last executing test programs: 3m54.632631306s ago: executing program 2 (id=1140): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f60000008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000900)={&(0x7f0000000380)='kmem_cache_free\x00', r1}, 0x18) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x1ff) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000000)=0x60) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(0xffffffffffffffff, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000f80)={0x30, r3, 0x1, 0x70bd28, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x9, 0x1a}}}}, [@NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x4}}]}]}, 0x30}}, 0x800) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000640)={0x2, &(0x7f00000000c0)=[{0x37, 0x8, 0x4, 0x9}, {0x7, 0x9, 0x5}]}) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/131, 0x83}, {0x0}], 0x2, 0xffffff8d, 0x3) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x32600) waitid(0x1, 0x0, 0x0, 0x0, 0x0) 3m54.623828816s ago: executing program 2 (id=1142): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) munlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) 3m54.589987017s ago: executing program 2 (id=1143): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) 3m54.274872083s ago: executing program 2 (id=1147): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000002c0), 0x1, 0x553, &(0x7f0000001080)="$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") r0 = syz_io_uring_setup(0x49c, &(0x7f0000000400)={0x0, 0x975f, 0x100, 0x7fff, 0x1ad}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000100)={0x0, 0x989680}, 0x1, 0x4, 0x1}) io_uring_enter(r0, 0x627, 0xc1040000, 0x43, 0x0, 0x0) r3 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0xdc) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r3, 0x1000) fallocate(r3, 0x0, 0x0, 0x8800000) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="09000000040000000800000010"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) unshare(0x2040400) r6 = fsopen(&(0x7f0000000440)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) unshare(0x2000400) ioctl$IOC_PR_CLEAR(r3, 0x401070cd, &(0x7f0000000080)={0x8}) fsmount(r6, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), 0xffffffffffffffff) writev(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x800400, &(0x7f00000002c0)={[{@norecovery}, {@max_batch_time={'max_batch_time', 0x3d, 0x3}}]}, 0xee, 0x474, &(0x7f00000004c0)="$eJzs3EtsG0UfAPD/rvNo+viSr5RHSwuBgqh4JE36oAcuIJA4gIQEhyJOIUmrUrdBTZBoVUHhUI6oEnfEEYk7Eie4IOCAkLjCHVWqql5aOBmtvZs6jp06tRu3+PeT1p7ZXWfm79mxxzN2Auhb49lNErE1Iv6IiNFaduUJ47W7G9fOz/597fxsEpXKm1eT6nnXr52fLU4tHrellqlUIoaz5HCTci++EzFTLs+fyfOTS6fen1w8e+65E6dmjs8fnz89feTIwQN7hg5PH+oovjS/z+K6vuujhd07X3370uuzRy+9+/M3WX235sfr47gtWbQNxmvPbqNHs5snOyrsrvJrdrOtbkcy0PrkiQ2oEO0rRUTWXIPV/j8apRhZPjYar3za08oBd1SlUqk0e3/OXagA/2FJ9LoGQG8Ub/TZ599i26Chx13hyou1D0BZ3DfyrXZkYHnuYLDh8203jUfE0Qv/fJlt0Y15CACAW/g+G/8822z8l8YDdef9L19DGYuI/0fE9oi4LyJ2RMT9EdVzH4yIh9ZZfuMKyerxT3r5tgJrUzb+eyFf21o5/itGfzFWynPbqvEPJsdOlOf358/JvhgczvJTa5Txw8u/f16kNzUcqx//ZVtWfjEWzOtxeaBhgm5uZmmm07gLVz6J2DXQLP4kimWcJCJ2RsSu2yzjxNNf72517Nbxr2GNdaZ2Vb6KeKrW/hdiRfw3myppuT459fzh6UOTm6I8v3+yuCpW++W3i2+0Kr+j+Lsga//NTa//5VXgsWRTxOLZcyer67WL6y/j4p+f1fXpFavLWfzptxHrvv6Hkreq6aF834czS0tnpiKGktdW75+++dgiX5yfxb9vb/P+v72uxg9HRHYR74mIR/JF3KztHouIxyNi7xrx//TSE++1Oraq/UeK+NeYle+iLP65W7V/1Lf/+hOlkz9+13b8Tdv/YDW1L9/TzutfuxXs5LkDAACAe0Va/Q58kk4sp9N0YqL2Hf4dsTktLywuPXNs4YPTc7Xvyo/FYFrMdI3WzYdO5XPDRX66IX8gnzf+ojRSzU/MLpTneh089LktLfp/5q9Sr2sH3HFdWEcD7lH6P/Qv/R/6l/4P/Uv/h/7VrP9/3IN6ABvP+z/0L/0f+pf+D/1L/4e+1PK38WlHP/nvcaL43wkd/J2rvY+i48TInSwi0t4H2BeJgU4u43YSw00P9fiFCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoEv+DQAA//9L2OJW") truncate(&(0x7f00000000c0)='./file1\x00', 0x8000008) 3m53.559163427s ago: executing program 2 (id=1152): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) ioctl$TIOCNOTTY(0xffffffffffffffff, 0x5422) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000100), 0x2, 0x4fd, &(0x7f0000000b00)="$eJzs3ctvW1kZAPDv3jycyWQmGZgFoAHKMFBQVTtxZ6LRbBhWI4RGQsySRSckThTFiaPYGZrQRbpkj0QlVrDiHwCJBVJX7JFYwI5NWSDxqEANEgsjX19nnIcbq03sNv79pCufe47t75xa9xzrc3NPACPrWkQcRMRkRHwcEbN5fZIf8X77aD3v8aO7y4eP7i4n0Wx+9M8ka2/VRddrWl7O33MqIr7/QcQPkxNB/xhR39vfWKpWKzt5VamxuV2q7+3fXN9cWqusVbbK5cWFxfl3b71TvqCR/vqo9LvffvHhHw6++eNWt2byuu5xXKT20CeO4rSMR8R3LyPYEIzl45l8mhc/1Yu4SGlEfCYi3syu/9kYyz7N445/TN+K/NIGAF5QzeZsNGe7zwGAqy7NcmBJWsxzATORpsViO4f3ekyn1Vq9cWO1tru10s6VzcVEurpercznucK5mEhW18crC1m5c16tlE+c34qI1yLip4WXsvPicq26MswvPgAwwl4+sf7/p9Be/wGAK67r1/zCMPsBAAyO/80HAKPH+g8Ao8f6DwCjx/oPAKPH+g8Ao8f6DwAj5Xsfftg6mof5/a9XPtnb3ah9cnOlUt8obu4uF5drO9vFtVptLbtnz+Z571et1bYX3o7dO6VGpd4o1ff2b2/Wdrcat7P7et+uTAxkVADAk7z25Qd/TiLi4L2XsiO67vd/7lr9xmX3DrhM6bA7AAzN2LA7AAzN6d2+gFEhHw90bdF7r6t66lThpPt9vX2a7xsKPEeuf/4Z8v/AC03+H0bX0+X/fZeHq0D+H0ZXs5nY8x8ARowcP5Cc0979+/98s+ukv9//AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4EqayY4kLeZ7gc9EmhaLEa9ExFxMJKvr1cp8RLwaEX8qTBRa5wsRYd8gAHiRpX9L8v2/rs++NXOydbLw30L2GBE/+vlHP7uz1GjsLERMJv86qm/cz+vLw+g/AHCezjrdWcc7Hj+6u9w5Btmfv3+7vbloK+5hfrRbxmM8e5zKcg3T/07y87bW95WxC4h/cC8iPnfW+JMsNzKX73x6Mn4r9isDjZ8ei59mbe3H1r/FZy+gLzBqHrTmn/fPuv7SuJY9nn39T2Uz1LPrzH+Hp+a/9Gj+G+sx/13rN8bbv//OqcrmbLvtXsQXxiMOO2/eNf904ic94r/VZ/y/vPGlN3u1NX8RcT3OGn9yLFapsbldqu/t31zfXFqrrFW2yuXFhcX5d2+9Uy5lOepSJ1N92j/eu/Fqr/it8U/3iD91zvi/1uf4f/m/j3/wlSfE/8ZXz/78X39C/Naa+PU+4y9N/2aqV1sr/kqP8Z/3+d/oM/7Dv+6v9PlUAGAA6nv7G0vVamXnsgvp5YfICknEwQCG0y4UfvWTDwYV6xIL8Xx0Q+F5Kgx7ZgIu26cX/bB7AgAAAAAAAAAAAAAA9DKIPyca9hgBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4uv4fAAD//2KH0wQ=") fchownat(0xffffffffffffff9c, 0x0, 0xee01, 0xee01, 0x1000) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x4fed0) r1 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0, 0x0, 0x1}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x4000000) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="280000001000010829bd700019e890", @ANYRES32=0x0, @ANYBLOB="288000000000"], 0x28}, 0x1, 0x0, 0x0, 0x5b4efbb362ec214f}, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback=0xc68fc81c5687e784, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="aa", 0x1, 0x4044, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x6}, 0x3}, 0x1c) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000280)={'syztnl1\x00', &(0x7f00000004c0)={'ip6_vti0\x00', 0x0, 0x4, 0x9, 0x7f, 0x9, 0x9, @empty, @mcast2, 0x8, 0x8000, 0xffffffff, 0x8}}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000880)={r1, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, &(0x7f0000000600)=[0x0], &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0], 0x0, 0xc0, &(0x7f0000000680)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f00000006c0), &(0x7f0000000700), 0x8, 0x96, 0x8, 0x8, &(0x7f0000000740)}}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000900)=@bpf_lsm={0x1d, 0x13, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xc02}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@map_idx_val={0x18, 0xb, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0xe}, @map_idx={0x18, 0x0, 0x5, 0x0, 0x8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000001c0)='syzkaller\x00', 0x24000, 0x29, &(0x7f0000000200)=""/41, 0x41000, 0x4, '\x00', r5, 0x1b, r1, 0x8, &(0x7f0000000540)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000000580)={0x5, 0xa, 0xffffff71, 0x10}, 0x10, r6, 0x0, 0x0, &(0x7f00000008c0), 0x0, 0x10, 0x9}, 0x94) shutdown(0xffffffffffffffff, 0x1) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) writev(r7, &(0x7f0000000140)=[{&(0x7f0000001200)="10", 0x69000}], 0x1) 3m53.036413197s ago: executing program 2 (id=1161): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101804bc9555e1affd5020000000900010001797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000000009000300737975320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x24040010}, 0x0) 3m53.016464478s ago: executing program 32 (id=1161): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101804bc9555e1affd5020000000900010001797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000000009000300737975320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x24040010}, 0x0) 3m19.399017217s ago: executing program 4 (id=1612): bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_CTL(0xffffffffffffffff, 0x40049421, 0x3) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r0 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x103000) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000005ec0)={0x0, 0x3938700}) lsetxattr$trusted_overlay_upper(&(0x7f0000000000)='.\x00', 0x0, &(0x7f0000000100)={0x0, 0xfb, 0x2e, 0x4, 0x38, "0f1956cd1cd7ba11dd967fc3924794a9", "4dfd34abbb2f4677d3ba233ef2b2ce453cb68b066d171b43fc"}, 0x2e, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_kthread_work_queue_work\x00', 0xffffffffffffffff, 0x0, 0x3}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000002c0), 0x1, 0x553, &(0x7f0000001080)="$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") r1 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0xdc) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r1, 0x1000) fallocate(r1, 0x0, 0x0, 0x8800000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./file1\x00', 0x105042, 0x1db) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40011}, 0x0) writev(r2, &(0x7f0000000140)=[{&(0x7f0000001200)="10", 0x64000}], 0x1) 3m18.964444116s ago: executing program 4 (id=1623): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r0 = add_key$user(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000001cc0)='N', 0x1, 0xffffffffffffffff) keyctl$read(0xb, r0, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000300)=ANY=[@ANYBLOB="cd1cff00000031db6446778986dd6000002300142f0020010000000000000000000000000001ff01000000000000000000000000000100008902", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="00000000000000001cd2f95f2ee6cc7b679461a1d88f388d2b27d6fe48ee3525dc652f1ec930cfbec2f6466efd8e944928a89844daa728673b35468f8cd1b2a7bb2d8bb20d42455ae9595403b29f91013c9a9a0205966b4b82b762c997fe61c3dcf085bd97df7e878549b87828a4b03d09603d4572546f3b844cc8c6ee58d74063b15f5644769f3199e63056e5873c2b22c1"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1088d8b8588d72ec29c48f0af5f2d9f51c4b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68af2ad0810000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465ad32b77a74e802a0dc6bf25cca242bc6099ad2300000480006ef6c1ff0900000000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767042361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b6c7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae645ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48fc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1fb8f72cd317902f19e385be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa7956488bef241875f3b4b6ab7929a57affe760e797724f4fce1093b62d7e8c7123d890decacec55bf404e4e1f74b7eed82571be54c72d978cf906df0042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f870b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a998de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f154772f514216bdf57d2a40d40b51ab67903ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1594e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270bb29b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214d00000000d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f68df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c471c784ae7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec30cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd63bed8d31c31c37a373d4efd89f0000377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f0059161c5e0000000000000000000057d77480e0345effff6413258d1f6eb190aa28cbb4bafe34124172e436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fa03b84f63e022fe755f4007a4a899eaf52c4f491d8e97c862e29e457060000007ac691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104ebc1581848f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c716357d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c24936615ee68538e8fddd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426ca85e82ccf821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ad6acf5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba1c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63c41cbde2ba66ad81168070c8c6e18a6e452a31bdc4a60d637545ed4c8a1c649c3ce54ad3e16304d06a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c5140200000054d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c7340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a3bc38613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b9e6626f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f14eafe4b28ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1bfeef448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae0040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483f02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e9180100000000000000654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732e74dd690c57bdfdc1f069f9491bca7a8c59363799be70018c25ece5ad7307dc7a95c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2cdfb7fea73ca18874664d60a4b9423f3297bc8eb91b4ee1d73272ab28a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece98c077b358e752b439132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae2676384ff799783f55d7e5a1a092a01b965dc99cb7a9d98440c355927629f2bcf9dc2396eb2f5d25829715b24327642ac48f1201014a95e0e65e12cdf27e19043e3c5d3e798375cead35b9a93190a52cdecaaccc854a1d41ef365303f0e9b4fc969c9dab6df5e8a795b140fcc09e8a7b694d12932917facd8ceaa4e2d0d16bb0b95387fcd5ff136d8abddf94daf442bbff744591931872a36cf921ad"], &(0x7f0000000100)='GPL\x00'}, 0x94) set_robust_list(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00'}, 0x94) r1 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000000), 0x4) prctl$PR_SET_NAME(0xf, &(0x7f00000002c0)='+}[@\x00G5\v\x89n\xb2\x0e\xb7\xb4\x9a\xb3\xb9\xe1\xff@`\x87\xefy\xb7\xe0\xe6c\x91\x81ND\t3\xc4\xca\xf0\xd0Zp\xadbdY\xdcz\xc6lo\xd0\xc7\'CT') socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r2, 0x6, &(0x7f0000002000)={0x1}) fcntl$lock(r2, 0x26, &(0x7f00000031c0)={0x1}) fcntl$lock(r2, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3}) fcntl$lock(r2, 0x6, &(0x7f0000000000)={0x2, 0x0, 0x0, 0x7fffffff, 0xffffffffffffffff}) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x303d40, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x2b, 0x1, 0x1) sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001400010603000000000000d983ddc59706c27f095ebdc175002b040000"], 0x14}, 0x1, 0x0, 0x0, 0x4001}, 0x4000) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000200)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x2}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x58}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="480000000906010200000000000000000200ffff200007800c00018008000140a2fd4ebc08000a400000000205000300020000000900020073797a3100000000050001000700"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) 3m18.080735134s ago: executing program 4 (id=1638): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r1, 0x0, 0xffffffffc0000000}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000380), r2) sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)={0x24, r3, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e23}, @FOU_ATTR_PEER_V4={0x8, 0x8, @multicast2}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x20040000) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)=0x0) getpgrp(r4) 3m18.009096265s ago: executing program 4 (id=1639): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs2/binder1\x00', 0x1000, 0x0) unshare(0x62040200) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00'}, 0xe) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x2000410, &(0x7f0000000000)={[{@bsdgroups}, {@jqfmt_vfsv1}]}, 0xc1, 0x7da, &(0x7f0000000fc0)="$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") r0 = gettid() timer_create(0x0, &(0x7f0000000180)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) 3m17.024916854s ago: executing program 4 (id=1652): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="160000000000000005000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x0) r3 = socket(0x200000000000011, 0x2, 0x1) bind$packet(r3, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x8000}, 0x4) syz_emit_ethernet(0x6a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa424e1aa2e0d4080045000014"], 0x0) 3m16.759309949s ago: executing program 4 (id=1659): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f00000008c0)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@orlov}, {@abort}, {@nombcache}, {@stripe={'stripe', 0x3d, 0x10}}]}, 0x64, 0x50a, &(0x7f0000000940)="$eJzs3VFrHFsdAPD/bHZr06Y3ueqDXvB6tZW0aHeTxrbBh1pB9Kmg1vcak00I2WRDdtM2oWiKH0AQUcEnffFF8AMIUvDFRxEK+qyoKKKtPvigncvuTtI03U227TabZn8/mMw5Z2b2f86GmZ0zc5gJYGC9FxHXI+JJmqYXImI0K89lU2y1psZ6jx/dm21MSaTpzX8mkWRl25+VZPPT2WYnI+JrX474ZvJ83NrG5tJMpVJey/Kl+vJqqbaxeXFxeWahvFBemZqavDJ9dfry9ERP2nkmIq598a8/+O7PvnTtV5+586dbfz//rUa1RrLlu9vxgvL7LWw1vdD8LnZvsPaSwY6ifLOFmeF2aww9V3L/NdcJAID2Guf4H4yIT0bEhRiNof1PZwEAAIA3UPr5kfhfEpG2d6JDOQAAAPAGyTXHwCa5YjYWYCRyuWKxNYb3w3EqV6nW6p+er66vzLXGyo5FITe/WClPZGOFx6KQNPKTzfTT/KU9+amIeDsivj863MwXZ6uVuX5f/AAAAIABcXpP//8/o63+PwAAAHDMjPW7AgAAAMBrp/8PAAAAx5/+PwAAABxrX7lxozGl2++/nru9sb5UvX1xrlxbKi6vzxZnq2urxYVqdaH5zL7lgz6vUq2ufjZW1u+W6uVavVTb2Ly1XF1fqd9afOYV2AAAAMAhevvjD/6QRMTW54abU8OJ7jbtcjXgqMrvpJJs3ma3/uNbrflfDqlSwKEY6ncFgL7J97sCQN8U+l0BoO+SA5Z3HLzz22z+id7WBwAA6L3xj3a+/5/bd8ut/RcDR56dGAaX+/8wuJr3/7sdyetkAY6VgjMAGHivfP//QGn6QhUCAAB6bqQ5JblidnlvJHK5YjHiTPO1AIVkfrFSnoiItyLi96OFDzTyk80tkwP7DAAAAAAAAAAAAAAAAAAAAAAAAABAS5omkQIAAADHWkTub8mvW8/yHx89N7L3+sCJ5L+jkb0i9M6Pb/7w7ky9vjbZKP/XTnn9R1n5pX5cwQAAAICB8EIv8N/up2/34wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACglx4/uje7PR1m3H98ISLG2sXPx8nm/GQUIuLUv5PI79ouiYihHsQfbvz5SLv4SaNaOyHbxR/uQfyt+/vGj7HsW2gX/3QP4sMge9A4/lxvt//l4r3mvP3+l494Jv+yOh//Yuf4N9Rh/z/TZYx3Hv6i1DH+/Yh38u2PP9vxkw7xz3YZ/xtf39zstCz9ScR429+f5JlYpfryaqm2sXlxcXlmobxQXpmamrwyfXX68vREaX6xUs7+to3xvY/98sl+7T/VIf7YAe0/12X7///w7qMPtZKFdvHPn20T/zc/zdZ4Pn4u++37VJZuLB/fTm+10ru9+/Pfvbtf++c6tP+g///5Ltt/4avf+XOXqwIAh6C2sbk0U6mU145totFLPwLVkDiCiW/39APTNE0b+9QrfE4SR+FraSb6fWQCAAB67elJf79rAgAAAAAAAAAAAAAAAAAAAIPrMB4ntjfm1k4q6cUjtAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeuL9AAAA//+GAdlV") r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x51d}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800a054d66d006dd1bbed000000000000de5ffb", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000040000087b8af8ff00000000bfa200000000000007020000f8ffffffb7030000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = epoll_create1(0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="0500000004000000080000000b"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000480)='kfree\x00', 