][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 288.388497][T10716] cgroup: Name too long [ 288.577722][T10728] loop3: detected capacity change from 0 to 2048 [ 288.894739][ T29] kauditd_printk_skb: 523 callbacks suppressed [ 288.894756][ T29] audit: type=1400 audit(1767061208.979:75841): avc: denied { lock } for pid=10739 comm="syz.1.2319" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=33524 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 288.926694][ T29] audit: type=1400 audit(1767061208.979:75842): avc: denied { setopt } for pid=10739 comm="syz.1.2319" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 288.946327][ T29] audit: type=1400 audit(1767061208.979:75843): avc: denied { write } for pid=10739 comm="syz.1.2319" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 288.986948][T10737] netlink: 'syz.2.2315': attribute type 1 has an invalid length. [ 289.043980][T10737] 8021q: adding VLAN 0 to HW filter on device bond2 [ 289.101021][T10746] loop1: detected capacity change from 0 to 512 [ 289.110320][T10729] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2315'. [ 289.141522][ T29] audit: type=1400 audit(1767061209.239:75844): avc: denied { mounton } for pid=10745 comm="syz.1.2321" path="/403/bus" dev="tmpfs" ino=2198 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 289.167329][T10729] bond2 (unregistering): Released all slaves [ 289.195554][ T29] audit: type=1400 audit(1767061209.289:75845): avc: denied { name_bind } for pid=10735 comm="syz.5.2317" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 289.217576][ T29] audit: type=1400 audit(1767061209.299:75846): avc: denied { node_bind } for pid=10735 comm="syz.5.2317" saddr=255.255.255.255 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 289.241025][ T29] audit: type=1326 audit(1767061209.299:75847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10747 comm="syz.1.2322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe55855f749 code=0x7ffc0000 [ 289.264893][ T29] audit: type=1326 audit(1767061209.299:75848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10747 comm="syz.1.2322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7fe55855f749 code=0x7ffc0000 [ 289.267443][T10748] loop1: detected capacity change from 0 to 1024 [ 289.288814][ T29] audit: type=1326 audit(1767061209.299:75849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10747 comm="syz.1.2322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe55855f749 code=0x7ffc0000 [ 289.318528][ T29] audit: type=1326 audit(1767061209.299:75850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10747 comm="syz.1.2322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe55855f749 code=0x7ffc0000 [ 289.320722][T10748] EXT4-fs: Ignoring removed nomblk_io_submit option [ 289.489694][T10758] loop0: detected capacity change from 0 to 1024 [ 289.496532][T10748] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 289.499267][T10758] EXT4-fs: Ignoring removed nomblk_io_submit option [ 289.512565][T10748] System zones: 0-1, 3-36 [ 289.514287][T10758] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 289.525212][T10758] System zones: 0-1, 3-36 [ 289.532075][T10758] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 289.641653][T10748] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 289.933758][T10777] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2329'. [ 290.096173][T10785] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 290.521953][T10796] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2336'. [ 290.531522][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 290.555183][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 290.644445][T10802] set_capacity_and_notify: 2 callbacks suppressed [ 290.644464][T10802] loop5: detected capacity change from 0 to 1024 [ 290.677360][T10802] EXT4-fs: Ignoring removed nomblk_io_submit option [ 290.713134][T10802] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 290.731223][T10810] loop3: detected capacity change from 0 to 1024 [ 290.732268][T10802] System zones: 0-1, 3-36 [ 290.756001][T10802] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 290.766978][T10810] EXT4-fs: Ignoring removed nomblk_io_submit option [ 290.786670][T10810] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 290.810840][T10810] System zones: 0-1, 3-36 [ 290.816690][T10810] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 290.850175][T10802] siw: device registration error -23 [ 290.866273][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 290.879015][T10822] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2347'. [ 290.896983][ T7606] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 290.965835][T10830] loop5: detected capacity change from 0 to 1024 [ 290.972714][T10830] EXT4-fs: Ignoring removed bh option [ 290.978434][T10830] EXT4-fs: inline encryption not supported [ 290.985923][T10830] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 290.996544][T10828] loop2: detected capacity change from 0 to 1024 [ 291.000474][T10830] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 291.012419][T10828] EXT4-fs: Ignoring removed nomblk_io_submit option [ 291.020434][T10831] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2348'. [ 291.034362][T10830] EXT4-fs error (device loop5): ext4_map_blocks:783: inode #3: block 2: comm syz.5.2351: lblock 2 mapped to illegal pblock 2 (length 1) [ 291.049085][T10830] EXT4-fs error (device loop5): ext4_map_blocks:783: inode #3: block 48: comm syz.5.2351: lblock 0 mapped to illegal pblock 48 (length 1) [ 291.056484][T10828] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 291.071671][T10828] System zones: 0-1, 3-36 [ 291.073633][T10830] EXT4-fs error (device loop5): ext4_acquire_dquot:6986: comm syz.5.2351: Failed to acquire dquot type 0 [ 291.078565][T10828] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 291.102735][T10830] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 291.112745][T10830] EXT4-fs error (device loop5): ext4_evict_inode:253: inode #11: comm syz.5.2351: mark_inode_dirty error [ 291.125463][T10830] EXT4-fs warning (device loop5): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 291.137082][T10830] EXT4-fs (loop5): 1 orphan inode deleted [ 291.143720][T10830] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 291.156424][ T341] EXT4-fs error (device loop5): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:7: lblock 1 mapped to illegal pblock 1 (length 1) [ 291.173058][ T341] EXT4-fs error (device loop5): ext4_release_dquot:7022: comm kworker/u8:7: Failed to release dquot type 0 [ 291.186566][T10830] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 291.224063][T10824] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2348'. [ 291.244180][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 291.257984][T10830] EXT4-fs error (device loop5): __ext4_get_inode_loc:4830: comm syz.5.2351: Invalid inode table block 1 in block_group 0 [ 291.272131][T10830] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 291.281912][T10830] EXT4-fs error (device loop5): ext4_quota_off:7270: inode #3: comm syz.5.2351: mark_inode_dirty error [ 291.295444][T10824] loop3: detected capacity change from 0 to 512 [ 291.314584][T10824] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 291.330635][T10824] EXT4-fs (loop3): 1 truncate cleaned up [ 291.339409][T10824] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 291.381855][T10830] geneve2: entered promiscuous mode [ 291.387210][T10830] geneve2: entered allmulticast mode [ 291.439325][T10856] loop1: detected capacity change from 0 to 1024 [ 291.448243][T10856] EXT4-fs: Ignoring removed nomblk_io_submit option [ 291.460681][T10856] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 291.470436][T10856] System zones: 0-1, 3-36 [ 291.475956][T10856] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 291.499132][T10856] siw: device registration error -23 [ 291.518801][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 291.613720][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 291.715943][T10873] FAULT_INJECTION: forcing a failure. [ 291.715943][T10873] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 291.729171][T10873] CPU: 0 UID: 0 PID: 10873 Comm: syz.1.2365 Not tainted syzkaller #0 PREEMPT(voluntary) [ 291.729206][T10873] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 291.729230][T10873] Call Trace: [ 291.729243][T10873] [ 291.729254][T10873] __dump_stack+0x1d/0x30 [ 291.729329][T10873] dump_stack_lvl+0x95/0xd0 [ 291.729358][T10873] dump_stack+0x15/0x1b [ 291.729413][T10873] should_fail_ex+0x265/0x280 [ 291.729437][T10873] should_fail+0xb/0x20 [ 291.729456][T10873] should_fail_usercopy+0x1a/0x20 [ 291.729551][T10873] _copy_from_user+0x1c/0xb0 [ 291.729587][T10873] proc_ioctl_default+0x43/0xa0 [ 291.729619][T10873] usbdev_ioctl+0xe8b/0x1700 [ 291.729697][T10873] ? __pfx_usbdev_ioctl+0x10/0x10 [ 291.729723][T10873] __se_sys_ioctl+0xce/0x140 [ 291.729756][T10873] __x64_sys_ioctl+0x43/0x50 [ 291.729868][T10873] x64_sys_call+0x14b0/0x3000 [ 291.729892][T10873] do_syscall_64+0xca/0x2b0 [ 291.729935][T10873] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 291.730034][T10873] RIP: 0033:0x7fe55855f749 [ 291.730093][T10873] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 291.730112][T10873] RSP: 002b:00007fe556fbf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 291.730136][T10873] RAX: ffffffffffffffda RBX: 00007fe5587b5fa0 RCX: 00007fe55855f749 [ 291.730153][T10873] RDX: 0000200000000200 RSI: 00000000c0105512 RDI: 0000000000000003 [ 291.730169][T10873] RBP: 00007fe556fbf090 R08: 0000000000000000 R09: 0000000000000000 [ 291.730184][T10873] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 291.730221][T10873] R13: 00007fe5587b6038 R14: 00007fe5587b5fa0 R15: 00007ffc4ff8d418 [ 291.730246][T10873] [ 291.930315][T10873] vhci_hcd vhci_hcd.0: default hub control req: 0011 v0002 i0004 l4096 [ 291.937047][T10880] loop2: detected capacity change from 0 to 1024 [ 291.945331][T10880] EXT4-fs: Ignoring removed bh option [ 291.950865][T10880] EXT4-fs: inline encryption not supported [ 291.957284][T10880] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 292.041033][T10864] netlink: 'syz.0.2362': attribute type 1 has an invalid length. [ 292.057080][T10880] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 292.066285][T10880] EXT4-fs error (device loop2): ext4_map_blocks:783: inode #3: block 2: comm syz.2.2368: lblock 2 mapped to illegal pblock 2 (length 1) [ 292.080582][T10880] EXT4-fs error (device loop2): ext4_map_blocks:783: inode #3: block 48: comm syz.2.2368: lblock 0 mapped to illegal pblock 48 (length 1) [ 292.095362][T10880] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm syz.2.2368: Failed to acquire dquot type 0 [ 292.107086][T10877] __nla_validate_parse: 2 callbacks suppressed [ 