last executing test programs: 1m40.571200085s ago: executing program 32 (id=248): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f0000002280)={&(0x7f0000001e40)={0xa, 0x4e24, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="b005"], 0x5b0}, 0x20008001) sendmmsg$inet6(r0, &(0x7f0000000d40)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="9d168730fdf587afe88e6d0f2f021d74f45d57c0eaa39b0d32df3f32e71583f029fc58e95b9086c2e3a077073c61af58f7b25bda1e0b36c9657b526cd1d440d2e811a9c3b94b19275de6ed4e4e9bcf2dc81a3c2f123eb290be9f88a2d71b3b8e2d5b392f5975ca862321a4eba39086fce39cc4f06bb3069fbc", 0x79}, {&(0x7f0000000240)="2922820035a975bdb6de644e6ad7afecdf9c0486b420494097bc774040ad7177f39c57ba91b4709a12fdbba86f74fa541693d37a4ae3d83f650d98c60fac131a4bcd9b79681b2cf6996d7a39a6c2603f1b578f32d1c3a26445a1b5912f5400c4ac940ce4ba78b17fe1da32b846caa9077c57dea90c8b80140e6401e954dc1a23bf39324340c9ab46318500d08b237367cefa5af0143c647655bf3a484b5c700c2ac997a8", 0xa4}, {&(0x7f0000000340)="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", 0x490}], 0x3}}, {{&(0x7f0000000040)={0xa, 0x4e23, 0x8, @private2, 0xfff}, 0x1c, 0x0, 0x0, &(0x7f0000000e00)=[@dstopts={{0x150, 0x29, 0x37, {0x4, 0x26, '\x00', [@generic={0x3a, 0xce, "243b641cb7af0e57e50938f0ed3af1110a4f9acdd42cb86c247efe82bbc9acca9ddcef08a83d3514ec03a937c6657fb4c0489c3756eab9772011fa5bc3ad282e63aa178264e63c7ea86b851947c7dd41d2a74dff3f3463899d427625044392f1a073c31e49cb4bab2a456900316af11835d6b65c0873fa8c5cd586e33235c13eca8cf02d2c77085555c4da26f0ca46d56980adc6d776e3e49d0d015d536ab6d9a07d590d88d07dff85cf78c4c0725851239f2c224973505882e1e430b3bf764d6bc939791955b6d62de0fea29e91"}, @jumbo={0xc2, 0x4, 0x1}, @calipso={0x7, 0x58, {0x2, 0x14, 0x81, 0xfffa, [0x6, 0x7, 0x0, 0x9fb8, 0x5, 0x7, 0x4, 0x9, 0x1, 0x9]}}, @enc_lim={0x4, 0x1, 0x9}]}}}, @dstopts={{0x50, 0x29, 0x37, {0x16, 0x6, '\x00', [@calipso={0x7, 0x10, {0x2, 0x2, 0x3, 0x7, [0x2]}}, @generic={0x5, 0x1b, "d107bc15e34e4904b3daf44fa613b342125d8564bbe30a3a5487f2"}, @jumbo={0xc2, 0x4, 0x1}]}}}, @hopopts={{0x90, 0x29, 0x36, {0x11, 0xe, '\x00', [@generic={0x4, 0x53, "486f5ba89e8588c0bfb35ce023dc64196b4178cb4ec9bbc7f19c6e68a855b32de58ea137045d45542bea838ef8df6d3949f788ceaffe80830f40a6f4ff2f43503b6b33175a01c5aff956c60fca9e8fc8a345f7"}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @jumbo={0xc2, 0x4, 0x5}, @pad1, @ra={0x5, 0x2, 0x1}, @pad1]}}}, @tclass={{0x14, 0x29, 0x43, 0x75b0}}, @hopopts_2292={{0x20, 0x29, 0x36, {0xc, 0x0, '\x00', [@pad1, @enc_lim={0x4, 0x1, 0x9}]}}}, @dstopts={{0x48, 0x29, 0x37, {0x84, 0x6, '\x00', [@ra={0x5, 0x2, 0xfe}, @hao={0xc9, 0x10, @loopback}, @calipso={0x7, 0x18, {0x0, 0x4, 0x8, 0x32f5, [0x6, 0x751020a2]}}]}}}], 0x2b0}}], 0x2, 0x40000) 1m9.326008827s ago: executing program 1 (id=749): prlimit64(0x0, 0xd, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = getuid() keyctl$chown(0x4, 0x0, r3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r5 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x12, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r5}, @generic={0x66}, @initr0, @exit, @printk={@x={0x18, 0x0}, {0x3, 0x0, 0x6}, {}, {}, {}, {0x5, 0x0, 0xb, 0x2}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x7928, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000940)=[{0x0, 0x4, 0xf, 0x5}], 0x10, 0x0, @void, @value}, 0x90) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x4, 0x6, 0x80, 0x42, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000540), &(0x7f0000000080), 0x619, r6}, 0x38) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000400850000008200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) syz_clone(0xd89ea800, 0x0, 0x0, 0x0, 0x0, 0x0) 1m3.621311549s ago: executing program 2 (id=827): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f0000002280)={&(0x7f0000001e40)={0xa, 0x4e24, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="b00500"], 0x5b0}, 0x20008001) sendmmsg$inet6(r0, &(0x7f0000000d40)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="9d168730fdf587afe88e6d0f2f021d74f45d57c0eaa39b0d32df3f32e71583f029fc58e95b9086c2e3a077073c61af58f7b25bda1e0b36c9657b526cd1d440d2e811a9c3b94b19275de6ed4e4e9bcf2dc81a3c2f123eb290be9f88a2d71b3b8e2d5b392f5975ca862321a4eba39086fce39c", 0x72}, {&(0x7f0000000240)="2922820035a975bdb6de644e6ad7afecdf9c0486b420494097bc774040ad7177f39c57ba91b4709a12fdbba86f74fa541693d37a4ae3d83f650d98c60fac131a4bcd9b79681b2cf6996d7a39a6c2603f1b578f32d1c3a26445a1b5912f5400c4ac940ce4ba78b17fe1da32b846caa9077c57dea90c8b80140e6401e954dc1a23bf39324340c9ab46318500d08b237367cefa5af0143c647655bf3a484b5c700c2ac997a8", 0xa4}, {&(0x7f0000000340)="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", 0x490}], 0x3}}], 0x1, 0x40000) 1m3.575716189s ago: executing program 2 (id=829): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xa, 0x3, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f0000000940)={0x0, 0xfffffff0, &(0x7f0000000900)={&(0x7f0000000400)=ANY=[@ANYBLOB="54020000170001000000000000000000200100000000000000000000000000010000000000000000ac141400000000000000000000000000fc020000000000000003000000000000e000000200001000000000000000000000000000000000080a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="1242ffff040000000000000000000037660b6aff00000000000000000000000000000000000000000200002000000000", @ANYRES32, @ANYRES32, @ANYBLOB="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"], 0x254}}, 0x0) 1m3.323900168s ago: executing program 2 (id=830): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000580)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x1}, 0x18) syz_emit_ethernet(0x7e, &(0x7f00000002c0)={@local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010100, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x2c, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @private, @local, {[@cipso={0x86, 0x2e, 0x1, [{0x6, 0x2}, {0x0, 0x2}, {0x0, 0x12, "ffd11634eea26b0faffa0dea2e903528"}, {0x0, 0x9, "02a20948fd7406"}, {0x0, 0x9, "ccf0294e2a3bdb"}]}, @lsrr={0x83, 0xf, 0xd4, [@private=0xa010100, @dev={0xac, 0x14, 0x14, 0x42}, @empty]}]}}}}}}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000006c0)='kmem_cache_free\x00'}, 0x10) socket$nl_audit(0x10, 0x3, 0x9) 1m3.280285018s ago: executing program 2 (id=831): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_256={{0x304}, 'v\x00', "07f217bd74511f465bbbd5de01000000f91800", "0000f600", "8ce63ecbc640735f"}, 0x38) 1m3.218228198s ago: executing program 2 (id=832): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@minixdf}]}, 0x1, 0x4fa, &(0x7f0000000ac0)="$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") socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b00064700000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000000)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000040)=ANY=[], 0xfe37, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='rss_stat\x00', r6}, 0x10) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r7, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) sendmsg$nl_route_sched(r2, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000380)=@newtaction={0x894, 0x30, 0x12f, 0x0, 0x0, {}, [{0x880, 0x1, [@m_police={0x87c, 0x1, 0x0, 0x0, {{0xb}, {0x850, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404}, @TCA_POLICE_AVRATE={0x8}], [@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, @TCA_POLICE_TBF={0x30, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x894}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000080)='device_pm_callback_end\x00', r1}, 0x18) unlink(&(0x7f0000000440)='./file1\x00') 1m3.046002417s ago: executing program 2 (id=835): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r1}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x2800000002000000, 0xe, 0x55, &(0x7f0000000140)="a06ad876d56a0064d082778c3938", &(0x7f0000000380)=""/85, 0x0, 0x4000000, 0x700, 0xfffffe87}, 0x28) cachestat(r0, &(0x7f0000000200), &(0x7f0000000280), 0x0) 1m2.790317177s ago: executing program 1 (id=844): listen(0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000180)=@gcm_256={{0x304}, "5d4b42fac245ae74", "21cb70af1a8d3978b3ad1a2c6ede97acca25f6a9000bab0d716e9ebdee04ab7e", "b65dab43", "9a2c4361134d8abe"}, 0x38) shutdown(0xffffffffffffffff, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f00000002c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2b}, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x3, 0x3, 0x1c, 0x65, 0x0, 0x4, 0x2, 0x0, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0x14}}, "1c7e641cdf6bbd30"}}}}, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) waitid(0x0, r1, 0x0, 0x8, 0x0) waitid(0x1, r1, 0x0, 0x4, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r2}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000060000002010fdc92f850000000700"], &(0x7f00000000c0)='syzkaller\x00', 0x80, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f0000000100), 0x0}, 0x20) r3 = epoll_create(0x50fd) vmsplice(r3, 0x0, 0x0, 0x2) 1m1.877384484s ago: executing program 1 (id=859): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000000000000000000004b84ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r0}, 0xa) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r1 = io_uring_setup(0x3454, &(0x7f0000000080)={0x0, 0xffffeffe, 0x18, 0x2}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f0000000300)={0x6c, 0x0, 0x8, 0x70bd28, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_HE_OBSS_PD={0x28, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0xe}, @NL80211_HE_OBSS_PD_ATTR_NON_SRG_MAX_OFFSET={0x5, 0x3, 0x12}, @NL80211_HE_OBSS_PD_ATTR_SR_CTRL={0x5}]}, @NL80211_ATTR_INACTIVITY_TIMEOUT={0x6, 0x96, 0xff96}, @NL80211_ATTR_HE_OBSS_PD={0x28, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0x12}, @NL80211_HE_OBSS_PD_ATTR_BSS_COLOR_BITMAP={0xc, 0x4, "8d7c430bb7b3b76d"}, @NL80211_HE_OBSS_PD_ATTR_BSS_COLOR_BITMAP={0xc, 0x4, "c171dd000bb31b66"}]}]}, 0x6c}}, 0x40804) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r1, 0x10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[{0x0}], 0x0, 0x1}, 0x20) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = syz_open_dev$evdev(&(0x7f0000000040), 0x1ff, 0x10b080) ioctl$EVIOCGBITSW(r3, 0x80404525, &(0x7f0000000080)=""/75) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x200009, &(0x7f0000000600)={[{@data_writeback}, {@data_err_ignore}, {@minixdf}, {@errors_remount}, {@data_writeback}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x8}}, {@usrjquota}, {@delalloc}, {@nodelalloc}]}, 0xee, 0x46e, &(0x7f0000000c40)="$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") 1m1.467391532s ago: executing program 1 (id=866): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'vlan0\x00', 0x400}) close(r0) (fail_nth: 6) 1m1.326793062s ago: executing program 1 (id=868): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@minixdf}]}, 0x1, 0x4fa, &(0x7f0000000ac0)="$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") socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b00064700000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000000)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000040)=ANY=[], 0xfe37, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='rss_stat\x00', r4}, 0x10) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r5, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) unlink(&(0x7f0000000440)='./file1\x00') 1m1.138710682s ago: executing program 1 (id=871): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0x4, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r1}, 0x38) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r0}, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x20, 0xd, &(0x7f0000000240)=ANY=[@ANYRESHEX=r1, @ANYRES32=r1, @ANYRES8], &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@printk={@ld}, @call={0x85, 0x0, 0x0, 0x7}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='leases_conflict\x00', r3}, 0x10) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r4, 0x400, 0x0) fsetxattr$trusted_overlay_redirect(r4, &(0x7f0000000040), 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2, 0x0, 0x2}, 0x18) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480), 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f00000003c0)=ANY=[@ANYRES32, @ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x1000407, &(0x7f00000002c0)={[{@orlov}, {@norecovery}, {@orlov}, {@oldalloc}]}, 0x0, 0x5eb, &(0x7f0000000dc0)="$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") 56.778709558s ago: executing program 5 (id=923): bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x44}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000020000000000000000018190000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) mount$9p_tcp(0x0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080), 0x800000, &(0x7f0000000140)={'trans=tcp,', {'port', 0x3d, 0x20000004e23}}) 56.609607697s ago: executing program 5 (id=924): listen(0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000180)=@gcm_256={{0x304}, "5d4b42fac245ae74", "21cb70af1a8d3978b3ad1a2c6ede97acca25f6a9000bab0d716e9ebdee04ab7e", "b65dab43", "9a2c4361134d8abe"}, 0x38) recvmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000001c0)=""/135, 0x87}], 0x1}, 0x20) shutdown(0xffffffffffffffff, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f00000002c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2b}, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x3, 0x3, 0x1c, 0x65, 0x0, 0x4, 0x2, 0x0, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0x14}}, "1c7e641cdf6bbd30"}}}}, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) waitid(0x0, r1, 0x0, 0x8, 0x0) waitid(0x1, r1, 0x0, 0x4, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r2}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000060000002010fdc92f850000000700"], &(0x7f00000000c0)='syzkaller\x00', 0x80, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f0000000100), 0x0}, 0x20) r3 = epoll_create(0x50fd) vmsplice(r3, 0x0, 0x0, 0x2) 55.702775035s ago: executing program 5 (id=938): syz_read_part_table(0x60d, &(0x7f0000002240)="$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") pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x107842, 0xa) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x33fe0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r5, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000c00)={0x14, 0x4, 0x1, 0x5}, 0x14}}, 0x0) setsockopt$inet6_opts(r4, 0x29, 0x37, &(0x7f0000000540)=@routing={0xff, 0x0, 0x2}, 0x8) sendto$inet6(r4, 0x0, 0x0, 0x20000000, &(0x7f0000000600)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_opts(r4, 0x29, 0x6, 0x0, 0x0) setsockopt$inet6_opts(r4, 0x29, 0x37, &(0x7f0000000100)=@dstopts, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000180)='kfree\x00', r3, 0x0, 0x7fffffffffffffd}, 0x18) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="58020000", @ANYRES16=0x0, @ANYBLOB="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"], 0x258}, 0x1, 0x0, 0x0, 0x40000}, 0x40044) ioctl$SNDRV_TIMER_IOCTL_GINFO(r6, 0xc0f85403, 0x0) 54.740038091s ago: executing program 5 (id=942): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f000000000000000002000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) (fail_nth: 1) 54.37076903s ago: executing program 5 (id=944): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@minixdf}]}, 0x1, 0x4fa, &(0x7f0000000ac0)="$eJzs3c9vG1kdAPCvnThx0uwmu+wBEOyW3YWCqjqJuxut9gDLCSFUCdEjSG1I3CiKHUexU5rQQ3rmikQlTnDkD+DcE3cuCG5cygGJHxGoQeLg1YwnqZvaTdQkdhR/PtJo3ps39fe9pvNe/U3iF8DQuhoRuxExFhF3I2I6u57LjvisfST3Pdt7uLS/93ApF63W7X/l0vbkWnT8mcSV7DWLEfGj70X8NPdy3Mb2ztpitVrZzOqzzdrGbGN758ZqbXGlslJZL5cX5hfmPrn5cfnMxvpebSwrffXpH3e/9fOkW1PZlc5xnKX20AuHcRKjEfGD8wg2ACPZeMYG3RFeSz4i3o6I99PnfzpG0q8mAHCZtVrT0ZrurAMAl10+zYHl8qUsFzAV+Xyp1M7hvROT+Wq90bx+r761vtzOlc1EIX9vtVqZy3KFM1HIJfX5tPy8Xj5SvxkRb0XEL8cn0nppqV5dHuR/fABgiF05sv7/d7y9/gMAl1xx0B0AAPrO+g8Aw8f6DwDDx/oPAMOnvf5PDLobAEAfef8PAMPH+g8AQ+WHt24lR2s/+/zr5fvbW2v1+zeWK421Um1rqbRU39wordTrK+ln9tSOe71qvb4x/1FsPZj59kajOdvY3rlTq2+tN++kn+t9p1JI79rtw8gAgF7eeu/JX3LJivzpRHpEx14OhYH2DDhv+UF3ABiYkUF3ABgYu33B8DrFe3zpAbgkumzR+4Jit18QarVarfPrEnDOrn1J/h+GVUf+308Bw5CR/4fhJf8Pw6vVyp10z/846Y0AwMUmxw/0+P7/29n5d9k3B36yfPSOx+fZKwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYDvb/LWV7gU9FPl8qRbwRETNRyN1brVbmIuLNiPjzeGE8qc8PuM8AwGnl/57L9v+6Nv3h1AtN7145LI5FxM9+fftXDxabzc0/RYzl/j1+cL35OLte7n/vAYDjHazT6bnjjfyzvYdLB0c/+/OP70ZEsR1/f28s9g/jj8Zoei5GISIm/5PL6m25jtzFaew+iogvdht/LqbSHEh759Oj8ZPYb/Q1fv6F+Pm0rX1O/i6+cAZ9gWHzJJl/Puv2/OXjanru/vwX0xnq9LL5L3mppf10Dnwe/2D+G+kx/109aYyP/vD9dmni5bZHEV8ejTiIvd8x/xzEz/WI/+EJ4//1K+++36ut9ZuIa9E9fmes2WZtY7axvXNjtba4UlmprJfLC/MLc5/c/Lg8m+aoZ3uvBv/89PqbvdqS8U/2iF88ZvxfP+H4f/v/uz/+2ivif/ODbvHz8c4r4idr4jdOGH9x8vfFXm1J/OUe4z/u63/9hPGf/m3npW3DAYDBaWzvrC1Wq5VNBYWLX0j+yV6AbnQtfKdfscaie9MvPmg/00eaWq3XitVrxjiLrBtwERw+9BHxv0F3BgAAAAAAAAAAAAAA6Kofv7E06DECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABweX0eAAD//19xzyM=") socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b00064700000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000000)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000040)=ANY=[], 0xfe37, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='rss_stat\x00', r3}, 0x10) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r4, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) unlink(&(0x7f0000000440)='./file1\x00') 53.970048259s ago: executing program 5 (id=950): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl(0xffffffffffffffff, 0x24, &(0x7f0000000280)="1e0df50ddf51467a5d36c8d7619fb09b2171e6f4815caa9f518fba5ab434ce44270daa0b19e689268d5e6ebc9d79b3182b49c3357127accf28dec4dc71aad1a83692b72f8f458f5a0900b747542d2c2d0b3280c3b550") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) syz_read_part_table(0x60d, &(0x7f0000002240)="$eJzs3D9olHcYB/DvJbmcUTAdnFxqHDoJRXE0Q5XkqlgIp1IIDvYfIs0UIXDSw5Q4tBkUM0jHLlK4DhonYwYnRaFzEQeLkMGlYBepHXLl7l6SOyjF0oRS/HyGe353PDzf94F3/V34XxtIuTi1Kp3y/qd/298a3TzP50xzYvJ4q9VqnU5KOZtyxsq7l5MMpX9q9icZ7plz8/udq9/+9mG5+fTUq/fOPVgc2JhZyTtJdvU2Z+SvHqXyzzZlO9wafzi6cGW2erX9pdpYW/84uf1yorZycnFp+UT52Oft3y8nj4r+7osxkoup51K+zCdDbxz19eax1Jc/386vj194Um2sfdd8fnB9b3Xw7vkjr/etXrt/KJlrR0yl87JvGv6Xi/fkL/Tkz41dn15qHD1wZ8+Nw/V7j2svBn9vdRWR5a3JBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABge9xqf1yZrV6tj194Um2sffPzTx/dfjlRWzm5uLR8YvjYs6LvUVGHinox9VxKOclMZvJFZt88crrUmz/+cHRhI/+Pncnzg+t7q82754+8nly9dv9Qp6uUqXYZ2IqN+/XnN9bmxq5PLzWOHriz58bh+r3HtReD3b6ZSj7rrJuksvWPAQAAAAAAAAAAAAAAAAAAwFtuYvL4vqkPaqeTUs7uSPLrV51b9q3KyI/p3Lzv2l/UZ5Vkd5KbO7r/BdB8eurV8LkHi78Ul+LnU8l8kl0/rJxJ3t3IudwfW96czH/pzwAAAP//gTiR5w==") r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) mmap(&(0x7f0000507000/0x3000)=nil, 0x3000, 0x2000003, 0x40010, 0xffffffffffffffff, 0x7ff000) r4 = open(&(0x7f0000000080)='./bus\x00', 0x147842, 0x49) preadv2(r4, &(0x7f0000000040)=[{&(0x7f0000001200)=""/4096, 0xfffffdef}], 0x1, 0x0, 0x0, 0x0) 47.93599678s ago: executing program 33 (id=835): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r1}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x2800000002000000, 0xe, 0x55, &(0x7f0000000140)="a06ad876d56a0064d082778c3938", &(0x7f0000000380)=""/85, 0x0, 0x4000000, 0x700, 0xfffffe87}, 0x28) cachestat(r0, &(0x7f0000000200), &(0x7f0000000280), 0x0) 45.786777404s ago: executing program 34 (id=871): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0x4, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r1}, 0x38) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r0}, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x20, 0xd, &(0x7f0000000240)=ANY=[@ANYRESHEX=r1, @ANYRES32=r1, @ANYRES8], &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@printk={@ld}, @call={0x85, 0x0, 0x0, 0x7}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='leases_conflict\x00', r3}, 0x10) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r4, 0x400, 0x0) fsetxattr$trusted_overlay_redirect(r4, &(0x7f0000000040), 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2, 0x0, 0x2}, 0x18) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480), 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f00000003c0)=ANY=[@ANYRES32, @ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x1000407, &(0x7f00000002c0)={[{@orlov}, {@norecovery}, {@orlov}, {@oldalloc}]}, 0x0, 0x5eb, &(0x7f0000000dc0)="$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") 38.748405561s ago: executing program 35 (id=950): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl(0xffffffffffffffff, 0x24, &(0x7f0000000280)="1e0df50ddf51467a5d36c8d7619fb09b2171e6f4815caa9f518fba5ab434ce44270daa0b19e689268d5e6ebc9d79b3182b49c3357127accf28dec4dc71aad1a83692b72f8f458f5a0900b747542d2c2d0b3280c3b550") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) syz_read_part_table(0x60d, &(0x7f0000002240)="$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") r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) mmap(&(0x7f0000507000/0x3000)=nil, 0x3000, 0x2000003, 0x40010, 0xffffffffffffffff, 0x7ff000) r4 = open(&(0x7f0000000080)='./bus\x00', 0x147842, 0x49) preadv2(r4, &(0x7f0000000040)=[{&(0x7f0000001200)=""/4096, 0xfffffdef}], 0x1, 0x0, 0x0, 0x0) 32.168847491s ago: executing program 4 (id=1168): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000000000000000000004b84ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r0}, 