0xffffffffffffffff, 0x0, 0x7fffffffffffffff}, 0x18) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) epoll_wait(r7, &(0x7f0000000340)=[{}], 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000001850000001b000000b70000000000070095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x40006) r9 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r9, 0x6, 0x0, 0x0, 0x0) fsmount(r9, 0x0, 0x20) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x4000000, 0x4, 0x0, 0xffffffff, 0x4, 0x0, 0x3, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffff7f, 0xffffffffffffffff, 0x0) set_mempolicy(0x3, &(0x7f0000000000)=0x4000000ffb, 0x8) syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x58e, &(0x7f0000000180), 0x1, 0x451, &(0x7f0000000780)="$eJzs289vFFUcAPDvTFug/LAV8Qc/1CoaG3+0tKBy8KLRxIMmJl7wWNtCkIUaWhMhRNEYPBoS78ajiX+BJ70Y9WTiVe+GhBguoqc1szvD/mC3tMu2g+znkwx9b+YN7333zdt9M283gIE1kf2TROyMiN8jYqyebS0wUf9z/dqF+X+uXZhPolp9+6+kVu7vaxfmi6LFeTvyzGQakX6WxP4O9S6fO39qrlJZPJvnp1dOvz+9fO78cydPz51YPLF4Zvbo0SOHZ158Yfb5vsR5b9bWfR8tHdj7+juX35w/dvndn78dKuJvi6NPJlY7+GS12ufqyrWrKZ0Ml9gQ1iUbA1l3jdTG/1gMRaPzxuK1T0ttHLChqrkuhy9WgbtYEmW3AChH8UGf3f8W2+bNPsp39eX6DVAW9/V8qx8ZjjQvM9J2f9tPExFx7OK/X2VbbMxzCACAFt9n859nO83/0nigqdw9+drQeL6Wsjsi7ouIPRFxf0St7IMR8dA6629fJLl5/pNe6SmwNcrmfy/la1ut879i9hfjQ3luVy3+keT4ycriofw1mYyRrVl+ZpU6fnj1ty+6HWue/2VbVn8xF8zbcWV4a+s5C3Mrc7cTc7Orn0TsG+4Uf3JjJSCJiL0Rsa/HOk4+/c2BbsduHf8q+rDOVP064ql6/1+MtvgLyerrk9PborJ4aLq4Km72y6+X3upW/23F3wdZ/2/veP3fiH88aV6vXV5/HZf++LzrPc1UT9d/Y8eW/O+HcysrZ2citiRv1BvdvH+2cW6RL8pn8U8e7Dz+d0fjldgfEdlF/HBEPBIRj+Z991hEPB4RB9viar6//umVJ97rFv+d0P8Lbf0/3lqkrf8biS3RvqdzYujUj9+1/o+N5Nre/47UUpP5nrW8/62lXb1dzQAAAPD/k0bEzkjSqRvp0XRqqv4d/j2xPa0sLa88c3zpgzML9d8IjMdIWjzpGmt6HjqT39YX+dm2/OH8ufGXQ6O1/NT8UmWh7OBhwO24afyntfGf+XOo7NYBG87vtWBwNY3/pMx2AJvP5z8MLuMfBleH8T9aRjuAzdfp8//jEtoBbL628W/ZDwaI+38YXMY/DK7m8e8LADAwlkfj1j+S75TYFr2cJXHXJCK9I5rRn0TS4yhYa2Jn2QGuP1H2OxMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEB//BcAAP//pgHvrg==") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000240), &(0x7f0000000400)='./file0\x00', 0x1b4a438, &(0x7f00000030c0)=ANY=[@ANYRESHEX=r8, @ANYBLOB="2d75e7331bedbbc765eb5190cc845587a6bb900650c42f6bdbb79a0ae9209aca986b843a61062fc45062e6f325379435ce88b294c97e02a7d8590fc51623a77993eca902898870eff33875cfa1a14aee7d84bf981a3387376afc7a8efed8f2d2e9ab2b19a7e0afdd74ba195058bb8d024e4f814e193abbeba316dbfb884b19fbca3885811445a31fcd93918a51d9c3e142513eac2272ccbe4c899e8f77853f2ff8198424da92a70ac3c1f59db631462e732e8e4f650f3d83288910702521137e1fb5", @ANYRESOCT=r3, @ANYRES16=0x0, @ANYRES32=r2, @ANYBLOB="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"], 0x1, 0x0, &(0x7f0000000000)) 3m16.70974184s ago: executing program 33 (id=1659): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f00000008c0)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@orlov}, {@abort}, {@nombcache}, {@stripe={'stripe', 0x3d, 0x10}}]}, 0x64, 0x50a, &(0x7f0000000940)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x51d}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800a054d66d006dd1bbed000000000000de5ffb", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000040000087b8af8ff00000000bfa200000000000007020000f8ffffffb7030000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = epoll_create1(0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="0500000004000000080000000b"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000480)='kfree\x00', 0xffffffffffffffff, 0x0, 0x7fffffffffffffff}, 0x18) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) epoll_wait(r7, &(0x7f0000000340)=[{}], 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000001850000001b000000b70000000000070095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x40006) r9 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r9, 0x6, 0x0, 0x0, 0x0) fsmount(r9, 0x0, 0x20) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x4000000, 0x4, 0x0, 0xffffffff, 0x4, 0x0, 0x3, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffff7f, 0xffffffffffffffff, 0x0) set_mempolicy(0x3, &(0x7f0000000000)=0x4000000ffb, 0x8) syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x58e, &(0x7f0000000180), 0x1, 0x451, &(0x7f0000000780)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000240), &(0x7f0000000400)='./file0\x00', 0x1b4a438, &(0x7f00000030c0)=ANY=[@ANYRESHEX=r8, @ANYBLOB="2d75e7331bedbbc765eb5190cc845587a6bb900650c42f6bdbb79a0ae9209aca986b843a61062fc45062e6f325379435ce88b294c97e02a7d8590fc51623a77993eca902898870eff33875cfa1a14aee7d84bf981a3387376afc7a8efed8f2d2e9ab2b19a7e0afdd74ba195058bb8d024e4f814e193abbeba316dbfb884b19fbca3885811445a31fcd93918a51d9c3e142513eac2272ccbe4c899e8f77853f2ff8198424da92a70ac3c1f59db631462e732e8e4f650f3d83288910702521137e1fb5", @ANYRESOCT=r3, @ANYRES16=0x0, @ANYRES32=r2, @ANYBLOB="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"], 0x1, 0x0, &(0x7f0000000000)) 3m13.14115063s ago: executing program 5 (id=1692): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000900)={&(0x7f0000000380)='kmem_cache_free\x00', r1}, 0x18) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x1ff) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000000)=0x60) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(0xffffffffffffffff, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000f80)={0x30, r3, 0x1, 0x70bd28, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x9, 0x1a}}}}, [@NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x4}}]}]}, 0x30}}, 0x800) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000640)={0x2, &(0x7f00000000c0)=[{0x37, 0x8, 0x4, 0x9}, {0x7, 0x9, 0x5}]}) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/131, 0x83}, {0x0}], 0x2, 0xffffff8d, 0x3) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x32600) waitid(0x1, 0x0, 0x0, 0x0, 0x0) 3m13.016565843s ago: executing program 5 (id=1694): mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065fffff53000000800395032303030"], 0x15) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001080)={0x0, r4}, 0x18) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) lchown(&(0x7f0000000700)='./file0\x00', 0x0, 0x0) 3m12.976680384s ago: executing program 5 (id=1695): syz_genetlink_get_family_id$netlbl_cipso(0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) syz_emit_ethernet(0xcc, &(0x7f00000001c0)={@link_local, @random="50a241d5cde0", @void, {@ipv6={0x86dd, @generic={0x1, 0x6, "fbb2ea", 0x0, 0x33, 0xff, @rand_addr=' \x01\x00', @mcast2}}}}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280), &(0x7f0000000280), 0xfd, r0}, 0x38) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x10004, &(0x7f00000000c0), 0x0, 0x4c0, &(0x7f0000000540)="$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") 3m12.322222936s ago: executing program 5 (id=1702): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs2/binder1\x00', 0x1000, 0x0) unshare(0x62040200) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x32, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x2000410, &(0x7f0000000000)={[{@bsdgroups}, {@jqfmt_vfsv1}]}, 0xc1, 0x7da, &(0x7f0000000fc0)="$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") r1 = gettid() timer_create(0x0, &(0x7f0000000180)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r3, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1a, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xeb, '\x00', 0x0, @tracing=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f0000000340)={r5}) recvmsg$kcm(r6, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x10102) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r4}, 0x10) msgget(0x1, 0x2b0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) socket$inet6_tcp(0xa, 0x1, 0x0) r7 = syz_io_uring_setup(0x4e17, &(0x7f0000000240)={0x0, 0x7687, 0x10100, 0x2, 0x33a, 0x0, r3}, &(0x7f0000000100), &(0x7f0000000140)) io_uring_enter(r7, 0x22d3e, 0x0, 0x20, 0x0, 0x58) r8 = dup(r7) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0xa, 0x2) 3m11.62196794s ago: executing program 5 (id=1717): r0 = syz_open_dev$loop(&(0x7f0000000040), 0xfffffffffffffc2f, 0x300) ioctl$BLKCRYPTOIMPORTKEY(r0, 0xc0401289, &(0x7f0000000100)={&(0x7f0000000080)="b94706a3a9129f326ac951414d41d88b6e33fe9127acd8695b419933c6c8a44540c66f0f23965dfc2bacbf40ca034ac09abf7a", 0x33, &(0x7f00000000c0)=""/33, 0x21}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bf"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000100000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x6c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='kfree\x00', r3}, 0x10) r4 = add_key$keyring(&(0x7f0000000080), &(0x7f0000001100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) set_robust_list(&(0x7f0000000180)={0x0, 0x4, &(0x7f0000000140)}, 0x18) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000300)="300e", 0x2, r4) syz_read_part_table(0x593, &(0x7f00000005c0)="$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") 3m11.267914047s ago: executing program 5 (id=1725): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000b80)=@bridge_getvlan={0x20, 0x72, 0x10, 0x70bd2c, 0x25dfdbfc, {}, [@BRIDGE_VLANDB_DUMP_FLAGS={0x8}]}, 0x20}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0xd9}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000007000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000001400000000b703000000000000850000001b000000b7000100000000009500000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r3}, 0x18) r4 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x52e, &(0x7f0000000640)="$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") ioctl$HIDIOCGRDESCSIZE(0xffffffffffffffff, 0x80044801, &(0x7f0000000340)) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000700)='kfree\x00', r5}, 0x18) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r6, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000280)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010026bd70000000000021040000180001801400020064756d6d7930"], 0x2c}}, 0x880) r8 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x24) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) lseek(r4, 0xfffffffffffff800, 0x2) r11 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) r12 = gettid() sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, r11, 0x1, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_PID={0x8, 0x1c, r12}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000) sendmsg$NL802154_CMD_NEW_INTERFACE(r9, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x5c, r11, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_IFTYPE={0x8, 0x5, 0xffffffff}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0002}}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFTYPE={0x8}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan4\x00'}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0302}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4040004}, 0x4000096) chmod(&(0x7f0000000a00)='./file0\x00', 0x0) r13 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='afs_make_fs_call\x00', r8, 0x0, 0x4}, 0x18) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r13) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r13, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="92852a71eab96848e28ad7c5b82d756c25421117df5f1f3fba9bc1979613fbc2422cfc24955af17e068fc92551d077ea972ad27394137ab005996d22ed780fd152c8cd5504a7e5a4b8b648e86502076401fd4a8a008ae5e2725fc07807ffa693f86b05142ff94aefc1cc47b8a40fd987d4690359666abab4ca7ce0c8a95a39a446fc6c3a17537903c5ecb5e42302", @ANYRES16=r14, @ANYBLOB="796100000000000000007e00000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000080)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @remote}, {0x2, 0x0, @private}}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x22044050}, 0x8c0) syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) 3m11.258100307s ago: executing program 34 (id=1725): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000b80)=@bridge_getvlan={0x20, 0x72, 0x10, 0x70bd2c, 0x25dfdbfc, {}, [@BRIDGE_VLANDB_DUMP_FLAGS={0x8}]}, 0x20}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0xd9}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000007000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000001400000000b703000000000000850000001b000000b7000100000000009500000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r3}, 0x18) r4 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x52e, &(0x7f0000000640)="$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") ioctl$HIDIOCGRDESCSIZE(0xffffffffffffffff, 0x80044801, &(0x7f0000000340)) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000700)='kfree\x00', r5}, 0x18) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r6, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000280)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010026bd70000000000021040000180001801400020064756d6d7930"], 0x2c}}, 0x880) r8 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x24) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) lseek(r4, 0xfffffffffffff800, 0x2) r11 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) r12 = gettid() sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, r11, 0x1, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_PID={0x8, 0x1c, r12}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000) sendmsg$NL802154_CMD_NEW_INTERFACE(r9, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x5c, r11, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_IFTYPE={0x8, 0x5, 0xffffffff}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0002}}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFTYPE={0x8}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan4\x00'}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0302}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4040004}, 0x4000096) chmod(&(0x7f0000000a00)='./file0\x00', 0x0) r13 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='afs_make_fs_call\x00', r8, 0x0, 0x4}, 0x18) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r13) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r13, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="92852a71eab96848e28ad7c5b82d756c25421117df5f1f3fba9bc1979613fbc2422cfc24955af17e068fc92551d077ea972ad27394137ab005996d22ed780fd152c8cd5504a7e5a4b8b648e86502076401fd4a8a008ae5e2725fc07807ffa693f86b05142ff94aefc1cc47b8a40fd987d4690359666abab4ca7ce0c8a95a39a446fc6c3a17537903c5ecb5e42302", @ANYRES16=r14, @ANYBLOB="796100000000000000007e00000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000080)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @remote}, {0x2, 0x0, @private}}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x22044050}, 0x8c0) syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) 40.29854074s ago: executing program 6 (id=3860): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[], 0x1, 0x311, &(0x7f0000000500)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1, 0x0, 0x2}, 0x18) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) umount2(&(0x7f00000003c0)='./file0\x00', 0xa) 40.199267712s ago: executing program 6 (id=3861): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000304000000000000000100000300", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e00000062000280080040"], 0x3c}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, &(0x7f0000000700)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r2}, 0x10) clock_getres(0x6, 0x0) 40.120607843s ago: executing program 6 (id=3862): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0x4}, 0x18) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000005bc0)=@newlink={0x3c, 0x10, 0x40b, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, 0x24f2}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ICV_LEN={0x5, 0x3, 0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x1, 0x800001, 0x0, 0x0, 0x0) 40.071715124s ago: executing program 6 (id=3865): r0 = syz_mount_image$iso9660(&(0x7f0000000940), &(0x7f0000000680)='./file0\x00', 0x14c0e, &(0x7f0000000b40)=ANY=[@ANYRES8=0x0], 0xfd, 0x6b1, &(0x7f0000001f80)="$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") r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = creat(&(0x7f00000007c0)='./file1\x00', 0x75) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$ARCH_SHSTK_ENABLE(0x1e, r3, 0x1, 0x5001) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000240)={{{@in6=@loopback, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@initdev}}, &(0x7f0000000340)=0xe8) r5 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0, 0x0}, &(0x7f00000000c0)=0xc) mount$bpf(0x0, &(0x7f0000000100)='.