292.107100][T10877] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2362'. [ 292.122988][T10880] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 292.133136][T10880] EXT4-fs error (device loop2): ext4_evict_inode:253: inode #11: comm syz.2.2368: mark_inode_dirty error [ 292.146357][T10880] EXT4-fs warning (device loop2): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 292.169147][T10880] EXT4-fs (loop2): 1 orphan inode deleted [ 292.175631][T10880] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 292.188176][ T341] EXT4-fs error (device loop2): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:7: lblock 1 mapped to illegal pblock 1 (length 1) [ 292.188524][ T341] EXT4-fs error (device loop2): ext4_release_dquot:7022: comm kworker/u8:7: Failed to release dquot type 0 [ 292.215836][T10886] loop1: detected capacity change from 0 to 1024 [ 292.230463][T10864] 8021q: adding VLAN 0 to HW filter on device bond1 [ 292.239334][T10886] EXT4-fs: Ignoring removed nomblk_io_submit option [ 292.252915][T10877] bond1 (unregistering): Released all slaves [ 292.268266][T10886] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 292.280334][T10886] System zones: 0-1, 3-36 [ 292.285849][T10880] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 292.286423][T10886] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 292.306067][T10880] EXT4-fs error (device loop2): __ext4_get_inode_loc:4830: comm syz.2.2368: Invalid inode table block 1 in block_group 0 [ 292.335193][T10880] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 292.347074][T10886] siw: device registration error -23 [ 292.360775][T10880] EXT4-fs error (device loop2): ext4_quota_off:7270: inode #3: comm syz.2.2368: mark_inode_dirty error [ 292.379291][T10892] loop5: detected capacity change from 0 to 1024 [ 292.386631][T10892] EXT4-fs: Ignoring removed nomblk_io_submit option [ 292.395940][T10892] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 292.405119][T10880] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2368'. [ 292.414041][T10880] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2368'. [ 292.418992][T10892] System zones: 0-1, 3-36 [ 292.448458][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 292.449830][T10880] syzkaller0: entered promiscuous mode [ 292.463049][T10880] syzkaller0: entered allmulticast mode [ 292.463704][T10892] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 292.508525][T10892] siw: device registration error -23 [ 292.587975][ T7606] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 292.765384][T10913] loop5: detected capacity change from 0 to 1024 [ 292.782069][T10913] EXT4-fs: Ignoring removed nomblk_io_submit option [ 292.793608][T10913] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 292.801977][T10910] wireguard0: entered promiscuous mode [ 292.807549][T10910] wireguard0: entered allmulticast mode [ 292.812516][T10913] System zones: 0-1, 3-36 [ 292.825783][T10913] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 292.866617][T10913] siw: device registration error -23 [ 292.908171][ T7606] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 294.071218][ T29] kauditd_printk_skb: 960 callbacks suppressed [ 294.071236][ T29] audit: type=1326 audit(1767061214.169:76805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10935 comm="syz.3.2383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cf4abf749 code=0x7ffc0000 [ 294.112681][T10936] EXT4-fs: Ignoring removed nomblk_io_submit option [ 294.136451][T10936] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 294.165089][T10936] System zones: 0-1, 3-36 [ 294.226134][ T29] audit: type=1326 audit(1767061214.169:76806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10935 comm="syz.3.2383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cf4abf749 code=0x7ffc0000 [ 294.227543][T10936] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 294.249807][ T29] audit: type=1326 audit(1767061214.169:76807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10935 comm="syz.3.2383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f9cf4abf749 code=0x7ffc0000 [ 294.249854][ T29] audit: type=1326 audit(1767061214.169:76808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10935 comm="syz.3.2383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cf4abf749 code=0x7ffc0000 [ 294.309653][ T29] audit: type=1326 audit(1767061214.169:76809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10935 comm="syz.3.2383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cf4abf749 code=0x7ffc0000 [ 294.333332][ T29] audit: type=1326 audit(1767061214.169:76810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10935 comm="syz.3.2383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9cf4abf749 code=0x7ffc0000 [ 294.357074][ T29] audit: type=1326 audit(1767061214.169:76811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10935 comm="syz.3.2383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cf4abf749 code=0x7ffc0000 [ 294.381042][ T29] audit: type=1326 audit(1767061214.169:76812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10935 comm="syz.3.2383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cf4abf749 code=0x7ffc0000 [ 294.404786][ T29] audit: type=1326 audit(1767061214.169:76813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10935 comm="syz.3.2383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9cf4abf749 code=0x7ffc0000 [ 294.428425][ T29] audit: type=1326 