0xa) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x1, 0x120b, &(0x7f0000002300)="$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") rename(0x0, &(0x7f0000001300)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 32.05412157s ago: executing program 4 (id=1171): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0xfffffffffffbfffd}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={&(0x7f0000000300)={0x38, r2, 0x1, 0x8008000, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x4}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}]}]}, 0x38}}, 0x4000) 32.00482279s ago: executing program 4 (id=1174): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000c80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f00000001c0)=@nullb, 0x0, &(0x7f0000000600)='./file0\x00') pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000240)="f8aed027aed069669df61988aa62ffa253ec86a8183ac1f128e9a1aa404593474f3b8fc835cc49fd2ae9c19ff5cf8787ca5f96ab76e849a7f190cf3d56b5a20b7a9756fef5f2cf9aa7d7c0c5d2d938444b7a9c64578ac84c20dee568767a3955d2ca80db58910e1231c967872c4f9e98bd12b405a516c64823563ce711ce2a8df4830f7502d8871ce7b78b710f83996c528a60bae7b8d4756bb3", 0x9a}, {&(0x7f0000000300)="da1a8a23cf778e36757ea12e5c5fd391c284d48fae025bda8b0bd09c71816b58562a47946f9f1f26ba3b2de9e90bf80d78830f391db94148de646d7f5cb32935362fc7a56b8215c18005ff7aaa20b8871ed330d1e229e25ec2fde8ff364175974d3c5975bf58b38a09822ef3e104fa6df526a353277576b0fb5119a22833abd0715c1c79f4de3d", 0x87}, {&(0x7f0000000180)}, {&(0x7f00000003c0)="ed86f2b11782368b3dfbf25e6974725152aaa241dc4f821e060cf1565106a091cf2f8e53513be2d866a378279b4245e3fa3a7df20dae14ddd6484a443a6242d37c3c47f96e4ecd9e3c5e3657661a4e9eaab62373bbbafbace882b8471a2c7ea505dfcb7363efc7a8355305f8b5f39459791d", 0x72}], 0x4, 0x6, 0x1, 0x2) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x2008002, &(0x7f0000000080)={[{@noquota}]}, 0x4, 0x556, &(0x7f0000000980)="$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") bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="16000000000000a21200"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3, 0x0, 0x200000000200}, 0x18) syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x141341) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) sendto$inet(r0, &(0x7f0000000700)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff959bcecc7a95425a3a07e758044ab4ea6f7c555d88fecf90b037511bf746bec66ba", 0x994b6e03113064ae, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f0000001500)={0x0, 0xa, &(0x7f0000002200)=[{&(0x7f00000035c0)=""/4106, 0x200045ca}], 0x1, 0x0, 0x46, 0x407006}, 0x104) 31.85003055s ago: executing program 4 (id=1179): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_clone(0x90008000, &(0x7f0000000200)="3244b474af34baaada8de73f930b97a0aac3c102d83137cd5c32695fb84ed4af4bf0b783c033e44cf9c2f62303f70e58f70828dd3ab775", 0x37, &(0x7f0000000280), &(0x7f0000000700), &(0x7f0000000740)) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r1}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0xa0835c, &(0x7f0000000340)={[{@nojournal_checksum}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@dioread_nolock}, {@usrjquota}, {@oldalloc}, {@sysvgroups}]}, 0x2, 0x44a, &(0x7f0000000880)="$eJzs281vFOUfAPDvzLbl9+OtFfEFRK0SY+NLSwsqBy8aTTxgNNEDHuu2EMJCDa2JECLVGLyYGBI9G48m/gXevBj1ZOJV74aEKBfQU83MzsDuslsobHcr+/kkA8+z82yf57vPPDPPzLMbwMAaz/5JIrZGxG8RMVrPNhcYr/939fLZ6t+Xz1aTWFl5688kL3fl8tlqWbR835YiM5FGpJ8kRSXNFk+fOT5bq82fKvJTSyfem1o8febZYydmj84fnT85c/Dggf3TLzw/81xX4sziurL7w4U9u15758Lr1cMX3v3p26y9W4v9jXF0y3gW+F8rudZ9T3S7sj7b1pBOhvrYENakEhFZdw3n4380KnG980bj1Y/72jhgXWXXpk2ddy+vAHexJPrdAqA/ygt9dv9bbj2aemwIl16q3wBlcV8ttvqeoUiLMsMt97fdNB4Rh5f/+SrbYp2eQwAANPqs+uWheKbd/C+N+xvKbS/WUMYi4p6I2BER90bEzoi4LyIv+0BEPLjG+luXhm6c/6QXbyuwW5TN/14s1raa53/l7C/GKkVuWx7/cHLkWG1+X/GZTMTwpiw/vUod37/y6+ed9jXO/7Itq7+cCxbtuDjU8oBubnZpNp+UdsGljyJ2D7WLP7m2EpBExK6I2L22P729TBx76ps9nQrdPP5VdGGdaeXriCfr/b8cLfGXktXXJ6f+F7X5fVPlUXGjn385/2an+u8o/i7I+n9z8/HfWmQsaVyvXVx7Hed//7TjPc3tHv8jydv5+WikeO2D2aWlU9MRI8mhPN/0+sz195b5snwW/8Te9uN/R/GeLP6HIiI7iB+OiEci4tGi7Y9FxOMRsXeV+H98ufO+jdD/c23Pf9eO/5b+X3uicvyH7zrVf2v9fyBPTRSv5Oe/m7jVBt7JZwcAAAD/FWn+HfgknbyWTtPJyfp3+HfG5rS2sLj09JGF90/O1b8rPxbDafmka7Theeh0slz8xXp+pnhWXO7fXzw3/qLy/zw/WV2ozfU5dhh0WzqM/8wflX63Dlh37dbRZkb60BCg51rHf9qcPfdGLxsD9JTfa8Pgusn4T3vVDqD3XP9hcLUb/+da8tYC4O7k+g+Dy/iHwWX8w+Ay/mEg3cnv+iUGORHphmiGxDol+n1mAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6I5/AwAA///K8u7c") r3 = open_tree(0xffffffffffffff9c, 0x0, 0x1) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x800) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r4, 0x84, 0x1f, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000540)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@rand_addr=0x64010100, 0x4e21, 0x8000, 0x4e24, 0x0, 0xa, 0x80, 0x60}, {0xf3, 0x9, 0x3, 0x6, 0x8, 0x80, 0x3a, 0x7}, {0x1, 0xb82, 0x24, 0x6}, 0x7fff, 0x6e6bb7, 0x1, 0x0, 0x3, 0x3}, {{@in=@rand_addr=0x64010102, 0x4d4, 0x3c}, 0x2, @in6=@mcast2, 0x3507, 0x3, 0x1, 0xd, 0x8, 0x4e1d, 0x9}}, 0xe8) setuid(0xee01) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x1ee, 0x0, 0x0, 0x4, 0x0) r6 = syz_pidfd_open(r5, 0x0) pidfd_send_signal(r6, 0x2, 0x0, 0x0) 31.66499262s ago: executing program 4 (id=1184): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0xfffffffffffbfffd}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={&(0x7f0000000300)={0x38, r2, 0x1, 0x8008000, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x4}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}]}]}, 0x38}}, 0x4000) 31.401298848s ago: executing program 4 (id=1192): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000280), 0x0, 0x0, 0x0, 0xfffffffffffffffc) add_key$fscrypt_v1(&(0x7f0000000000), 0x0, &(0x7f0000000180)={0x0, "24f593dd3001f9e44bc11e57b90cfd2b9097d8f23b5908bec2176075de954a8b1fe538e0e81ee12c3179201a06b92b360e2409d87fcbfc6dd4a85d4424b6e17f", 0x30}, 0x48, r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000090000000006fffff300000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000340)={'syztnl1\x00', &(0x7f00000000c0)={'syztnl1\x00', 0x0, 0x29, 0x5, 0xd1, 0x300000, 0x4, @dev={0xfe, 0x80, '\x00', 0x28}, @mcast2, 0x8000, 0x700, 0xfff0000, 0x9}}) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="1801000000000000f8ffffffffffe90485000000500cca6ac739e402fb62d97bce00000400"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r4, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) 31.353860738s ago: executing program 36 (id=1192): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000280), 0x0, 0x0, 0x0, 0xfffffffffffffffc) add_key$fscrypt_v1(&(0x7f0000000000), 0x0, &(0x7f0000000180)={0x0, "24f593dd3001f9e44bc11e57b90cfd2b9097d8f23b5908bec2176075de954a8b1fe538e0e81ee12c3179201a06b92b360e2409d87fcbfc6dd4a85d4424b6e17f", 0x30}, 0x48, r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000090000000006fffff300000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000340)={'syztnl1\x00', &(0x7f00000000c0)={'syztnl1\x00', 0x0, 0x29, 0x5, 0xd1, 0x300000, 0x4, @dev={0xfe, 0x80, '\x00', 0x28}, @mcast2, 0x8000, 0x700, 0xfff0000, 0x9}}) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="1801000000000000f8ffffffffffe90485000000500cca6ac739e402fb62d97bce00000400"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r4, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) 21.095599886s ago: executing program 8 (id=1337): socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000000)={0x18, 0x0, {0x2, @broadcast, 'macvlan1\x00'}}, 0x1e) write$binfmt_aout(r1, &(0x7f0000001640)=ANY=[], 0x5ea) 21.053824646s ago: executing program 8 (id=1338): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000280)='netlink_extack\x00', r0}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) r2 = eventfd2(0x0, 0x0) readv(r2, &(0x7f00000005c0)=[{0x0}, {&(0x7f0000000540)=""/115, 0x73}, {&(0x7f00000004c0)=""/10, 0xa}, {&(0x7f0000000740)=""/156, 0x9c}], 0x4) write$eventfd(r2, &(0x7f0000000280)=0x9, 0x8) 20.927829266s ago: executing program 8 (id=1345): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x3ff, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r4, 0x404c534a, &(0x7f0000000040)) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x64, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r5}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f00000006c0), 0x1, 0x512, &(0x7f0000000c40)="$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") acct(&(0x7f0000000200)='./file1\x00') r6 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r6, 0x7, 0x0, 0x0, 0x0) 20.619084864s ago: executing program 8 (id=1351): syz_clone(0x200, &(0x7f00000001c0)="5bca4612ab9981e6b4671298b603001d324e2b614bd6ebb6033977ce1baf95269ad14be49a5b9f950b8cba91cb4e6576dcf69117d9efc618d635fd04d561a932d1cd13af539849f927e49e1e0edbb0fa50040a63ba8eabb133f4cf9f3d2b7b1d46aab92a147163ed2abbe74d31482c75ec5235a2f49004eef3d19352e2af47d07916a2a7341dfe86fe76a7930be1c3274159da9ae52060783d086cc5729398c65e614e02389bb68c5f92d5faa9a09bb458e8", 0xb2, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)="86534a388d564df6ce51ace4947685249694403e21b0efbd8616b9822ef52f694d5d434c5ac9097634789f43083dfca71a48c66faaee29ccb275155fdd6f4bf5bf2fcec4ca67a74e41d50f80ec5740270405762719d6c632297093730339fbcf0140683826d246ea56ae20c5f46f80369907859595d1ea262dbd816f96aa1aba689a05687136a783c8c112bfbc3c19c3f872a7364fca71d5931d4102") bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000010c0)={[{@shortname_win95}, {@numtail}, {@shortname_win95}, {@shortname_lower}, {@shortname_win95}, {@fat=@uid}, {@uni_xlate}, {@fat=@dos1xfloppy}, {@rodir}, {@shortname_winnt}, {@rodir}, {@utf8no}, {@uni_xlate}, {@uni_xlateno}, {@rodir}, {@fat=@nfs}]}, 0xf6, 0x2f5, &(0x7f0000002300)="$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") r0 = syz_io_uring_setup(0x24f5, &(0x7f0000000780)={0x0, 0xfffffffd, 0x10100, 0x3}, &(0x7f0000000100)=0x0, &(0x7f0000000800)=0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec8500000050000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000300)='kfree\x00', r3}, 0x18) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_SENDMSG={0x9, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000440)={&(0x7f0000000340)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x0, {0x2, 0x0, @multicast1}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000480)="10ab119b497ad23a1c1142ce24b27ffa12477294d5f95fbf8890c08a1c7a02944cf58f9e6725ddafac32a98ed3ec927d19a01a193c99058915996d97a79d6e364c97cd620d3e639b4374dae2de1c616415fbc228c3f6bbaacf237291ea1c763bc9f9405da6d699a83194b49c8848fe72407cbcd06881dbc687e9a9967c4031632fbbb883db18c6b0c40a546715fa886040c2", 0x5d}], 0x100000000000000f}, 0x0, 0x80840, 0x1}) io_uring_enter(r0, 0x11d30, 0x0, 0x0, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000001b40)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@journal_dev={'journal_dev', 0x3d, 0x8000}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x8}}, {@oldalloc}, {@resgid}, {@nomblk_io_submit}, {@usrjquota}]}, 0x5, 0x44e, &(0x7f0000000880)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r5, 0x401c5820, &(0x7f0000000200)={0x71e5b317, 0x800000, 0x0, 0xfffffffc, 0x40001000}) setxattr$trusted_overlay_upper(&(0x7f0000000300)='./file0\x00', &(0x7f0000000240), &(0x7f0000000000)=ANY=[], 0xff27, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000280)={{0x1, 0x1, 0x18, r4, {0x3}}, './file0\x00'}) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000001080), 0x1, 0x4e2, &(0x7f0000000b80)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x14a) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) pwrite64(r6, &(0x7f00000005c0)='\"', 0x1, 0x4fed0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r8}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r7}, &(0x7f0000000380), &(0x7f00000003c0)=r8}, 0x20) lsetxattr$security_capability(&(0x7f0000000080)='./cgroup/cgroup.procs\x00', &(0x7f0000000240), &(0x7f00000002c0)=@v3={0x3000000, [{0x1, 0x9}, {0x2, 0xffffffc0}]}, 0x18, 0x0) lchown(&(0x7f0000000000)='./cgroup/cgroup.procs\x00', 0x0, 0x0) sendfile(r6, r6, 0x0, 0xe3aa6ea) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r9, 0x0, 0x0) flistxattr(r6, &(0x7f0000000180)=""/64, 0x40) r10 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r10, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3) 19.685380002s ago: executing program 8 (id=1368): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) fallocate(r1, 0x0, 0x0, 0x2c2) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x2, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0800000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) unshare(0x26020480) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, @void, @value}, 0x94) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000001000000100002800c000180080001000300000004000180"], 0x28}}, 0x0) 18.643838078s ago: executing program 8 (id=1387): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000ed7f0000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0xfffffffffffbfffd}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={&(0x7f0000000300)={0x38, r2, 0x1, 0x8008000, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x4}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}]}]}, 0x38}}, 0x4000) 18.643639859s ago: executing program 37 (id=1387): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000ed7f0000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0xfffffffffffbfffd}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={&(0x7f0000000300)={0x38, r2, 0x1, 0x8008000, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x4}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}]}]}, 0x38}}, 0x4000) 1.404528885s ago: executing program 9 (id=1775): perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x3d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x62000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x100000, 0x0, 0x0, 0x6, 0x3, 0x2, 0x4, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES16=r0, @ANYBLOB="0100000000000000000009000000440003800800010002000000140002007663616e300000000000000000000000080003"], 0x58}}, 0x0) 1.199412184s ago: executing program 3 (id=1779): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_timeval(r1, 0x1, 0x42, &(0x7f0000000100)={0x0, 0x2710}, 0x10) listen(r1, 0x0) accept$inet6(r1, 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4c000000100003040400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006970766c616e00000c000280060001000200000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4], 0x4c}, 0x1, 0xba01}, 0x810) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005800000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x18) 1.156884144s ago: executing program 9 (id=1780): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b0000000500000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000170000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000feffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000200)='kmem_cache_free\x00', r1}, 0x10) creat(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = dup(r3) write$P9_RLERRORu(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="5300000007000046009d40edce82cd28e1e1edab51", @ANYBLOB='Nd'], 0x53) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x2004000, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[], [], 0x6b}}) 1.141011014s ago: executing program 9 (id=1781): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r1 = gettid() r2 = socket$inet6(0xa, 0x2, 0x3a) sendto$inet6(r2, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000001100)={0xa, 0x0, 0x0, @loopback}, 0x1c) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) r3 = fsopen(&(0x7f0000000c00)='devpts\x00', 0x0) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x7f, 0x7ffc0002}]}) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f00000001c0)='syz_tun\x00', 0x10) set_mempolicy_home_node(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x80) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1600000000000000237828ff9b36e21b2dfbf3e3", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r5}, 0x10) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r8 = dup(r7) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r6, @ANYBLOB=',wfdno=', @ANYRESHEX=r8]) fsconfig$FSCONFIG_SET_FD(r3, 0x5, 0x0, 0x0, 0xffffffffffffffff) futex(0x0, 0xd, 0x0, 0x0, 0x0, 0x0) io_setup(0x7, &(0x7f0000000000)=0x0) io_pgetevents(r9, 0xffffffffffff8000, 0x3, &(0x7f0000000080)=[{}, {}, {}], &(0x7f0000000100)={0x77359400}, 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000)=0x2000000, 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0xfffffffffffffd3e, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r10}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000014a00)={0x1, &(0x7f00000149c0)=[{0x9, 0x5, 0xff, 0x3ff}]}) 1.107438754s ago: executing program 7 (id=1782): r0 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39ddd8) write$binfmt_elf32(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="5402"], 0x69) close(r0) r1 = socket$inet6(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r3}, 0x10) sendto$inet6(r1, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000640)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0xfff, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffff30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a, @void, @value}, 0x94) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) socket$tipc(0x1e, 0x2, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events.local\x00', 0x275a, 0x0) syz_io_uring_setup(0x5011, &(0x7f0000000100)={0x0, 0xa227, 0x100, 0x1, 0x2c4, 0x0, r5}, &(0x7f0000000180), &(0x7f00000001c0)) sigaltstack(&(0x7f0000000040)={&(0x7f0000001900)=""/4095, 0x80000001, 0xffffffffffffffa7}, 0x0) 1.032924473s ago: executing program 7 (id=1783): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000e4000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, @void, @value}, 0xad) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f00000008c0)='tlb_flush\x00', r1}, 0x18) syz_clone(0xc0001480, 0x0, 0x0, &(0x7f0000000a00), 0x0, 0x0) 965.817283ms ago: executing program 7 (id=1784): r0 = socket$igmp(0x2, 0x3, 0x2) sendmsg$sock(r0, &(0x7f0000001680)={&(0x7f0000000100)=@l2tp={0x2, 0x0, @multicast2, 0x2}, 0x80, 0x0, 0x0, &(0x7f0000001640)=[@mark={{0x10, 0x1, 0x24, 0xfffffffc}}], 0x10}, 0x4000000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f0000000380)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x33, 0x0, @private, @broadcast}, {0x0, 0x0, 0x8}}}}}, 0x0) 941.881233ms ago: executing program 3 (id=1785): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000202300800000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_emit_ethernet(0x76, &(0x7f00000002c0)={@local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010100, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x2c, 0x0, {0x13, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @private, @local, {[@cipso={0x86, 0x26, 0x1, [{0x6, 0x2}, {0x0, 0x2}, {0x0, 0xa, "ffd11634eea26b0f"}, {0x0, 0x9, "02a20948fd7406"}, {0x0, 0x9, "ccf0294e2a3bdb"}]}, @lsrr={0x83, 0xf, 0xd4, [@private=0xa010100, @dev={0xac, 0x14, 0x14, 0x42}, @empty]}]}}}}}}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000006c0)='kmem_cache_free\x00'}, 0x10) socket$nl_audit(0x10, 0x3, 0x9) 939.992093ms ago: executing program 7 (id=1786): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000e4000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000001c0)='sched_switch\x00'}, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, @void, @value}, 0xad) syz_clone(0xc0001480, 0x0, 0x0, &(0x7f0000000a00), 0x0, 0x0) 927.151283ms ago: executing program 6 (id=1787): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000ed7f0000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={&(0x7f0000000300)={0x38, r1, 0x1, 0x8008000, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x4}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}]}]}, 0x38}}, 0x4000) 905.213113ms ago: executing program 6 (id=1788): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000c80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f00000001c0)=@nullb, 0x0, &(0x7f0000000600)='./file0\x00') pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000240)="f8aed027aed069669df61988aa62ffa253ec86a8183ac1f128e9a1aa404593474f3b8fc835cc49fd2ae9c19ff5cf8787ca5f96ab76e849a7f190cf3d56b5a20b7a9756fef5f2cf9aa7d7c0c5d2d938444b7a9c64578ac84c20dee568767a3955d2ca80db58910e1231c967872c4f9e98bd12b405a516c64823563ce711ce2a8df4830f7502d8871ce7b78b710f83996c528a60bae7b8d4756bb3", 0x9a}, {&(0x7f0000000300)="da1a8a23cf778e36757ea12e5c5fd391c284d48fae025bda8b0bd09c71816b58562a47946f9f1f26ba3b2de9e90bf80d78830f391db94148de646d7f5cb32935362fc7a56b8215c18005ff7aaa20b8871ed330d1e229e25ec2fde8ff364175974d3c5975bf58b38a09822ef3e104fa6df526a353277576b0fb5119a22833abd0715c1c79f4de3d", 0x87}, {&(0x7f0000000180)}, {&(0x7f00000003c0)="ed86f2b11782368b3dfbf25e6974725152aaa241dc4f821e060cf1565106a091cf2f8e53513be2d866a378279b4245e3fa3a7df20dae14ddd6484a443a6242d37c3c47f96e4ecd9e3c5e3657661a4e9eaab62373bbbafbace882b8471a2c7ea505dfcb7363efc7a8355305f8b5f39459791d", 0x72}], 0x4, 0x6, 0x1, 0x2) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="16000000000000a21200"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', 