\x00', &(0x7f00000006c0), 0x400008, &(0x7f0000000240)={[{@gid={'gid', 0x3d, r6}}]}) r7 = getpid() syz_pidfd_open(r7, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000380)={{{@in6=@dev, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @multicast2}}, 0x0, @in6=@private0}}, &(0x7f0000000480)=0xe8) r9 = getpgrp(0x0) syz_pidfd_open(r9, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f00000000c0)=0xc) sendmsg$nl_generic(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000100)={0x28, 0x18, 0x1, 0x0, 0x0, {0x2}, [@typed={0x8, 0x800, 0x0, 0x0, @ipv4=@multicast2}, @nested={0xc, 0x8, 0x0, 0x1, [@typed={0x8, 0xc, 0x0, 0x0, @uid=r11}]}]}, 0x28}}, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x7500) r14 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r15 = socket(0x15, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYRESHEX=r14, @ANYRES8=r15, @ANYRES16, @ANYRESDEC=r12, @ANYRES64=r13, @ANYRES8], 0x48) r16 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000004c0), 0x1, 0x0) r17 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000500)='./cgroup.net/syz1\x00', 0x200002, 0x0) sendmsg$unix(r2, &(0x7f00000006c0)={&(0x7f0000000000)=@file={0x0, './file1\x00'}, 0x6e, &(0x7f00000001c0)=[{&(0x7f0000000080)="a1e09582f8e8833c9601ab34184c57f08ff68c", 0x13}, {&(0x7f0000000b80)="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", 0x1000}, {&(0x7f00000000c0)="7fcade9ff2a5faf381251c5a1a44b3", 0xf}, {&(0x7f0000000100)='\vZ', 0x2}, {&(0x7f0000000140)="2fe9ae0e58e45665f215282baf8d50d2dcc5e94d614850f0a1df3c4a04750b4985f3e6a88a0b696695e5141068bce9559caa82f037e1dd90664d48bd3f3392cbe08ea90133838750bedf07f7ccddc5f6ec0fc06ef36540e3a4c671dd7d99f511159262312a513926c869f9070682d27ad7008da5c31c7d", 0x77}], 0x5, &(0x7f0000000540)=[@rights={{0x20, 0x1, 0x1, [r1, r1, r0, r2]}}, @cred={{0x1c, 0x1, 0x2, {r3, r4, r6}}}, @rights={{0x14, 0x1, 0x1, [r0]}}, @cred={{0x1c, 0x1, 0x2, {r7, r8, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {r9, r11, r13}}}, @rights={{0x14, 0x1, 0x1, [r0]}}, @rights={{0x34, 0x1, 0x1, [r2, 0xffffffffffffffff, r0, r2, r0, r1, r2, r1, r2]}}, @rights={{0x24, 0x1, 0x1, [r2, r2, r16, r1, r17]}}], 0x110, 0x400c080}, 0x4) 39.448474006s ago: executing program 6 (id=3870): r0 = socket$kcm(0x10, 0x2, 0x0) write(r0, &(0x7f0000000440)="240000001a005f0400f9f4070009040180000000000000000000000004001e8040000000", 0x24) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000700000045000000a000020095"], &(0x7f0000000800)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xa0000, 0x0) r2 = syz_create_resource$binfmt(&(0x7f0000000000)='./file0\x00') r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900000001"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x64, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x18) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10) r6 = openat$binfmt(0xffffffffffffff9c, r2, 0x41, 0x1ff) fcntl$setlease(r6, 0x400, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0xffffffffffffffc1) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r7}, 0x10) socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000180)) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x13c) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) socket$key(0xf, 0x3, 0x2) open(&(0x7f0000000080)='./file0\x00', 0x400, 0x10) pread64(r8, &(0x7f00000024c0)=""/209, 0xd1, 0x8) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000280)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x5}}, 0x10) r9 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r9, 0x6, 0xd, &(0x7f0000000040)='cubic', 0x4) setsockopt$inet_tcp_TCP_REPAIR(r9, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) ioctl$int_in(r9, 0x5421, &(0x7f0000000100)=0x9) connect$inet(r9, &(0x7f0000000280)={0x2, 0x0, @dev}, 0x10) close(r9) 39.180702022s ago: executing program 6 (id=3880): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010020000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRESOCT], 0xb4}}, 0x0) 39.176961222s ago: executing program 35 (id=3880): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010020000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRESOCT], 0xb4}}, 0x0) 14.984180867s ago: executing program 3 (id=4198): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x8, 0xf9, 0x7ffc1ffb}]}) write(0xffffffffffffffff, 0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x8f5, 0x100000000000000) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/diskstats\x00', 0x0, 0x0) r2 = syz_io_uring_setup(0x49d, &(0x7f0000000440)={0x0, 0x79af, 0x400, 0x0, 0x32c}, &(0x7f0000000680)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x104, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x6000, @fd=r1, 0x6, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1}) io_uring_enter(r2, 0xfd0, 0x4c1, 0x43, 0x0, 0x2000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r5}, 0x10) sync() bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x94) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x107042, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file3\x00', 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x0, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000380)='./file2\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./file7\x00', 0x4) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',msize=0']) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r6, 0x11, 0x30, &(0x7f0000000940)=ANY=[], 0x310) ioctl$BTRFS_IOC_GET_FEATURES(r6, 0x80189439, &(0x7f0000000000)) 14.80158796s ago: executing program 3 (id=4201): mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x201fb000) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r3], 0x1c}}, 0x0) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f00000004c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="04002cbd7000fbdbdf250200000008000100", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r3, @ANYBLOB, @ANYRES32=r3, @ANYBLOB="08000100", @ANYBLOB="647eeac82d1bab6b6ed0e2afbab08a", @ANYRESHEX=0x0, @ANYRES32=r3, @ANYBLOB="26000100", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r3, @ANYRES16=r3], 0x4c}, 0x1, 0x0, 0x0, 0x100}, 0x8000) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a500850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) syz_genetlink_get_family_id$nfc(&(0x7f0000000400), r1) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r10}, 0x10) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000040000000500007ae30ef794", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r11}, &(0x7f0000000800), &(0x7f0000000840)=r12}, 0x20) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r13, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @link_local}) r14 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x6, 0xc, &(0x7f0000000600)=ANY=[], &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r9, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r14}, 0x10) close(r8) sendmsg$NL802154_CMD_NEW_SEC_KEY(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c"], 0x7c}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000200)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r1, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000680)=ANY=[@ANYRES64=r10, @ANYRES16=r4, @ANYBLOB="00022dbd7000fddbdf25100000000500110040000000050011000d0000000c000600000000000000000008000300", @ANYRES32=r5, @ANYBLOB="08000300", @ANYRES32, @ANYBLOB="9469c6391d2219542f", @ANYRES32=r15, @ANYBLOB], 0x48}, 0x1, 0x0, 0x0, 0x11}, 0x40881) read$nci(r0, &(0x7f00000030c0)=""/2, 0x2) 13.879522688s ago: executing program 3 (id=4222): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0xf7d4, 0x8, 0x1, 0x8001, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20004006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e02002d000b13d25a806f8c6394f9031a04000a740100053582c137153e3702df0c", 0x23}], 0x1}, 0x0) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc840, &(0x7f0000000840)={[{@delalloc}, {@noacl}, {@bsdgroups}, {@journal_path={'journal_path', 0x3d, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}}, {@grpjquota_path={'grpjquota', 0x3d, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}}, {@jqfmt_vfsv1}, {@noblock_validity}, {@user_xattr}]}, 0x2, 0x246, &(0x7f0000000ac0)="$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") r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x2, 0x0, 0x0, 0x40f00, 0x25, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xf, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000580)={'veth1_to_bond\x00', 0x0}) ioctl$HIDIOCGUSAGE(0xffffffffffffffff, 0xc018480b, 0x0) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) unshare(0x22020600) r8 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r8, 0x0, r7, 0x0, 0x46) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r3, r6, 0x25, 0x4}, 0x14) close_range(r2, 0xffffffffffffffff, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000180)='sys_enter\x00', r9}, 0x10) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r10}, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000100)="390000fa461ad7e48489bffa560200130011186809", 0x15}], 0x1) r11 = syz_open_dev$sg(&(0x7f00000003c0), 0x20000000, 0x224100) setreuid(0x0, 0xee00) ioctl$SCSI_IOCTL_SEND_COMMAND(r11, 0x1, &(0x7f00000000c0)=ANY=[@ANYRES64=r11]) 13.836879279s ago: executing program 3 (id=4223): r0 = socket(0x11, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000a00)={'veth1\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000300)=0xe9, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="1aa2fe0802000021"], 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x50) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x800000, &(0x7f0000000a80)={[{@noauto_da_alloc}, {@barrier_val={'barrier', 0x3d, 0xb}}, {@block_validity}, {@norecovery}, {}]}, 0x1, 0x4be, &(0x7f0000000540)="$eJzs3ctrW1caAPBPUvyMZ/KYYUgyMAlkIPMglh8MsWdmM6uZWQSGCXTTQuraiutatowlp7EJ1Gl3WXRRWlooXXRZ6D/QbppVQ6F03e5LFiWlTV1oCwUVXUmO/JArGjsC398PbnTuOTf6zrH4jq+OrnUDSK1ztX8yEUMR8UlEHKvvbj3gXP1h48HN6dqWiWr1yleZ5LjafvPQ5v87GhHrEdEfEf//d8QzmZ1xy6tr81PFYmG5sZ+vLCzly6trF+cWpmYLs4XF0YlLk5MTI+Njk/s21tsvP3f78vv/7X33u5fu333lww9q3RpqtLWOYz/Vh94TJ1rqjkTEPw8iWBfkGuMZ6HZH+EVqr99vIuJ8kv/HIpe8mkAaVKvV6o/VvnbN61Xg0Mom58CZ7HBE1MvZ7PBw/Rz+tzGYLZbKlb9eK60sztTPlY9HT/baXLEw0nivcDx6MrX90aT8cH9s2/54RHIO/GpuINkfni4VZx7vVAdsc3Rb/n+bq+c/kBLe8kN6yX9IL/kP6SX/Ib3kP6SX/If0kv+QXvIf0kv+Q3rJf0gv+Q+p9L/Ll2tbtfn37zPXV1fmS9cvzhTK88MLK9PD06XlGJ4t9b3X2fMVS6Wl0b/Fyo18pVCu5Mura1cXSiuLlatzC1OzvVHoOeDxAJ07cfbOZ5mIWP/7QLLV9Dba5CocbtUX6t8BAKRPrtsTENA1lv4gvbzHB3b5it4t+ts1LD1S1J8LCxygbLc7AHTNhdM+/4O0sv4P6WX9H9Jr6zm+swFIo+6s/wPdZP0f0muo5f4/mZb7f/2q5d5dIxHx64j4NNfT17zXF3AYZL/INHL/wrE/Dm1v7c18nywK9EbE829eef3GVKWyPFqr/3qzvvJGvb63G90HOpbk71jj0S9yAEi1jQc3p5vbZuXxg4/75b/qFyHsjH+ksTbZn3xGObiR2XKtQmafrl1YvxURp3aLn2nc77z+ycfgRm5H/JONx0z9KZL+Hknum/4o8e+902n80y3x/9AS/8wj/1QgHe7U5p+R3fI/m+R0bObf1vlnaJ+uj24//2U3579cm/nvbIcxnn3rxXtt49+KOLNr/Ga8/iTW9vi1vl3oMP79p574Xbu26tv159ktflOtlK8sLOXLq2sX5xamZguzhcXRiUuTkxMj42OT+WSNOt9cqd7pH6c+vrvX+AfbxN9r/LW6P3c4/h9+/9GT5/aI/6fzu7/+J/eIPxARf+kw/jdjnz/drq0Wf6bN+LPb47cs8NXqxjuMX37tP30dHgoAPAbl1bX5qWKxsKygoKCwWej2zAQctIdJ3+2eAAAAAAAAAAAAAJ16HJcTd3uMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACHwU8BAAD//zAx0oQ=") utimes(&(0x7f0000000100)='./file3\x00', 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x18) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$setregs(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$setregs(0xd, r3, 0x960000000000000, &(0x7f00000003c0)) ptrace$getregset(0x4205, r3, 0x1, &(0x7f0000000180)={&(0x7f00000002c0)=""/48, 0x30}) sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="02017d29012918000e3580009f0001140000002f0600ac141414e0000003808a8972ba0b72e41082b1a3d2061fd7fdfe4b88942a31f48597e8e36e039b1c599db6e466749c2d4c8303a0f7fbda34fb8825f80200e3c0ab"], 0xdd12}], 0x1}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYRES64=r4], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) lsetxattr$security_selinux(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240), &(0x7f0000000480)='system_u:object_r:usbmon_device_t:s0\x00', 0x25, 0x2) r8 = fsopen(&(0x7f0000000a40)='devpts\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) fsmount(r8, 0x0, 0x6) fsconfig$FSCONFIG_SET_BINARY(r8, 0x2, &(0x7f0000001cc0)='nolazytime', &(0x7f0000001d00)="6bc4fc0efdfa455b5adc717c58", 0xd) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r7, 0x0, 0x2}, 0x18) r9 = add_key$keyring(&(0x7f0000000300), &(0x7f0000000000)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r9, &(0x7f0000000380)='asymmetric\x00', &(0x7f00000003c0)) add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, r9) fsetxattr(r5, &(0x7f0000000140)=ANY=[@ANYBLOB="040600722e87005d00"], &(0x7f00000000c0)='@\x00\xbe[d\xccJ-\x13\xe1\xb8\x00\x00\xd4$\x8b9\xbf_\xee\x96\xa4Z&\xe3\xf2\xfe\x04\x13\xbd\x05\xd4', 0x20, 0x3) 13.78571762s ago: executing program 3 (id=4224): bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc}, 0x48) (fail_nth: 2) 13.387973708s ago: executing program 3 (id=4234): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000072000000"], &(0x7f0000001480)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x41, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='kfree\x00', r0, 0x0, 0x4804}, 0x18) r1 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x2000) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x6, 0x0, @buffer={0x2, 0x41001, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x300, 0x0, 0x0, 0x0}) 13.379312628s ago: executing program 36 (id=4234): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000072000000"], &(0x7f0000001480)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x41, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='kfree\x00', r0, 0x0, 0x4804}, 0x18) r1 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x2000) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x6, 0x0, @buffer={0x2, 0x41001, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x300, 0x0, 0x0, 0x0}) 3.270406167s ago: executing program 0 (id=4394): r0 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000140), 0x1, 0x4fa, &(0x7f0000000ac0)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.bfq.sectors\x00', 0x275a, 0x0) fallocate(r1, 0x0, 0x0, 0x1040f8) lseek(r1, 0x0, 0x4) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000400)=ANY=[@ANYBLOB="5a884162b54ad1613bc1ddbd59d072724fcfb6482b3029c3b889cbe0d8da967dea06765dfda276935c9865ff62bb235ee6dae070536a11dd6675fadc6f99e964847508cf9ff6b90c83067936bb9dc6f918081f4c5c488f9a3a1a7b19d705e7e858606d75721b29ec01ab810a9b23bd0d7df372864e6d54e35d5729825c40558fab276568886c3c537a86101087f4138dbcf13ae51a1d5cda585549fd69b4bcd83e40d1205f483269c7d13025e5f0cc59d6e5af028f5d5f158ddc0817f4d8c3df831146b2566e5126165d5bd9379ede8542bf972cc694b6e57f34b5c19d6aff75c08ea71fb5a8fb47c099a23964c7a354d327a088db4ef39593a81d96bcc88f568390ea5fc6c58fa3dd07508bbf365d29f86c", @ANYRES32=r2, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1, 0x0, 0x2}, 0x18) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r4, 0xc0f85403, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0700000004000000800000000100000028000000", @ANYBLOB="7fa7240700000000454bd979b4d486a877b129b97323820f6d087f426885949a61d0cbfd74d27d58831db3b24e4d91d0a6c03f9a5b847cf20a3b4ae23e2678f226a4607cf60f3a76d8cb1205de5bbc7eced6120cbd399d608e072cac7b2162081b65579fd1614f571302d3cdf6e5328e0d14e3e8d9821230525f0db17fd09582f486550e5cc863af47606a00cadfcadad73f3728044898f8abd3a8bdbbee", @ANYRESDEC, @ANYBLOB='\x00'/28, @ANYRES32, @ANYRESOCT=0x0, @ANYRESHEX=r3, @ANYRESDEC=r0], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000b7000000000000009500"/40], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x18) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x28}}, 0x40000) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200008, &(0x7f0000000380)={[{@nolazytime}, {@auto_da_alloc}, {@sysvgroups}, {@norecovery}, {@jqfmt_vfsv0}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@grpid}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") r7 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0xb8) ftruncate(r7, 0x2007ffc) sendfile(r7, r7, 0x0, 0x800000009) creat(&(0x7f00000000c0)='./bus\x00', 0x182) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xc94284a3061bb7fe, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = open(&(0x7f0000000340)='./file1\x00', 0x4000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) preadv2(r8, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x100000000000000d, 0x0, 0x0, 0x0) 1.896681054s ago: executing program 0 (id=4404): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x47, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x140, 0x0) syz_io_uring_setup(0x2421, &(0x7f00000002c0)={0x0, 0x0, 0x2, 0x0, 0x10}, &(0x7f0000000100), &(0x7f0000000080)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000000), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000540)={'vxcan0\x00', 0x0}) sendmsg$can_bcm(r3, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r4}, 0x10, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca4000000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000004"], 0x20000600}}, 0x0) getsockopt$inet6_mreq(r1, 0x29, 0x1c, &(0x7f0000001f80)={@remote, 0x0}, &(0x7f0000001fc0)=0x14) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x40}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newtfilter={0x8c, 0x2c, 0xd27, 0x30bd25, 0x25df9bfb, {0x0, 0x0, 0x0, r5, {0xd, 0xe}, {}, {0x10}}, [@filter_kind_options=@f_route={{0xa}, {0x54, 0x2, [@TCA_ROUTE4_ACT={0x50, 0x6, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0xa, 0x5, 0x20, 0x7, 0x8}, 0x39}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0xfc, 0x3}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8010}, 0x4000) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000003dc0)={'syztnl2\x00', &(0x7f0000003d40)={'gre0\x00', 0x0, 0x1, 0x10, 0x9, 0x7f, {{0x9, 0x4, 0x0, 0x3, 0x24, 0x68, 0x0, 0x1, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, {[@ssrr={0x89, 0x7, 0x52, [@remote]}, @timestamp={0x44, 0x8, 0xbd, 0x0, 0x9, [0x0]}]}}}}}) r9 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x101042, 0x91) pwrite64(r9, &(0x7f0000000140)='2', 0xfdef, 0xe7c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$batadv(&(0x7f0000003000), r10) sendmsg$BATADV_CMD_TP_METER(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000003100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="01002bbd7000fbdbdf25020000000a000900aaaaaaaaaa44000008000300", @ANYRES32, @ANYBLOB='\b\x00\v'], 0x30}, 0x1, 0x0, 0x0, 0x20000050}, 0x20040084) 1.896045904s ago: executing program 9 (id=4406): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000140)={0x0, 0x20000, 0x1000, 0xc0, 0x2}, 0x20) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000940)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(0xffffffffffffffff, 0x891a, &(0x7f0000000580)={'veth1_vlan\x00', {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x16}}}) sendmmsg$inet(r2, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @empty, @dev={0xac, 0x14, 0x14, 0x27}}}}], 0x20}}], 0x1, 0x80) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000400180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r4, 0x0, 0x1000000005}, 0x18) socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0xa, 0x300) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0xb}, 0x94) socket$packet(0x11, 0xa, 0x300) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="219a53f271a76d2608004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r6 = socket(0x10, 0x3, 0x6) r7 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x90, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [], 0x0, [0x4, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x0, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}, @TCA_RATE={0x6}]}, 0x90}}, 0x20000000) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000001c0)={0x0, @multicast2, @dev}, &(0x7f0000000280)=0xc) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000300)={'syztnl0\x00', &(0x7f0000000680)={'ip_vti0\x00', 0x0, 0x20, 0x80, 0x2, 0xffffffff, {{0x42, 0x4, 0x2, 0x0, 0x108, 0x66, 0x0, 0x4, 0x29, 0x0, @multicast1, @multicast2, {[@timestamp_prespec={0x44, 0x4c, 0x83, 0x3, 0x8, [{@rand_addr=0xf, 0x81}, {@remote, 0x8}, {@rand_addr=0x64010101, 0x2c8f3b22}, {@loopback, 0x3}, {@broadcast}, {@multicast1, 0x5}, {@multicast1, 0x1ff}, {@dev={0xac, 0x14, 0x14, 0x10}}, {@remote, 0xffff}]}, @timestamp_prespec={0x44, 0x4c, 0x2a, 0x3, 0xe, [{@rand_addr=0x64010101, 0x6}, {@empty, 0x8}, {@loopback, 0x6}, {@empty, 0x9}, {@dev={0xac, 0x14, 0x14, 0x33}, 0x1000}, {@dev={0xac, 0x14, 0x14, 0x2c}, 0x6}, {@multicast2, 0x80}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3}, {@private=0xa010102}]}, @generic={0x89, 0x4, "8d15"}, @cipso={0x86, 0x13, 0x1, [{0x0, 0xd, "02db042099c12916a5cd86"}]}, @timestamp_addr={0x44, 0x4, 0xa1, 0x1, 0x1}, @cipso={0x86, 0x2f, 