audit(1767061214.169:76814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10935 comm="syz.3.2383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cf4abf749 code=0x7ffc0000 [ 294.576872][T10957] loop2: p1 < > p3 p4 [ 294.591003][T10957] loop2: p3 start 458752 is beyond EOD, truncated [ 294.597688][T10957] loop2: p4 start 268435456 is beyond EOD, truncated [ 294.616298][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 294.631226][T10957] geneve3: entered promiscuous mode [ 294.632209][T10961] netlink: 'syz.0.2392': attribute type 83 has an invalid length. [ 294.662005][T10961] process 'syz.0.2392' launched './file0' with NULL argv: empty string added [ 294.806524][T10972] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 294.831357][T10972] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 294.845525][T10972] EXT4-fs (loop0): orphan cleanup on readonly fs [ 294.856523][T10972] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4215: comm syz.0.2396: Allocating blocks 41-42 which overlap fs metadata [ 294.870723][T10972] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4215: comm syz.0.2396: Allocating blocks 41-42 which overlap fs metadata [ 294.887000][T10972] EXT4-fs error (device loop0): ext4_acquire_dquot:6986: comm syz.0.2396: Failed to acquire dquot type 1 [ 295.178069][T10980] EXT4-fs: Ignoring removed nomblk_io_submit option [ 295.216470][T10980] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 295.224867][T10980] System zones: 0-1, 3-36 [ 295.236002][T10980] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 295.381219][T10983] SELinux: Context › is not valid (left unmapped). [ 295.467701][T10972] EXT4-fs error (device loop0): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 295.487736][T10972] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #12: comm syz.0.2396: corrupted inode contents [ 295.508341][T10972] EXT4-fs error (device loop0): ext4_dirty_inode:6502: inode #12: comm syz.0.2396: mark_inode_dirty error [ 295.533139][T10972] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #12: comm syz.0.2396: corrupted inode contents [ 295.533976][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 295.575043][T10972] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #12: comm syz.0.2396: mark_inode_dirty error [ 295.587213][T10972] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #12: comm syz.0.2396: corrupted inode contents [ 295.610161][T10992] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 295.617975][T10972] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 295.631372][T10972] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #12: comm syz.0.2396: corrupted inode contents [ 295.643448][T10972] EXT4-fs error (device loop0): ext4_truncate:4635: inode #12: comm syz.0.2396: mark_inode_dirty error [ 295.655256][T10972] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem [ 295.682257][T10972] EXT4-fs (loop0): 1 truncate cleaned up [ 295.701173][T10972] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 295.875548][T11008] set_capacity_and_notify: 4 callbacks suppressed [ 295.875567][T11008] loop5: detected capacity change from 0 to 1024 [ 295.891450][T11008] EXT4-fs: Ignoring removed nomblk_io_submit option [ 295.906435][T11010] 9p: Bad value for 'rfdno' [ 295.906950][T11008] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 295.947843][T11008] System zones: 0-1, 3-36 [ 295.953809][T11008] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 296.112880][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 296.150052][T11008] siw: device registration error -23 [ 296.262644][T11015] loop3: detected capacity change from 0 to 1024 [ 296.293553][T11015] EXT4-fs: Ignoring removed nomblk_io_submit option [ 296.365830][T11015] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 296.374043][T11015] System zones: 0-1, 3-36 [ 296.393625][T11015] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 296.411762][T11020] loop2: detected capacity change from 0 to 1024 [ 296.419952][T11020] EXT4-fs: Ignoring removed nomblk_io_submit option [ 296.442323][T11020] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 296.460908][T11020] System zones: 0-1, 3-36 [ 296.467419][T11020] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 296.916162][T11026] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2410'. [ 296.935995][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 296.946421][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 296.956627][ T7606] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 296.993683][T11026] loop0: detected capacity change from 0 to 2048 [ 297.071236][T11037] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 297.090934][T11037] loop1: detected capacity change from 0 to 512 [ 297.104722][T11037] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 297.114732][T11037] EXT4-fs (loop1): orphan cleanup on readonly fs [ 297.121668][T11037] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4215: comm syz.1.2418: Allocating blocks 41-42 which overlap fs metadata [ 297.136111][T11037] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4215: comm syz.1.2418: Allocating blocks 41-42 which overlap fs metadata [ 297.151179][T11037] EXT4-fs error (device loop1): ext4_acquire_dquot:6986: comm syz.1.2418: Failed to acquire dquot type 1 [ 297.163306][T11037] EXT4-fs error (device loop1): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 