0xffffffffffffffff, 0x0, 0x200000000200}, 0x18) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) sendto$inet(r0, &(0x7f0000000700)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff959bcecc7a95425a3a07e758044ab4ea6f7c555d88fecf90b037511bf746bec66ba", 0x994b6e03113064ae, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f0000001500)={0x0, 0xa, &(0x7f0000002200)=[{&(0x7f00000035c0)=""/4106, 0x200045ca}], 0x1, 0x0, 0x46, 0x407006}, 0x104) 901.092003ms ago: executing program 3 (id=1789): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x2010480, &(0x7f00000001c0), 0x45, 0x76a, &(0x7f0000000fc0)="$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") socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0xb, &(0x7f0000000000), 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x4000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r5}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) prctl$PR_SET_THP_DISABLE(0x29, 0x0) pwritev2(r0, &(0x7f0000000140)=[{&(0x7f0000000080)="ff", 0x1}], 0x1, 0x5405, 0x0, 0x0) 859.134773ms ago: executing program 3 (id=1790): socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000073000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000000)={0x18, 0x0, {0x2, @broadcast, 'macvlan1\x00'}}, 0x1e) write$binfmt_aout(r1, &(0x7f0000001640)=ANY=[], 0x5ea) 844.335263ms ago: executing program 7 (id=1791): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b000000050000000100010009"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000170000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000feffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000200)='kmem_cache_free\x00', r1}, 0x10) creat(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = dup(r3) write$P9_RLERRORu(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="5300000007000046009d40edce82cd28e1e1edab51", @ANYBLOB='Nd'], 0x53) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x2004000, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[], [], 0x6b}}) 842.621383ms ago: executing program 3 (id=1792): creat(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000300)=ANY=[@ANYBLOB], 0x53) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x2004000, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x6b}}) 816.397703ms ago: executing program 7 (id=1793): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x140, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r3, 0xc018937e, &(0x7f0000001040)={{0x1, 0x1, 0x1018}, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00'}) write$sndseq(r2, &(0x7f0000000100)=[{0x7, 0x8, 0xff, 0x10, @tick=0x6, {0xc0, 0x80}, {0x6, 0x38}, @raw32={[0x101, 0x5]}}, {0x47, 0x8, 0x8e, 0x4, @tick=0xd, {0x81, 0x5}, {0x1, 0xfd}, @connect={{0x5, 0xa9}, {0x5, 0x4}}}], 0x38) ioctl$SG_SET_KEEP_ORPHAN(r1, 0x2287, 0x0) r4 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r4, 0x10f, 0x81, &(0x7f0000000280)=0x2, 0x4) sendmsg$tipc(r4, &(0x7f0000001680)={&(0x7f0000000000)=@id, 0x10, 0x0}, 0x0) connect$tipc(r4, &(0x7f0000000140)=@name, 0x10) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$usbfs(0x0, 0x1, 0x2c0303) ioperm(0x2, 0xcd, 0x8) unshare(0x2040400) gettid() prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYRES64=r0], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='kmem_cache_free\x00', r6}, 0x18) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) set_mempolicy_home_node(&(0x7f0000349000/0xa000)=nil, 0xa000, 0x0, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) readv(r7, &(0x7f0000001340)=[{&(0x7f00000000c0)=""/166, 0xa6}], 0x1) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) recvmmsg(0xffffffffffffffff, &(0x7f0000000580)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000880)=""/89, 0x59}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}}, {{&(0x7f0000000300)=@xdp, 0x80, &(0x7f0000000480)=[{&(0x7f00000006c0)=""/134, 0x86}], 0x1}, 0xfffffffb}], 0x2, 0x0, &(0x7f0000003700)={0x77359400}) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8916, &(0x7f00000001c0)={'lo\x00', {0x2, 0x0, @private=0xa010101}}) 762.881253ms ago: executing program 3 (id=1794): io_uring_setup(0x4f01, &(0x7f0000000180)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) flock(r0, 0x5) socket$kcm(0x10, 0x2, 0x4) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000280)="fe112162c63e6da8bc8432294ef18af53cc330a62a2c7035246635093ba4d30fcf19a90804f04a10939db8f4e13069cda6", 0x31}], 0x1}, 0x200400c4) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1030, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x1c1341, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETSTEERINGEBPF(r5, 0x800454e0, &(0x7f0000001340)=r3) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r7 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r6, @ANYBLOB="00000000100000001c001a80080002802d00", @ANYRES16=r1, @ANYRES32=r7], 0x44}}, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) flock(r8, 0x2) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/locks\x00', 0x0, 0x0) preadv(r9, &(0x7f0000000000)=[{&(0x7f0000000080)=""/4094, 0xffe}], 0x1, 0x0, 0x0) 554.306952ms ago: executing program 6 (id=1797): r0 = socket$igmp(0x2, 0x3, 0x2) sendmsg$sock(r0, &(0x7f0000001680)={&(0x7f0000000100)=@l2tp={0x2, 0x0, @multicast2, 0x2}, 0x80, 0x0, 0x0, &(0x7f0000001640)=[@mark={{0x10, 0x1, 0x24, 0xfffffffc}}], 0x10}, 0x4000000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f0000000380)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x33, 0x0, @private, @broadcast}, {0x0, 0x0, 0x8}}}}}, 0x0) 536.039172ms ago: executing program 6 (id=1798): socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00'}) syz_genetlink_get_family_id$net_dm(&(0x7f0000000180), 0xffffffffffffffff) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={0x0, r0}, 0x18) ptrace$ARCH_SHSTK_LOCK(0x1e, 0xffffffffffffffff, 0x1, 0x5003) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7d2}) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) 461.426802ms ago: executing program 0 (id=1801): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x2010480, &(0x7f00000001c0), 0x45, 0x76a, &(0x7f0000000fc0)="$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") socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0xb, &(0x7f0000000000), 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x4000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r5}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) prctl$PR_SET_THP_DISABLE(0x29, 0x0) pwritev2(r0, &(0x7f0000000140)=[{&(0x7f0000000080)="ff", 0x1}], 0x1, 0x5405, 0x0, 0x0) 422.671852ms ago: executing program 0 (id=1802): socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000073000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000000)={0x18, 0x0, {0x2, @broadcast, 'macvlan1\x00'}}, 0x1e) write$binfmt_aout(r1, &(0x7f0000001640)=ANY=[], 0x5ea) 410.781291ms ago: executing program 6 (id=1803): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b000000050000000100010009"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000170000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000feffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000200)='kmem_cache_free\x00', r1}, 0x10) creat(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = dup(r3) write$P9_RLERRORu(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="5300000007000046009d40edce82cd28e1e1edab51", @ANYBLOB='Nd'], 0x53) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x2004000, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[], [], 0x6b}}) 392.136141ms ago: executing program 0 (id=1804): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$inet_sctp(0x2, 0x5, 0x84) close(r1) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) sendmsg$inet_sctp(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000640)="be", 0x1}], 0x1, &(0x7f00000000c0)=[@sndinfo={0x20, 0x84, 0x2, {0x6, 0x4, 0x28, 0x200000b, r3}}], 0x20, 0x6044}, 0x6) 391.515911ms ago: executing program 6 (id=1805): syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x2010000, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x25, 0x334, &(0x7f0000000c00)="$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") sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0xa845, 0x83) memfd_secret(0x80000) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000013c0)={0x6, 0x3, &(0x7f0000000100)=@framed, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r4, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 331.444831ms ago: executing program 0 (id=1806): r0 = socket$igmp(0x2, 0x3, 0x2) sendmsg$sock(r0, &(0x7f0000001680)={&(0x7f0000000100)=@l2tp={0x2, 0x0, @multicast2, 0x2}, 0x80, 0x0, 0x0, &(0x7f0000001640)=[@mark={{0x10, 0x1, 0x24, 0xfffffffc}}], 0x10}, 0x4000000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f0000000380)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x33, 0x0, @private, @broadcast}, {0x0, 0x0, 0x8}}}}}, 0x0) 314.362711ms ago: executing program 0 (id=1807): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9fd}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'gre0\x00'}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000500000002"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000010007b8bf8ff00000000bfa20000000000357ab9260007020000f8ffffffb703000008000000b7040000000000008500000001000000950e6972fc2193cf20dc744e178b7e05e0bc61df52ede83bfd3e4232abfd"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000006c0)='find_free_extent\x00', r1}, 0x18) r2 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000680)={'ip6erspan0\x00'}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) unshare(0x400) r3 = syz_open_dev$evdev(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) ioctl$EVIOCGMASK(r3, 0x400445a0, 0x0) semget$private(0x0, 0x20000000102, 0x0) creat(0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r4 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x550, 0x1c0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x480, 0xffffffff, 0xffffffff, 0x480, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x81, 0x0, 0x24, 0x0, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x298, 0x2c0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0xc801, 0x1, 0x0, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x1c8, 0x4, 0x0, 'syz0\x00'}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000000)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYRESOCT], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89f1, &(0x7f0000000080)) r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x3a8, 0x200, 0x43, 0xa0, 0x0, 0x98, 0x310, 0x178, 0x178, 0x310, 0x178, 0x49, 0x0, {[{{@ip={@empty=0x5107, @multicast2, 0x0, 0x0, 'veth0_to_bond\x00', 'ip6erspan0\x00', {0xff}, {0xff}, 0x9}, 0x12a, 0x1a0, 0x200, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x8, 0x0, 0x4, 0x0, 'syz0\x00'}}, @common=@unspec=@connbytes={{0x38}, {[{}, {0xe}], 0x656f58eaf9a1c793}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x2, [0x0, 0x0, 0x6, 0x4, 0x1, 0x5], 0x11, 0x2}, {0x4, [0x1, 0x1, 0x1, 0x0, 0x0, 0x1], 0x5, 0x4}}}}, {{@uncond, 0x0, 0xe0, 0x110, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x2}}, @common=@unspec=@connlimit={{0x40}, {[0xffffff00, 0xff, 0xffffff00, 0xff000000], 0x3, 0x1, {0x4413}}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x0, 0x5, 0x8}, {0x1, 0x4, 0x5}, 0xb}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x408) pwritev(r6, &(0x7f00000001c0)=[{&(0x7f0000000280)="be", 0x7ffff000}, {0x0, 0x141}], 0x2, 0x0, 0x0) 230.602991ms ago: executing program 9 (id=1808): r0 = socket$inet_smc(0x2b, 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) creat(0x0, 0x0) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$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") fallocate(0xffffffffffffffff, 0x1, 0x0, 0x1001f0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x143042, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) pwritev2(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)}], 0x1, 0xe7b, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r2}, 0x0, &(0x7f0000000040)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) setsockopt$CAN_RAW_RECV_OWN_MSGS(0xffffffffffffffff, 0x65, 0x4, &(0x7f0000000040), 0x4) ioctl$sock_SIOCETHTOOL(r0, 0x8943, &(0x7f0000001980)={'macvtap0\x00', 0x0}) 209.553431ms ago: executing program 0 (id=1809): perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x3d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x62000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x100000, 0x0, 0x0, 0x6, 0x3, 0x2, 0x4, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='X\x00', @ANYRES16=r0, @ANYBLOB="0100000000000000000009000000440003800800010002000000140002007663616e300000000000000000000000080003"], 0x58}}, 0x0) 189.389961ms ago: executing program 9 (id=1810): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000003c0)=ANY=[@ANYRESDEC=r1, @ANYRESHEX=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00'/20, @ANYRES32=0x0, @ANYBLOB="0305000000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4, @ANYBLOB], 0x44}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002078316e00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000006000000850000000500000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x10) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x2010008, &(0x7f0000000180), 0x0, 0x532, &(0x7f0000000f40)="$eJzs3c9vI1cdAPDvOHE22c02KXCASi2FFmUrWDtpaBtxKEVCcKqEKPclJE4UxYmj2Gk3UQXZvwAJIUDiBBcuSPwBSGglLhwRUiU4g1QEQrAFCQ6wg2yPk+CME+/ijfPj85Fm5703nvl+nzdvPDMejQO4sp6PiDci4mGapi9FxFTWXsim2G9Pzdd98ODdpeaURJq+9dckkqyts60km9/IVhuPiK9+OeIbyfG49d299cVqtbKd1cuNja1yfXfv9trG4mpltbI5Pz/36sJrC68szA6knzcj4vUv/vF73/7Jl17/xWfe+cOdP9/6ZjOtyWz50X48otGTFra7Xrw23rXC9mMGO4+a/Sl2KhP9rXPvCeYDAEBvzWP8D0XEJyPipZiKkZMPZwEAAIALKP38ZPw7iUjzjfVoBwAAAC6QQuse2KRQyu4FmIxCoVRq38P7kbheqNbqjU+v1HY2l9v3yk5HsbCyVq3MZvcKT0cxadbnWuXD+std9fmIeDoivjs10aqXlmrV5WFf/AAAAIAr4kbX+f8/ptrn/7lGzjg5AAAAYHCmh50AAAAA8MQ5/wcAAIDLz/k/AAAAXGpfefPN5pR2fv96+e3dnfXa27eXK/X10sbOUmmptr1VWq3VVlvP7Ns4bXvVWm3rs7G5c7fcqNQb5fru3p2N2s5m485ajJ9JhwAAAIBjnv74/d8lEbH/uYnW1DQ27KSAMzF6UEqyec7o//1T7fn7Xe2eBwoXWj9D+P1r+e2OE+BiG+1u6DHWgcunOOwEgKFLTlne8+adX2fzTww2HwAAYPBmPpb//X/h1DX3T38JcK4ZxHB1dX3/l04NKxHgzLXGf7838jhYgEul6CZeuPL+7+//T5Wmj5QQAAAwcJOtKSmUsst7k1EolEoRN1s/C1BMVtaqldmIeCoifjtVvNasz7XWTE49ZwAAAAAAAAAAAAAAAAAAAAAAAAAA2tI0iRQAAAC41CIKf0p+2X6W/8zUi5Pd1wfGkn+1fhJ4LCLe+eFb37+72GhszzXb/3bQ3vhB1v7yMK5gAAAAAN065+mt+T+HnQ0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAl80HD95d6kx9vHxiUHH/8oWImM6LPxrjrfl4FCPi+t+TGD2yXhIRIwOIv38vIj6aFz9ppnUQMi/+IN6EU+LHdPYu5MW/MYD4cJXdb+5/3sgbf4V4vjXPH3+jEf9Tf1y9939xsP8b6TH+b/YZ45n3flbuGf9exDOj+fufTvykR/wX+oz/9a/t7fValv4oYqbz+dPa4x2NcFgqNza2yvXdvdtrG4urldXK5vz83KsLry28sjBbXlmrVrJ/c2N859mfPzyp/9dzP/+SLJve/X8xZ3t5n0n/ee/ugw93KvvH4996ISf+r36cveJ4/EIW51NZubl8plPeb5ePeu6nv3nupP4vH/a/+Cj//7d6bbTbsYHybL9/OgDAE1Df3VtfrFYr25e20DxLPwdpKJzDwrcGusE0TdPmmMpZdD8i+tlOEgPuaSE/n8NCzz3AsPdMAADAoB0e9A87EwAAAAAAAAAAAAAAAAAAALi6zuIpa90xDx+BnAziEdoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPx3wAAAP//WcnUAQ==") 0s ago: executing program 9 (id=1811): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000ed7f0000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={&(0x7f0000000300)={0x38, r1, 0x1, 0x8008000, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x4}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}]}]}, 0x38}}, 0x4000) kernel console output (not intermixed with test programs): am0 (unregistering): Port device team_slave_0 removed [ 110.634702][ T6509] hsr_slave_0: entered promiscuous mode [ 110.642247][ T6509] hsr_slave_1: entered promiscuous mode [ 110.648834][ T6509] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 110.656525][ T6509] Cannot create hsr debugfs directory [ 110.672638][ T6621] bridge0: port 3(ipvlan2) entered blocking state [ 110.679393][ T6621] bridge0: port 3(ipvlan2) entered disabled state [ 110.687934][ T6621] ipvlan2: entered allmulticast mode [ 110.693369][ T6621] bridge0: entered allmulticast mode [ 110.699337][ T6621] ipvlan2: left allmulticast mode [ 110.704388][ T6621] bridge0: left allmulticast mode [ 110.770613][ T6509] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 110.780402][ T6509] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 110.789792][ T6509] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 110.804429][ T6509] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 110.852359][ T6509] 8021q: adding VLAN 0 to HW filter on device bond0 [ 110.882543][ T6509] 8021q: adding VLAN 0 to HW filter on device team0 [ 110.911972][ T376] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.919162][ T376] bridge0: port 1(bridge_slave_0) entered forwarding state [ 110.924944][ T6627] loop4: detected capacity change from 0 to 2048 [ 110.934632][ T376] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.941783][ T376] bridge0: port 2(bridge_slave_1) entered forwarding state [ 110.968875][ T6627] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 111.013568][ T6509] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 111.192331][ T6649] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 111.207784][ T6649] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 1 with error 28 [ 111.220199][ T6649] EXT4-fs (loop4): This should not happen!! Data will be lost [ 111.220199][ T6649] [ 111.229980][ T6649] EXT4-fs (loop4): Total free blocks count 0 [ 111.236120][ T6649] EXT4-fs (loop4): Free/Dirty block details [ 111.242124][ T6649] EXT4-fs (loop4): free_blocks=2415919104 [ 111.247910][ T6649] EXT4-fs (loop4): dirty_blocks=16 [ 111.253034][ T6649] EXT4-fs (loop4): Block reservation details [ 111.259063][ T6649] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 111.315261][ T6651] qrtr: Invalid version 0 [ 111.461920][ T6509] veth0_vlan: entered promiscuous mode [ 111.520364][ T6509] veth1_vlan: entered promiscuous mode [ 111.787841][ T29] kauditd_printk_skb: 820 callbacks suppressed [ 111.787857][ T29] audit: type=1326 audit(1738217130.597:5748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6661 comm="syz.7.1111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6599aecd29 code=0x7ffc0000 [ 111.817889][ T29] audit: type=1326 audit(1738217130.597:5749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6661 comm="syz.7.1111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f6599aecd29 code=0x7ffc0000 [ 111.841431][ T29] audit: type=1326 audit(1738217130.597:5750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6661 comm="syz.7.1111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f6599aecd63 code=0x7ffc0000 [ 111.881900][ T6662] loop7: detected capacity change from 0 to 512 [ 111.898152][ T6662] EXT4-fs: Ignoring removed i_version option [ 111.904193][ T6662] EXT4-fs: Ignoring removed mblk_io_submit option [ 111.946625][ T6662] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 111.978276][ T29] audit: type=1326 audit(1738217130.687:5751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6661 comm="syz.7.1111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f6599aeb7df code=0x7ffc0000 [ 112.001793][ T29] audit: type=1326 audit(1738217130.687:5752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6661 comm="syz.7.1111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f6599aecdb7 code=0x7ffc0000 [ 112.025237][ T29] audit: type=1326 audit(1738217130.687:5753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6661 comm="syz.7.1111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6599aeb690 code=0x7ffc0000 [ 112.027764][ T6509] veth0_macvtap: entered promiscuous mode [ 112.048655][ T29] audit: type=1326 audit(1738217130.687:5754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6661 comm="syz.7.1111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6599aec92b code=0x7ffc0000 [ 112.070050][ T6509] veth1_macvtap: entered promiscuous mode [ 112.077667][ T29] audit: type=1326 audit(1738217130.707:5755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6661 comm="syz.7.1111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f6599aeb98a code=0x7ffc0000 [ 112.090452][ T6509] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 112.106678][ T29] audit: type=1326 audit(1738217130.707:5756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6661 comm="syz.7.1111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f6599aeb98a code=0x7ffc0000 [ 112.117098][ T6509] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.140437][ T29] audit: type=1326 audit(1738217130.707:5757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6661 comm="syz.7.1111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f6599aeb597 code=0x7ffc0000 [ 112.150197][ T6509] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 112.184290][ T6509] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.194170][ T6509] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 112.201217][ T6662] EXT4-fs (loop7): 1 truncate cleaned up [ 112.204820][ T6509] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.212360][ T6662] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 112.220356][ T6509] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 112.242926][ T6509] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.253475][ T1707] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 112.254147][ T6509] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 112.279101][ T6274] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.291100][ T6509] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 112.301735][ T6509] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.311628][ T6509] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 112.322105][ T6509] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.332049][ T6509] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 112.342519][ T6509] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.352554][ T6509] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 112.363309][ T6509] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.366720][ T6671] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1114'. [ 112.374681][ T6509] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 112.393506][ T6509] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.394600][ T6671] SELinux: policydb version 280 does not match my version range 15-34 [ 112.402400][ T6509] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.402437][ T6509] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.402489][ T6509] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.441671][ T6671] SELinux: failed to load policy [ 112.506036][ T6675] sctp: [Deprecated]: syz.7.1114 (pid 6675) Use of int in maxseg socket option. [ 112.506036][ T6675] Use struct sctp_assoc_value instead [ 112.716348][ T6693] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1121'. [ 112.735684][ T6691] bridge0: port 3(ipvlan2) entered blocking state [ 112.742371][ T6691] bridge0: port 3(ipvlan2) entered disabled state [ 112.758951][ T6691] ipvlan2: entered allmulticast mode [ 112.762600][ T6697] loop0: detected capacity change from 0 to 512 [ 112.764357][ T6691] bridge0: entered allmulticast mode [ 112.764864][ T6691] ipvlan2: left allmulticast mode [ 112.772638][ T6697] EXT4-fs: Ignoring removed i_version option [ 112.775984][ T6691] bridge0: left allmulticast mode [ 112.781057][ T6697] EXT4-fs: Ignoring removed mblk_io_submit option [ 112.801276][ T6697] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 112.813346][ T6697] EXT4-fs (loop0): 1 truncate cleaned up [ 112.820129][ T6697] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 112.850525][ T3297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.901563][ T6702] vlan0: entered allmulticast mode [ 112.912914][ T6702] bond0: entered allmulticast mode [ 112.918141][ T6702] bond_slave_0: entered allmulticast mode [ 112.923915][ T6702] bond_slave_1: entered allmulticast mode [ 112.941704][ T6702] bond0: left allmulticast mode [ 112.946742][ T6702] bond_slave_0: left allmulticast mode [ 112.952224][ T6702] bond_slave_1: left allmulticast mode [ 113.434436][ T6712] xt_HMARK: spi-set and port-set can't be combined [ 113.441097][ T6746] wireguard0: entered promiscuous mode [ 113.446747][ T6746] wireguard0: entered allmulticast mode [ 113.664897][ T6757] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1146'. [ 113.841394][ T6772] loop8: detected capacity change from 0 to 2048 [ 113.867840][ T6772] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 113.961188][ T6776] qrtr: Invalid version 0 [ 114.002892][ T6779] loop7: detected capacity change from 0 to 2048 [ 114.016598][ T6779] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 114.062075][ T6274] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.091183][ T6782] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 114.106316][ T6782] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 1 with error 28 [ 114.118619][ T6782] EXT4-fs (loop8): This should not happen!! Data will be lost [ 114.118619][ T6782] [ 114.128351][ T6782] EXT4-fs (loop8): Total free blocks count 0 [ 114.134360][ T6782] EXT4-fs (loop8): Free/Dirty block details [ 114.140712][ T6782] EXT4-fs (loop8): free_blocks=2415919104 [ 114.146472][ T6782] EXT4-fs (loop8): dirty_blocks=16 [ 114.151671][ T6782] EXT4-fs (loop8): Block reservation details [ 114.157690][ T6782] EXT4-fs (loop8): i_reserved_data_blocks=1 [ 114.434783][ T6784] loop7: detected capacity change from 0 to 8192 [ 114.731290][ T6793] loop0: detected capacity change from 0 to 512 [ 114.783349][ T6793] EXT4-fs: Ignoring removed i_version option [ 114.789524][ T6793] EXT4-fs: Ignoring removed mblk_io_submit option [ 114.855101][ T6793] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 114.916705][ T50] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 114.946104][ T6793] EXT4-fs (loop0): 1 truncate cleaned up [ 114.973493][ T6793] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 115.017927][ T3297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.069744][ T6812] loop0: detected capacity change from 0 to 512 [ 115.083592][ T6812] EXT4-fs: Ignoring removed i_version option [ 115.089753][ T6812] EXT4-fs: Ignoring removed mblk_io_submit option [ 115.114780][ T6812] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 115.141743][ T6812] EXT4-fs (loop0): 1 truncate cleaned up [ 115.149682][ T6812] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 115.179195][ T6823] loop4: detected capacity change from 0 to 8192 [ 115.204914][ T3297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.253893][ T6825] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1170'. [ 115.363374][ T6837] loop4: detected capacity change from 0 to 512 [ 115.398235][ T6837] EXT4-fs warning (device loop4): ext4_enable_quotas:7145: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix. [ 115.410754][ T6848] ip6gretap0: entered promiscuous mode [ 115.418489][ T6837] EXT4-fs (loop4): mount failed [ 115.432294][ T6848] batadv_slave_0: entered promiscuous mode [ 115.440586][ T6848] ip6gretap0: left promiscuous mode [ 115.446981][ T6848] batadv_slave_0: left promiscuous mode [ 115.496316][ T6856] loop4: detected capacity change from 0 to 512 [ 115.515170][ T6856] EXT4-fs: Ignoring removed oldalloc option [ 115.526870][ T6856] EXT4-fs error (device loop4): ext4_xattr_inode_iget:436: comm syz.4.1179: Parent and EA inode have the same ino 15 [ 115.559118][ T6856] EXT4-fs error (device loop4): ext4_xattr_inode_iget:436: comm syz.4.1179: Parent and EA inode have the same ino 15 [ 115.576345][ T6860] loop7: detected capacity change from 0 to 8192 [ 115.580551][ T6856] EXT4-fs (loop4): 1 orphan inode deleted [ 115.590564][ T6856] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 115.649758][ T6869] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1183'. [ 115.653562][ T3296] EXT4-fs error (device loop4): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0 [ 115.680178][ T3296] EXT4-fs error (device loop4): ext4_lookup:1817: inode #2: comm syz-executor: deleted inode referenced: 15 [ 115.692191][ T3296] EXT4-fs error (device loop4): ext4_lookup:1817: inode #2: comm syz-executor: deleted inode referenced: 15 [ 115.723522][ T6871] tipc: Started in network mode [ 115.728520][ T6871] tipc: Node identity aaaaaaaaaa2a, cluster identity 4711 [ 115.735778][ T6871] tipc: Enabled bearer , priority 0 [ 115.779902][ T6875] loop7: detected capacity change from 0 to 512 [ 115.787327][ T6875] EXT4-fs: Ignoring removed i_version option [ 115.793392][ T6875] EXT4-fs: Ignoring removed mblk_io_submit option [ 115.802047][ T6875] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 115.813964][ T6875] EXT4-fs (loop7): 1 truncate cleaned up [ 115.820863][ T6875] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 115.845631][ T6274] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.890785][ T376] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.895031][ T3296] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.941333][ T376] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.955644][ T6882] loop8: detected capacity change from 0 to 512 [ 115.980679][ T6882] EXT4-fs warning (device loop8): ext4_enable_quotas:7145: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix. [ 116.005949][ T6882] EXT4-fs (loop8): mount failed [ 116.011925][ T376] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.087979][ T376] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.167276][ T376] bridge_slave_1: left allmulticast mode [ 116.173190][ T376] bridge_slave_1: left promiscuous mode [ 116.179027][ T376] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.188978][ T376] bridge_slave_0: left allmulticast mode [ 116.194867][ T376] bridge_slave_0: left promiscuous mode [ 116.200659][ T376] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.304033][ T6907] 9pnet_fd: Insufficient options for proto=fd [ 116.367246][ T376] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 116.382969][ T376] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 116.415218][ T376] bond0 (unregistering): Released all slaves [ 116.436108][ T376] bond1 (unregistering): Released all slaves [ 116.497186][ T6893] chnl_net:caif_netlink_parms(): no params data found [ 116.510308][ T376] IPVS: stopping backup sync thread 5944 ... [ 116.560754][ T376] hsr_slave_0: left promiscuous mode [ 116.567603][ T376] hsr_slave_1: left promiscuous mode [ 116.573378][ T376] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 116.581043][ T376] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 116.589834][ T376] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 116.597640][ T376] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 116.607568][ T376] veth1_macvtap: left promiscuous mode [ 116.613087][ T376] veth0_macvtap: left promiscuous mode [ 116.618956][ T376] veth1_vlan: left promiscuous mode [ 116.624618][ T376] veth0_vlan: left promiscuous mode [ 116.671723][ T6946] loop8: detected capacity change from 0 to 2048 [ 116.678629][ T6946] EXT4-fs: Ignoring removed mblk_io_submit option [ 116.692839][ T6893] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.700093][ T6893] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.708600][ T6893] bridge_slave_0: entered allmulticast mode [ 116.715333][ T6893] bridge_slave_0: entered promiscuous mode [ 116.730144][ T6946] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 116.761671][ T6509] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.781852][ T376] team0 (unregistering): Port device team_slave_1 removed [ 116.812593][ T376] team0 (unregistering): Port device team_slave_0 removed [ 116.854846][ T5356] tipc: Node number set to 8432298 [ 116.878527][ T29] kauditd_printk_skb: 654 callbacks suppressed [ 116.878547][ T29] audit: type=1326 audit(1738217135.687:6410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6958 comm="syz.8.1215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c73decd29 code=0x7ffc0000 [ 116.908461][ T29] audit: type=1326 audit(1738217135.687:6411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6958 comm="syz.8.1215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c73decd29 code=0x7ffc0000 [ 116.935113][ T6961] loop8: detected capacity change from 0 to 512 [ 116.969039][ T6967] loop7: detected capacity change from 0 to 512 [ 116.976298][ T6961] EXT4-fs: Ignoring removed i_version option [ 116.982335][ T6961] EXT4-fs: Ignoring removed mblk_io_submit option [ 116.990250][ T29] audit: type=1326 audit(1738217135.687:6412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6958 comm="syz.8.1215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7f7c73decd29 code=0x7ffc0000 [ 116.993622][ T6961] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 117.013778][ T29] audit: type=1326 audit(1738217135.687:6413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6958 comm="syz.8.1215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c73decd29 code=0x7ffc0000 [ 117.047516][ T29] audit: type=1326 audit(1738217135.687:6414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6958 comm="syz.8.1215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c73decd29 code=0x7ffc0000 [ 117.071184][ T29] audit: type=1326 audit(1738217135.697:6415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6960 comm="syz.8.1218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c73decd29 code=0x7ffc0000 [ 117.079184][ T6961] EXT4-fs (loop8): 1 truncate cleaned up [ 117.094771][ T29] audit: type=1326 audit(1738217135.697:6416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6960 comm="syz.8.1218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c73decd29 code=0x7ffc0000 [ 117.104321][ T6961] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 117.123945][ T29] audit: type=1326 audit(1738217135.697:6417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6960 comm="syz.8.1218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f7c73decd29 code=0x7ffc0000 [ 117.156375][ T6967] EXT4-fs (loop7): 1 orphan inode deleted [ 117.159810][ T29] audit: type=1326 audit(1738217135.697:6418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6960 comm="syz.8.1218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f7c73decd63 code=0x7ffc0000 [ 117.166265][ T50] Quota error (device loop7): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 117.189426][ T6893] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.198588][ T50] EXT4-fs error (device loop7): ext4_release_dquot:6950: comm kworker/u8:3: Failed to release dquot type 1 [ 117.205681][ T6893] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.224706][ T6893] bridge_slave_1: entered allmulticast mode [ 117.227920][ T6967] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 117.231308][ T6893] bridge_slave_1: entered promiscuous mode [ 117.253163][ T6509] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.256542][ T6967] ext4 filesystem being mounted at /46/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 117.281191][ T6967] Process accounting resumed [ 117.301729][ T6893] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 117.321829][ T50] EXT4-fs error (device loop7): ext4_release_dquot:6950: comm kworker/u8:3: Failed to release dquot type 1 [ 117.325986][ T6893] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 117.360207][ T6973] loop0: detected capacity change from 0 to 512 [ 117.383084][ T6967] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 117.414938][ T6973] EXT4-fs warning (device loop0): ext4_enable_quotas:7145: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix. [ 117.431664][ T6274] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.440894][ T6973] EXT4-fs (loop0): mount failed [ 117.485822][ T6893] team0: Port device team_slave_0 added [ 117.505640][ T6893] team0: Port device team_slave_1 added [ 117.570030][ T6988] loop6: detected capacity change from 0 to 512 [ 117.585162][ T6994] loop0: detected capacity change from 0 to 512 [ 117.610222][ T6996] loop7: detected capacity change from 0 to 512 [ 117.612588][ T6893] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 117.617236][ T6994] EXT4-fs: Ignoring removed i_version option [ 117.623474][ T6893] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 117.629572][ T6994] EXT4-fs: Ignoring removed mblk_io_submit option [ 117.655551][ T6893] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 117.692982][ T6893] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 117.693822][ T6996] EXT4-fs warning (device loop7): ext4_enable_quotas:7145: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix. [ 117.700039][ T6893] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 117.716950][ T6988] EXT4-fs (loop6): 1 orphan inode deleted [ 117.740467][ T6893] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 117.757088][ T6996] EXT4-fs (loop7): mount failed [ 117.762484][ T50] EXT4-fs error (device loop6): ext4_release_dquot:6950: comm kworker/u8:3: Failed to release dquot type 1 [ 117.763064][ T6988] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 117.806099][ T6988] ext4 filesystem being mounted at /50/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 117.839653][ T6994] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 117.852834][ T6893] hsr_slave_0: entered promiscuous mode [ 117.859333][ T6893] hsr_slave_1: entered promiscuous mode [ 117.863148][ T6988] Process accounting resumed [ 117.868241][ T6893] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 117.878426][ T6893] Cannot create hsr debugfs directory [ 117.890826][ T6994] EXT4-fs (loop0): 1 truncate cleaned up [ 117.897540][ T6994] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 117.920684][ T376] EXT4-fs error (device loop6): ext4_release_dquot:6950: comm kworker/u8:5: Failed to release dquot type 1 [ 117.936083][ T6988] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 117.959291][ T7009] loop8: detected capacity change from 0 to 2048 [ 118.030791][ T6893] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 118.039357][ T6225] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.049857][ T7009] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 118.056517][ T3297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.066437][ T6893] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 118.101561][ T6893] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 118.113971][ T6893] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 118.161709][ T6893] 8021q: adding VLAN 0 to HW filter on device bond0 [ 118.181948][ T6893] 8021q: adding VLAN 0 to HW filter on device team0 [ 118.230745][ T28] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.238017][ T28] bridge0: port 1(bridge_slave_0) entered forwarding state [ 118.256253][ T28] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.263398][ T28] bridge0: port 2(bridge_slave_1) entered forwarding state [ 118.326212][ T7019] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 118.341096][ T7019] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 1 with error 28 [ 118.353467][ T7019] EXT4-fs (loop8): This should not happen!! Data will be lost [ 118.353467][ T7019] [ 118.363145][ T7019] EXT4-fs (loop8): Total free blocks count 0 [ 118.369236][ T7019] EXT4-fs (loop8): Free/Dirty block details [ 118.375180][ T7019] EXT4-fs (loop8): free_blocks=2415919104 [ 118.380923][ T7019] EXT4-fs (loop8): dirty_blocks=16 [ 118.386089][ T7019] EXT4-fs (loop8): Block reservation details [ 118.392163][ T7019] EXT4-fs (loop8): i_reserved_data_blocks=1 [ 118.551710][ T7021] loop6: detected capacity change from 0 to 512 [ 118.663948][ T7021] EXT4-fs warning (device loop6): ext4_enable_quotas:7145: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix. [ 118.693698][ T7027] FAULT_INJECTION: forcing a failure. [ 118.693698][ T7027] name failslab, interval 1, probability 0, space 0, times 0 [ 118.706554][ T7027] CPU: 1 UID: 0 PID: 7027 Comm: syz.0.1239 Not tainted 6.13.0-syzkaller-07644-gc2da8b3f914f #0 [ 118.706588][ T7027] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 118.706601][ T7027] Call Trace: [ 118.706609][ T7027] [ 118.706618][ T7027] dump_stack_lvl+0xf2/0x150 [ 118.706651][ T7027] dump_stack+0x15/0x1a [ 118.706676][ T7027] should_fail_ex+0x223/0x230 [ 118.706715][ T7027] ? alloc_fs_context+0x44/0x4e0 [ 118.706757][ T7027] should_failslab+0x8f/0xb0 [ 118.706781][ T7027] __kmalloc_cache_noprof+0x4e/0x320 [ 118.706818][ T7027] alloc_fs_context+0x44/0x4e0 [ 118.706909][ T7027] ? strncmp+0x34/0x70 [ 118.706941][ T7027] fs_context_for_mount+0x21/0x30 [ 118.707045][ T7027] do_new_mount+0xf3/0x690 [ 118.707077][ T7027] path_mount+0x49b/0xb30 [ 118.707106][ T7027] __se_sys_mount+0x27f/0x2d0 [ 118.707215][ T7027] __x64_sys_mount+0x67/0x80 [ 118.707245][ T7027] x64_sys_call+0x2c84/0x2dc0 [ 118.707297][ T7027] do_syscall_64+0xc9/0x1c0 [ 118.707325][ T7027] ? clear_bhb_loop+0x55/0xb0 [ 118.707357][ T7027] ? clear_bhb_loop+0x55/0xb0 [ 118.707388][ T7027] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.707480][ T7027] RIP: 0033:0x7fc7342ccd29 [ 118.707497][ T7027] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 118.707518][ T7027] RSP: 002b:00007fc732937038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 118.707558][ T7027] RAX: ffffffffffffffda RBX: 00007fc7344e5fa0 RCX: 00007fc7342ccd29 [ 118.707588][ T7027] RDX: 0000000020000040 RSI: 0000000020000440 RDI: 0000000000000000 [ 118.707602][ T7027] RBP: 00007fc732937090 R08: 00000000200001c0 R09: 0000000000000000 [ 118.707616][ T7027] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 118.707630][ T7027] R13: 0000000000000000 R14: 00007fc7344e5fa0 R15: 00007ffe236c3b08 [ 118.707652][ T7027] [ 119.046951][ T7021] EXT4-fs (loop6): mount failed [ 119.122094][ T50] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 119.175307][ T6893] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 119.456754][ T6893] veth0_vlan: entered promiscuous mode [ 119.475889][ T6893] veth1_vlan: entered promiscuous mode [ 119.495243][ T7057] loop0: detected capacity change from 0 to 512 [ 119.499814][ T6893] veth0_macvtap: entered promiscuous mode [ 119.523756][ T6893] veth1_macvtap: entered promiscuous mode [ 119.539147][ T7057] EXT4-fs: Ignoring removed i_version option [ 119.545345][ T7057] EXT4-fs: Ignoring removed mblk_io_submit option [ 119.545466][ T6893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 119.562562][ T6893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.572646][ T6893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 119.583109][ T6893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.593271][ T6893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 