0x3, [{0x1, 0x11, "d1e044f39ef771ce7b575819cf6fed"}, {0x5, 0x7, "6994f49a63"}, {0x2, 0x11, "2498104c1c3187541ece7a05e94084"}]}, @generic={0x7, 0xe, "6bf1f9d990ba6e651febfd98"}, @end, @noop]}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000003c0)={&(0x7f0000000a00)={0x1d0, r1, 0x100, 0x70bd25, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_STRSET_HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @ETHTOOL_A_STRSET_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}, @ETHTOOL_A_STRSET_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_STRSET_HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}]}, @ETHTOOL_A_STRSET_STRINGSETS={0xe0, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xe3e66885a63b61d}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}, {0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x12c80d2cf615ac09}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}]}]}, 0x1d0}, 0x1, 0x0, 0x0, 0x11}, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000380), 0x84d03, 0x0) 1.60064643s ago: executing program 7 (id=4410): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r0, &(0x7f0000000200)={{0x7f, 0x45, 0x4c, 0x46, 0x3, 0x4, 0x0, 0x0, 0x87fff, 0x2, 0x3e, 0xffffffec, 0x398, 0x40, 0x56, 0x7, 0x0, 0x38, 0x1, 0x0, 0x2}, [{0x3, 0x5, 0x4, 0x40000000200d, 0x1c8, 0xc, 0x4, 0x4}]}, 0x78) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f00000001c0)='kfree\x00', r2}, 0x18) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x7c8) r3 = socket$xdp(0x2c, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x39, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x18) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000000)=0x1, 0x4) close_range(r3, r3, 0x0) 1.494782071s ago: executing program 0 (id=4411): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) getsockname$packet(0xffffffffffffffff, &(0x7f0000000940)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(0xffffffffffffffff, 0x891a, &(0x7f0000000580)={'veth1_vlan\x00', {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x16}}}) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x80) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0xa, 0x300) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0xb}, 0x94) socket$packet(0x11, 0xa, 0x300) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="219a53f271a76d2608004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000300)={'syztnl0\x00', 0x0}) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000a00)={0x1d0, 0x0, 0x100, 0x70bd25, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_STRSET_HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_STRSET_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_STRSET_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_STRSET_HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}]}, @ETHTOOL_A_STRSET_STRINGSETS={0xe0, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xe3e66885a63b61d}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}, {0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x12c80d2cf615ac09}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}]}]}, 0x1d0}, 0x1, 0x0, 0x0, 0x11}, 0x1) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000380), 0x84d03, 0x0) 1.493680371s ago: executing program 7 (id=4412): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[], 0x1, 0x311, &(0x7f0000000500)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) umount2(&(0x7f00000003c0)='./file0\x00', 0xa) 1.415344643s ago: executing program 7 (id=4415): syz_genetlink_get_family_id$netlbl_cipso(0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48284b70043dc6124d877142a48448b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68af2ad0810000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d4023f210fa34b63a715a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900000000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b6c7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48fc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f01000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb796ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab04000000ffe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890decace0200f404e4e1f74b7eed82571be54c72d978cf906df0042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef29cd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9fdc75aaaf0100483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a998de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270bb29b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214d00000000d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ce21d69993e9960ff5f76015e6c354463d7d0917fc80e5009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab4000000000000000028df75cf43f8ecc8d37b126602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd63bed8d31c31c37a373d4efd89fa516dab183ee65744fb8fc4f9ce2242e0f00000000010000000000000000000057d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fa03b84f63e022fe755f4007a4a899eaf52c4f49198e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c716357d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c24936615ee68538e8fddd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba1c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63c41cbde2ba66ad81168070c8c6e18a6e452a31bde54ad3e16304d06a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c7340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b9e6626f19eecb87e39175e85eff010000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f14eafe4b28ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1bfeef448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1099e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f9491bca7a8c59363799be70018c25ece5ad7307dc7a95c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2cdfb7fea73ca18874664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677ec97c5c568a89d6e36b165c391339878b699644c96bd6ea589765ed2a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae2676384ff799783f55d7e5a1a092a01b965dc99cb7a9d98440c355927629f2bcf9dc2396eb2f5d25829715b24327642ac4741201014a95e0e65e12cdf27e19043e3c5d3e798375cead35b9a93190a52cdecaaccc854a1d41ef365303f0e9b4fc969c9dab6d00000000000000000000008f6555f3b7d5021dfc8eb504f1e4fef716d60f0d50b03fc014fd3dff46f56750f0ba4f1b9f7de5c17e7d1f18522897edab8e9e76b667ec6b01908400f55e16f0cfbf026be5f5acc681053f697d62b3545aec4606e190216c22c1d8807b6c43f0f0a4b53619fe5c9412821c3816194a5e29cf12cc7a197b5bdafb096d2d7f6be483814c92ef29c3a21c169794c7de3b4c706f4de5f4b93c831944c7b66fa49f317aa22dbc211e19f031c4f8bee14ecd5eb061a052044adc4dd1b63a1500a9c0e09dbba23f2726a55975efb4519d864d984dcb3a1dcafa1124a6b004029a706478df3be2438d2e35e6ca674dc190143a0b6f7db3408c0c08011e5d8f54711a0bd410ab53a15b1596cb77d2b58df2d8d8"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r0}, 0x10) syz_emit_ethernet(0xcc, &(0x7f00000001c0)={@link_local, @random="50a241d5cde0", @void, {@ipv6={0x86dd, @generic={0x1, 0x6, "fbb2ea", 0x0, 0x33, 0xff, @rand_addr=' \x01\x00', @mcast2}}}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280), &(0x7f0000000280), 0xfd, r1}, 0x38) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x10004, &(0x7f00000000c0), 0x0, 0x4c0, &(0x7f0000000540)="$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") 1.154726218s ago: executing program 8 (id=4418): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7, 0x0, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) r2 = socket(0x10, 0x3, 0x9) connect$netlink(r2, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r3, 0x0, &(0x7f0000001700)=""/53}, 0x20) r4 = syz_io_uring_setup(0x237, &(0x7f0000000480)={0x0, 0x8901, 0x400, 0x0, 0x2cf}, &(0x7f0000000040)=0x0, &(0x7f0000000600)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x38, 0x0, @fd=r4, 0x100000001, 0x0, 0x0, 0x2, 0x1}) io_uring_enter(r4, 0x47ba, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x3, 0xc, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f0000000b00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [], {0x14}}, 0x28}}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/diskstats\x00', 0x0, 0x0) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x44, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r8}, 0x18) r9 = perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xfe, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x4}, 0x40db, 0x0, 0x4, 0x8, 0xa, 0x100, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r9, 0x40082406, &(0x7f0000000000)='cpu<=0||!') ioctl$sock_ifreq(r7, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x7}) ioctl$sock_netdev_private(r7, 0x8943, &(0x7f0000000000)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) 998.659701ms ago: executing program 9 (id=4419): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000a00)=@newtaction={0x60, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_ctinfo={0x48, 0x1, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0xfffff001, 0x7, 0x8, 0x8, 0x3856}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x440c0}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={0xffffffffffffffff, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300), ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0], 0x0, 0x59, &(0x7f0000000400)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000480), &(0x7f00000004c0), 0x8, 0x72, 0x8, 0x8, &(0x7f0000000500)}}, 0x10) vmsplice(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000780)="0e88de1faba31533689a58b222f7dcbec1e2e0379e022e5f4514a20a2d686d1ae57b1f41797c2804f132fbed0d4a5ed4dc5eab440bf02dd7860f3310a061b8fb13d4d027e96d797789f7aae00f91fd4b597325e95644fd76994c13dea7a896177b9431fc3f13741be798f25a3f42b630be0b981c155570addfcb5a77531653a47093ac70c8251ef65dc9b0aeb950c35f2c72101a462541738b02dfbe5a031f1731f0773d9968d00cfabaa3cd7f8a92513f1fdc10076292a36b4cb4f484eb8751f716", 0xc2}], 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000084ffffffff0000000003000000000000000000000002000000000000000000000000000002030000000000000000000002"], 0x0, 0x56}, 0x20) getrusage(0x1, &(0x7f00000005c0)) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010328bd7000fedbdf251c0000000c00018008000100", @ANYRES32=r2], 0x20}}, 0x10) 955.815622ms ago: executing program 7 (id=4420): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x47, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x140, 0x0) syz_io_uring_setup(0x2421, &(0x7f00000002c0)={0x0, 0x0, 0x2, 0x0, 0x10}, &(0x7f0000000100), &(0x7f0000000080)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000000), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000540)={'vxcan0\x00', 0x0}) sendmsg$can_bcm(r3, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r4}, 0x10, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca4000000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000004"], 0x20000600}}, 0x0) getsockopt$inet6_mreq(r1, 0x29, 0x1c, &(0x7f0000001f80)={@remote}, &(0x7f0000001fc0)=0x14) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000003000), r6) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000003040)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000003100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002bbd7000fbdbdf25020000000a000900aaaaaaaaaa44000008000300", @ANYRES32=r8, @ANYBLOB='\b\x00\v'], 0x30}, 0x1, 0x0, 0x0, 0x20000050}, 0x20040084) 953.621892ms ago: executing program 0 (id=4421): socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0xfed8) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$netlink(0x10, 0x3, 0x15) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r0, 0x84, 0x1, 0x0, &(0x7f0000000000)=0x54) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000bc0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', 0xffffffffffffffff, 0x0, 0x7fff}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x14}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xac}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 953.015852ms ago: executing program 9 (id=4422): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x47, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x140, 0x0) syz_io_uring_setup(0x2421, &(0x7f00000002c0)={0x0, 0x0, 0x2, 0x0, 0x10}, &(0x7f0000000100), &(0x7f0000000080)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000000), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000540)={'vxcan0\x00', 0x0}) sendmsg$can_bcm(r3, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r4}, 0x10, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca4000000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000004"], 0x20000600}}, 0x0) getsockopt$inet6_mreq(r1, 0x29, 0x1c, &(0x7f0000001f80)={@remote, 0x0}, &(0x7f0000001fc0)=0x14) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x40}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newtfilter={0x8c, 0x2c, 0xd27, 0x30bd25, 0x25df9bfb, {0x0, 0x0, 0x0, r5, {0xd, 0xe}, {}, {0x10}}, [@filter_kind_options=@f_route={{0xa}, {0x54, 0x2, [@TCA_ROUTE4_ACT={0x50, 0x6, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0xa, 0x5, 0x20, 0x7, 0x8}, 0x39}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0xfc, 0x3}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8010}, 0x4000) r9 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x101042, 0x91) pwrite64(r9, &(0x7f0000000140)='2', 0xfdef, 0xe7c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$batadv(&(0x7f0000003000), r10) sendmsg$BATADV_CMD_TP_METER(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000003100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="01002bbd7000fbdbdf25020000000a000900aaaaaaaaaa44000008000300", @ANYRES32, @ANYBLOB='\b\x00\v'], 0x30}, 0x1, 0x0, 0x0, 0x20000050}, 0x20040084) 952.557792ms ago: executing program 8 (id=4423): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) clock_getres(0x6, 0x0) 892.360193ms ago: executing program 0 (id=4424): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0}, &(0x7f0000000380), &(0x7f00000003c0)=r1}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00'}, 0x10) setrlimit(0x9, &(0x7f0000000380)) 853.841524ms ago: executing program 9 (id=4426): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000240)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x7fffffff}, 0x18) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_load(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e7578"], 0x65) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x50) creat(&(0x7f00000001c0)='./file0\x00', 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)}, 0xfffffffffffffedf) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001240)={&(0x7f0000000200)='kfree\x00', r4, 0x0, 0xfffffffffffffffd}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x2000013e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPIOCGCHAN(r5, 0x80047437, &(0x7f0000000100)) r6 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r6, &(0x7f0000000080)={0x18, 0x0, {0x15, @remote, 'wg1\x00'}}, 0x1e) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r7, 0x40047438, &(0x7f0000000040)=0x2) ioctl$PPPIOCBRIDGECHAN(r7, 0x40047435, &(0x7f0000000200)=0x1) sendmmsg(r5, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0}}], 0x3fffffffffffefc, 0x8090) 772.392116ms ago: executing program 0 (id=4427): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x18, 0xc, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYRESDEC=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = getpid() r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="9f7400000007000000100000000000000c020000001000000000000012010000000c00000005000006040000000a000000940f000009000000090000000b0000000200000005000000070000000900000000000000020000000000009304000000080000000000000c020000000d00000000080011040000000300000000306161616100"], &(0x7f00000002c0)=""/22, 0x93, 0x16, 0x0, 0xfffffffb}, 0x28) mmap(&(0x7f00001bb000/0x3000)=nil, 0x3000, 0x1000000, 0x80010, r4, 0xe0930000) sched_setaffinity(r2, 0x0, 0x0) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb2570000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prlimit64(0x0, 0x2, &(0x7f0000000040)={0x0, 0xffffffffffffffff}, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r7], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x57dee456f617327e) preadv(0xffffffffffffffff, &(0x7f00000015c0)=[{&(0x7f0000001600)=""/4094, 0xffe}], 0x1, 0x8, 0xd215) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYRESDEC=r3], &(0x7f0000000240)='GPL\x00', 0xd, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000080)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='cpu.