297.178011][T11037] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #12: comm syz.1.2418: corrupted inode contents [ 297.190091][T11037] EXT4-fs error (device loop1): ext4_dirty_inode:6502: inode #12: comm syz.1.2418: mark_inode_dirty error [ 297.208747][T11037] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #12: comm syz.1.2418: corrupted inode contents [ 297.222183][T11037] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #12: comm syz.1.2418: mark_inode_dirty error [ 297.233780][T11037] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #12: comm syz.1.2418: corrupted inode contents [ 297.246028][T11037] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 297.254896][T11037] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #12: comm syz.1.2418: corrupted inode contents [ 297.294497][T11044] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 297.314487][T11037] EXT4-fs error (device loop1): ext4_truncate:4635: inode #12: comm syz.1.2418: mark_inode_dirty error [ 297.332401][T11037] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem [ 297.341962][T11037] EXT4-fs (loop1): 1 truncate cleaned up [ 297.348690][T11037] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 297.586707][T11055] loop0: detected capacity change from 0 to 2048 [ 297.635504][T11055] loop0: p1 < > p3 p4 [ 297.642751][T11055] loop0: p3 start 458752 is beyond EOD, truncated [ 297.649282][T11055] loop0: p4 start 268435456 is beyond EOD, truncated [ 297.721572][T11057] loop0: detected capacity change from 0 to 2048 [ 297.767742][T11057] loop0: p1 < > p3 p4 [ 297.772577][T11059] loop2: detected capacity change from 0 to 1024 [ 297.772768][T11057] loop0: p3 start 458752 is beyond EOD, truncated [ 297.781747][T11059] EXT4-fs: Ignoring removed nomblk_io_submit option [ 297.785624][T11057] loop0: p4 start 268435456 is beyond EOD, truncated [ 297.801776][T11059] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 297.814830][T11059] System zones: 0-1, 3-36 [ 297.820402][T11059] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 297.864591][T11059] siw: device registration error -23 [ 297.909320][T11064] loop3: detected capacity change from 0 to 1024 [ 297.918767][T11062] netlink: 9 bytes leftover after parsing attributes in process `syz.0.2424'. [ 297.928875][T11064] EXT4-fs: Ignoring removed nomblk_io_submit option [ 297.935984][T11062] 0·: renamed from hsr0 (while UP) [ 297.943496][T11062] 0·: entered allmulticast mode [ 297.948478][T11062] hsr_slave_0: entered allmulticast mode [ 297.954292][T11062] hsr_slave_1: entered allmulticast mode [ 297.961690][T11062] A link change request failed with some changes committed already. Interface 70· may have been left with an inconsistent configuration, please check. [ 297.977503][T11064] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 297.985848][T11064] System zones: 0-1, 3-36 [ 298.000312][T11066] loop2: detected capacity change from 0 to 1024 [ 298.008119][T11062] hub 2-0:1.0: USB hub found [ 298.014825][T11062] hub 2-0:1.0: 8 ports detected [ 298.026861][T11066] EXT4-fs: Ignoring removed nomblk_io_submit option [ 298.043725][T11066] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 298.052226][T11066] System zones: 0-1, 3-36 [ 298.073731][T11062] vhci_hcd vhci_hcd.0: default hub control req: 0011 v0002 i0004 l4096 [ 298.092550][T11066] siw: device registration error -23 [ 298.115450][T11076] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2429'. [ 298.284354][T11090] vfat: Unknown parameter '000000000000000000000x0000000000000000' [ 298.352373][T11088] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm syz.2.2434: Failed to acquire dquot type 0 [ 298.366137][T11088] EXT4-fs error (device loop2): mb_free_blocks:2037: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 298.395509][T11088] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #13: comm syz.2.2434: corrupted inode contents [ 298.836424][T11088] EXT4-fs error (device loop2): ext4_dirty_inode:6502: inode #13: comm syz.2.2434: mark_inode_dirty error [ 298.851353][T11088] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #13: comm syz.2.2434: corrupted inode contents [ 298.863792][T11088] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #13: comm syz.2.2434: mark_inode_dirty error [ 298.875442][T11088] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #13: comm syz.2.2434: corrupted inode contents [ 298.904972][T11088] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 298.935135][T11088] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #13: comm syz.2.2434: corrupted inode contents [ 298.947978][T11088] EXT4-fs error (device loop2): ext4_truncate:4635: inode #13: comm syz.2.2434: mark_inode_dirty error [ 298.959792][T11088] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 298.969672][T11088] EXT4-fs (loop2): 1 truncate cleaned up [ 298.994319][T11099] EXT4-fs: Ignoring removed nomblk_io_submit option [ 299.003310][T11099] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 299.015462][T11099] System zones: 0-1, 3-36 [ 299.030596][T11099] siw: device registration error -23 [ 299.097722][T11090] netlink: 83992 bytes leftover after parsing attributes in process `syz.2.2434'. [ 299.108635][ T29] kauditd_printk_skb: 905 callbacks suppressed [ 299.108650][ T29] audit: type=1326 audit(1767061219.209:77710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11101 comm="syz.5.2437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa23350f749 