119.603819][ T6893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.613723][ T6893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 119.615054][ T7057] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 119.624219][ T6893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.633233][ T6893] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 119.653555][ T7057] EXT4-fs (loop0): 1 truncate cleaned up [ 119.655076][ T6893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 119.660028][ T7057] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 119.669765][ T6893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.691759][ T6893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 119.702229][ T6893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.712131][ T6893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 119.722583][ T6893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.732464][ T6893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 119.743039][ T6893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.754380][ T6893] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 119.756815][ T7064] xt_recent: Unsupported userspace flags (000000da) [ 119.769622][ T7064] netlink: 'syz.7.1245': attribute type 21 has an invalid length. [ 119.769668][ T3297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.777597][ T7064] netlink: 132 bytes leftover after parsing attributes in process `syz.7.1245'. [ 119.798680][ T6893] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.807478][ T6893] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.816287][ T6893] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.825093][ T6893] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.828559][ T7067] 9pnet_fd: Insufficient options for proto=fd [ 119.872204][ T7070] loop0: detected capacity change from 0 to 512 [ 119.886042][ T7070] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1248'. [ 119.945704][ T7077] 9pnet: p9_errstr2errno: server reported unknown error ‌@يخ‚ح(للي«QNd [ 120.183537][ T7097] netlink: 20 bytes leftover after parsing attributes in process `syz.9.1259'. [ 120.430136][ T7112] loop6: detected capacity change from 0 to 512 [ 120.569400][ T7112] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 120.581734][ T7112] EXT4-fs (loop6): invalid journal inode [ 120.589290][ T7112] EXT4-fs (loop6): can't get journal size [ 120.597138][ T7112] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a056c119, mo2=0002] [ 120.610756][ T7112] System zones: 1-12, 13-13 [ 120.618531][ T7112] EXT4-fs error (device loop6): ext4_xattr_ibody_find:2240: inode #15: comm syz.6.1264: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 120.637812][ T7112] EXT4-fs error (device loop6): ext4_orphan_get:1394: comm syz.6.1264: couldn't read orphan inode 15 (err -117) [ 120.652336][ T7112] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 121.207409][ T6225] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.222113][ T7132] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7132 comm=syz.9.1270 [ 121.286461][ T7132] loop9: detected capacity change from 0 to 512 [ 121.306053][ T7132] EXT4-fs error (device loop9): ext4_acquire_dquot:6927: comm syz.9.1270: Failed to acquire dquot type 1 [ 121.328060][ T7132] EXT4-fs (loop9): 1 truncate cleaned up [ 121.334990][ T7132] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 121.348138][ T7132] ext4 filesystem being mounted at /7/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 121.376806][ T7135] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1271'. [ 121.390473][ T6893] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.629618][ T7176] FAULT_INJECTION: forcing a failure. [ 121.629618][ T7176] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 121.642849][ T7176] CPU: 1 UID: 0 PID: 7176 Comm: syz.7.1285 Not tainted 6.13.0-syzkaller-07644-gc2da8b3f914f #0 [ 121.642877][ T7176] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 121.642890][ T7176] Call Trace: [ 121.642897][ T7176] [ 121.642904][ T7176] dump_stack_lvl+0xf2/0x150 [ 121.642932][ T7176] dump_stack+0x15/0x1a [ 121.642964][ T7176] should_fail_ex+0x223/0x230 [ 121.643109][ T7176] should_fail+0xb/0x10 [ 121.643208][ T7176] should_fail_usercopy+0x1a/0x20 [ 121.643247][ T7176] _copy_to_user+0x20/0xa0 [ 121.643274][ T7176] simple_read_from_buffer+0xa0/0x110 [ 121.643301][ T7176] proc_fail_nth_read+0xf9/0x140 [ 121.643376][ T7176] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 121.643401][ T7176] vfs_read+0x19b/0x6f0 [ 121.643432][ T7176] ? __rcu_read_unlock+0x4e/0x70 [ 121.643453][ T7176] ? __fget_files+0x17c/0x1c0 [ 121.643481][ T7176] ksys_read+0xe8/0x1b0 [ 121.643547][ T7176] __x64_sys_read+0x42/0x50 [ 121.643610][ T7176] x64_sys_call+0x2874/0x2dc0 [ 121.643641][ T7176] do_syscall_64+0xc9/0x1c0 [ 121.643669][ T7176] ? clear_bhb_loop+0x55/0xb0 [ 121.643721][ T7176] ? clear_bhb_loop+0x55/0xb0 [ 121.643747][ T7176] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.643778][ T7176] RIP: 0033:0x7f6599aeb73c [ 121.643795][ T7176] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 121.643817][ T7176] RSP: 002b:00007f6598151030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 121.643910][ T7176] RAX: ffffffffffffffda RBX: 00007f6599d05fa0 RCX: 00007f6599aeb73c [ 121.643929][ T7176] RDX: 000000000000000f RSI: 00007f65981510a0 RDI: 0000000000000005 [ 121.643943][ T7176] RBP: 00007f6598151090 R08: 0000000000000000 R09: 0000000000000000 [ 121.643966][ T7176] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 121.643980][ T7176] R13: 0000000000000000 R14: 00007f6599d05fa0 R15: 00007ffc5713b518 [ 121.644002][ T7176] [ 121.886186][ T29] kauditd_printk_skb: 879 callbacks suppressed [ 121.886201][ T29] audit: type=1326 audit(1738217140.698:7290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7126 comm="syz.8.1268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f7c73de3ce7 code=0x7ffc0000 [ 121.929825][ T29] audit: type=1326 audit(1738217140.728:7291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7126 comm="syz.8.1268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7c73d88f29 code=0x7ffc0000 [ 121.953505][ T29] audit: type=1326 audit(1738217140.728:7292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7126 comm="syz.8.1268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f7c73de3ce7 code=0x7ffc0000 [ 121.977076][ T29] audit: type=1326 audit(1738217140.728:7293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7126 comm="syz.8.1268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7c73d88f29 code=0x7ffc0000 [ 122.000770][ T29] audit: type=1326 audit(1738217140.728:7294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7126 comm="syz.8.1268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c73decd29 code=0x7ffc0000 [ 122.024275][ T29] audit: type=1326 audit(1738217140.728:7295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7152 comm="syz.6.1277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f3019183ce7 code=0x7ffc0000 [ 122.047841][ T29] audit: type=1326 audit(1738217140.728:7296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7152 comm="syz.6.1277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3019128f29 code=0x7ffc0000 [ 122.071248][ T29] audit: type=1326 audit(1738217140.728:7297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7152 comm="syz.6.1277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7f301918cd29 code=0x7ffc0000 [ 122.094670][ T29] audit: type=1326 audit(1738217140.738:7298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7126 comm="syz.8.1268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f7c73de3ce7 code=0x7ffc0000 [ 122.118225][ T29] audit: type=1326 audit(1738217140.738:7299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7126 comm="syz.8.1268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7c73d88f29 code=0x7ffc0000 [ 122.240000][ T7183] loop8: detected capacity change from 0 to 512 [ 122.313061][ T7183] EXT4-fs warning (device loop8): ext4_enable_quotas:7145: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix. [ 122.403555][ T7183] EXT4-fs (loop8): mount failed [ 122.441672][ T7192] netlink: 'syz.6.1290': attribute type 32 has an invalid length. [ 122.450728][ T7191] netlink: 'syz.6.1290': attribute type 32 has an invalid length. [ 122.645010][ T7201] FAULT_INJECTION: forcing a failure. [ 122.645010][ T7201] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 122.658195][ T7201] CPU: 1 UID: 0 PID: 7201 Comm: GPL Not tainted 6.13.0-syzkaller-07644-gc2da8b3f914f #0 [ 122.658224][ T7201] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 122.658240][ T7201] Call Trace: [ 122.658246][ T7201] [ 122.658299][ T7201] dump_stack_lvl+0xf2/0x150 [ 122.658332][ T7201] dump_stack+0x15/0x1a [ 122.658366][ T7201] should_fail_ex+0x223/0x230 [ 122.658403][ T7201] should_fail+0xb/0x10 [ 122.658435][ T7201] should_fail_usercopy+0x1a/0x20 [ 122.658518][ T7201] strncpy_from_user+0x25/0x210 [ 122.658547][ T7201] ? _copy_to_iter+0x166/0xd00 [ 122.658570][ T7201] strncpy_from_user_nofault+0x66/0xe0 [ 122.658618][ T7201] bpf_probe_read_compat_str+0xb3/0x130 [ 122.658704][ T7201] bpf_prog_d73d3bb03d5a037f+0x3e/0x40 [ 122.658724][ T7201] bpf_trace_run2+0x104/0x1d0 [ 122.658749][ T7201] ? vfs_readv+0x518/0x660 [ 122.658848][ T7201] ? vfs_readv+0x518/0x660 [ 122.658882][ T7201] __traceiter_kfree+0x2b/0x50 [ 122.658922][ T7201] ? vfs_readv+0x518/0x660 [ 122.658951][ T7201] kfree+0x247/0x2f0 [ 122.659068][ T7201] vfs_readv+0x518/0x660 [ 122.659152][ T7201] do_readv+0xf4/0x220 [ 122.659182][ T7201] __x64_sys_readv+0x45/0x50 [ 122.659208][ T7201] x64_sys_call+0x2c34/0x2dc0 [ 122.659239][ T7201] do_syscall_64+0xc9/0x1c0 [ 122.659262][ T7201] ? clear_bhb_loop+0x55/0xb0 [ 122.659300][ T7201] ? clear_bhb_loop+0x55/0xb0 [ 122.659330][ T7201] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.659419][ T7201] RIP: 0033:0x7f301918cd29 [ 122.659436][ T7201] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 122.659457][ T7201] RSP: 002b:00007f30177f7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 122.659478][ T7201] RAX: ffffffffffffffda RBX: 00007f30193a5fa0 RCX: 00007f301918cd29 [ 122.659492][ T7201] RDX: 0000000000000001 RSI: 0000000020000540 RDI: 0000000000000009 [ 122.659503][ T7201] RBP: 00007f30177f7090 R08: 0000000000000000 R09: 0000000000000000 [ 122.659542][ T7201] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 122.659556][ T7201] R13: 0000000000000000 R14: 00007f30193a5fa0 R15: 00007ffc7b5a4298 [ 122.659578][ T7201] [ 122.891696][ T7210] loop0: detected capacity change from 0 to 256 [ 122.897947][ T7208] loop9: detected capacity change from 0 to 512 [ 122.914547][ T7210] FAT-fs (loop0): codepage cp1255 not found [ 122.958140][ T7208] EXT4-fs (loop9): 1 orphan inode deleted [ 122.965861][ T7208] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 122.988845][ T11] EXT4-fs error (device loop9): ext4_release_dquot:6950: comm kworker/u8:0: Failed to release dquot type 1 [ 123.016191][ T7208] ext4 filesystem being mounted at /11/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 123.061524][ T7208] Process accounting resumed [ 123.074141][ T50] EXT4-fs error (device loop9): ext4_release_dquot:6950: comm kworker/u8:3: Failed to release dquot type 1 [ 123.091732][ T7208] EXT4-fs (loop9): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 123.130572][ T7223] loop7: detected capacity change from 0 to 512 [ 123.177505][ T7223] EXT4-fs warning (device loop7): ext4_enable_quotas:7145: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix. [ 123.195226][ T7223] EXT4-fs (loop7): mount failed [ 123.308647][ T7225] loop9: detected capacity change from 0 to 512 [ 123.337568][ T7225] EXT4-fs: Ignoring removed oldalloc option [ 124.035067][ T7245] loop0: detected capacity change from 0 to 512 [ 124.264824][ T7225] EXT4-fs error (device loop9): ext4_xattr_inode_iget:436: comm syz.9.1303: Parent and EA inode have the same ino 15 [ 124.291641][ T7245] EXT4-fs warning (device loop0): ext4_enable_quotas:7145: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix. [ 124.319575][ T7225] EXT4-fs error (device loop9): ext4_xattr_inode_iget:436: comm syz.9.1303: Parent and EA inode have the same ino 15 [ 124.339390][ T7245] EXT4-fs (loop0): mount failed [ 124.355788][ T7259] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1314'. [ 124.416429][ T7225] EXT4-fs (loop9): 1 orphan inode deleted [ 124.435010][ T7265] loop0: detected capacity change from 0 to 256 [ 124.460782][ T7265] FAT-fs (loop0): codepage cp1255 not found [ 124.492935][ T7273] loop8: detected capacity change from 0 to 512 [ 124.525589][ T7273] EXT4-fs warning (device loop8): ext4_enable_quotas:7145: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix. [ 124.599136][ T7273] EXT4-fs (loop8): mount failed [ 124.607669][ T7277] loop7: detected capacity change from 0 to 2048 [ 124.733197][ T7282] netlink: 96 bytes leftover after parsing attributes in process `syz.9.1322'. [ 124.906270][ T7286] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 124.921265][ T7286] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 1 with error 28 [ 124.933766][ T7286] EXT4-fs (loop7): This should not happen!! Data will be lost [ 124.933766][ T7286] [ 124.943495][ T7286] EXT4-fs (loop7): Total free blocks count 0 [ 124.949564][ T7286] EXT4-fs (loop7): Free/Dirty block details [ 124.955502][ T7286] EXT4-fs (loop7): free_blocks=2415919104 [ 124.961235][ T7286] EXT4-fs (loop7): dirty_blocks=16 [ 124.966388][ T7286] EXT4-fs (loop7): Block reservation details [ 124.972404][ T7286] EXT4-fs (loop7): i_reserved_data_blocks=1 [ 125.271928][ T7291] loop6: detected capacity change from 0 to 1024 [ 125.331568][ T7291] journal_path: Non-blockdev passed as './file1' [ 125.338106][ T7291] EXT4-fs: error: could not find journal device path [ 125.359726][ T7289] loop9: detected capacity change from 0 to 1764 [ 125.716796][ T11] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 125.729155][ T11] EXT4-fs (loop7): This should not happen!! Data will be lost [ 125.729155][ T11] [ 125.745006][ T7289] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1324'. [ 125.802729][ T7296] 9pnet: p9_errstr2errno: server reported unknown error ‌@يخ‚ح(للي«QNd [ 125.912748][ T7307] 9pnet: p9_errstr2errno: server reported unknown error ‌@يخ‚ح(للي«QNd [ 125.928764][ T7305] FAULT_INJECTION: forcing a failure. [ 125.928764][ T7305] name failslab, interval 1, probability 0, space 0, times 0 [ 125.941570][ T7305] CPU: 1 UID: 0 PID: 7305 Comm: syz.7.1327 Not tainted 6.13.0-syzkaller-07644-gc2da8b3f914f #0 [ 125.941599][ T7305] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 125.941612][ T7305] Call Trace: [ 125.941620][ T7305] [ 125.941629][ T7305] dump_stack_lvl+0xf2/0x150 [ 125.941661][ T7305] dump_stack+0x15/0x1a [ 125.941685][ T7305] should_fail_ex+0x223/0x230 [ 125.941767][ T7305] should_failslab+0x8f/0xb0 [ 125.941796][ T7305] kmem_cache_alloc_noprof+0x52/0x320 [ 125.941852][ T7305] ? __send_signal_locked+0x155/0x780 [ 125.941888][ T7305] __send_signal_locked+0x155/0x780 [ 125.941920][ T7305] send_signal_locked+0x28f/0x3a0 [ 125.941963][ T7305] force_sig_info_to_task+0x1ec/0x280 [ 125.941996][ T7305] force_sig+0x69/0x90 [ 125.942061][ T7305] exc_general_protection+0x12b/0x4d0 [ 125.942090][ T7305] ? fput+0x1c4/0x200 [ 125.942130][ T7305] ? ksys_write+0x176/0x1b0 [ 125.942224][ T7305] ? clear_bhb_loop+0x55/0xb0 [ 125.942252][ T7305] asm_exc_general_protection+0x26/0x30 [ 125.942283][ T7305] RIP: 0033:0x7f6599ac5879 [ 125.942299][ T7305] Code: f8 77 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 89 f8 48 89 fa c5 f9 ef c0 25 ff 0f 00 00 3d e0 0f 00 00 0f 87 27 01 00 00 fd 74 0f c5 fd d7 c1 85 c0 74 5b f3 0f bc c0 e9 30 01 00 00 66 [ 125.942321][ T7305] RSP: 002b:00007f65981507c8 EFLAGS: 00010283 [ 125.942412][ T7305] RAX: 0000000000000999 RBX: 00007f6598150d30 RCX: 00007f6599ccd120 [ 125.942427][ T7305] RDX: 9999999999999999 RSI: 00007f6599b6dfac RDI: 9999999999999999 [ 125.942441][ T7305] RBP: 000000000000000b R08: 0000000000000000 R09: 0000000000000000 [ 125.942455][ T7305] R10: 00000000ffffffff R11: 0000000000000000 R12: 0000000000000073 [ 125.942469][ T7305] R13: 00007f6598150eb0 R14: 9999999999999999 R15: 0000000000000000 [ 125.942490][ T7305] [ 126.325629][ T7322] loop7: detected capacity change from 0 to 512 [ 126.369509][ T7322] EXT4-fs warning (device loop7): ext4_enable_quotas:7145: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix. [ 126.398850][ T7322] EXT4-fs (loop7): mount failed [ 126.405737][ T7333] loop0: detected capacity change from 0 to 256 [ 126.408932][ T7335] loop8: detected capacity change from 0 to 512 [ 126.443172][ T7333] FAT-fs (loop0): codepage cp1255 not found [ 126.485759][ T7335] EXT4-fs (loop8): 1 orphan inode deleted [ 126.512080][ T50] EXT4-fs error (device loop8): ext4_release_dquot:6950: comm kworker/u8:3: Failed to release dquot type 1 [ 126.540485][ T7335] ext4 filesystem being mounted at /45/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 126.566958][ T7344] loop6: detected capacity change from 0 to 512 [ 126.599900][ T7344] EXT4-fs: Ignoring removed i_version option [ 126.606168][ T7344] EXT4-fs: Ignoring removed mblk_io_submit option [ 126.625011][ T7335] EXT4-fs (loop8): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 126.663256][ T7344] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 126.672558][ T7335] Process accounting resumed [ 126.699204][ T50] EXT4-fs error (device loop8): ext4_release_dquot:6950: comm kworker/u8:3: Failed to release dquot type 1 [ 126.722958][ T7344] EXT4-fs (loop6): 1 truncate cleaned up [ 126.771402][ T7356] loop8: detected capacity change from 0 to 128 [ 126.786962][ T7353] bridge0: port 3(ipvlan2) entered blocking state [ 126.793723][ T7353] bridge0: port 3(ipvlan2) entered disabled state [ 126.800797][ T7353] ipvlan2: entered allmulticast mode [ 126.806307][ T7353] bridge0: entered allmulticast mode [ 126.812582][ T7353] ipvlan2: left allmulticast mode [ 126.817939][ T7353] bridge0: left allmulticast mode [ 126.844169][ T7356] FAT-fs (loop8): bogus logical sector size 0 [ 126.844705][ T6225] EXT4-fs unmount: 8 callbacks suppressed [ 126.844722][ T6225] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.850304][ T7356] FAT-fs (loop8): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 126.850324][ T7356] FAT-fs (loop8): Can't find a valid FAT filesystem [ 126.889625][ T7356] loop8: detected capacity change from 0 to 512 [ 126.930710][ T7356] EXT4-fs: Ignoring removed oldalloc option [ 126.939557][ T29] kauditd_printk_skb: 209 callbacks suppressed [ 126.939573][ T29] audit: type=1326 audit(1738217145.748:7500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7362 comm="syz.6.1355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f301918cd29 code=0x7ffc0000 [ 126.969523][ T29] audit: type=1326 audit(1738217145.748:7501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7362 comm="syz.6.1355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f301918cd29 code=0x7ffc0000 [ 126.992981][ T29] audit: type=1326 audit(1738217145.748:7502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7362 comm="syz.6.1355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f301918cd29 code=0x7ffc0000 [ 127.015107][ T7356] EXT4-fs: Ignoring removed nomblk_io_submit option [ 127.016537][ T29] audit: type=1326 audit(1738217145.748:7503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7362 comm="syz.6.1355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f301918cd29 code=0x7ffc0000 [ 127.046418][ T29] audit: type=1326 audit(1738217145.748:7504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7362 comm="syz.6.1355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f301918cd29 code=0x7ffc0000 [ 127.074274][ T29] audit: type=1326 audit(1738217145.858:7505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7362 comm="syz.6.1355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f301918cd29 code=0x7ffc0000 [ 127.097837][ T29] audit: type=1326 audit(1738217145.858:7506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7362 comm="syz.6.1355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f301918cd29 code=0x7ffc0000 [ 127.121786][ T29] audit: type=1326 audit(1738217145.858:7507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7362 comm="syz.6.1355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=245 compat=0 ip=0x7f301918cd29 code=0x7ffc0000 [ 127.145433][ T29] audit: type=1326 audit(1738217145.858:7508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7362 comm="syz.6.1355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f301918cd29 code=0x7ffc0000 [ 127.183398][ T7371] netlink: 'syz.9.1359': attribute type 6 has an invalid length. [ 127.208352][ T7356] EXT4-fs error (device loop8): ext4_xattr_ibody_find:2240: inode #15: comm syz.8.1351: corrupted in-inode xattr: invalid ea_ino [ 127.224620][ T7356] EXT4-fs error (device loop8): ext4_orphan_get:1394: comm syz.8.1351: couldn't read orphan inode 15 (err -117) [ 127.243924][ T7379] bond1: entered promiscuous mode [ 127.249016][ T7379] bond1: entered allmulticast mode [ 127.255482][ T7379] 8021q: adding VLAN 0 to HW filter on device bond1 [ 127.259975][ T29] audit: type=1326 audit(1738217146.068:7509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7374 comm="syz.6.1360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f301918cd29 code=0x7ffc0000 [ 127.296910][ T7379] bond1 (unregistering): Released all slaves [ 127.305354][ T7356] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 127.426652][ T7387] loop7: detected capacity change from 0 to 512 [ 127.448025][ T7387] EXT4-fs error (device loop7): ext4_acquire_dquot:6927: comm syz.7.1364: Failed to acquire dquot type 1 [ 127.460563][ T7356] EXT4-fs error (device loop8): ext4_lookup:1817: inode #2: comm syz.8.1351: deleted inode referenced: 15 [ 127.486643][ T7356] EXT4-fs error (device loop8): ext4_lookup:1817: inode #2: comm syz.8.1351: deleted inode referenced: 15 [ 127.502987][ T7387] EXT4-fs (loop7): 1 truncate cleaned up [ 127.523980][ T7387] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 127.544186][ T7395] bridge0: port 3(ipvlan0) entered blocking state [ 127.550684][ T7395] bridge0: port 3(ipvlan0) entered disabled state [ 127.563677][ T6509] EXT4-fs error (device loop8): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0 [ 127.586758][ T7387] ext4 filesystem being mounted at /80/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 127.597918][ T7395] ipvlan0: entered allmulticast mode [ 127.603292][ T7395] bridge0: entered allmulticast mode [ 127.620445][ T7395] ipvlan0: left allmulticast mode [ 127.625550][ T7395] bridge0: left allmulticast mode [ 127.633586][ T6274] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.741323][ T7405] FAULT_INJECTION: forcing a failure. [ 127.741323][ T7405] name failslab, interval 1, probability 0, space 0, times 0 [ 127.755294][ T7405] CPU: 1 UID: 0 PID: 7405 Comm: +}[@ Not tainted 6.13.0-syzkaller-07644-gc2da8b3f914f #0 [ 127.755346][ T7405] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 127.755360][ T7405] Call Trace: [ 127.755376][ T7405] [ 127.755385][ T7405] dump_stack_lvl+0xf2/0x150 [ 127.755474][ T7405] dump_stack+0x15/0x1a [ 127.755500][ T7405] should_fail_ex+0x223/0x230 [ 127.755539][ T7405] should_failslab+0x8f/0xb0 [ 127.755593][ T7405] __kmalloc_node_noprof+0xad/0x410 [ 127.755659][ T7405] ? __list_del_entry_valid_or_report+0x5f/0xf0 [ 127.755684][ T7405] ? __kvmalloc_node_noprof+0x72/0x170 [ 127.755716][ T7405] __kvmalloc_node_noprof+0x72/0x170 [ 127.755760][ T7405] bpf_test_run_xdp_live+0xf7/0x1040 [ 127.755798][ T7405] ? __pfx_autoremove_wake_function+0x10/0x10 [ 127.755827][ T7405] ? 