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r9, 0xc0c0583b, &(0x7f0000000d40)=ANY=[@ANYBLOB="000000004c90020052feffff0300010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff"]) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000980)={&(0x7f0000000280)=ANY=[@ANYBLOB="06030003020000002cbd7000fcdbdf255a3ad6aa31a95523855065c1f1f63ddc73e53a6eead258c85727ac24fffedd7899e5708136c0b5193167d7744393f7c5f050b9c5"], 0x10}, 0x1, 0x7}, 0x0) 660.098638ms ago: executing program 8 (id=4428): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000142020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000e02800850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='page_pool_release\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) getpid() mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0xf, 0x89, 0x40000}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000300)="b9ff030768f1258c989e14f05c71", 0x0, 0x2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 594.216859ms ago: executing program 1 (id=4429): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0xf7d4, 0x8, 0x1, 0x8001, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20004006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x55097aa4, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e02002d000b13d25a806f8c6394f9031a04000a740100053582c137153e3702df0c6400f01700d1bd00000000", 0x33fe0}], 0x1}, 0x0) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc840, &(0x7f0000000840)={[{@delalloc}, {@noacl}, {@bsdgroups}, {@journal_path={'journal_path', 0x3d, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}}, {@grpjquota_path={'grpjquota', 0x3d, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}}, {@jqfmt_vfsv1}, {@noblock_validity}, {@user_xattr}]}, 0x2, 0x246, &(0x7f0000000ac0)="$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") bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) ioctl$HIDIOCGUSAGE(0xffffffffffffffff, 0xc018480b, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, 0x0, r2, 0x0, 0x46) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x25, 0x4}, 0x14) close_range(r1, 0xffffffffffffffff, 0x0) 593.138279ms ago: executing program 9 (id=4430): creat(0x0, 0x48) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x10004, &(0x7f00000000c0), 0x0, 0x4c0, &(0x7f0000000540)="$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") 573.121949ms ago: executing program 7 (id=4431): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xb, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00', r0}, 0x10) getitimer(0x0, 0x0) socket(0x0, 0x1, 0x140000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ff9}]}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bf8200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) mmap(&(0x7f00001d8000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, 0x0) write$cgroup_subtree(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="0f0b"], 0x7) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x80, 0x1, 0x28}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200008, &(0x7f0000000380)={[{@nolazytime}, {@auto_da_alloc}, {@sysvgroups}, {@norecovery}, {@jqfmt_vfsv0}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@grpid}]}, 0x3, 0x56a, &(0x7f00000015c0)="$eJzs3c9rHFUcAPDvbJL+1qZQinqQQA9WajdN4o8KQutRtFjQe12SaSjZdEt2U5pYaHuwFy9SBBEL4h/g3WPxH/CvKGihSAl68BKZzWy7TbL5uXW3zucD0743M5s3b998335nZ5cNoLBGsn9KEa9GxDdJxOG2bYORbxxZ2W/p8Y3JbEliefmzP5NI8nWt/ZP8/4N55ZWI+PWriJOlte3WFxZnKtVqOpfXRxuzV0frC4unLs9WptPp9Mr4xMSZdybG33/v3a719c0Lf3//6f2Pznx9fOm7nx8euZvEuTiUb2vvxy7caq+MxEj+nAzFuVU7jnWhsX6S9PoA2JGBPM6HIpsDDsdAHvXA/9/NiFgGCioR/1BQrTygdW3fpevgF8ajD1cugNb2f3DlvZHY17w2OrCUPHNllF3vDneh/ayNX/64dzdbYpP3IW52oT2Allu3I+L04ODa+S/J57+dO91883hjq9so2usP9NL9LP95a738p/Qk/4l18p+D68TuTmwe/6WHXWimoyz/+2Dd/PfJ1DU8kNdeauZ8Q8mly9X0dES8HBEnYmhvVt/ofs6ZpQfLnba153/ZkrXfygXz43g4uPfZx0xVGpXd9Lndo9sRrz3Nf5NYM//va+a6q8c/ez4ubLGNY+m91ztt27z/7bqfAS//FPHGuuP/9I5WsvH9ydHm+TDaOivW+uvOsd86tb+9/ndfNv4HNu7/cNJ+v7a+/TZ+3PdP2mnbTs//PcnnzfKefN31SqMxNxaxJ/lk7frxp49t1Vv7Z/0/cXzj+W+9839/RHyxxf7fOXqn4679MP5T2xr/7RcefPzlD53a39r4v90sncjXbGX+2+oB7ua5AwAAAAAAgH5TiohDkZTKT8qlUrm88vmOo3GgVK3VGycv1eavTEXzu7LDMVRq3ek+3PZ5iLH887Ct+viq+kREHImIbwf2N+vlyVp1qtedBwAAAAAAAAAAAAAAAAAAgD5xsMP3/zO/D/T66IDnzk9+Q3FtGv/d+KUnoC95/YfiEv9QXOIfikv8Q3GJfygu8Q/FJf6huMQ/AAAAAAAAAAAAAAAAAAAAAAAAAAAAdNWF8+ezZXnp8Y3JrD51bWF+pnbt1FRanynPzk+WJ2tzV8vTtdp0NS1P1mY3+3vVWu3q2HjMXx9tpPXGaH1h8eJsbf5K4+Ll2cp0ejEd+k96BQAAAAAAAAAAAAAAAAAAAC+W+sLiTKVaTecUOhbORl8cxo4LyWajfDY/GXbUxGDvO6jwHAo9npgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoM2/AQAA///fKTPH") r5 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r5, 0x2007ffc) sendfile(r5, r5, 0x0, 0x800000009) r6 = open(&(0x7f0000000340)='./file1\x00', 0x4000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) preadv2(r6, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x100000000000000d, 0x0, 0x0, 0x0) 446.921572ms ago: executing program 9 (id=4432): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) getsockname$packet(0xffffffffffffffff, &(0x7f0000000940)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(0xffffffffffffffff, 0x891a, &(0x7f0000000580)={'veth1_vlan\x00', {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x16}}}) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x80) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0xa, 0x300) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0xb}, 0x94) socket$packet(0x11, 0xa, 0x300) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="219a53f271a76d2608004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000300)={'syztnl0\x00', 0x0}) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x11}, 0x1) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000380), 0x84d03, 0x0) 391.819073ms ago: executing program 7 (id=4433): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000a00)=@newtaction={0x60, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_ctinfo={0x48, 0x1, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0xfffff001, 0x7, 0x8, 0x8, 0x3856}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x440c0}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={0xffffffffffffffff, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300), ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0], 0x0, 0x59, &(0x7f0000000400)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000480), &(0x7f00000004c0), 0x8, 0x72, 0x8, 0x8, &(0x7f0000000500)}}, 0x10) vmsplice(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000780)="0e88de1faba31533689a58b222f7dcbec1e2e0379e022e5f4514a20a2d686d1ae57b1f41797c2804f132fbed0d4a5ed4dc5eab440bf02dd7860f3310a061b8fb13d4d027e96d797789f7aae00f91fd4b597325e95644fd76994c13dea7a896177b9431fc3f13741be798f25a3f42b630be0b981c155570addfcb5a77531653a47093ac70c8251ef65dc9b0aeb950c35f2c72101a462541738b02dfbe5a031f1731f0773d9968d00cfabaa3cd7f8a92513f1fdc10076292a36b4cb4f484eb8751f716", 0xc2}], 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000084ffffffff0000000003000000000000000000000002000000000000000000000000000002030000000000000000000002"], 0x0, 0x56}, 0x20) getrusage(0x1, &(0x7f00000005c0)) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010328bd7000fedbdf251c0000000c00018008000100", @ANYRES32=r2], 0x20}}, 0x10) 341.403494ms ago: executing program 8 (id=4434): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7, 0x0, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) r2 = socket(0x10, 0x3, 0x9) connect$netlink(r2, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r3, 0x0, &(0x7f0000001700)=""/53}, 0x20) r4 = syz_io_uring_setup(0x237, &(0x7f0000000480)={0x0, 0x8901, 0x400, 0x0, 0x2cf}, &(0x7f0000000040)=0x0, &(0x7f0000000600)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x38, 0x0, @fd=r4, 0x100000001, 0x0, 0x0, 0x2, 0x1}) io_uring_enter(r4, 0x47ba, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x3, 0xc, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f0000000b00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [], {0x14}}, 0x28}}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/diskstats\x00', 0x0, 0x0) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x44, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r8}, 0x10) r9 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r9, 0x40082406, &(0x7f0000000000)='cpu<=0||!') ioctl$sock_ifreq(r7, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x7}) ioctl$sock_netdev_private(r7, 0x8943, &(0x7f0000000000)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) 266.159365ms ago: executing program 1 (id=4435): socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0xfed8) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$netlink(0x10, 0x3, 0x15) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r0, 0x84, 0x1, 0x0, &(0x7f0000000000)=0x54) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000bc0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', 0xffffffffffffffff, 0x0, 0x7fff}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x14}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xac}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 209.265976ms ago: executing program 8 (id=4436): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x47, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x140, 0x0) syz_io_uring_setup(0x2421, &(0x7f00000002c0)={0x0, 0x0, 0x2, 0x0, 0x10}, &(0x7f0000000100), &(0x7f0000000080)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000000), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000540)={'vxcan0\x00', 0x0}) sendmsg$can_bcm(r3, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r4}, 0x10, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca4000000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000004"], 0x20000600}}, 0x0) getsockopt$inet6_mreq(r1, 0x29, 0x1c, &(0x7f0000001f80)={@remote, 0x0}, &(0x7f0000001fc0)=0x14) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x40}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newtfilter={0x8c, 0x2c, 0xd27, 0x30bd25, 0x25df9bfb, {0x0, 0x0, 0x0, r5, {0xd, 0xe}, {}, {0x10}}, [@filter_kind_options=@f_route={{0xa}, {0x54, 0x2, [@TCA_ROUTE4_ACT={0x50, 0x6, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0xa, 0x5, 0x20, 0x7, 0x8}, 0x39}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0xfc, 0x3}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8010}, 0x4000) r9 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x101042, 0x91) pwrite64(r9, &(0x7f0000000140)='2', 0xfdef, 0xe7c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$batadv(&(0x7f0000003000), r10) sendmsg$BATADV_CMD_TP_METER(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000003100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="01002bbd7000fbdbdf25020000000a000900aaaaaaaaaa44000008000300", @ANYRES32, @ANYBLOB='\b\x00\v'], 0x30}, 0x1, 0x0, 0x0, 0x20000050}, 0x20040084) 200.157297ms ago: executing program 1 (id=4437): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0}, &(0x7f0000000380), &(0x7f00000003c0)=r1}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00'}, 0x10) setrlimit(0x9, &(0x7f0000000380)) 111.933619ms ago: executing program 1 (id=4438): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) clock_getres(0x6, 0x0) 106.835398ms ago: executing program 8 (id=4439): r0 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000140), 0x1, 0x4fa, &(0x7f0000000ac0)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.bfq.sectors\x00', 0x275a, 0x0) fallocate(r1, 0x0, 0x0, 0x1040f8) lseek(r1, 0x0, 0x4) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000400)=ANY=[@ANYBLOB="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", @ANYRES32=r2, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1, 0x0, 0x2}, 0x18) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r4, 0xc0f85403, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0700000004000000800000000100000028000000", @ANYBLOB="7fa7240700000000454bd979b4d486a877b129b97323820f6d087f426885949a61d0cbfd74d27d58831db3b24e4d91d0a6c03f9a5b847cf20a3b4ae23e2678f226a4607cf60f3a76d8cb1205de5bbc7eced6120cbd399d608e072cac7b2162081b65579fd1614f571302d3cdf6e5328e0d14e3e8d9821230525f0db17fd09582f486550e5cc863af47606a00cadfcadad73f3728044898f8abd3a8bdbbee", @ANYRESDEC, @ANYBLOB='\x00'/28, @ANYRES32, @ANYRESOCT=0x0, @ANYRESHEX=r3, @ANYRESDEC=r0], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000b7000000000000009500"/40], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x18) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x28}}, 0x40000) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200008, &(0x7f0000000380)={[{@nolazytime}, {@auto_da_alloc}, {@sysvgroups}, {@norecovery}, {@jqfmt_vfsv0}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@grpid}]}, 0x3, 0x56a, &(0x7f00000015c0)="$eJzs3c9rHFUcAPDvbJL+1qZQinqQQA9WajdN4o8KQutRtFjQe12SaSjZdEt2U5pYaHuwFy9SBBEL4h/g3WPxH/CvKGihSAl68BKZzWy7TbL5uXW3zucD0743M5s3b998335nZ5cNoLBGsn9KEa9GxDdJxOG2bYORbxxZ2W/p8Y3JbEliefmzP5NI8nWt/ZP8/4N55ZWI+PWriJOlte3WFxZnKtVqOpfXRxuzV0frC4unLs9WptPp9Mr4xMSZdybG33/v3a719c0Lf3//6f2Pznx9fOm7nx8euZvEuTiUb2vvxy7caq+MxEj+nAzFuVU7jnWhsX6S9PoA2JGBPM6HIpsDDsdAHvXA/9/NiFgGCioR/1BQrTygdW3fpevgF8ajD1cugNb2f3DlvZHY17w2OrCUPHNllF3vDneh/ayNX/64dzdbYpP3IW52oT2Allu3I+L04ODa+S/J57+dO91883hjq9so2usP9NL9LP95a738p/Qk/4l18p+D68TuTmwe/6WHXWimoyz/+2Dd/PfJ1DU8kNdeauZ8Q8mly9X0dES8HBEnYmhvVt/ofs6ZpQfLnba153/ZkrXfygXz43g4uPfZx0xVGpXd9Lndo9sRrz3Nf5NYM//va+a6q8c/ez4ubLGNY+m91ztt27z/7bqfAS//FPHGuuP/9I5WsvH9ydHm+TDaOivW+uvOsd86tb+9/ndfNv4HNu7/cNJ+v7a+/TZ+3PdP2mnbTs//PcnnzfKefN31SqMxNxaxJ/lk7frxp49t1Vv7Z/0/cXzj+W+9839/RHyxxf7fOXqn4679MP5T2xr/7RcefPzlD53a39r4v90sncjXbGX+2+oB7ua5AwAAAAAAgH5TiohDkZTKT8qlUrm88vmOo3GgVK3VGycv1eavTEXzu7LDMVRq3ek+3PZ5iLH887Ct+viq+kREHImIbwf2N+vlyVp1qtedBwAAAAAAAAAAAAAAAAAAgD5xsMP3/zO/D/T66IDnzk9+Q3FtGv/d+KUnoC95/YfiEv9QXOIfikv8Q3GJfygu8Q/FJf6huMQ/AAAAAAAAAAAAAAAAAAAAAAAAAAAAdNWF8+ezZXnp8Y3JrD51bWF+pnbt1FRanynPzk+WJ2tzV8vTtdp0NS1P1mY3+3vVWu3q2HjMXx9tpPXGaH1h8eJsbf5K4+Ll2cp0ejEd+k96BQAAAAAAAAAAAAAAAAAAAC+W+sLiTKVaTecUOhbORl8cxo4LyWajfDY/GXbUxGDvO6jwHAo9npgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoM2/AQAA///fKTPH") r7 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0xb8) ftruncate(r7, 0x2007ffc) sendfile(r7, r7, 0x0, 0x800000009) creat(&(0x7f00000000c0)='./bus\x00', 0x182) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xc94284a3061bb7fe, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = open(&(0x7f0000000340)='./file1\x00', 0x4000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) preadv2(r8, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x100000000000000d, 0x0, 0x0, 0x0) 102.052739ms ago: executing program 1 (id=4440): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[], 0x1, 0x311, &(0x7f0000000500)="$eJzs3U1oY1UUwPGTj06TapsgKjigHp2NioRJ1sIYhqmIgRGdyOiA8Ma+aOgzKXkhmiJNCoVuXLjxa62CSKEgLgSh1IUraSndu+uuC+tK0eId0rzX99om/aJpF/3/Fsnh3nPuvb03DeUGms2XPvvwP2NMyapLVCISfVnake2IpCUqvrY8/9Hi2pNvvv3Oa/lC4dYbquP5O9mcqo49vXTvk4Vnl+sPvfXT2C/DspJ+d3Mrt7Hy+MoTm//f+aDsatnVSrWulia8wXTiC3cyo/q6Y1uureWKa9c6/fer1bp137G15FSnpppqVSYeHpmq2a6rVqWpk3ZT61Wt15pqvW+VK5rJZHR0RNDT7M5jQmSh8XW+f1rxh3+Mka3678YMt8UY41XhslDvOTj/T/sn3xw9r2XhnITe1BMiznyj2Ch2n7v9+ZKUxRFbrktKtqXzGjHfLJqdl0rn8ePcYmH9hd9+VdW0zDgtr77VKMaCejNsS1ZSkh7yZg3qx18t3Mpq1976IRkJz5+TlDzarekK6nM966/Ic9dC9RlJyfp7UhVHVpee+Xvj9vyXfv1MVvXm7cJOfVT8+qRM+JuUkO//6r196cGfEAAAAAAAAAAAJ5fRXT3v7zOdhLlpVR1Ny4z/mXCnvxt59+uR8OcD++/nr/e8n4/L1fjF/dwAAAAAAFwmbnPOi5rTk5bj2DU36QedlpjXG7SEgmTQEu+XEwoeG9ubY4xp9U0+zyAhA5zi29mjcpLitzw1fviA127EVr0DaQddQ/tP8GyCq8aYsxnw37vhltSpliqJ41bF5XgDerdPh+UkRCS2+5tyxIBJOeG2/HkmxxTx1tc/55V7f/x45DhXDuzPQd1rveVBvRcBAAAAGKzgj/4b0ir93GjdffHzY5aa1IDXBgAAAAAAAAAAAAAAAAAAAAAAAAAAAADAZXGKfzm2+lWvLu0Ej3znt6yFunpOHNnyvyYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgQj0IAAD//6sjt+0=") r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r1, 0x0, 0x2}, 0x18) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) umount2(&(0x7f00000003c0)='./file0\x00', 0xa) 0s ago: executing program 1 (id=4441): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x47, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x140, 0x0) syz_io_uring_setup(0x2421, &(0x7f00000002c0)={0x0, 0x0, 0x2, 0x0, 0x10}, &(0x7f0000000100), &(0x7f0000000080)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000000), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000540)={'vxcan0\x00', 0x0}) sendmsg$can_bcm(r3, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r4}, 0x10, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca4000000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000004"], 0x20000600}}, 0x0) getsockopt$inet6_mreq(r1, 0x29, 0x1c, &(0x7f0000001f80)={@remote}, &(0x7f0000001fc0)=0x14) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000003000), r6) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000003040)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000003100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002bbd7000fbdbdf25020000000a000900aaaaaaaaaa44000008000300", @ANYRES32=r8, @ANYBLOB='\b\x00\v'], 0x30}, 0x1, 0x0, 0x0, 0x20000050}, 0x20040084) kernel console output (not intermixed with test programs): +0x76/0xc0 [ 309.076600][T17562] ? kstrtouint_from_user+0x9f/0xf0 [ 309.076633][T17562] ? should_fail_ex+0xdb/0x280 [ 309.076666][T17562] ucma_write+0x1b3/0x250 [ 309.076690][T17562] ? __pfx_ucma_write+0x10/0x10 [ 309.076715][T17562] vfs_write+0x266/0x960 [ 309.076795][T17562] ? __rcu_read_unlock+0x4f/0x70 [ 309.076817][T17562] ? __fget_files+0x184/0x1c0 [ 309.076930][T17562] ksys_write+0xda/0x1a0 [ 309.076963][T17562] __x64_sys_write+0x40/0x50 [ 309.077025][T17562] x64_sys_call+0x27fe/0x2ff0 [ 309.077051][T17562] do_syscall_64+0xd2/0x200 [ 309.077132][T17562] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 309.077162][T17562] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 309.077220][T17562] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 309.077284][T17562] RIP: 0033:0x7f7b8942eec9 [ 309.077302][T17562] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 309.077325][T17562] RSP: 002b:00007f7b87e8f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 309.077345][T17562] RAX: ffffffffffffffda RBX: 00007f7b89685fa0 RCX: 00007f7b8942eec9 [ 309.077357][T17562] RDX: 0000000000000018 RSI: 0000200000000000 RDI: 0000000000000006 [ 309.077446][T17562] RBP: 00007f7b87e8f090 R08: 0000000000000000 R09: 0000000000000000 [ 309.077463][T17562] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 309.077478][T17562] R13: 00007f7b89686038 R14: 00007f7b89685fa0 R15: 00007ffc24b4fae8 [ 309.077500][T17562] [ 309.090493][T17575] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=17575 comm=syz.3.3897 [ 309.279260][T17578] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3898'. [ 309.284722][T17575] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=17575 comm=syz.3.3897 [ 309.390207][T17587] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3900'. [ 309.446279][T17175] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 1712 with error 28 [ 309.459134][T17175] EXT4-fs (loop1): This should not happen!! Data will be lost [ 309.459134][T17175] [ 309.459625][T17590] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3902'. [ 309.545608][T17595] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=17595 comm=syz.7.3904 [ 309.558252][T17595] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=17595 comm=syz.7.3904 [ 309.564376][T17503] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 309.577833][T17593] loop3: detected capacity change from 0 to 128 [ 309.586481][T17503] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 309.589426][T17593] ext4: Unknown parameter 'noacl' [ 309.602576][T17503] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 309.621961][T17503] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 309.722409][T17503] 8021q: adding VLAN 0 to HW filter on device bond0 [ 309.734896][T17503] 8021q: adding VLAN 0 to HW filter on device team0 [ 309.787658][T17607] loop7: detected capacity change from 0 to 512 [ 309.796462][T17175] bridge0: port 1(bridge_slave_0) entered blocking state [ 309.803643][T17175] bridge0: port 1(bridge_slave_0) entered forwarding state [ 309.814425][T17175] bridge0: port 2(bridge_slave_1) entered blocking state [ 309.821648][T17175] bridge0: port 2(bridge_slave_1) entered forwarding state [ 309.836211][T17607] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c01c, mo2=0002] [ 309.846016][T17607] System zones: 0-2, 18-18, 34-35 [ 309.901872][T17607] ext4 filesystem being mounted at /115/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 309.948810][T17612] loop3: detected capacity change from 0 to 1024 [ 309.978817][T17612] EXT4-fs: Ignoring removed orlov option [ 309.987719][T17503] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 310.003059][T17620] netlink: 96 bytes leftover after parsing attributes in process `syz.7.3908'. [ 310.294036][T17633] loop7: detected capacity change from 0 to 2048 [ 310.295139][T17640] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=17640 comm=syz.0.3912 [ 