code=0x7ffc0000 [ 299.147395][T11104] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 299.154380][T11090] netlink: zone id is out of range [ 299.160606][T11090] netlink: zone id is out of range [ 299.169133][T11102] EXT4-fs: Ignoring removed nomblk_io_submit option [ 299.176064][T11090] netlink: zone id is out of range [ 299.181289][T11090] netlink: zone id is out of range [ 299.186918][T11090] netlink: zone id is out of range [ 299.187374][T11104] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 299.192058][T11090] netlink: zone id is out of range [ 299.207443][T11104] EXT4-fs (loop1): orphan cleanup on readonly fs [ 299.214505][T11104] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4215: comm syz.1.2438: Allocating blocks 41-42 which overlap fs metadata [ 299.217140][ T29] audit: type=1326 audit(1767061219.239:77711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11101 comm="syz.5.2437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7fa23350f749 code=0x7ffc0000 [ 299.228749][T11104] Quota error (device loop1): write_blk: dquota write failed [ 299.251914][ T29] audit: type=1326 audit(1767061219.239:77712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11101 comm="syz.5.2437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa23350f749 code=0x7ffc0000 [ 299.259401][T11104] Quota error (device loop1): find_free_dqentry: Can't write quota data block 5 [ 299.259542][T11104] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4215: comm syz.1.2438: Allocating blocks 41-42 which overlap fs metadata [ 299.283002][ T29] audit: type=1326 audit(1767061219.239:77713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11101 comm="syz.5.2437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa23350f749 code=0x7ffc0000 [ 299.317055][T11090] netlink: zone id is out of range [ 299.329409][ T29] audit: type=1326 audit(1767061219.239:77714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11101 comm="syz.5.2437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa23350f749 code=0x7ffc0000 [ 299.334535][T11090] netlink: zone id is out of range [ 299.334546][T11090] netlink: zone id is out of range [ 299.358149][ T29] audit: type=1326 audit(1767061219.239:77715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11101 comm="syz.5.2437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa23350f749 code=0x7ffc0000 [ 299.370191][T11102] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 299.392203][ T29] audit: type=1326 audit(1767061219.239:77716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11101 comm="syz.5.2437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa23350f749 code=0x7ffc0000 [ 299.423958][ T29] audit: type=1326 audit(1767061219.239:77717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11101 comm="syz.5.2437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa23350f749 code=0x7ffc0000 [ 299.431289][T11109] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2439'. [ 299.448066][T11104] EXT4-fs error (device loop1): ext4_acquire_dquot:6986: comm syz.1.2438: Failed to acquire dquot type 1 [ 299.457003][T11109] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2439'. [ 299.474919][T11102] System zones: 0-1, 3-36 [ 299.503410][T11104] EXT4-fs error (device loop1): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 299.524893][T11104] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #12: comm syz.1.2438: corrupted inode contents [ 299.556679][T11104] EXT4-fs error (device loop1): ext4_dirty_inode:6502: inode #12: comm syz.1.2438: mark_inode_dirty error [ 299.578097][T11111] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 299.588623][T11104] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #12: comm syz.1.2438: corrupted inode contents [ 299.602134][T11111] EXT4-fs (loop0): 1 truncate cleaned up [ 299.607402][T11102] siw: device registration error -23 [ 299.631773][T11104] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #12: comm syz.1.2438: mark_inode_dirty error [ 299.649278][T11104] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #12: comm syz.1.2438: corrupted inode contents [ 299.672157][T11104] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 299.681046][T11104] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #12: comm syz.1.2438: corrupted inode contents [ 299.694123][T11104] EXT4-fs error (device loop1): ext4_truncate:4635: inode #12: comm syz.1.2438: mark_inode_dirty error [ 299.705718][T11104] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem [ 299.715165][T11104] EXT4-fs (loop1): 1 truncate cleaned up [ 299.729998][T11115] EXT4-fs: Ignoring removed nomblk_io_submit option [ 299.754075][T11115] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 299.774756][T11115] System zones: 0-1, 3-36 [ 299.813660][T11115] siw: device registration error -23 [ 299.820861][T11123] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2444'. [ 299.919323][T11130] mmap: syz.0.2447 (11130) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 300.048467][T11140] EXT4-fs: Ignoring removed nomblk_io_submit option [ 300.067974][T11138] FAULT_INJECTION: forcing a failure. [ 300.067974][T11138] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 300.081197][T11138] CPU: 1 UID: 0 PID: 11138 Comm: syz.3.2448 Not tainted syzkaller #0 PREEMPT(voluntary) [ 300.081226][T11138] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 300.081263][T11138] Call Trace: [ 300.081270][T11138] [ 300.081279][T11138] __dump_stack+0x1d/0x30 [ 300.081379][T11138] dump_stack_lvl+0x95/0xd0 [ 300.081408][T11138] dump_stack+0x15/0x1b [ 300.081434][T11138] should_fail_ex+0x265/0x280 [ 300.081473][T11138] should_fail+0xb/0x20 [ 300.081547][T11138] should_fail_usercopy+0x1a/0x20 [ 300.081577][T11138] _copy_from_user+0x1c/0xb0 [ 300.081661][T11138] kstrtouint_from_user+0x69/0xf0 [ 300.081690][T11138] ? 