0xffffffffa0003a40 [ 127.755840][ T7405] ? synchronize_rcu+0x46/0x320 [ 127.755923][ T7405] ? 0xffffffffa0003a40 [ 127.755938][ T7405] ? bpf_dispatcher_change_prog+0x747/0x840 [ 127.755980][ T7405] ? 0xffffffffa0003a40 [ 127.755992][ T7405] ? 0xffffffffa000094c [ 127.756015][ T7405] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 127.756072][ T7405] bpf_prog_test_run_xdp+0x51d/0x8b0 [ 127.756110][ T7405] ? __rcu_read_unlock+0x4e/0x70 [ 127.756140][ T7405] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 127.756247][ T7405] bpf_prog_test_run+0x20f/0x3a0 [ 127.756280][ T7405] __sys_bpf+0x400/0x7a0 [ 127.756316][ T7405] __x64_sys_bpf+0x43/0x50 [ 127.756342][ T7405] x64_sys_call+0x2914/0x2dc0 [ 127.756412][ T7405] do_syscall_64+0xc9/0x1c0 [ 127.756492][ T7405] ? clear_bhb_loop+0x55/0xb0 [ 127.756526][ T7405] ? clear_bhb_loop+0x55/0xb0 [ 127.756555][ T7405] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.756581][ T7405] RIP: 0033:0x7f6599aecd29 [ 127.756594][ T7405] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 127.756613][ T7405] RSP: 002b:00007f6598151038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 127.756684][ T7405] RAX: ffffffffffffffda RBX: 00007f6599d05fa0 RCX: 00007f6599aecd29 [ 127.756699][ T7405] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 127.756820][ T7405] RBP: 00007f6598151090 R08: 0000000000000000 R09: 0000000000000000 [ 127.756835][ T7405] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 127.756845][ T7405] R13: 0000000000000000 R14: 00007f6599d05fa0 R15: 00007ffc5713b518 [ 127.756861][ T7405] [ 127.759975][ T7357] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.823550][ T7409] loop7: detected capacity change from 0 to 512 [ 128.019619][ T7409] EXT4-fs: Ignoring removed i_version option [ 128.025804][ T7409] EXT4-fs: Ignoring removed mblk_io_submit option [ 128.033982][ T7409] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 128.051838][ T7414] 9pnet: p9_errstr2errno: server reported unknown error ‌@يخ‚ح(للي«QNd [ 128.053760][ T7409] EXT4-fs (loop7): 1 truncate cleaned up [ 128.069365][ T7409] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 128.097895][ T7411] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1374'. [ 128.117157][ T6274] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.166138][ T50] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.169462][ T7422] loop7: detected capacity change from 0 to 256 [ 128.213268][ T7422] FAT-fs (loop7): codepage cp1255 not found [ 128.256831][ T50] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.318371][ T50] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.366365][ T50] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.385657][ T7433] loop0: detected capacity change from 0 to 512 [ 128.436156][ T7433] EXT4-fs warning (device loop0): ext4_enable_quotas:7145: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix. [ 128.506744][ T7433] EXT4-fs (loop0): mount failed [ 128.534624][ T50] bridge_slave_1: left allmulticast mode [ 128.540466][ T50] bridge_slave_1: left promiscuous mode [ 128.546233][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.575782][ T50] bridge_slave_0: left allmulticast mode [ 128.581508][ T50] bridge_slave_0: left promiscuous mode [ 128.587554][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.614520][ T7442] loop0: detected capacity change from 0 to 512 [ 128.666563][ T7439] bridge0: port 3(ipvlan2) entered blocking state [ 128.669285][ T7442] EXT4-fs (loop0): 1 orphan inode deleted [ 128.673046][ T7439] bridge0: port 3(ipvlan2) entered disabled state [ 128.673354][ T7439] ipvlan2: entered allmulticast mode [ 128.690757][ T7439] bridge0: entered allmulticast mode [ 128.691489][ T7442] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 128.705427][ T7439] ipvlan2: left allmulticast mode [ 128.713683][ T7439] bridge0: left allmulticast mode [ 128.719309][ T1707] EXT4-fs error (device loop0): ext4_release_dquot:6950: comm kworker/u8:6: Failed to release dquot type 1 [ 128.733759][ T7442] ext4 filesystem being mounted at /341/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 128.771718][ T7441] Process accounting resumed [ 128.786328][ T3297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.799525][ T1707] EXT4-fs error (device loop0): ext4_release_dquot:6950: comm kworker/u8:6: Failed to release dquot type 1 [ 128.830857][ T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 128.850584][ T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 128.866062][ T50] bond0 (unregistering): Released all slaves [ 128.873752][ T7453] loop6: detected capacity change from 0 to 512 [ 128.885546][ T7453] EXT4-fs: Ignoring removed i_version option [ 128.891706][ T7453] EXT4-fs: Ignoring removed mblk_io_submit option [ 128.898943][ T7453] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 128.912647][ T7453] EXT4-fs (loop6): 1 truncate cleaned up [ 128.955861][ T7453] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 128.971754][ T50] hsr_slave_0: left promiscuous mode [ 128.987936][ T50] hsr_slave_1: left promiscuous mode [ 129.003473][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 129.011001][ T50] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 129.033667][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 129.041113][ T50] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 129.063207][ T50] veth1_macvtap: left promiscuous mode [ 129.079057][ T50] veth0_macvtap: left promiscuous mode [ 129.084886][ T50] veth1_vlan: left promiscuous mode [ 129.100570][ T50] veth0_vlan: left promiscuous mode [ 129.195762][ T7481] netlink: 96 bytes leftover after parsing attributes in process `syz.7.1396'. [ 129.258420][ T50] team0 (unregistering): Port device team_slave_1 removed [ 129.288253][ T50] team0 (unregistering): Port device team_slave_0 removed [ 129.388913][ T7497] loop9: detected capacity change from 0 to 512 [ 129.423085][ T7497] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 129.468285][ T7507] loop7: detected capacity change from 0 to 512 [ 129.468619][ T7497] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 129.494465][ T7508] netlink: 'syz.6.1389': attribute type 4 has an invalid length. [ 129.526899][ T7515] loop0: detected capacity change from 0 to 512 [ 129.537810][ T7497] ext4 filesystem being mounted at /34/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 129.556583][ T7518] netlink: 'syz.6.1389': attribute type 4 has an invalid length. [ 129.573229][ T7515] EXT4-fs (loop0): 1 orphan inode deleted [ 129.579401][ T7515] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 129.592480][ T7507] EXT4-fs warning (device loop7): ext4_enable_quotas:7145: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix. [ 129.598904][ T7449] chnl_net:caif_netlink_parms(): no params data found [ 129.614090][ T11] EXT4-fs error (device loop0): ext4_release_dquot:6950: comm kworker/u8:0: Failed to release dquot type 1 [ 129.627091][ T7515] ext4 filesystem being mounted at /348/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 129.630023][ T7507] EXT4-fs (loop7): mount failed [ 129.644619][ T6893] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.655586][ T7515] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 129.687687][ T3297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.787807][ T7449] bridge0: port 1(bridge_slave_0) entered blocking state [ 129.795011][ T7449] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.809511][ T7449] bridge_slave_0: entered allmulticast mode [ 129.830554][ T7449] bridge_slave_0: entered promiscuous mode [ 129.841158][ T7449] bridge0: port 2(bridge_slave_1) entered blocking state [ 129.848346][ T7449] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.863245][ T7449] bridge_slave_1: entered allmulticast mode [ 129.875015][ T7449] bridge_slave_1: entered promiscuous mode [ 129.910615][ T7449] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 129.924851][ T7449] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 129.968361][ T7535] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1413'. [ 129.978831][ T7449] team0: Port device team_slave_0 added [ 130.027973][ T7538] loop0: detected capacity change from 0 to 2048 [ 130.054842][ T7449] team0: Port device team_slave_1 added [ 130.141383][ T7449] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 130.148429][ T7449] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 130.174384][ T7449] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 130.275645][ T7449] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 130.282846][ T7449] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 130.304852][ T7551] loop0: detected capacity change from 0 to 2048 [ 130.308886][ T7449] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 130.343416][ T7553] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 130.374011][ T7551] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 130.378623][ T7553] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 130.437121][ T7449] hsr_slave_0: entered promiscuous mode [ 130.453484][ T7449] hsr_slave_1: entered promiscuous mode [ 130.460744][ T7449] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 130.494718][ T7449] Cannot create hsr debugfs directory [ 130.543959][ T7553] bridge1: entered promiscuous mode [ 130.549247][ T7553] bridge1: entered allmulticast mode [ 130.646514][ T7563] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 130.661496][ T7563] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 1 with error 28 [ 130.673861][ T7563] EXT4-fs (loop0): This should not happen!! Data will be lost [ 130.673861][ T7563] [ 130.683730][ T7563] EXT4-fs (loop0): Total free blocks count 0 [ 130.689965][ T7563] EXT4-fs (loop0): Free/Dirty block details [ 130.695889][ T7563] EXT4-fs (loop0): free_blocks=2415919104 [ 130.701832][ T7563] EXT4-fs (loop0): dirty_blocks=16 [ 130.707095][ T7563] EXT4-fs (loop0): Block reservation details [ 130.713120][ T7563] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 131.407764][ T7566] netlink: 300 bytes leftover after parsing attributes in process `syz.9.1422'. [ 131.474916][ T50] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 131.532012][ T7570] loop0: detected capacity change from 0 to 512 [ 131.538921][ T6225] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.565412][ T7570] EXT4-fs warning (device loop0): ext4_enable_quotas:7145: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix. [ 131.588741][ T7570] EXT4-fs (loop0): mount failed [ 131.709594][ T7590] loop9: detected capacity change from 0 to 512 [ 131.728269][ T7590] EXT4-fs: Ignoring removed i_version option [ 131.734478][ T7590] EXT4-fs: Ignoring removed mblk_io_submit option [ 131.752972][ T7590] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 131.787524][ T7590] EXT4-fs (loop9): 1 truncate cleaned up [ 131.799599][ T7590] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 131.834103][ T6893] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.870189][ T7449] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 131.890358][ T7449] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 131.900968][ T7449] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 131.910730][ T7449] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 131.947039][ T29] kauditd_printk_skb: 573 callbacks suppressed [ 131.947058][ T29] audit: type=1326 audit(1738217150.759:8075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7587 comm="syz.6.1431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f3019183ce7 code=0x7ffc0000 [ 131.984189][ T7449] 8021q: adding VLAN 0 to HW filter on device bond0 [ 132.008546][ T7449] 8021q: adding VLAN 0 to HW filter on device team0 [ 132.014827][ T29] audit: type=1326 audit(1738217150.759:8076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7587 comm="syz.6.1431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3019128f29 code=0x7ffc0000 [ 132.019925][ T6920] bridge0: port 1(bridge_slave_0) entered blocking state [ 132.038594][ T29] audit: type=1326 audit(1738217150.759:8077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7587 comm="syz.6.1431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f301918cd29 code=0x7ffc0000 [ 132.045687][ T6920] bridge0: port 1(bridge_slave_0) entered forwarding state [ 132.069270][ T29] audit: type=1326 audit(1738217150.769:8078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7587 comm="syz.6.1431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f3019183ce7 code=0x7ffc0000 [ 132.069309][ T29] audit: type=1326 audit(1738217150.769:8079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7587 comm="syz.6.1431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3019128f29 code=0x7ffc0000 [ 132.106259][ T7449] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 132.123572][ T29] audit: type=1326 audit(1738217150.769:8080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7587 comm="syz.6.1431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f301918cd29 code=0x7ffc0000 [ 132.134014][ T7449] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 132.157352][ T29] audit: type=1326 audit(1738217150.779:8081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7587 comm="syz.6.1431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f3019183ce7 code=0x7ffc0000 [ 132.191135][ T29] audit: type=1326 audit(1738217150.779:8082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7587 comm="syz.6.1431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3019128f29 code=0x7ffc0000 [ 132.214530][ T29] audit: type=1326 audit(1738217150.779:8083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7587 comm="syz.6.1431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f301918cd29 code=0x7ffc0000 [ 132.238188][ T29] audit: type=1326 audit(1738217150.789:8084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7587 comm="syz.6.1431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f3019183ce7 code=0x7ffc0000 [ 132.247100][ T7615] loop7: detected capacity change from 0 to 512 [ 132.279062][ T7615] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 132.280636][ T6920] bridge0: port 2(bridge_slave_1) entered blocking state [ 132.296271][ T6920] bridge0: port 2(bridge_slave_1) entered forwarding state [ 132.342867][ T7615] EXT4-fs (loop7): 1 orphan inode deleted [ 132.348841][ T7615] EXT4-fs (loop7): 1 truncate cleaned up [ 132.357575][ T7615] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 132.387801][ T7627] pimreg: entered allmulticast mode [ 132.407898][ T6274] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.454486][ T7449] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 132.485653][ T7626] pimreg: left allmulticast mode [ 132.508993][ T7640] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7640 comm=syz.7.1443 [ 132.535259][ T7640] loop7: detected capacity change from 0 to 512 [ 132.555358][ T7449] veth0_vlan: entered promiscuous mode [ 132.566627][ T7449] veth1_vlan: entered promiscuous mode [ 132.599280][ T7449] veth0_macvtap: entered promiscuous mode [ 132.607987][ T7449] veth1_macvtap: entered promiscuous mode [ 132.619877][ T7449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 132.630688][ T7449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.640689][ T7449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 132.651188][ T7449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.661244][ T7449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 132.667207][ T7640] EXT4-fs error (device loop7): ext4_acquire_dquot:6927: comm syz.7.1443: Failed to acquire dquot type 1 [ 132.672013][ T7449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.693000][ T7449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 132.694905][ T7640] EXT4-fs (loop7): 1 truncate cleaned up [ 132.703443][ T7449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.708424][ T7449] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 132.715065][ T7656] loop0: detected capacity change from 0 to 512 [ 132.720042][ T7449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 132.743093][ T7449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.743120][ T7640] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 132.752960][ T7449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 132.775956][ T7449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.783378][ T7656] EXT4-fs: Ignoring removed i_version option [ 132.785969][ T7449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 132.792107][ T7656] EXT4-fs: Ignoring removed mblk_io_submit option [ 132.809318][ T7449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.819431][ T7449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 132.830174][ T7449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.840862][ T7656] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 132.840987][ T7449] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 132.859204][ T7640] ext4 filesystem being mounted at /102/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 132.863613][ T7659] loop6: detected capacity change from 0 to 2048 [ 132.874978][ T7449] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.885004][ T7449] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.893799][ T7449] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.902645][ T7449] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.906539][ T7656] EXT4-fs (loop0): 1 truncate cleaned up [ 132.922417][ T7656] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 132.938952][ T6274] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.950790][ T7659] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 133.015828][ T3297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.086114][ T7668] Cannot find del_set index 0 as target [ 133.111027][ T7674] loop0: detected capacity change from 0 to 256 [ 133.121766][ T7676] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 133.131523][ T7671] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 133.146400][ T7671] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 1 with error 28 [ 133.158875][ T7671] EXT4-fs (loop6): This should not happen!! Data will be lost [ 133.158875][ T7671] [ 133.168629][ T7671] EXT4-fs (loop6): Total free blocks count 0 [ 133.174757][ T7671] EXT4-fs (loop6): Free/Dirty block details [ 133.180666][ T7671] EXT4-fs (loop6): free_blocks=2415919104 [ 133.186490][ T7671] EXT4-fs (loop6): dirty_blocks=16 [ 133.191626][ T7671] EXT4-fs (loop6): Block reservation details [ 133.197666][ T7671] EXT4-fs (loop6): i_reserved_data_blocks=1 [ 133.255807][ T7691] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1455'. [ 133.265406][ T7691] FAULT_INJECTION: forcing a failure. [ 133.265406][ T7691] name failslab, interval 1, probability 0, space 0, times 0 [ 133.278170][ T7691] CPU: 1 UID: 0 PID: 7691 Comm: syz.7.1455 