310.313057][T17640] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=17640 comm=syz.0.3912 [ 310.390063][T17644] loop3: detected capacity change from 0 to 512 [ 310.747218][T17644] ext4 filesystem being mounted at /123/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 310.775127][T17503] veth0_vlan: entered promiscuous mode [ 310.784434][T17503] veth1_vlan: entered promiscuous mode [ 310.803764][T17503] veth0_macvtap: entered promiscuous mode [ 310.811694][T17503] veth1_macvtap: entered promiscuous mode [ 310.823491][T17503] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 310.836383][T17503] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 310.848370][T17193] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.857595][T17633] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 310.874803][T17633] EXT4-fs (loop7): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1384 with error 28 [ 310.887368][T17633] EXT4-fs (loop7): This should not happen!! Data will be lost [ 310.887368][T17633] [ 310.897141][T17633] EXT4-fs (loop7): Total free blocks count 0 [ 310.903178][T17633] EXT4-fs (loop7): Free/Dirty block details [ 310.909094][T17633] EXT4-fs (loop7): free_blocks=2415919104 [ 310.914903][T17633] EXT4-fs (loop7): dirty_blocks=1392 [ 310.920185][T17633] EXT4-fs (loop7): Block reservation details [ 310.926206][T17633] EXT4-fs (loop7): i_reserved_data_blocks=87 [ 310.934552][T17175] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.948345][T17175] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.969323][T17175] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.080555][T17665] netlink: 'syz.3.3914': attribute type 13 has an invalid length. [ 311.138126][T17665] bridge0: port 2(bridge_slave_1) entered disabled state [ 311.138321][T17665] bridge0: port 1(bridge_slave_0) entered disabled state [ 311.205865][T17665] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 311.216414][T17665] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 311.281070][T17164] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.320394][T17128] EXT4-fs (loop7): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 28 [ 311.332690][T17128] EXT4-fs (loop7): This should not happen!! Data will be lost [ 311.332690][T17128] [ 311.353845][T17164] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.354074][T17164] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.354109][T17164] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.376845][T17675] loop7: detected capacity change from 0 to 128 [ 311.390969][T17675] ext4: Unknown parameter 'noacl' [ 311.454338][T17677] loop8: detected capacity change from 0 to 2048 [ 311.496409][T17679] loop7: detected capacity change from 0 to 512 [ 311.643890][T17679] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c01c, mo2=0002] [ 311.643997][T17679] System zones: 0-2, 18-18, 34-35 [ 311.644824][T17679] ext4 filesystem being mounted at /120/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 311.670726][T17685] random: crng reseeded on system resumption [ 311.810757][T17677] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 311.811578][T17677] EXT4-fs (loop8): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1270 with error 28 [ 311.811612][T17677] EXT4-fs (loop8): This should not happen!! Data will be lost [ 311.811612][T17677] [ 311.811629][T17677] EXT4-fs (loop8): Total free blocks count 0 [ 311.811645][T17677] EXT4-fs (loop8): Free/Dirty block details [ 311.811691][T17677] EXT4-fs (loop8): free_blocks=2415919104 [ 311.811713][T17677] EXT4-fs (loop8): dirty_blocks=1280 [ 311.811727][T17677] EXT4-fs (loop8): Block reservation details [ 311.811738][T17677] EXT4-fs (loop8): i_reserved_data_blocks=80 [ 311.946286][T17694] loop7: detected capacity change from 0 to 128 [ 311.968774][T17694] FAT-fs (loop7): bogus sectors per cluster 0 [ 311.975190][T17694] FAT-fs (loop7): Can't find a valid FAT filesystem [ 311.991509][T17690] loop3: detected capacity change from 0 to 8192 [ 311.993386][T17168] EXT4-fs (loop8): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 28 [ 311.993413][T17168] EXT4-fs (loop8): This should not happen!! Data will be lost [ 311.993413][T17168] [ 312.053477][T17700] loop7: detected capacity change from 0 to 128 [ 312.054103][T17700] ext4: Unknown parameter 'noacl' [ 312.070556][T17690] loop3: p1 p2 p4 < > [ 312.070568][T17690] loop3: partition table partially beyond EOD, truncated [ 312.070694][T17690] loop3: p1 start 16777224 is beyond EOD, truncated [ 312.070717][T17690] loop3: p2 size 515840 extends beyond EOD, truncated [ 312.074370][T17690] loop3: p4 start 16777216 is beyond EOD, truncated [ 312.076568][T17690] __nla_validate_parse: 1 callbacks suppressed [ 312.076583][T17690] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 312.076597][T17690] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 312.076987][T17690] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 312.279299][T17714] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3931'. [ 312.319244][T17717] loop7: detected capacity change from 0 to 512 [ 312.327724][T17715] loop8: detected capacity change from 0 to 2048 [ 312.339723][T17718] random: crng reseeded on system resumption [ 312.362223][T17717] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c01c, mo2=0002] [ 312.376520][T17717] System zones: 0-2, 18-18, 34-35 [ 312.391675][T17717] ext4 filesystem being mounted at /125/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 312.505670][T17727] random: crng reseeded on system resumption [ 312.531180][T17715] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 312.550932][T17726] syzkaller1: entered promiscuous mode [ 312.556472][T17726] syzkaller1: entered allmulticast mode [ 312.611923][T17726] bond1: entered promiscuous mode [ 312.617097][T17726] bond1: entered allmulticast mode [ 312.622708][T17726] 8021q: adding VLAN 0 to HW filter on device bond1 [ 312.631145][T17715] EXT4-fs (loop8): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1186 with error 28 [ 312.643708][T17715] EXT4-fs (loop8): This should not happen!! Data will be lost [ 312.643708][T17715] [ 312.653420][T17715] EXT4-fs (loop8): Total free blocks count 0 [ 312.659448][T17715] EXT4-fs (loop8): Free/Dirty block details [ 312.665523][T17715] EXT4-fs (loop8): free_blocks=2415919104 [ 312.671310][T17715] EXT4-fs (loop8): dirty_blocks=1200 [ 312.676605][T17715] EXT4-fs (loop8): Block reservation details [ 312.682719][T17715] EXT4-fs (loop8): i_reserved_data_blocks=75 [ 312.699020][T17726] bond1 (unregistering): Released all slaves [ 312.748194][T17737] random: crng reseeded on system resumption [ 312.919855][T17744] loop7: detected capacity change from 0 to 128 [ 312.942711][T17742] loop3: detected capacity change from 0 to 2048 [ 312.942924][T17744] FAT-fs (loop7): bogus sectors per cluster 0 [ 312.955327][T17744] FAT-fs (loop7): Can't find a valid FAT filesystem [ 313.139853][T17749] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 313.159915][ T37] EXT4-fs (loop8): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 28 [ 313.161624][T17757] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3942'. [ 313.172431][ T37] EXT4-fs (loop8): This should not happen!! Data will be lost [ 313.172431][ T37] [ 313.195093][T17749] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1286 with error 28 [ 313.207635][T17749] EXT4-fs (loop3): This should not happen!! Data will be lost [ 313.207635][T17749] [ 313.217495][T17749] EXT4-fs (loop3): Total free blocks count 0 [ 313.223532][T17749] EXT4-fs (loop3): Free/Dirty block details [ 313.229510][T17749] EXT4-fs (loop3): free_blocks=2415919104 [ 313.235369][T17749] EXT4-fs (loop3): dirty_blocks=1296 [ 313.240689][T17749] EXT4-fs (loop3): Block reservation details [ 313.246743][T17749] EXT4-fs (loop3): i_reserved_data_blocks=81 [ 313.365834][T17766] loop7: detected capacity change from 0 to 512 [ 313.425184][T17766] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c01c, mo2=0002] [ 313.433463][T17766] System zones: 0-2, 18-18, 34-35 [ 313.483682][T17759] loop1: detected capacity change from 0 to 512 [ 313.485876][T17766] ext4 filesystem being mounted at /131/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 313.491340][T17759] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 313.517510][T17759] EXT4-fs (loop1): 1 truncate cleaned up [ 313.561207][ T37] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 28 [ 313.573605][ T37] EXT4-fs (loop3): This should not happen!! Data will be lost [ 313.573605][ T37] [ 313.588242][T17771] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 313.596949][T17771] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 314.074432][ T29] kauditd_printk_skb: 101 callbacks suppressed [ 314.074447][ T29] audit: type=1326 audit(1759106179.131:87402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17775 comm="syz.3.3956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc91253eec9 code=0x7ffc0000 [ 314.104523][ T29] audit: type=1326 audit(1759106179.131:87403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17775 comm="syz.3.3956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc91253eec9 code=0x7ffc0000 [ 314.189001][ T29] audit: type=1326 audit(1759106179.181:87404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17775 comm="syz.3.3956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc91253eec9 code=0x7ffc0000 [ 314.212804][ T29] audit: type=1326 audit(1759106179.181:87405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17775 comm="syz.3.3956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc91253eec9 code=0x7ffc0000 [ 314.221310][T17776] loop3: detected capacity change from 0 to 1024 [ 314.236523][ T29] audit: type=1326 audit(1759106179.181:87406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17775 comm="syz.3.3956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc91253eec9 code=0x7ffc0000 [ 314.260501][T17776] EXT4-fs: Ignoring removed orlov option [ 314.266483][ T29] audit: type=1326 audit(1759106179.181:87407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17775 comm="syz.3.3956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc91253eec9 code=0x7ffc0000 [ 314.266522][ T29] audit: type=1326 audit(1759106179.181:87408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17775 comm="syz.3.3956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc91253eec9 code=0x7ffc0000 [ 314.319459][ T29] audit: type=1326 audit(1759106179.181:87409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17775 comm="syz.3.3956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=36 compat=0 ip=0x7fc91253eec9 code=0x7ffc0000 [ 314.343037][ T29] audit: type=1326 audit(1759106179.181:87410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17775 comm="syz.3.3956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc91253eec9 code=0x7ffc0000 [ 314.366644][ T29] audit: type=1326 audit(1759106179.191:87411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17775 comm="syz.3.3956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc91253eec9 code=0x7ffc0000 [ 314.393586][T17778] loop7: detected capacity change from 0 to 512 [ 314.395098][T17776] EXT4-fs mount: 52 callbacks suppressed [ 314.395131][T17776] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 314.421341][T17778] EXT4-fs (loop7): orphan cleanup on readonly fs [ 314.429001][T17778] EXT4-fs error (device loop7): ext4_acquire_dquot:6937: comm syz.7.3946: Failed to acquire dquot type 1 [ 314.441897][T17778] EXT4-fs (loop7): 1 truncate cleaned up [ 314.448674][T17778] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 314.499993][T15029] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 314.729771][T13540] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 314.828781][T17789] loop1: detected capacity change from 0 to 128 [ 314.836015][T17789] FAT-fs (loop1): bogus sectors per cluster 0 [ 314.842181][T17789] FAT-fs (loop1): Can't find a valid FAT filesystem [ 314.923590][T15313] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 314.937481][ T3406] IPVS: starting estimator thread 0... [ 314.946225][T17794] random: crng reseeded on system resumption [ 315.005036][T17803] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3955'. [ 315.041025][T17795] IPVS: using max 1920 ests per chain, 96000 per kthread [ 315.133300][T17807] loop1: detected capacity change from 0 to 128 [ 315.133738][T17807] ext4: Unknown parameter 'noacl' [ 315.416113][T17816] syzkaller1: entered promiscuous mode [ 315.416138][T17816] syzkaller1: entered allmulticast mode [ 315.444567][T17816] bond2: entered promiscuous mode [ 315.444620][T17816] bond2: entered allmulticast mode [ 315.444737][T17816] 8021q: adding VLAN 0 to HW filter on device bond2 [ 315.459201][T17816] bond2 (unregistering): Released all slaves [ 315.568568][T17823] random: crng reseeded on system resumption [ 316.016148][T17828] random: crng reseeded on system resumption [ 316.040395][T17830] random: crng reseeded on system resumption [ 316.056045][T17832] loop7: detected capacity change from 0 to 128 [ 316.067105][T17832] ext4: Unknown parameter 'noacl' [ 316.139854][T17836] netlink: 96 bytes leftover after parsing attributes in process `syz.0.3966'. [ 316.230427][T17842] random: crng reseeded on system resumption [ 316.264779][T17846] loop1: detected capacity change from 0 to 128 [ 316.272663][T17846] ext4: Unknown parameter 'noacl' [ 316.433613][T17853] loop7: detected capacity change from 0 to 128 [ 316.441503][T17853] FAT-fs (loop7): bogus sectors per cluster 0 [ 316.447652][T17853] FAT-fs (loop7): Can't find a valid FAT filesystem [ 316.495433][T17851] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=17851 comm=syz.1.3973 [ 316.495541][T17851] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=17851 comm=syz.1.3973 [ 316.568849][T17858] loop7: detected capacity change from 0 to 2048 [ 316.595464][T17858] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 316.716115][T17865] hub 6-0:1.0: USB hub found [ 316.716181][T17865] hub 6-0:1.0: 8 ports detected [ 316.798964][T17868] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3979'. [ 316.957097][T15313] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 316.979759][T17874] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=17874 comm=syz.1.3982 [ 316.979792][T17874] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=17874 comm=syz.1.3982 [ 317.058237][T17880] loop1: detected capacity change from 0 to 512 [ 317.073634][T17880] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c01c, mo2=0002] [ 317.073708][T17880] System zones: 0-2, 18-18, 34-35 [ 317.075703][T17880] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 317.075789][T17880] ext4 filesystem being mounted at /224/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 317.076496][T17880] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 317.152959][T17886] loop1: detected capacity change from 0 to 128 [ 317.187486][T17887] random: crng reseeded on system resumption [ 317.190530][T17886] FAT-fs (loop1): bogus sectors per cluster 0 [ 317.199729][T17886] FAT-fs (loop1): Can't find a valid FAT filesystem [ 317.304311][T17891] loop1: detected capacity change from 0 to 2048 [ 317.355881][T17893] random: crng reseeded on system resumption [ 317.357201][T17891] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 317.464855][T17904] loop8: detected capacity change from 0 to 1024 [ 317.481265][T17904] EXT4-fs: Ignoring removed orlov option [ 317.487272][T17901] bond1: entered promiscuous mode [ 317.492501][T17901] bond1: entered allmulticast mode [ 317.528024][T17904] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 317.540311][T17901] 8021q: adding VLAN 0 to HW filter on device bond1 [ 317.559509][T17901] bond1 (unregistering): Released all slaves [ 317.586828][T17503] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 317.644527][T17912] netlink: 96 bytes leftover after parsing attributes in process `syz.8.3991'. [ 317.721755][T17914] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3992'. [ 317.775337][T13540] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 317.918532][T17921] loop8: detected capacity change from 0 to 2048 [ 317.964727][T17922] loop1: detected capacity change from 0 to 2048 [ 317.994669][T17922] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 318.013978][T17921] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 318.178029][T17931] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3997'. [ 318.211661][T17933] loop3: detected capacity change from 0 to 128 [ 318.218757][T17933] FAT-fs (loop3): bogus sectors per cluster 0 [ 318.225082][T17933] FAT-fs (loop3): Can't find a valid FAT filesystem [ 318.253708][T17935] random: crng reseeded on system resumption [ 318.269534][T13540] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 318.305917][T17937] loop1: detected capacity change from 0 to 128 [ 318.321953][T17937] ext4: Unknown parameter 'noacl' [ 318.427735][T17950] netlink: 96 bytes leftover after parsing attributes in process `syz.1.4005'. [ 318.566196][T17967] loop1: detected capacity change from 0 to 2048 [ 318.615220][T17974] FAULT_INJECTION: forcing a failure. [ 318.615220][T17974] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 318.628395][T17974] CPU: 1 UID: 0 PID: 17974 Comm: syz.0.4013 Not tainted syzkaller #0 PREEMPT(voluntary) [ 318.628481][T17974] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 318.628493][T17974] Call Trace: [ 318.628499][T17974] [ 318.628506][T17974] __dump_stack+0x1d/0x30 [ 318.628525][T17974] dump_stack_lvl+0xe8/0x140 [ 318.628544][T17974] dump_stack+0x15/0x1b [ 318.628559][T17974] should_fail_ex+0x265/0x280 [ 318.628642][T17974] should_fail+0xb/0x20 [ 318.628721][T17974] should_fail_usercopy+0x1a/0x20 [ 318.628747][T17974] _copy_from_iter+0xd2/0xe80 [ 318.628841][T17974] ? __build_skb_around+0x1a0/0x200 [ 318.628864][T17974] ? __alloc_skb+0x223/0x320 [ 318.628892][T17974] netlink_sendmsg+0x471/0x6b0 [ 318.628942][T17974] ? __pfx_netlink_sendmsg+0x10/0x10 [ 318.628967][T17974] __sock_sendmsg+0x145/0x180 [ 318.629022][T17974] ____sys_sendmsg+0x345/0x4e0 [ 318.629051][T17974] ___sys_sendmsg+0x17b/0x1d0 [ 318.629101][T17974] __sys_sendmmsg+0x178/0x300 [ 318.629200][T17974] __x64_sys_sendmmsg+0x57/0x70 [ 318.629227][T17974] x64_sys_call+0x1c4a/0x2ff0 [ 318.629250][T17974] do_syscall_64+0xd2/0x200 [ 318.629284][T17974] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 318.629375][T17974] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 318.629410][T17974] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 318.629430][T17974] RIP: 0033:0x7f7b8942eec9 [ 318.629446][T17974] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 318.629535][T17974] RSP: 002b:00007f7b87e8f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 