0xffffffff81000000 [ 300.081714][T11138] ? selinux_file_permission+0x1e2/0x320 [ 300.081755][T11138] proc_fail_nth_write+0x50/0x160 [ 300.081856][T11138] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 300.081931][T11138] vfs_write+0x269/0x960 [ 300.081952][T11138] ? vfs_read+0x4e6/0x770 [ 300.081972][T11138] ? __rcu_read_unlock+0x4f/0x70 [ 300.081998][T11138] ? __fget_files+0x184/0x1c0 [ 300.082097][T11138] ? mutex_lock+0x58/0x90 [ 300.082132][T11138] ksys_write+0xda/0x1a0 [ 300.082156][T11138] __x64_sys_write+0x40/0x50 [ 300.082181][T11138] x64_sys_call+0x2847/0x3000 [ 300.082210][T11138] do_syscall_64+0xca/0x2b0 [ 300.082254][T11138] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 300.082346][T11138] RIP: 0033:0x7f9cf4abe1ff [ 300.082360][T11138] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 300.082379][T11138] RSP: 002b:00007f9cf3506030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 300.082470][T11138] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f9cf4abe1ff [ 300.082484][T11138] RDX: 0000000000000001 RSI: 00007f9cf35060a0 RDI: 0000000000000004 [ 300.082497][T11138] RBP: 00007f9cf3506090 R08: 0000000000000000 R09: 0000000000000000 [ 300.082508][T11138] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 300.082521][T11138] R13: 00007f9cf4d16128 R14: 00007f9cf4d16090 R15: 00007ffc430a8a68 [ 300.082546][T11138] [ 300.292217][T11140] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 300.292252][T11140] System zones: 0-1, 3-36 [ 300.357682][T11140] siw: device registration error -23 [ 300.388294][T11145] ext4 filesystem being mounted at /521/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 300.569272][T11160] netlink: 83992 bytes leftover after parsing attributes in process `syz.5.2454'. [ 300.651257][T11162] FAULT_INJECTION: forcing a failure. [ 300.651257][T11162] name failslab, interval 1, probability 0, space 0, times 1 [ 300.664014][T11162] CPU: 1 UID: 0 PID: 11162 Comm: syz.5.2454 Not tainted syzkaller #0 PREEMPT(voluntary) [ 300.664127][T11162] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 300.664142][T11162] Call Trace: [ 300.664150][T11162] [ 300.664159][T11162] __dump_stack+0x1d/0x30 [ 300.664193][T11162] dump_stack_lvl+0x95/0xd0 [ 300.664226][T11162] dump_stack+0x15/0x1b [ 300.664326][T11162] should_fail_ex+0x265/0x280 [ 300.664353][T11162] should_failslab+0x8c/0xb0 [ 300.664384][T11162] kmem_cache_alloc_noprof+0x69/0x4b0 [ 300.664410][T11162] ? alloc_empty_file+0x76/0x200 [ 300.664516][T11162] alloc_empty_file+0x76/0x200 [ 300.664545][T11162] path_openat+0x63/0x23b0 [ 300.664604][T11162] ? _parse_integer_limit+0x170/0x190 [ 300.664629][T11162] ? _parse_integer+0x27/0x40 [ 300.664650][T11162] ? kstrtoull+0x111/0x140 [ 300.664671][T11162] ? kstrtouint+0x76/0xc0 [ 300.664739][T11162] do_filp_open+0x109/0x230 [ 300.664785][T11162] do_sys_openat2+0xa6/0x150 [ 300.664838][T11162] __x64_sys_openat+0xf2/0x120 [ 300.664974][T11162] x64_sys_call+0x2b07/0x3000 [ 300.665067][T11162] do_syscall_64+0xca/0x2b0 [ 300.665185][T11162] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 300.665210][T11162] RIP: 0033:0x7fa23350f749 [ 300.665227][T11162] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 300.665261][T11162] RSP: 002b:00007fa231f56038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 300.665327][T11162] RAX: ffffffffffffffda RBX: 00007fa233766090 RCX: 00007fa23350f749 [ 300.665342][T11162] RDX: 000000000000c100 RSI: 0000200000000180 RDI: ffffffffffffff9c [ 300.665358][T11162] RBP: 00007fa231f56090 R08: 0000000000000000 R09: 0000000000000000 [ 300.665373][T11162] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 300.665394][T11162] R13: 00007fa233766128 R14: 00007fa233766090 R15: 00007ffd6e48f608 [ 300.665427][T11162] [ 300.895472][T11165] set_capacity_and_notify: 12 callbacks suppressed [ 300.895486][T11165] loop2: detected capacity change from 0 to 1024 [ 300.909856][T11165] EXT4-fs: Ignoring removed nomblk_io_submit option [ 300.918310][T11165] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 300.926519][T11165] System zones: 0-1, 3-36 [ 300.944853][T11165] siw: device registration error -23 [ 301.020732][T11172] loop3: detected capacity change from 0 to 512 [ 301.041918][T11172] EXT4-fs: Ignoring removed nomblk_io_submit option [ 301.065020][T11172] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 301.080718][T11178] loop5: detected capacity change from 0 to 1024 [ 301.088515][T11178] EXT4-fs: Ignoring removed orlov option [ 301.094882][T11178] EXT4-fs (loop5): stripe (4) is not aligned with cluster size (16), stripe is disabled [ 301.106320][T11172] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c11c, mo2=0102] [ 301.114496][T11172] System zones: 0-2, 18-18, 34-34 [ 301.119971][T11182] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2458'. [ 301.129166][T11172] EXT4-fs error (device loop3): ext4_quota_enable:7177: inode #4: comm syz.3.2457: iget: immutable or append flags not allowed on symlinks [ 301.143972][T11172] EXT4-fs error (device loop3): ext4_quota_enable:7180: comm syz.3.2457: Bad quota inode: 4, type: 1 [ 301.156017][T11172] EXT4-fs warning (device loop3): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 301.171475][T11172] EXT4-fs (loop3): mount failed [ 301.307855][T11196] syz.3.2463 uses obsolete (PF_INET,SOCK_PACKET) [ 301.354081][T11193] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 301.382322][T11203] FAULT_INJECTION: forcing a failure. [ 301.382322][T11203] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 301.395567][T11203] CPU: 0 UID: 0 PID: 11203 Comm: syz.5.2467 Not tainted syzkaller #0 PREEMPT(voluntary) [ 301.395593][T11203] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 301.395652][T11203] Call Trace: [ 301.395660][T11203] [ 301.395669][T11203] __dump_stack+0x1d/0x30 [ 301.395699][T11203] dump_stack_lvl+0x95/0xd0 [ 301.395723][T11203] dump_stack+0x15/0x1b [ 301.395742][T11203] should_fail_ex+0x265/0x280 [ 301.395811][T11203] should_fail+0xb/0x20 [ 301.395836][T11203] should_fail_usercopy+0x1a/0x20 [ 301.395902][T11203] _copy_from_user+0x1c/0xb0 [ 301.395930][T11203] ___sys_sendmsg+0xc1/0x1d0 [ 301.396011][T11203] __x64_sys_sendmsg+0xd4/0x160 [ 301.396055][T11203] x64_sys_call+0x17ba/0x3000 [ 301.396132][T11203] do_syscall_64+0xca/0x2b0 [ 301.396167][T11203] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 301.396192][T11203] RIP: 0033:0x7fa23350f749 [ 301.396211][T11203] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 301.396295][T11203] RSP: 002b:00007fa231f77038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 301.396314][T11203] RAX: ffffffffffffffda RBX: 00007fa233765fa0 RCX: 00007fa23350f749 [ 301.396329][T11203] RDX: 0000000000000004 RSI: 00002000000000c0 RDI: 0000000000000006 [ 301.396345][T11203] RBP: 00007fa231f77090 R08: 0000000000000000 R09: 0000000000000000 [ 301.396360][T11203] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 301.396382][T11203] R13: 00007fa233766038 R14: 00007fa233765fa0 R15: 00007ffd6e48f608 [ 301.396466][T11203] [ 301.583887][T11193] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.617067][T11204] loop0: detected capacity change from 0 to 512 [ 301.624085][T11204] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 301.636477][T11204] EXT4-fs (loop0): 1 truncate cleaned up [ 301.728059][T11193] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.799163][T11193] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.006335][T11193] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.267019][T11226] loop3: detected capacity change from 0 to 2048 [ 302.295928][ T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.311660][ T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.330306][ T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.349481][ T12] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.609363][T11246] loop5: detected capacity change from 0 to 512 [ 302.644406][T11246] ext4: Unknown parameter 'obj_user' [ 302.872655][T11259] loop2: detected capacity change from 0 to 512 [ 302.889676][T11259] ext4 filesystem being mounted at /521/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 303.073500][T11264] ================================================================== [ 303.081645][T11264] BUG: KCSAN: data-race in page_pool_put_unrefed_netmem / page_pool_refill_alloc_cache [ 303.091308][T11264] [ 303.093683][T11264] write to 0xffff88811a715480 of 8 bytes by task 11257 on cpu 1: [ 303.101413][T11264] page_pool_refill_alloc_cache+0x2a5/0x3c0 [ 303.107356][T11264] page_pool_alloc_pages+0xd0/0x130 [ 303.112574][T11264] bpf_test_run_xdp_live+0x54d/0x11d0 [ 303.117977][T11264] bpf_prog_test_run_xdp+0x525/0x970 [ 303.123288][T11264] bpf_prog_test_run+0x204/0x340 [ 303.128267][T11264] __sys_bpf+0x4c0/0x7c0 [ 303.132615][T11264] __x64_sys_bpf+0x41/0x50 [ 303.137053][T11264] x64_sys_call+0x28e1/0x3000 [ 303.141778][T11264] do_syscall_64+0xca/0x2b0 [ 303.146298][T11264] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 303.152212][T11264] [ 303.154532][T11264] read to 0xffff88811a715480 of 8 bytes by task 11264 on cpu 0: [ 303.162155][T11264] page_pool_put_unrefed_netmem+0x38b/0x4b0 [ 303.168126][T11264] napi_pp_put_page+0xe9/0x200 [ 303.172915][T11264] skb_free_head+0x12c/0x150 [ 303.177523][T11264] skb_release_data+0x33b/0x370 [ 303.182394][T11264] __kfree_skb+0x44/0x150 [ 303.186733][T11264] sk_skb_reason_drop+0xbd/0x270 [ 303.191696][T11264] udp_recvmsg+0x11a/0xb90 [ 303.196164][T11264] inet_recvmsg+0x143/0x290 [ 303.200691][T11264] sock_recvmsg+0xf6/0x170 [ 303.205130][T11264] ____sys_recvmsg+0xf5/0x280 [ 303.209840][T11264] ___sys_recvmsg+0x11f/0x370 [ 303.214568][T11264] do_recvmmsg+0x1ef/0x540 [ 303.219007][T11264] __x64_sys_recvmmsg+0xe5/0x170 [ 303.223980][T11264] x64_sys_call+0x2b75/0x3000 [ 303.228667][T11264] do_syscall_64+0xca/0x2b0 [ 303.233199][T11264] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 303.239096][T11264] [ 303.241468][T11264] value changed: 0xffffea00040e4d80 -> 0x0000000000000000 [ 303.248595][T11264] [ 303.250930][T11264] Reported by Kernel Concurrency Sanitizer on: [ 303.257107][T11264] CPU: 0 UID: 0 PID: 11264 Comm: syz.1.2484 Not tainted syzkaller #0 PREEMPT(voluntary) [ 303.266930][T11264] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 303.277017][T11264] ================================================================== [ 305.167958][T11268] syz.3.2481 (11268) used greatest stack depth: 8648 bytes left