Not tainted 6.13.0-syzkaller-07644-gc2da8b3f914f #0 [ 133.278197][ T7691] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 133.278210][ T7691] Call Trace: [ 133.278216][ T7691] [ 133.278224][ T7691] dump_stack_lvl+0xf2/0x150 [ 133.278255][ T7691] dump_stack+0x15/0x1a [ 133.278280][ T7691] should_fail_ex+0x223/0x230 [ 133.278385][ T7691] ? __request_module+0x1ba/0x3e0 [ 133.278506][ T7691] should_failslab+0x8f/0xb0 [ 133.278532][ T7691] __kmalloc_cache_noprof+0x4e/0x320 [ 133.278572][ T7691] ? rtnl_newlink+0x5c5/0x1250 [ 133.278615][ T7691] __request_module+0x1ba/0x3e0 [ 133.278639][ T7691] ? __nla_parse+0x40/0x60 [ 133.278657][ T7691] rtnl_newlink+0x5c5/0x1250 [ 133.278689][ T7691] ? __bpf_ringbuf_reserve+0x2de/0x320 [ 133.278723][ T7691] ? _raw_spin_lock_irqsave+0x3c/0xb0 [ 133.278834][ T7691] ? _raw_spin_unlock_irqrestore+0x2b/0x60 [ 133.278882][ T7691] ? stack_map_peek_elem+0x168/0x1e0 [ 133.278984][ T7691] ? bpf_trace_run3+0x12b/0x1d0 [ 133.279010][ T7691] ? __kfree_skb+0x102/0x150 [ 133.279033][ T7691] ? __memcg_slab_free_hook+0xc9/0x1e0 [ 133.279075][ T7691] ? __rcu_read_unlock+0x4e/0x70 [ 133.279101][ T7691] ? avc_has_perm_noaudit+0x1cc/0x210 [ 133.279174][ T7691] ? selinux_capable+0x1f2/0x260 [ 133.279212][ T7691] ? security_capable+0x81/0x90 [ 133.279243][ T7691] ? ns_capable+0x7d/0xb0 [ 133.279265][ T7691] ? __pfx_rtnl_newlink+0x10/0x10 [ 133.279328][ T7691] rtnetlink_rcv_msg+0x651/0x710 [ 133.279362][ T7691] ? ref_tracker_free+0x3a5/0x410 [ 133.279398][ T7691] ? __dev_queue_xmit+0x186/0x2090 [ 133.279479][ T7691] netlink_rcv_skb+0x12c/0x230 [ 133.279509][ T7691] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 133.279541][ T7691] rtnetlink_rcv+0x1c/0x30 [ 133.279602][ T7691] netlink_unicast+0x599/0x670 [ 133.279639][ T7691] netlink_sendmsg+0x5cc/0x6e0 [ 133.279724][ T7691] ? __pfx_netlink_sendmsg+0x10/0x10 [ 133.279759][ T7691] __sock_sendmsg+0x140/0x180 [ 133.279792][ T7691] ____sys_sendmsg+0x312/0x410 [ 133.279821][ T7691] __sys_sendmsg+0x19d/0x230 [ 133.279946][ T7691] __x64_sys_sendmsg+0x46/0x50 [ 133.279973][ T7691] x64_sys_call+0x2734/0x2dc0 [ 133.280014][ T7691] do_syscall_64+0xc9/0x1c0 [ 133.280044][ T7691] ? clear_bhb_loop+0x55/0xb0 [ 133.280114][ T7691] ? clear_bhb_loop+0x55/0xb0 [ 133.280141][ T7691] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.280167][ T7691] RIP: 0033:0x7f6599aecd29 [ 133.280181][ T7691] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 133.280199][ T7691] RSP: 002b:00007f6598151038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 133.280222][ T7691] RAX: ffffffffffffffda RBX: 00007f6599d05fa0 RCX: 00007f6599aecd29 [ 133.280238][ T7691] RDX: 0000000000000000 RSI: 0000000020000380 RDI: 0000000000000003 [ 133.280304][ T7691] RBP: 00007f6598151090 R08: 0000000000000000 R09: 0000000000000000 [ 133.280369][ T7691] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 133.280447][ T7691] R13: 0000000000000000 R14: 00007f6599d05fa0 R15: 00007ffc5713b518 [ 133.280470][ T7691] [ 133.314964][ T7696] SELinux: failed to load policy [ 133.349464][ T7698] netlink: 300 bytes leftover after parsing attributes in process `syz.7.1458'. [ 133.663549][ T7714] Cannot find del_set index 0 as target [ 133.695037][ T7723] 9pnet_fd: Insufficient options for proto=fd [ 133.717048][ T28] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 133.809442][ T7737] netlink: 24 bytes leftover after parsing attributes in process `syz.9.1470'. [ 134.020232][ T7768] loop0: detected capacity change from 0 to 2048 [ 134.054314][ T7768] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 134.065893][ T7778] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1487'. [ 134.093947][ T3297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.135412][ T7784] 9pnet: Could not find request transport: 0xffffffffffffffff [ 134.187855][ T7792] loop6: detected capacity change from 0 to 256 [ 134.210651][ T7792] FAT-fs (loop6): codepage cp1255 not found [ 134.296363][ T7804] loop0: detected capacity change from 0 to 512 [ 134.320612][ T7808] FAULT_INJECTION: forcing a failure. [ 134.320612][ T7808] name failslab, interval 1, probability 0, space 0, times 0 [ 134.333614][ T7808] CPU: 0 UID: 0 PID: 7808 Comm: syz.3.1497 Not tainted 6.13.0-syzkaller-07644-gc2da8b3f914f #0 [ 134.333638][ T7808] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 134.333650][ T7808] Call Trace: [ 134.333655][ T7808] [ 134.333664][ T7808] dump_stack_lvl+0xf2/0x150 [ 134.333743][ T7808] dump_stack+0x15/0x1a [ 134.333766][ T7808] should_fail_ex+0x223/0x230 [ 134.333807][ T7808] ? audit_log_d_path+0x96/0x250 [ 134.333910][ T7808] should_failslab+0x8f/0xb0 [ 134.333935][ T7808] __kmalloc_cache_noprof+0x4e/0x320 [ 134.333976][ T7808] audit_log_d_path+0x96/0x250 [ 134.334007][ T7808] ? __rcu_read_unlock+0x4e/0x70 [ 134.334028][ T7808] audit_log_d_path_exe+0x42/0x70 [ 134.334120][ T7808] audit_log_task+0x192/0x1c0 [ 134.334149][ T7808] audit_seccomp+0x68/0x130 [ 134.334242][ T7808] __seccomp_filter+0x6fa/0x1180 [ 134.334277][ T7808] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 134.334304][ T7808] ? vfs_write+0x644/0x920 [ 134.334368][ T7808] ? __schedule+0x6fe/0x930 [ 134.334406][ T7808] __secure_computing+0x9f/0x1c0 [ 134.334432][ T7808] syscall_trace_enter+0xd1/0x1f0 [ 134.334459][ T7808] do_syscall_64+0xaa/0x1c0 [ 134.334481][ T7808] ? clear_bhb_loop+0x55/0xb0 [ 134.334528][ T7808] ? clear_bhb_loop+0x55/0xb0 [ 134.334561][ T7808] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.334746][ T7808] RIP: 0033:0x7f1bcff6cd29 [ 134.334833][ T7808] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 134.334851][ T7808] RSP: 002b:00007f1bce5d1038 EFLAGS: 00000246 ORIG_RAX: 00000000000000e4 [ 134.334869][ T7808] RAX: ffffffffffffffda RBX: 00007f1bd0185fa0 RCX: 00007f1bcff6cd29 [ 134.334880][ T7808] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000000 [ 134.334891][ T7808] RBP: 00007f1bce5d1090 R08: 0000000000000000 R09: 0000000000000000 [ 134.334903][ T7808] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 134.334991][ T7808] R13: 0000000000000000 R14: 00007f1bd0185fa0 R15: 00007fff5ed5d528 [ 134.335011][ T7808] [ 134.411487][ T7804] EXT4-fs (loop0): 1 orphan inode deleted [ 134.426486][ T40] EXT4-fs error (device loop0): ext4_release_dquot:6950: comm kworker/u8:2: Failed to release dquot type 1 [ 134.432833][ T7804] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.578021][ T7804] ext4 filesystem being mounted at /370/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 134.608413][ T7804] Process accounting resumed [ 134.616825][ T6920] EXT4-fs error (device loop0): ext4_release_dquot:6950: comm kworker/u8:8: Failed to release dquot type 1 [ 134.629306][ T7804] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 134.646160][ T7817] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1500'. [ 134.674478][ T3297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.785256][ T7829] loop0: detected capacity change from 0 to 512 [ 134.798241][ T7831] loop9: detected capacity change from 0 to 512 [ 134.826786][ T7833] loop7: detected capacity change from 0 to 512 [ 134.845246][ T7831] EXT4-fs warning (device loop9): ext4_enable_quotas:7145: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix. [ 134.864991][ T7831] EXT4-fs (loop9): mount failed [ 134.867982][ T7829] EXT4-fs (loop0): 1 orphan inode deleted [ 134.876230][ T7829] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.884986][ T7833] EXT4-fs (loop7): 1 orphan inode deleted [ 134.890594][ T1707] EXT4-fs error (device loop0): ext4_release_dquot:6950: comm kworker/u8:6: Failed to release dquot type 1 [ 134.908747][ T7833] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.922057][ T1707] EXT4-fs error (device loop7): ext4_release_dquot:6950: comm kworker/u8:6: Failed to release dquot type 1 [ 134.942058][ T7833] ext4 filesystem being mounted at /117/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 134.944583][ T7829] ext4 filesystem being mounted at /372/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 134.975217][ T7833] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 134.985792][ T7829] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 135.008653][ T7833] Process accounting resumed [ 135.014352][ T7829] Process accounting resumed [ 135.020865][ T6274] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.033048][ T11] EXT4-fs error (device loop7): ext4_release_dquot:6950: comm kworker/u8:0: Failed to release dquot type 1 [ 135.046704][ T3297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.056086][ T11] EXT4-fs error (device loop0): ext4_release_dquot:6950: comm kworker/u8:0: Failed to release dquot type 1 [ 135.135022][ T7853] netlink: 300 bytes leftover after parsing attributes in process `syz.0.1512'. [ 135.194748][ T7859] 9pnet: p9_errstr2errno: server reported unknown error ‌@يخ‚ح(للي«QNd [ 135.330239][ T7867] loop7: detected capacity change from 0 to 2048 [ 135.345740][ T7867] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 135.372862][ T6274] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.402674][ T7871] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7871 comm=syz.7.1519 [ 135.431545][ T7871] loop7: detected capacity change from 0 to 512 [ 135.455089][ T7871] EXT4-fs error (device loop7): ext4_acquire_dquot:6927: comm syz.7.1519: Failed to acquire dquot type 1 [ 135.470924][ T7871] EXT4-fs (loop7): 1 truncate cleaned up [ 135.483104][ T7871] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 135.497260][ T7871] ext4 filesystem being mounted at /124/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 135.523514][ T6274] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.554458][ T7877] loop7: detected capacity change from 0 to 256 [ 135.580745][ T7877] FAT-fs (loop7): codepage cp1255 not found [ 135.868882][ T7895] loop9: detected capacity change from 0 to 512 [ 135.885231][ T7895] EXT4-fs: Ignoring removed i_version option [ 135.891298][ T7895] EXT4-fs: Ignoring removed mblk_io_submit option [ 135.917796][ T7895] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 135.935386][ T7895] EXT4-fs (loop9): 1 truncate cleaned up [ 135.948007][ T7895] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 135.994972][ T6893] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.120194][ T7917] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1537'. [ 136.130584][ T7919] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1538'. [ 136.194172][ T7923] loop6: detected capacity change from 0 to 2048 [ 136.223299][ T7923] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 136.236824][ T7930] 9pnet: p9_errstr2errno: server reported unknown error ‌@يخ‚ح(للي«QNd [ 136.453335][ T7934] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 136.468310][ T7934] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 1 with error 28 [ 136.480600][ T7934] EXT4-fs (loop6): This should not happen!! Data will be lost [ 136.480600][ T7934] [ 136.490384][ T7934] EXT4-fs (loop6): Total free blocks count 0 [ 136.496408][ T7934] EXT4-fs (loop6): Free/Dirty block details [ 136.502352][ T7934] EXT4-fs (loop6): free_blocks=2415919104 [ 136.508113][ T7934] EXT4-fs (loop6): dirty_blocks=16 [ 136.513264][ T7934] EXT4-fs (loop6): Block reservation details [ 136.519314][ T7934] EXT4-fs (loop6): i_reserved_data_blocks=1 [ 136.679743][ T7941] FAULT_INJECTION: forcing a failure. [ 136.679743][ T7941] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 136.692868][ T7941] CPU: 1 UID: 0 PID: 7941 Comm: syz.0.1545 Not tainted 6.13.0-syzkaller-07644-gc2da8b3f914f #0 [ 136.692892][ T7941] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 136.692924][ T7941] Call Trace: [ 136.692932][ T7941] [ 136.692941][ T7941] dump_stack_lvl+0xf2/0x150 [ 136.693054][ T7941] dump_stack+0x15/0x1a [ 136.693079][ T7941] should_fail_ex+0x223/0x230 [ 136.693115][ T7941] should_fail+0xb/0x10 [ 136.693205][ T7941] should_fail_usercopy+0x1a/0x20 [ 136.693321][ T7941] _copy_to_iter+0xd5/0xd00 [ 136.693338][ T7941] ? __perf_event_task_sched_in+0x9ac/0xa10 [ 136.693361][ T7941] ? rcu_note_context_switch+0x804/0x970 [ 136.693458][ T7941] ? __rcu_read_unlock+0x4e/0x70 [ 136.693481][ T7941] ? avc_has_perm_noaudit+0x1cc/0x210 [ 136.693509][ T7941] copy_page_to_iter+0x171/0x2b0 [ 136.693531][ T7941] pipe_read+0x270/0x880 [ 136.693580][ T7941] vfs_read+0x5cc/0x6f0 [ 136.693607][ T7941] ksys_read+0xe8/0x1b0 [ 136.693632][ T7941] __x64_sys_read+0x42/0x50 [ 136.693655][ T7941] x64_sys_call+0x2874/0x2dc0 [ 136.693721][ T7941] do_syscall_64+0xc9/0x1c0 [ 136.693818][ T7941] ? clear_bhb_loop+0x55/0xb0 [ 136.693867][ T7941] ? clear_bhb_loop+0x55/0xb0 [ 136.693898][ T7941] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.693930][ T7941] RIP: 0033:0x7fc7342ccd29 [ 136.693947][ T7941] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 136.693968][ T7941] RSP: 002b:00007fc732916038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 136.693990][ T7941] RAX: ffffffffffffffda RBX: 00007fc7344e6080 RCX: 00007fc7342ccd29 [ 136.694005][ T7941] RDX: 0000000000018ff7 RSI: 0000000020019440 RDI: 0000000000000004 [ 136.694051][ T7941] RBP: 00007fc732916090 R08: 0000000000000000 R09: 0000000000000000 [ 136.694065][ T7941] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 136.694079][ T7941] R13: 0000000000000001 R14: 00007fc7344e6080 R15: 00007ffe236c3b08 [ 136.694115][ T7941] [ 137.005325][ T29] kauditd_printk_skb: 442 callbacks suppressed [ 137.005345][ T29] audit: type=1400 audit(1738217155.750:8516): avc: denied { append } for pid=7942 comm="syz.7.1546" name="mISDNtimer" dev="devtmpfs" ino=249 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 137.177933][ T40] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 137.301979][ T7960] loop7: detected capacity change from 0 to 2048 [ 137.335331][ T7960] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 137.359384][ T7973] 9pnet: p9_errstr2errno: server reported unknown error ‌@يخ‚ح(للي«QNd [ 137.423745][ T7974] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1554'. [ 137.442955][ T29] audit: type=1400 audit(1738217156.230:8517): avc: denied { write } for pid=7966 comm="syz.6.1554" name="event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 137.509898][ T7981] loop9: detected capacity change from 0 to 512 [ 137.526614][ T7977] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 137.542059][ T7977] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 1 with error 28 [ 137.554513][ T7977] EXT4-fs (loop7): This should not happen!! Data will be lost [ 137.554513][ T7977] [ 137.564221][ T7977] EXT4-fs (loop7): Total free blocks count 0 [ 137.570226][ T7977] EXT4-fs (loop7): Free/Dirty block details [ 137.576230][ T7977] EXT4-fs (loop7): free_blocks=2415919104 [ 137.582009][ T7977] EXT4-fs (loop7): dirty_blocks=16 [ 137.587322][ T7977] EXT4-fs (loop7): Block reservation details [ 137.593697][ T7977] EXT4-fs (loop7): i_reserved_data_blocks=1 [ 137.618058][ T7981] Quota error (device loop9): v2_read_file_info: Can't read info structure [ 137.629196][ T7993] netlink: 300 bytes leftover after parsing attributes in process `syz.0.1563'. [ 137.643940][ T7981] EXT4-fs warning (device loop9): ext4_enable_quotas:7145: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix. [ 137.669089][ T7987] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1561'. [ 137.674875][ T7981] EXT4-fs (loop9): mount failed [ 137.806257][ T29] audit: type=1400 audit(1738217156.620:8518): avc: denied { tracepoint } for pid=8003 comm="syz.3.1567" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 137.923972][ T29] audit: type=1326 audit(1738217156.740:8519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8015 comm="syz.3.1573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bcff6cd29 code=0x7ffc0000 [ 137.947920][ T29] audit: type=1326 audit(1738217156.740:8520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8015 comm="syz.3.1573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bcff6cd29 code=0x7ffc0000 [ 137.971487][ T29] audit: type=1326 audit(1738217156.740:8521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8015 comm="syz.3.1573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f1bcff6cd29 code=0x7ffc0000 [ 137.995018][ T29] audit: type=1326 audit(1738217156.740:8522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8015 comm="syz.3.1573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f1bcff6cd63 code=0x7ffc0000 [ 138.024805][ T8019] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1574'. [ 138.039953][ T29] audit: type=1326 audit(1738217156.740:8523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8015 comm="syz.3.1573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f1bcff6b7df code=0x7ffc0000 [ 138.063391][ T29] audit: type=1326 audit(1738217156.740:8524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8015 comm="syz.3.1573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f1bcff6cdb7 code=0x7ffc0000 [ 138.134852][ T11] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 138.187348][ T8031] Cannot find del_set index 0 as target [ 138.293360][ T8027] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1578'. [ 138.355769][ T8043] 9pnet: p9_errstr2errno: server reported unknown error ‌@يخ‚ح(للي«QNd [ 138.519512][ T8066] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8066 comm=syz.0.1587 [ 138.539839][ T8068] netlink: 96 bytes leftover after parsing attributes in process `syz.7.1588'. [ 138.643324][ T8079] Cannot find del_set index 0 as target [ 138.868812][ T8100] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1598'. [ 138.926633][ T8078] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1594'. [ 139.032044][ T8106] wireguard0: entered promiscuous mode [ 139.037949][ T8106] wireguard0: entered allmulticast mode [ 139.514231][ T8115] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8115 comm=syz.7.1604 [ 139.621591][ T8115] loop7: detected capacity change from 0 to 512 [ 139.712880][ T8115] EXT4-fs error (device loop7): ext4_acquire_dquot:6927: comm syz.7.1604: Failed to acquire dquot type 1 [ 139.739221][ T8133] loop6: detected capacity change from 0 to 512 [ 139.757609][ T8133] EXT4-fs (loop6): 1 orphan inode deleted [ 139.772359][ T8115] EXT4-fs (loop7): 1 truncate cleaned up [ 139.772477][ T6920] EXT4-fs error (device loop6): ext4_release_dquot:6950: comm kworker/u8:8: Failed to release dquot type 1 [ 139.778659][ T8133] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 139.831581][ T8133] ext4 filesystem being mounted at /104/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 139.847416][ T8115] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 139.873314][ T8133] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 139.893761][ T8115] ext4 filesystem being mounted at /134/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 139.922093][ T6274] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.942848][ T8133] Process accounting resumed [ 139.952083][ T6225] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.971666][ T6920] EXT4-fs error (device loop6): ext4_release_dquot:6950: comm kworker/u8:8: Failed to release dquot type 1 [ 140.045827][ T8147] 9pnet: p9_errstr2errno: server reported unknown error ‌@يخ‚ح(للي«QNd [ 140.081399][ T8151] Cannot find del_set index 0 as target [ 140.199549][ T8145] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1614'. [ 140.308928][ T8178] loop6: detected capacity change from 0 to 512 [ 140.340451][ T8178] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 140.360959][ T8178] EXT4-fs (loop6): 1 truncate cleaned up [ 140.361989][ T8181] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8181 comm=syz.0.1626 [ 140.367998][ T8178] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 140.420544][ T6225] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.715733][ T8206] netlink: 300 bytes leftover after parsing attributes in process `syz.3.1637'. [ 140.835170][ T8221] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8221 comm=syz.6.1641 [ 140.883797][ T8221] loop6: detected capacity change from 0 to 512 [ 140.914455][ T8221] EXT4-fs error (device loop6): ext4_acquire_dquot:6927: comm syz.6.1641: Failed to acquire dquot type 1 [ 140.927612][ T8221] EXT4-fs (loop6): 1 truncate cleaned up [ 140.938954][ T8221] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 140.952265][ T8221] ext4 filesystem being mounted at /115/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 140.976890][ T6225] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.043635][ T8233] loop6: detected capacity change from 0 to 512 [ 141.101832][ T8233] EXT4-fs (loop6): 1 orphan inode deleted [ 141.107748][ T8240] FAULT_INJECTION: forcing a failure. [ 141.107748][ T8240] name failslab, interval 1, probability 0, space 0, times 0 [ 141.118474][ T8233] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 141.120542][ T8240] CPU: 0 UID: 0 PID: 8240 Comm: syz.0.1646 Not tainted 6.13.0-syzkaller-07644-gc2da8b3f914f #0 [ 141.120574][ T8240] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 141.120589][ T8240] Call Trace: [ 141.120599][ T8240] [ 141.120607][ T8240] dump_stack_lvl+0xf2/0x150 [ 141.120692][ T8240] dump_stack+0x15/0x1a [ 141.120719][ T8240] should_fail_ex+0x223/0x230 [ 141.120757][ T8240] ? nf_tables_newtable+0x3a1/0xee0 [ 141.120792][ T8240] should_failslab+0x8f/0xb0 [ 141.120879][ T8240] __kmalloc_cache_noprof+0x4e/0x320 [ 141.120919][ T8240] nf_tables_newtable+0x3a1/0xee0 [ 141.120960][ T8240] nfnetlink_rcv+0xb3e/0x15d0 [ 141.120983][ T8240] ? kmem_cache_free+0xdc/0x2d0 [ 141.121098][ T8240] netlink_unicast+0x599/0x670 [ 141.121203][ T8240] netlink_sendmsg+0x5cc/0x6e0 [ 141.121321][ T8240] ? __pfx_netlink_sendmsg+0x10/0x10 [ 141.121361][ T8240] __sock_sendmsg+0x140/0x180 [ 141.121402][ T8240] ____sys_sendmsg+0x312/0x410 [ 141.121440][ T8240] __sys_sendmsg+0x19d/0x230 [ 141.121490][ T8240] __x64_sys_sendmsg+0x46/0x50 [ 141.121531][ T8240] x64_sys_call+0x2734/0x2dc0 [ 141.121568][ T8240] do_syscall_64+0xc9/0x1c0 [ 141.121597][ T8240] ? clear_bhb_loop+0x55/0xb0 [ 141.121630][ T8240] ? clear_bhb_loop+0x55/0xb0 [ 141.121708][ T8240] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.121741][ T8240] RIP: 0033:0x7fc7342ccd29 [ 141.121759][ T8240] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 141.121849][ T8240] RSP: 002b:00007fc732937038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 141.121872][ T8240] RAX: ffffffffffffffda RBX: 00007fc7344e5fa0 RCX: 00007fc7342ccd29 [ 141.121961][ T8240] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000003 [ 141.121976][ T8240] RBP: 00007fc732937090 R08: 0000000000000000 R09: 0000000000000000 [ 141.122022][ T8240] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 141.122037][ T8240] R13: 0000000000000000 R14: 00007fc7344e5fa0 R15: 00007ffe236c3b08 [ 141.122065][ T8240] [ 141.136912][ T1707] EXT4-fs error (device loop6): ext4_release_dquot:6950: comm kworker/u8:6: Failed to release dquot type 1 [ 141.167730][ T8233] ext4 filesystem being mounted at /116/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 141.374540][ T8233] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 141.415554][ T8232] Process accounting resumed [ 141.430333][ T6225] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.454398][ T376] EXT4-fs error (device loop6): ext4_release_dquot:6950: comm kworker/u8:5: Failed to release dquot type 1 [ 141.701622][ T8265] loop6: detected capacity change from 0 to 512 [ 141.720018][ T8265] ext4: Unknown parameter 'nouser_xattr' [ 141.749617][ T8279] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8279 comm=syz.3.1661 [ 141.765621][ T8277] loop7: detected capacity change from 0 to 512 [ 141.767469][ T8265] loop6: detected capacity change from 0 to 164 [ 141.797622][ T8277] EXT4-fs (loop7): 1 orphan inode deleted [ 141.805090][ T8277] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 141.844725][ T8277] ext4 filesystem being mounted at /141/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 141.849024][ T1707] EXT4-fs error (device loop7): ext4_release_dquot:6950: comm kworker/u8:6: Failed to release dquot type 1 [ 141.873142][ T8277] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 141.892063][ T8277] Process accounting resumed [ 141.898576][ T6274] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.910745][ T6920] EXT4-fs error (device loop7): ext4_release_dquot:6950: comm kworker/u8:8: Failed to release dquot type 1 [ 142.032199][ T29] kauditd_printk_skb: 509 callbacks suppressed [ 142.032217][ T29] audit: type=1400 audit(1738217160.830:9024): avc: denied { execute } for pid=8301 comm="syz.3.1670" name="file0" dev="tmpfs" ino=293 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 142.060632][ T29] audit: type=1400 audit(1738217160.830:9025): avc: denied { execute_no_trans } for pid=8301 comm="syz.3.1670" path="/53/file0" dev="tmpfs" ino=293 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 142.083998][ T29] audit: type=1326 audit(1738217160.840:9026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8301 comm="syz.3.1670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bcff6cd29 code=0x7ffc0000 [ 142.109029][ T29] audit: type=1326 audit(1738217160.840:9027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8301 comm="syz.3.1670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bcff6cd29 code=0x7ffc0000 [ 142.132679][ T29] audit: type=1326 audit(1738217160.840:9028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8301 comm="syz.3.1670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1bcff6cd29 code=0x7ffc0000 [ 142.156241][ T29] audit: type=1326 audit(1738217160.840:9029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8301 comm="syz.3.1670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bcff6cd29 code=0x7ffc0000 [ 142.180239][ T29] audit: type=1326 audit(1738217160.840:9030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8301 comm="syz.3.1670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1bcff6cd29 code=0x7ffc0000 [ 142.203685][ T29] audit: type=1400 audit(1738217160.840:9031): avc: denied { create } for pid=8301 comm="syz.3.1670" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 142.223872][ T29] audit: type=1326 audit(1738217160.840:9032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8301 comm="syz.3.1670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bcff6cd29 code=0x7ffc0000 [ 142.247352][ T29] audit: type=1326 audit(1738217160.840:9033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8301 comm="syz.3.1670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f1bcff6cd29 code=0x7ffc0000 [ 142.373410][ T8315] FAULT_INJECTION: forcing a failure. [ 142.373410][ T8315] name failslab, interval 1, probability 0, space 0, times 0 [ 142.386106][ T8315] CPU: 0 UID: 0 PID: 8315 Comm: syz.0.1674 Not tainted 6.13.0-syzkaller-07644-gc2da8b3f914f #0 [ 142.386136][ T8315] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 142.386161][ T8315] Call Trace: [ 142.386243][ T8315] [ 142.386251][ T8315] dump_stack_lvl+0xf2/0x150 [ 142.386284][ T8315] dump_stack+0x15/0x1a [ 142.386310][ T8315] should_fail_ex+0x223/0x230 [ 142.386354][ T8315] should_failslab+0x8f/0xb0 [ 142.386412][ T8315] kmem_cache_alloc_noprof+0x52/0x320 [ 142.386490][ T8315] ? getname_flags+0x81/0x3b0 [ 142.386523][ T8315] getname_flags+0x81/0x3b0 [ 142.386586][ T8315] __x64_sys_linkat+0x6b/0xa0 [ 142.386617][ T8315] x64_sys_call+0x14e3/0x2dc0 [ 142.386649][ T8315] do_syscall_64+0xc9/0x1c0 [ 142.386677][ T8315] ? clear_bhb_loop+0x55/0xb0 [ 142.386759][ T8315] ? clear_bhb_loop+0x55/0xb0 [ 142.386792][ T8315] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.386822][ T8315] RIP: 0033:0x7fc7342ccd29 [ 142.386841][ T8315] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 142.386864][ T8315] RSP: 002b:00007fc732937038 EFLAGS: 00000246 ORIG_RAX: 0000000000000109 [ 142.386886][ T8315] RAX: ffffffffffffffda RBX: 00007fc7344e5fa0 RCX: 00007fc7342ccd29 [ 142.386941][ T8315] RDX: ffffffffffffff9c RSI: 0000000000000000 RDI: ffffffffffffff9c [ 142.386956][ T8315] RBP: 00007fc732937090 R08: 0000000000000000 R09: 0000000000000000 [ 142.386970][ T8315] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 142.386984][ T8315] R13: 0000000000000000 R14: 00007fc7344e5fa0 R15: 00007ffe236c3b08 [ 142.387006][ T8315] [ 142.396159][ T8319] 9pnet: p9_errstr2errno: server reported unknown error ‌@يخ‚ح(للي«QNd [ 142.522317][ T8325] __nla_validate_parse: 6 callbacks suppressed [ 142.522334][ T8325] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1675'. [ 142.640876][ T8334] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1681'. [ 142.737933][ T8349] loop9: detected capacity change from 0 to 512 [ 142.738456][ T8341] Cannot find del_set index 0 as target [ 142.747637][ T8349] EXT4-fs: Ignoring removed i_version option [ 142.756083][ T8349] EXT4-fs: Ignoring removed mblk_io_submit option [ 142.768062][ T8351] netlink: 300 bytes leftover after parsing attributes in process `syz.3.1688'. [ 142.795536][ T8349] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 142.813383][ T8349] EXT4-fs (loop9): 1 truncate cleaned up [ 142.823863][ T8349] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 142.862831][ T6893] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.931682][ T8377] FAULT_INJECTION: forcing a failure. [ 142.931682][ T8377] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 142.934557][ T8373] loop7: detected capacity change from 0 to 512 [ 142.944861][ T8377] CPU: 0 UID: 0 PID: 8377 Comm: syz.6.1697 Not tainted 6.13.0-syzkaller-07644-gc2da8b3f914f #0 [ 142.945013][ T8377] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 142.945029][ T8377] Call Trace: [ 142.945037][ T8377] [ 142.945046][ T8377] dump_stack_lvl+0xf2/0x150 [ 142.945080][ T8377] dump_stack+0x15/0x1a [ 142.945106][ T8377] should_fail_ex+0x223/0x230 [ 142.945216][ T8377] should_fail+0xb/0x10 [ 142.945274][ T8377] should_fail_usercopy+0x1a/0x20 [ 142.945315][ T8377] _copy_from_iter+0xd5/0xd00 [ 142.945361][ T8377] ? kmalloc_reserve+0x16e/0x190 [ 142.945390][ T8377] ? __build_skb_around+0x196/0x1f0 [ 142.945419][ T8377] ? __virt_addr_valid+0x1ed/0x250 [ 142.945501][ T8377] ? __check_object_size+0x364/0x520 [ 142.945542][ T8377] netlink_sendmsg+0x460/0x6e0 [ 142.945652][ T8377] ? __pfx_netlink_sendmsg+0x10/0x10 [ 142.945690][ T8377] __sock_sendmsg+0x140/0x180 [ 142.945747][ T8377] __sys_sendto+0x1a8/0x230 [ 142.945786][ T8377] __x64_sys_sendto+0x78/0x90 [ 142.945817][ T8377] x64_sys_call+0x29fa/0x2dc0 [ 142.945848][ T8377] do_syscall_64+0xc9/0x1c0 [ 142.945956][ T8377] ? clear_bhb_loop+0x55/0xb0 [ 142.945988][ T8377] ? clear_bhb_loop+0x55/0xb0 [ 142.946034][ T8377] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.946067][ T8377] RIP: 0033:0x7f301918cd29 [ 142.946086][ T8377] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 142.946108][ T8377] RSP: 002b:00007f30177f7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 142.946189][ T8377] RAX: ffffffffffffffda RBX: 00007f30193a5fa0 RCX: 00007f301918cd29 [ 142.946204][ T8377] RDX: 0000000000000090 RSI: 00000000200000c0 RDI: 0000000000000003 [ 142.946260][ T8377] RBP: 00007f30177f7090 R08: 0000000000000000 R09: 0000000000000000 [ 142.946275][ T8377] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 142.946290][ T8377] R13: 0000000000000000 R14: 00007f30193a5fa0 R15: 00007ffc7b5a4298 [ 142.946313][ T8377] [ 143.006329][ T8378] netlink: 96 bytes leftover after parsing attributes in process `syz.9.1693'. [ 143.052825][ T8373] EXT4-fs warning (device loop7): ext4_enable_quotas:7145: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix. [ 143.174989][ T8373] EXT4-fs (loop7): mount failed [ 143.229056][ T8390] loop9: detected capacity change from 0 to 512 [ 143.265931][ T8390] EXT4-fs (loop9): 1 orphan inode deleted [ 143.281703][ T8390] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 143.296028][ T28] EXT4-fs error (device loop9): ext4_release_dquot:6950: comm kworker/u8:1: Failed to release dquot type 1 [ 143.326055][ T8390] ext4 filesystem being mounted at /95/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 143.365366][ T8390] EXT4-fs (loop9): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 143.414596][ T8390] Process accounting resumed [ 143.433567][ T6893] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.461441][ T111] EXT4-fs error (device loop9): ext4_release_dquot:6950: comm kworker/u8:4: Failed to release dquot type 1 [ 143.478379][ T8405] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1706'. [ 143.494824][ T8407] loop6: detected capacity change from 0 to 512 [ 143.539501][ T8409] loop9: detected capacity change from 0 to 512 [ 143.567450][ T8407] EXT4-fs warning (device loop6): ext4_enable_quotas:7145: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix. [ 143.570158][ T8415] loop7: detected capacity change from 0 to 2048 [ 143.587487][ T8407] EXT4-fs (loop6): mount failed [ 143.610931][ T8409] EXT4-fs warning (device loop9): ext4_enable_quotas:7145: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix. [ 143.614313][ T8415] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 143.646961][ T8409] EXT4-fs (loop9): mount failed [ 143.726129][ T6274] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.807511][ T8431] FAULT_INJECTION: forcing a failure. [ 143.807511][ T8431] name failslab, interval 1, probability 0, space 0, times 0 [ 143.820242][ T8431] CPU: 1 UID: 0 PID: 8431 Comm: syz.3.1711 Not tainted 6.13.0-syzkaller-07644-gc2da8b3f914f #0 [ 143.820270][ T8431] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 143.820283][ T8431] Call Trace: [ 143.820290][ T8431] [ 143.820298][ T8431] dump_stack_lvl+0xf2/0x150 [ 143.820393][ T8431] dump_stack+0x15/0x1a [ 143.820415][ T8431] should_fail_ex+0x223/0x230 [ 143.820451][ T8431] should_failslab+0x8f/0xb0 [ 143.820481][ T8431] __kmalloc_node_track_caller_noprof+0xa8/0x410 [ 143.820535][ T8431] ? v9fs_session_init+0x4c/0xda0 [ 143.820559][ T8431] kstrdup+0x38/0x80 [ 143.820579][ T8431] v9fs_session_init+0x4c/0xda0 [ 143.820650][ T8431] ? should_fail_ex+0xd7/0x230 [ 143.820716][ T8431] ? v9fs_mount+0x53/0x570 [ 143.820743][ T8431] ? should_failslab+0x8f/0xb0 [ 143.820766][ T8431] ? __kmalloc_cache_noprof+0x186/0x320 [ 143.820887][ T8431] v9fs_mount+0x69/0x570 [ 143.820919][ T8431] ? __pfx_v9fs_mount+0x10/0x10 [ 143.820993][ T8431] legacy_get_tree+0x77/0xd0 [ 143.821024][ T8431] vfs_get_tree+0x56/0x1e0 [ 143.821060][ T8431] do_new_mount+0x227/0x690 [ 143.821093][ T8431] path_mount+0x49b/0xb30 [ 143.821253][ T8431] __se_sys_mount+0x27f/0x2d0 [ 143.821282][ T8431] ? fput+0x1c4/0x200 [ 143.821319][ T8431] __x64_sys_mount+0x67/0x80 [ 143.821395][ T8431] x64_sys_call+0x2c84/0x2dc0 [ 143.821469][ T8431] do_syscall_64+0xc9/0x1c0 [ 143.821496][ T8431] ? clear_bhb_loop+0x55/0xb0 [ 143.821554][ T8431] ? clear_bhb_loop+0x55/0xb0 [ 143.821586][ T8431] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.821617][ T8431] RIP: 0033:0x7f1bcff6cd29 [ 143.821635][ T8431] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 143.821680][ T8431] RSP: 002b:00007f1bce5d1038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 143.821700][ T8431] RAX: ffffffffffffffda RBX: 00007f1bd0185fa0 RCX: 00007f1bcff6cd29 [ 143.821713][ T8431] RDX: 0000000020000080 RSI: 0000000020000000 RDI: 0000000000000000 [ 143.821728][ T8431] RBP: 00007f1bce5d1090 R08: 0000000020000300 R09: 0000000000000000 [ 143.821741][ T8431] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 143.821755][ T8431] R13: 0000000000000000 R14: 00007f1bd0185fa0 R15: 00007fff5ed5d528 [ 143.821773][ T8431] [ 144.023824][ T8442] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8442 comm=syz.0.1716 [ 144.098460][ T8448] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1719'. [ 144.408416][ T8468] netlink: 300 bytes leftover after parsing attributes in process `syz.3.1728'. [ 144.432873][ T8470] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8470 comm=syz.6.1729 [ 144.457013][ T8470] loop6: detected capacity change from 0 to 512 [ 144.494443][ T8470] EXT4-fs error (device loop6): ext4_acquire_dquot:6927: comm syz.6.1729: Failed to acquire dquot type 1 [ 144.496021][ T8478] netlink: 96 bytes leftover after parsing attributes in process `syz.9.1732'. [ 144.510579][ T8470] EXT4-fs (loop6): 1 truncate cleaned up [ 144.525520][ T8470] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 144.542680][ T8470] ext4 filesystem being mounted at /126/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 144.615457][ T8488] loop6: detected capacity change from 0 to 512 [ 144.646199][ T8488] EXT4-fs (loop6): 1 orphan inode deleted [ 144.653856][ T8488] ext4 filesystem being mounted at /128/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 144.664786][ T40] EXT4-fs error (device loop6): ext4_release_dquot:6950: comm kworker/u8:2: Failed to release dquot type 1 [ 144.676875][ T8488] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 144.698342][ T8488] Process accounting resumed [ 144.710062][ T40] EXT4-fs error (device loop6): ext4_release_dquot:6950: comm kworker/u8:2: Failed to release dquot type 1 [ 144.830240][ T8508] netlink: 96 bytes leftover after parsing attributes in process `syz.9.1740'. [ 145.015321][ T8527] 9pnet: p9_errstr2errno: server reported unknown error ‌@يخ‚ح(للي«QNd [ 145.062795][ T8532] Cannot find del_set index 0 as target [ 145.386022][ T8563] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 145.458903][ T8563] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1762'. [ 145.602720][ T8569] loop6: detected capacity change from 0 to 2048 [ 145.711454][ T8577] Cannot find del_set index 0 as target [ 145.935923][ T8611] loop7: detected capacity change from 0 to 512 [ 145.983314][ T8613] loop6: detected capacity change from 0 to 512 [ 145.998205][ T8611] ext4 filesystem being mounted at /162/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 146.014486][ T8613] EXT4-fs (loop6): 1 orphan inode deleted [ 146.032196][ T40] EXT4-fs error (device loop6): ext4_release_dquot:6950: comm kworker/u8:2: Failed to release dquot type 1 [ 146.032200][ T8613] ext4 filesystem being mounted at /137/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 146.056032][ T8613] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 146.103678][ T8613] Process accounting resumed [ 146.119990][ T111] EXT4-fs error (device loop6): ext4_release_dquot:6950: comm kworker/u8:4: Failed to release dquot type 1 [ 146.196554][ T8621] bridge0: port 3(ipvlan2) entered blocking state [ 146.203190][ T8621] bridge0: port 3(ipvlan2) entered disabled state [ 146.212580][ T8621] ipvlan2: entered allmulticast mode [ 146.217914][ T8621] bridge0: entered allmulticast mode [ 146.224478][ T8621] ipvlan2: left allmulticast mode [ 146.229565][ T8621] bridge0: left allmulticast mode [ 146.704614][ T8665] bridge0: port 3(ipvlan0) entered blocking state [ 146.711300][ T8665] bridge0: port 3(ipvlan0) entered disabled state [ 146.719564][ T8665] ipvlan0: entered allmulticast mode [ 146.725033][ T8665] bridge0: entered allmulticast mode [ 146.731920][ T8665] ipvlan0: left allmulticast mode [ 146.736980][ T8665] bridge0: left allmulticast mode [ 146.931882][ T8684] loop6: detected capacity change from 0 to 256 [ 146.945020][ T8684] FAT-fs (loop6): codepage cp1255 not found [ 147.028246][ T8690] Cannot find del_set index 0 as target [ 147.059058][ T8694] loop9: detected capacity change from 0 to 2048 [ 147.157850][ T8707] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8707 comm=syz.9.1810 [ 147.180209][ T8707] loop9: detected capacity change from 0 to 512 [ 147.197361][ T8707] __quota_error: 343 callbacks suppressed [ 147.197379][ T8707] Quota error (device loop9): do_insert_tree: Free block already used in tree: block 2 [ 147.213013][ T8707] Quota error (device loop9): qtree_write_dquot: Error -5 occurred while creating quota [ 147.224854][ T8707] EXT4-fs error (device loop9): ext4_acquire_dquot:6927: comm syz.9.1810: Failed to acquire dquot type 1 [ 147.236953][ T8707] EXT4-fs (loop9): 1 truncate cleaned up [ 147.243229][ T8707] ext4 filesystem being mounted at /109/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 147.266731][ T6893] ================================================================== [ 147.275040][ T6893] BUG: KCSAN: data-race in filemap_flush / xas_set_mark [ 147.282227][ T6893] [ 147.284560][ T6893] write to 0xffff8881004c43a4 of 4 bytes by task 28 on cpu 1: [ 147.292116][ T6893] xas_set_mark+0x131/0x150 [ 147.296634][ T6893] __folio_start_writeback+0x1e8/0x430 [ 147.302290][ T6893] __block_write_full_folio+0x506/0x8c0 [ 147.307868][ T6893] block_write_full_folio+0x293/0x2b0 [ 147.313276][ T6893] write_cache_pages+0x62/0x100 [ 147.318162][ T6893] blkdev_writepages+0x59/0x90 [ 147.322950][ T6893] do_writepages+0x1d8/0x480 [ 147.327581][ T6893] __writeback_single_inode+0x89/0x850 [ 147.333073][ T6893] writeback_sb_inodes+0x461/0xa30 [ 147.338305][ T6893] __writeback_inodes_wb+0x9a/0x1a0 [ 147.343536][ T6893] wb_writeback+0x274/0x640 [ 147.348064][ T6893] wb_workfn+0x67f/0x940 [ 147.352340][ T6893] process_scheduled_works+0x483/0x9a0 [ 147.357812][ T6893] worker_thread+0x51d/0x6f0 [ 147.362414][ T6893] kthread+0x4ae/0x520 [ 147.366503][ T6893] ret_from_fork+0x4b/0x60 [ 147.370966][ T6893] ret_from_fork_asm+0x1a/0x30 [ 147.375746][ T6893] [ 147.378066][ T6893] read to 0xffff8881004c43a4 of 4 bytes by task 6893 on cpu 0: [ 147.385616][ T6893] filemap_flush+0x9a/0x120 [ 147.390133][ T6893] sync_blockdev_nowait+0x29/0x40 [ 147.395175][ T6893] sync_filesystem+0xe3/0x190 [ 147.399857][ T6893] generic_shutdown_super+0x46/0x220 [ 147.405162][ T6893] kill_block_super+0x2a/0x70 [ 147.409851][ T6893] ext4_kill_sb+0x44/0x80 [ 147.414191][ T6893] deactivate_locked_super+0x7d/0x1c0 [ 147.419689][ T6893] deactivate_super+0x9f/0xb0 [ 147.424470][ T6893] cleanup_mnt+0x268/0x2e0 [ 147.428913][ T6893] __cleanup_mnt+0x19/0x20 [ 147.433343][ T6893] task_work_run+0x13a/0x1a0 [ 147.437949][ T6893] syscall_exit_to_user_mode+0xa8/0x120 [ 147.443673][ T6893] do_syscall_64+0xd6/0x1c0 [ 147.448195][ T6893] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.454097][ T6893] [ 147.456446][ T6893] value changed: 0x02000021 -> 0x04000021 [ 147.462201][ T6893] [ 147.464526][ T6893] Reported by Kernel Concurrency Sanitizer on: [ 147.470699][ T6893] CPU: 0 UID: 0 PID: 6893 Comm: syz-executor Not tainted 6.13.0-syzkaller-07644-gc2da8b3f914f #0 [ 147.481218][ T6893] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 147.491626][ T6893] ==================================================================