318.629560][T17974] RAX: ffffffffffffffda RBX: 00007f7b89685fa0 RCX: 00007f7b8942eec9 [ 318.629576][T17974] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000003 [ 318.629593][T17974] RBP: 00007f7b87e8f090 R08: 0000000000000000 R09: 0000000000000000 [ 318.629653][T17974] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 318.629665][T17974] R13: 00007f7b89686038 R14: 00007f7b89685fa0 R15: 00007ffc24b4fae8 [ 318.629685][T17974] [ 318.630817][T17967] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 318.853437][T17503] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 318.965552][T17988] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.980751][T17967] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 318.997420][T17967] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1536 with error 28 [ 319.009937][T17967] EXT4-fs (loop1): This should not happen!! Data will be lost [ 319.009937][T17967] [ 319.019785][T17967] EXT4-fs (loop1): Total free blocks count 0 [ 319.025834][T17967] EXT4-fs (loop1): Free/Dirty block details [ 319.028818][T17994] loop8: detected capacity change from 0 to 512 [ 319.031771][T17967] EXT4-fs (loop1): free_blocks=2415919104 [ 319.031791][T17967] EXT4-fs (loop1): dirty_blocks=1552 [ 319.049168][T17967] EXT4-fs (loop1): Block reservation details [ 319.055215][T17967] EXT4-fs (loop1): i_reserved_data_blocks=97 [ 319.062062][T17994] EXT4-fs (loop8): revision level too high, forcing read-only mode [ 319.070144][T17994] EXT4-fs (loop8): orphan cleanup on readonly fs [ 319.080209][T17994] EXT4-fs error (device loop8): ext4_do_update_inode:5653: inode #16: comm syz.8.4018: corrupted inode contents [ 319.093913][T17994] EXT4-fs (loop8): Remounting filesystem read-only [ 319.100657][T17994] EXT4-fs (loop8): 1 truncate cleaned up [ 319.107617][T17168] EXT4-fs (loop8): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 319.118417][T17168] __quota_error: 215 callbacks suppressed [ 319.118439][T17168] Quota error (device loop8): write_blk: dquota write failed [ 319.131659][T17168] Quota error (device loop8): remove_free_dqentry: Can't write block (5) with free entries [ 319.141723][T17168] EXT4-fs (loop8): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 319.152424][T17168] Quota error (device loop8): write_blk: dquota write failed [ 319.159802][T17168] Quota error (device loop8): free_dqentry: Can't move quota data block (5) to free list [ 319.169764][T17168] EXT4-fs (loop8): Quota write (off=8, len=24) cancelled because transaction is not started [ 319.180008][T17168] Quota error (device loop8): v2_write_file_info: Can't write info structure [ 319.189668][T17168] Quota error (device loop8): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 319.200744][T17988] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.211744][T17994] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 319.226754][T17994] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(7) [ 319.233338][T17994] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 319.240959][T17994] vhci_hcd vhci_hcd.0: Device attached [ 319.247153][ T29] audit: type=1400 audit(1759106184.301:87625): avc: denied { mounton } for pid=17993 comm="syz.8.4018" path="/15/file0" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 319.280257][T17998] vhci_hcd: connection closed [ 319.280542][T17193] vhci_hcd: stop threads [ 319.289647][T17193] vhci_hcd: release socket [ 319.294127][T17193] vhci_hcd: disconnect device [ 319.302549][T17988] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.341242][T17960] chnl_net:caif_netlink_parms(): no params data found [ 319.348506][ T4415] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 28 [ 319.386309][T17988] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.410464][T17960] bridge0: port 1(bridge_slave_0) entered blocking state [ 319.410559][T18008] loop1: detected capacity change from 0 to 512 [ 319.417881][T17960] bridge0: port 1(bridge_slave_0) entered disabled state [ 319.432652][T17960] bridge_slave_0: entered allmulticast mode [ 319.439185][T17960] bridge_slave_0: entered promiscuous mode [ 319.442263][T18008] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c01c, mo2=0002] [ 319.446937][T17960] bridge0: port 2(bridge_slave_1) entered blocking state [ 319.453135][T18008] System zones: [ 319.460178][T17960] bridge0: port 2(bridge_slave_1) entered disabled state [ 319.462288][T17960] bridge_slave_1: entered allmulticast mode [ 319.463928][T18008] 0-2 [ 319.476735][T17960] bridge_slave_1: entered promiscuous mode [ 319.476844][T18008] , 18-18, 34-35 [ 319.489872][T18008] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 319.502524][T18008] ext4 filesystem being mounted at /234/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 319.513656][T18008] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 319.522305][T17960] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 319.551587][T17960] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 319.560926][T17193] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.569524][ T37] bridge_slave_1: left allmulticast mode [ 319.575309][ T37] bridge_slave_1: left promiscuous mode [ 319.581107][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 319.588949][ T37] bridge_slave_0: left promiscuous mode [ 319.594895][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 319.733122][ T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 319.742618][ T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 319.751776][ T37] bond0 (unregistering): Released all slaves [ 319.760060][ T37] bond1 (unregistering): Released all slaves [ 319.774775][T18012] netlink: 96 bytes leftover after parsing attributes in process `syz.1.4021'. [ 319.803962][T17193] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.813248][T17503] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 319.813994][T17960] team0: Port device team_slave_0 added [ 319.842543][T18015] loop8: detected capacity change from 0 to 128 [ 319.849584][T17960] team0: Port device team_slave_1 added [ 319.860947][T18015] FAT-fs (loop8): bogus sectors per cluster 0 [ 319.867090][T18015] FAT-fs (loop8): Can't find a valid FAT filesystem [ 319.891463][T17193] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.913342][T17193] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.922005][T17960] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 319.929009][T17960] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 319.955006][T17960] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 320.000829][ T37] hsr_slave_0: left promiscuous mode [ 320.006589][ T37] hsr_slave_1: left promiscuous mode [ 320.055993][ T29] audit: type=1400 audit(1759106185.111:87626): avc: denied { name_bind } for pid=18013 comm="syz.1.4023" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 320.077838][ T37] team0 (unregistering): Port device team_slave_1 removed [ 320.088433][ T29] audit: type=1400 audit(1759106185.141:87627): avc: denied { append } for pid=18023 comm="syz.8.4026" name="001" dev="devtmpfs" ino=147 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 320.088671][T18024] FAULT_INJECTION: forcing a failure. [ 320.088671][T18024] name failslab, interval 1, probability 0, space 0, times 0 [ 320.112149][ T37] team0 (unregistering): Port device team_slave_0 removed [ 320.124618][T18024] CPU: 1 UID: 0 PID: 18024 Comm: syz.8.4026 Not tainted syzkaller #0 PREEMPT(voluntary) [ 320.124691][T18024] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 320.124709][T18024] Call Trace: [ 320.124721][T18024] [ 320.124732][T18024] __dump_stack+0x1d/0x30 [ 320.124764][T18024] dump_stack_lvl+0xe8/0x140 [ 320.124792][T18024] dump_stack+0x15/0x1b [ 320.124878][T18024] should_fail_ex+0x265/0x280 [ 320.124914][T18024] should_failslab+0x8c/0xb0 [ 320.124994][T18024] kmem_cache_alloc_node_noprof+0x57/0x320 [ 320.125119][T18024] ? __alloc_skb+0x101/0x320 [ 320.125149][T18024] __alloc_skb+0x101/0x320 [ 320.125180][T18024] netlink_alloc_large_skb+0xba/0xf0 [ 320.125222][T18024] netlink_sendmsg+0x3cf/0x6b0 [ 320.125325][T18024] ? __pfx_netlink_sendmsg+0x10/0x10 [ 320.125410][T18024] __sock_sendmsg+0x145/0x180 [ 320.125468][T18024] ____sys_sendmsg+0x31e/0x4e0 [ 320.125598][T18024] ___sys_sendmsg+0x17b/0x1d0 [ 320.125657][T18024] __x64_sys_sendmsg+0xd4/0x160 [ 320.125699][T18024] x64_sys_call+0x191e/0x2ff0 [ 320.125742][T18024] do_syscall_64+0xd2/0x200 [ 320.125842][T18024] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 320.125879][T18024] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 320.125922][T18024] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 320.126025][T18024] RIP: 0033:0x7f87444feec9 [ 320.126049][T18024] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 320.126131][T18024] RSP: 002b:00007f8742f5f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 320.126159][T18024] RAX: ffffffffffffffda RBX: 00007f8744755fa0 RCX: 00007f87444feec9 [ 320.126178][T18024] RDX: 0000000004000c00 RSI: 0000200000000180 RDI: 0000000000000008 [ 320.126272][T18024] RBP: 00007f8742f5f090 R08: 0000000000000000 R09: 0000000000000000 [ 320.126291][T18024] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 320.126310][T18024] R13: 00007f8744756038 R14: 00007f8744755fa0 R15: 00007fff6b340878 [ 320.126340][T18024] [ 320.378004][T17960] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 320.385154][T17960] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 320.411143][T17960] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 320.457946][T17960] hsr_slave_0: entered promiscuous mode [ 320.466610][T17960] hsr_slave_1: entered promiscuous mode [ 320.481329][T17960] debugfs: 'hsr0' already exists in 'hsr' [ 320.487118][T17960] Cannot create hsr debugfs directory [ 320.530440][ T29] audit: type=1400 audit(1759106185.581:87628): avc: denied { listen } for pid=18033 comm="syz.1.4031" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 320.576027][T18039] loop8: detected capacity change from 0 to 2048 [ 320.617453][T18039] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 320.637319][T18047] 9pnet_fd: Insufficient options for proto=fd [ 320.666443][T18049] netlink: 96 bytes leftover after parsing attributes in process `syz.7.4033'. [ 320.707201][ T37] IPVS: stop unused estimator thread 0... [ 320.763787][T18051] loop7: detected capacity change from 0 to 1024 [ 320.771059][T18051] EXT4-fs: Ignoring removed orlov option [ 320.794025][T18051] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 320.845547][T15313] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 320.885730][T18060] loop7: detected capacity change from 0 to 1024 [ 320.894880][T17503] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 320.905646][T18060] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 320.940579][T18060] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4183: comm GPL: Allocating blocks 449-513 which overlap fs metadata [ 320.960761][T18064] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4036'. [ 320.978394][T18060] netlink: 8 bytes leftover after parsing attributes in process `GPL'. [ 321.027922][T18059] EXT4-fs (loop7): pa ffff888106e6a930: logic 48, phys. 177, len 21 [ 321.036092][T18059] EXT4-fs error (device loop7): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 321.052977][T18069] loop8: detected capacity change from 0 to 512 [ 321.061242][T15313] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 321.074335][T18069] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c01c, mo2=0002] [ 321.089244][T18069] System zones: 0-2, 18-18, 34-35 [ 321.110806][T18069] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 321.127922][T18073] random: crng reseeded on system resumption [ 321.150838][T18069] ext4 filesystem being mounted at /23/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 321.164440][T17960] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 321.174926][T18069] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 321.184688][T17960] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 321.194561][T17960] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 321.204837][T17960] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 321.247558][T18084] FAULT_INJECTION: forcing a failure. [ 321.247558][T18084] name failslab, interval 1, probability 0, space 0, times 0 [ 321.260285][T18084] CPU: 0 UID: 0 PID: 18084 Comm: syz.7.4041 Not tainted syzkaller #0 PREEMPT(voluntary) [ 321.260321][T18084] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 321.260334][T18084] Call Trace: [ 321.260396][T18084] [ 321.260406][T18084] __dump_stack+0x1d/0x30 [ 321.260444][T18084] dump_stack_lvl+0xe8/0x140 [ 321.260470][T18084] dump_stack+0x15/0x1b [ 321.260490][T18084] should_fail_ex+0x265/0x280 [ 321.260593][T18084] should_failslab+0x8c/0xb0 [ 321.260620][T18084] kmem_cache_alloc_noprof+0x50/0x310 [ 321.260652][T18084] ? radix_tree_node_alloc+0x8a/0x1f0 [ 321.260715][T18084] radix_tree_node_alloc+0x8a/0x1f0 [ 321.260745][T18084] idr_get_free+0x1fa/0x550 [ 321.260827][T18084] idr_alloc_u32+0xca/0x180 [ 321.260894][T18084] tcf_idr_check_alloc+0x193/0x240 [ 321.260932][T18084] tcf_mirred_init+0x18d/0x900 [ 321.260981][T18084] tcf_action_init_1+0x367/0x4a0 [ 321.261027][T18084] tcf_action_init+0x267/0x6d0 [ 321.261088][T18084] tc_ctl_action+0x291/0x830 [ 321.261207][T18084] ? __pfx_tc_ctl_action+0x10/0x10 [ 321.261270][T18084] rtnetlink_rcv_msg+0x657/0x6d0 [ 321.261338][T18084] ? avc_has_perm_noaudit+0x1b1/0x200 [ 321.261378][T18084] netlink_rcv_skb+0x123/0x220 [ 321.261403][T18084] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 321.261445][T18084] rtnetlink_rcv+0x1c/0x30 [ 321.261475][T18084] netlink_unicast+0x5bd/0x690 [ 321.261514][T18084] netlink_sendmsg+0x58b/0x6b0 [ 321.261544][T18084] ? __pfx_netlink_sendmsg+0x10/0x10 [ 321.261571][T18084] __sock_sendmsg+0x145/0x180 [ 321.261609][T18084] ____sys_sendmsg+0x31e/0x4e0 [ 321.261640][T18084] ___sys_sendmsg+0x17b/0x1d0 [ 321.261683][T18084] __x64_sys_sendmsg+0xd4/0x160 [ 321.261789][T18084] x64_sys_call+0x191e/0x2ff0 [ 321.261814][T18084] do_syscall_64+0xd2/0x200 [ 321.261863][T18084] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 321.261896][T18084] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 321.261928][T18084] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 321.261953][T18084] RIP: 0033:0x7f1d08f0eec9 [ 321.261971][T18084] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 321.261993][T18084] RSP: 002b:00007f1d0796f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 321.262044][T18084] RAX: ffffffffffffffda RBX: 00007f1d09165fa0 RCX: 00007f1d08f0eec9 [ 321.262058][T18084] RDX: 0000000000000000 RSI: 0000200000006280 RDI: 0000000000000003 [ 321.262074][T18084] RBP: 00007f1d0796f090 R08: 0000000000000000 R09: 0000000000000000 [ 321.262091][T18084] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 321.262106][T18084] R13: 00007f1d09166038 R14: 00007f1d09165fa0 R15: 00007ffe82b3bcc8 [ 321.262185][T18084] [ 321.549638][T18086] loop1: detected capacity change from 0 to 512 [ 321.605783][T18086] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c01c, mo2=0002] [ 321.609450][T17960] 8021q: adding VLAN 0 to HW filter on device bond0 [ 321.627396][T18086] System zones: 0-2, 18-18, 34-35 [ 321.642656][T17960] 8021q: adding VLAN 0 to HW filter on device team0 [ 321.658603][ T4415] bridge0: port 1(bridge_slave_0) entered blocking state [ 321.665873][ T4415] bridge0: port 1(bridge_slave_0) entered forwarding state [ 321.676039][T18086] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 321.698596][T18094] loop8: detected capacity change from 0 to 2048 [ 321.713917][T18086] ext4 filesystem being mounted at /238/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 321.733177][T18097] netlink: 96 bytes leftover after parsing attributes in process `syz.0.4044'. [ 321.743296][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 321.750389][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 321.764554][T18086] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 321.786434][T18094] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 321.817161][T18103] loop1: detected capacity change from 0 to 128 [ 321.838121][T18098] loop7: detected capacity change from 0 to 1024 [ 321.851532][T18098] EXT4-fs: Ignoring removed orlov option [ 321.855069][T18103] FAT-fs (loop1): bogus sectors per cluster 0 [ 321.863471][T18103] FAT-fs (loop1): Can't find a valid FAT filesystem [ 321.875482][T18109] random: crng reseeded on system resumption [ 321.890464][T18098] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 321.954090][T17960] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 322.008777][T15313] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 322.229666][T17960] veth0_vlan: entered promiscuous mode [ 322.247271][T17960] veth1_vlan: entered promiscuous mode [ 322.295105][T18151] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4060'. [ 322.318702][T18153] loop7: detected capacity change from 0 to 512 [ 322.413996][T18153] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 322.426715][T18153] ext4 filesystem being mounted at /153/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 322.744359][T18152] netlink: 96 bytes leftover after parsing attributes in process `syz.0.4059'. [ 322.796350][T17503] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 322.815244][T17960] veth0_macvtap: entered promiscuous mode [ 322.827414][T17960] veth1_macvtap: entered promiscuous mode [ 322.842469][T17960] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 322.850094][T18157] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=18157 comm=syz.1.4061 [ 322.862934][T18157] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=18157 comm=syz.1.4061 [ 322.874411][T18159] random: crng reseeded on system resumption [ 322.883121][T17960] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 322.902934][T17161] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.991005][T18164] IPVS: set_ctl: invalid protocol: 44 172.20.20.187:20002 [ 322.998843][T17161] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.000024][T15313] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 323.027154][T17161] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.041334][T17161] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.146243][T18172] loop3: detected capacity change from 0 to 512 [ 323.153202][T18183] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4073'. [ 323.175830][T18172] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 2178, start 8e210000) [ 323.186114][T18172] FAT-fs (loop3): Filesystem has been set read-only [ 323.274679][T18197] random: crng reseeded on system resumption [ 323.353026][T18203] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=18203 comm=syz.0.4077 [ 323.353076][T18203] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=18203 comm=syz.0.4077 [ 323.444761][T18215] loop3: detected capacity change from 0 to 512 [ 323.455587][T18215] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c01c, mo2=0002] [ 323.455690][T18215] System zones: 0-2, 18-18, 34-35 [ 323.456588][T18215] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 323.456672][T18215] ext4 filesystem being mounted at /2/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 323.457438][T18215] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 323.613856][T18239] netlink: 'syz.3.4084': attribute type 3 has an invalid length. [ 323.644272][T18244] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4085'. [ 323.679839][T18248] loop3: detected capacity change from 0 to 128 [ 323.680291][T18248] FAT-fs (loop3): bogus sectors per cluster 0 [ 323.680384][T18248] FAT-fs (loop3): Can't find a valid FAT filesystem [ 323.714946][T18251] random: crng reseeded on system resumption [ 323.740432][T18254] loop3: detected capacity change from 0 to 128 [ 323.740947][T18254] ext4: Unknown parameter 'noacl' [ 323.824343][T18265] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=18265 comm=syz.0.4090 [ 323.824378][T18265] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=18265 comm=syz.0.4090 [ 324.017699][T18289] netlink: 'syz.3.4096': attribute type 1 has an invalid length. [ 324.017721][T18289] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4096'. [ 324.025239][T18294] loop7: detected capacity change from 0 to 128 [ 324.058008][T18294] syz.7.4098: attempt to access beyond end of device [ 324.058008][T18294] loop7: rw=2049, sector=154, nr_sectors = 8 limit=128 [ 324.058242][T18294] syz.7.4098: attempt to access beyond end of device [ 324.058242][T18294] loop7: rw=2049, sector=160, nr_sectors = 2 limit=128 [ 324.058273][T18294] Buffer I/O error on dev loop7, logical block 80, lost async page write [ 324.058484][T18294] syz.7.4098: attempt to access beyond end of device [ 324.058484][T18294] loop7: rw=2049, sector=162, nr_sectors = 8 limit=128 [ 324.059457][T18294] syz.7.4098: attempt to access beyond end of device [ 324.059457][T18294] loop7: rw=2049, sector=168, nr_sectors = 2 limit=128 [ 324.121690][T18294] Buffer I/O error on dev loop7, logical block 84, lost async page write [ 324.125347][T18294] syz.7.4098: attempt to access beyond end of device [ 324.125347][T18294] loop7: rw=2049, sector=186, nr_sectors = 8 limit=128 [ 324.208998][T18323] loop1: detected capacity change from 0 to 128 [ 324.234716][T18323] FAT-fs (loop1): bogus sectors per cluster 0 [ 324.241177][T18323] FAT-fs (loop1): Can't find a valid FAT filesystem [ 324.262105][T18302] syz.7.4098: attempt to access beyond end of device [ 324.262105][T18302] loop7: rw=524288, sector=162, nr_sectors = 8 limit=128 [ 324.276622][T18302] syz.7.4098: attempt to access beyond end of device [ 324.276622][T18302] loop7: rw=524288, sector=186, nr_sectors = 8 limit=128 [ 324.292695][T18302] syz.7.4098: attempt to access beyond end of device [ 324.292695][T18302] loop7: rw=0, sector=162, nr_sectors = 8 limit=128 [ 324.306433][T18302] syz.7.4098: attempt to access beyond end of device [ 324.306433][T18302] loop7: rw=0, sector=162, nr_sectors = 8 limit=128 [ 324.320691][T18302] syz.7.4098: attempt to access beyond end of device [ 324.320691][T18302] loop7: rw=0, sector=162, nr_sectors = 8 limit=128 [ 324.383475][T18332] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=18332 comm=syz.0.4104 [ 324.396231][T18332] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=18332 comm=syz.0.4104 [ 324.406445][T18328] loop3: detected capacity change from 0 to 8192 [ 324.410044][T18334] netlink: 96 bytes leftover after parsing attributes in process `syz.8.4102'. [ 324.465184][ T29] kauditd_printk_skb: 226 callbacks suppressed [ 324.465203][ T29] audit: type=1326 audit(1759106189.521:87855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18338 comm="syz.8.4107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87444feec9 code=0x7ffc0000 [ 324.549423][ T29] audit: type=1326 audit(1759106189.551:87856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18338 comm="syz.8.4107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f87444feec9 code=0x7ffc0000 [ 324.549456][ T29] audit: type=1326 audit(1759106189.551:87857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18338 comm="syz.8.4107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87444feec9 code=0x7ffc0000 [ 324.549503][ T29] audit: type=1326 audit(1759106189.551:87858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18338 comm="syz.8.4107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f87444feec9 code=0x7ffc0000 [ 324.549539][ T29] audit: type=1326 audit(1759106189.551:87859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18338 comm="syz.8.4107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87444feec9 code=0x7ffc0000 [ 324.549575][ T29] audit: type=1326 audit(1759106189.561:87860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18338 comm="syz.8.4107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f87444feec9 code=0x7ffc0000 [ 324.549660][ T29] audit: type=1326 audit(1759106189.561:87861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18338 comm="syz.8.4107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87444feec9 code=0x7ffc0000 [ 324.549702][ T29] audit: type=1326 audit(1759106189.561:87862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18338 comm="syz.8.4107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f87444feec9 code=0x7ffc0000 [ 324.549729][ T29] audit: type=1326 audit(1759106189.571:87863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18338 comm="syz.8.4107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87444feec9 code=0x7ffc0000 [ 324.549807][ T29] audit: type=1326 audit(1759106189.571:87864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18338 comm="syz.8.4107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f87444feec9 code=0x7ffc0000 [ 324.583099][T18328] loop3: p1 p2 p3 p4 [ 324.583521][T18328] loop3: p2 start 151000334 is beyond EOD, truncated [ 324.583539][T18328] loop3: p3 start 331777 is beyond EOD, truncated [ 324.583589][T18328] loop3: p4 size 263168 extends beyond EOD, truncated [ 324.600642][T18345] loop1: detected capacity change from 0 to 128 [ 324.604474][T18345] ext4: Unknown parameter 'noacl' [ 324.654719][T18328] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 324.654864][T18328] SELinux: failed to load policy [ 324.798165][T18349] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4110'. [ 324.885612][T18351] loop1: detected capacity change from 0 to 2048 [ 324.947812][T18351] loop1: p1 < > p4 [ 324.956860][T18351] loop1: p4 size 8388608 extends beyond EOD, truncated [ 324.993670][T18354] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4112'. [ 324.993690][T18354] netem: unknown loss type 12 [ 324.993700][T18354] netem: change failed [ 325.054058][ T3464] hid_parser_main: 9 callbacks suppressed [ 325.054075][ T3464] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 325.054427][ T3464] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 325.083409][T18361] loop7: detected capacity change from 0 to 2048 [ 325.150954][T18361] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 325.242805][T18373] netlink: 96 bytes leftover after parsing attributes in process `syz.3.4117'. [ 325.309354][T18379] loop3: detected capacity change from 0 to 164 [ 325.321172][T18379] FAULT_INJECTION: forcing a failure. [ 325.321172][T18379] name failslab, interval 1, probability 0, space 0, times 0 [ 325.321208][T18379] CPU: 0 UID: 0 PID: 18379 Comm: syz.3.4120 Not tainted syzkaller #0 PREEMPT(voluntary) [ 325.321242][T18379] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 325.321257][T18379] Call Trace: [ 325.321346][T18379] [ 325.321355][T18379] __dump_stack+0x1d/0x30 [ 325.321379][T18379] dump_stack_lvl+0xe8/0x140 [ 325.321405][T18379] dump_stack+0x15/0x1b [ 325.321428][T18379] should_fail_ex+0x265/0x280 [ 325.321505][T18379] should_failslab+0x8c/0xb0 [ 325.321537][T18379] kmem_cache_alloc_noprof+0x50/0x310 [ 325.321575][T18379] ? security_file_alloc+0x32/0x100 [ 325.321623][T18379] security_file_alloc+0x32/0x100 [ 325.321814][T18379] init_file+0x5c/0x1d0 [ 325.321846][T18379] alloc_empty_file+0x8b/0x200 [ 325.321884][T18379] path_openat+0x68/0x2170 [ 325.321965][T18379] ? mntput+0x4b/0x80 [ 325.322006][T18379] ? terminate_walk+0x27f/0x2a0 [ 325.322050][T18379] ? path_openat+0x1bf8/0x2170 [ 325.322147][T18379] ? _parse_integer_limit+0x170/0x190 [ 325.322182][T18379] do_filp_open+0x109/0x230 [ 325.322240][T18379] do_open_execat+0xd8/0x260 [ 325.322274][T18379] alloc_bprm+0x25/0x350 [ 325.322303][T18379] do_execveat_common+0x12e/0x750 [ 325.322338][T18379] ? getname_flags+0x154/0x3b0 [ 325.322369][T18379] __x64_sys_execveat+0x73/0x90 [ 325.322433][T18379] x64_sys_call+0x1fec/0x2ff0 [ 325.322493][T18379] do_syscall_64+0xd2/0x200 [ 325.322526][T18379] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 325.322554][T18379] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 325.322638][T18379] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 325.322661][T18379] RIP: 0033:0x7ff3e15beec9 [ 325.322676][T18379] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 325.322699][T18379] RSP: 002b:00007ff3e001f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 325.322725][T18379] RAX: ffffffffffffffda RBX: 00007ff3e1815fa0 RCX: 00007ff3e15beec9 [ 325.322742][T18379] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 325.322759][T18379] RBP: 00007ff3e001f090 R08: 0000000000001000 R09: 0000000000000000 [ 325.322797][T18379] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 325.322853][T18379] R13: 00007ff3e1816038 R14: 00007ff3e1815fa0 R15: 00007ffcfe174da8 [ 325.322880][T18379] [ 325.474483][T18383] random: crng reseeded on system resumption [ 325.757127][T18393] loop1: detected capacity change from 0 to 128 [ 325.757782][T18393] ext4: Unknown parameter 'noacl' [ 325.758231][T18392] loop3: detected capacity change from 0 to 164 [ 325.878732][T15313] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 326.024095][T18395] FAULT_INJECTION: forcing a failure. [ 326.024095][T18395] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 326.037544][T18395] CPU: 0 UID: 0 PID: 18395 Comm: syz.7.4125 Not tainted syzkaller #0 PREEMPT(voluntary) [ 326.037580][T18395] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 326.037597][T18395] Call Trace: [ 326.037652][T18395] [ 326.037670][T18395] __dump_stack+0x1d/0x30 [ 326.037694][T18395] dump_stack_lvl+0xe8/0x140 [ 326.037722][T18395] dump_stack+0x15/0x1b [ 326.037740][T18395] should_fail_ex+0x265/0x280 [ 326.037769][T18395] should_fail_alloc_page+0xf2/0x100 [ 326.037838][T18395] __alloc_frozen_pages_noprof+0xff/0x360 [ 326.037883][T18395] alloc_pages_mpol+0xb3/0x250 [ 326.037998][T18395] vma_alloc_folio_noprof+0x1aa/0x300 [ 326.038092][T18395] handle_mm_fault+0xec2/0x2c20 [ 326.038125][T18395] ? __rcu_read_lock+0x37/0x50 [ 326.038151][T18395] ? __pte_offset_map_lock+0x1d4/0x230 [ 326.038252][T18395] __get_user_pages+0x102e/0x1fa0 [ 326.038296][T18395] __gup_longterm_locked+0x8f4/0xe60 [ 326.038375][T18395] ? exc_page_fault+0x62/0xa0 [ 326.038407][T18395] ? should_fail_ex+0xdb/0x280 [ 326.038441][T18395] pin_user_pages_remote+0x7e/0xb0 [ 326.038542][T18395] process_vm_rw+0x484/0x960 [ 326.038595][T18395] __x64_sys_process_vm_writev+0x78/0x90 [ 326.038626][T18395] x64_sys_call+0x2a7c/0x2ff0 [ 326.038652][T18395] do_syscall_64+0xd2/0x200 [ 326.038764][T18395] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 326.038797][T18395] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 326.038932][T18395] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 326.038961][T18395] RIP: 0033:0x7f1d08f0eec9 [ 326.038981][T18395] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 326.039071][T18395] RSP: 002b:00007f1d0796f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000137 [ 326.039151][T18395] RAX: ffffffffffffffda RBX: 00007f1d09165fa0 RCX: 00007f1d08f0eec9 [ 326.039165][T18395] RDX: 0000000000000001 RSI: 0000200000000000 RDI: 00000000000001a2 [ 326.039180][T18395] RBP: 00007f1d0796f090 R08: 000000000000023a R09: 0000000000000000 [ 326.039194][T18395] R10: 0000200000121000 R11: 0000000000000246 R12: 0000000000000001 [ 326.039206][T18395] R13: 00007f1d09166038 R14: 00007f1d09165fa0 R15: 00007ffe82b3bcc8 [ 326.039266][T18395] [ 326.040162][T18399] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4129'. [ 326.300460][T18398] $Hÿ: renamed from bond0 (while UP) [ 326.342319][T18398] $Hÿ: entered promiscuous mode [ 326.347496][T18398] bond_slave_0: entered promiscuous mode [ 326.353561][T18398] bond_slave_1: entered promiscuous mode [ 326.361973][T18409] loop7: detected capacity change from 0 to 128 [ 326.401580][ T3378] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 326.411248][ T3378] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz1] on syz0 [ 326.507237][T18419] loop7: detected capacity change from 0 to 128 [ 326.537332][T18419] FAT-fs (loop7): bogus sectors per cluster 0 [ 326.543621][T18419] FAT-fs (loop7): Can't find a valid FAT filesystem [ 326.633672][T18428] FAULT_INJECTION: forcing a failure. [ 326.633672][T18428] name failslab, interval 1, probability 0, space 0, times 0 [ 326.646387][T18428] CPU: 1 UID: 0 PID: 18428 Comm: syz.7.4142 Not tainted syzkaller #0 PREEMPT(voluntary) [ 326.646448][T18428] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 326.646466][T18428] Call Trace: [ 326.646476][T18428] [ 326.646487][T18428] __dump_stack+0x1d/0x30 [ 326.646514][T18428] dump_stack_lvl+0xe8/0x140 [ 326.646540][T18428] dump_stack+0x15/0x1b [ 326.646635][T18428] should_fail_ex+0x265/0x280 [ 326.646669][T18428] should_failslab+0x8c/0xb0 [ 326.646703][T18428] __kmalloc_noprof+0xa5/0x3e0 [ 326.646774][T18428] ? hash_netport6_add+0x83a/0x17d0 [ 326.646811][T18428] hash_netport6_add+0x83a/0x17d0 [ 326.646851][T18428] ? hash_netport6_add+0x60/0x17d0 [ 326.646962][T18428] ? ip_set_get_extensions+0x5af/0x650 [ 326.646995][T18428] hash_netport6_uadt+0x66e/0x770 [ 326.647037][T18428] ? __pfx_hash_netport6_add+0x10/0x10 [ 326.647134][T18428] call_ad+0xd9/0x630 [ 326.647169][T18428] ? __nla_parse+0x40/0x60 [ 326.647204][T18428] ip_set_ad+0x5c0/0x690 [ 326.647252][T18428] ip_set_uadd+0x41/0x50 [ 326.647279][T18428] nfnetlink_rcv_msg+0x4c3/0x590 [ 326.647399][T18428] netlink_rcv_skb+0x123/0x220 [ 326.647423][T18428] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 326.647465][T18428] nfnetlink_rcv+0x16b/0x1690 [ 326.647634][T18428] ? refill_obj_stock+0x254/0x2e0 [ 326.647672][T18428] ? spurious_kernel_fault+0xf4/0x4a0 [ 326.647710][T18428] ? xas_load+0x413/0x430 [ 326.647748][T18428] ? xas_load+0x413/0x430 [ 326.647779][T18428] ? __rcu_read_unlock+0x4f/0x70 [ 326.647803][T18428] ? xa_load+0xb1/0xe0 [ 326.647891][T18428] ? __account_obj_stock+0x211/0x350 [ 326.647927][T18428] ? ___slab_alloc+0x273/0x910 [ 326.647967][T18428] ? obj_cgroup_charge_account+0x122/0x1a0 [ 326.648078][T18428] ? security_inode_alloc+0x37/0x100 [ 326.648113][T18428] ? should_fail_ex+0x30/0x280 [ 326.648178][T18428] ? __rcu_read_unlock+0x4f/0x70 [ 326.648343][T18428] ? should_fail_ex+0xdb/0x280 [ 326.648369][T18428] ? selinux_nlmsg_lookup+0x99/0x890 [ 326.648476][T18428] ? __rcu_read_unlock+0x34/0x70 [ 326.648553][T18428] ? __netlink_lookup+0x266/0x2a0 [ 326.648583][T18428] netlink_unicast+0x5bd/0x690 [ 326.648608][T18428] netlink_sendmsg+0x58b/0x6b0 [ 326.648636][T18428] ? __pfx_netlink_sendmsg+0x10/0x10 [ 326.648663][T18428] __sock_sendmsg+0x145/0x180 [ 326.648750][T18428] ____sys_sendmsg+0x31e/0x4e0 [ 326.648780][T18428] ___sys_sendmsg+0x17b/0x1d0 [ 326.648821][T18428] __x64_sys_sendmsg+0xd4/0x160 [ 326.648853][T18428] x64_sys_call+0x191e/0x2ff0 [ 326.648943][T18428] do_syscall_64+0xd2/0x200 [ 326.649055][T18428] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 326.649158][T18428] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 326.649189][T18428] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 326.649212][T18428] RIP: 0033:0x7f1d08f0eec9 [ 326.649272][T18428] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 326.649292][T18428] RSP: 002b:00007f1d0796f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 326.649313][T18428] RAX: ffffffffffffffda RBX: 00007f1d09165fa0 RCX: 00007f1d08f0eec9 [ 326.649335][T18428] RDX: 0000000000000090 RSI: 00002000000002c0 RDI: 0000000000000008 [ 326.649349][T18428] RBP: 00007f1d0796f090 R08: 0000000000000000 R09: 0000000000000000 [ 326.649501][T18428] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 326.649514][T18428] R13: 00007f1d09166038 R14: 00007f1d09165fa0 R15: 00007ffe82b3bcc8 [ 326.649535][T18428] [ 326.649744][T18417] loop8: detected capacity change from 0 to 2048 [ 327.001224][T18435] loop3: detected capacity change from 0 to 512 [ 327.122118][T18444] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4147'. [ 327.206476][T18417] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 327.222945][T18435] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 327.235761][T18435] ext4 filesystem being mounted at /27/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 327.416685][T18452] random: crng reseeded on system resumption [ 327.450050][T18450] loop1: detected capacity change from 0 to 8192 [ 327.491748][T18457] $Hÿ: renamed from bond0 (while UP) [ 327.499704][T17503] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 327.510474][T18457] $Hÿ: entered promiscuous mode [ 327.515568][T18457] bond_slave_0: entered promiscuous mode [ 327.521346][T18457] bond_slave_1: entered promiscuous mode [ 327.539220][T18460] loop8: detected capacity change from 0 to 128 [ 327.539653][T18450] loop1: p1 p2 p4 < > [ 327.549755][T18450] loop1: partition table partially beyond EOD, truncated [ 327.552755][T18460] FAT-fs (loop8): bogus sectors per cluster 0 [ 327.556936][T18454] $Hÿ: renamed from bond0 [ 327.562917][T18460] FAT-fs (loop8): Can't find a valid FAT filesystem [ 327.569901][T17960] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 327.583152][T18454] FAULT_INJECTION: forcing a failure. [ 327.583152][T18454] name failslab, interval 1, probability 0, space 0, times 0 [ 327.585295][T18450] loop1: p1 start 16777224 is beyond EOD, [ 327.595847][T18454] CPU: 1 UID: 0 PID: 18454 Comm: syz.7.4151 Not tainted syzkaller #0 PREEMPT(voluntary) [ 327.595883][T18454] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 327.595900][T18454] Call Trace: [ 327.595907][T18454] [ 327.595915][T18454] __dump_stack+0x1d/0x30 [ 327.595965][T18454] dump_stack_lvl+0xe8/0x140 [ 327.595989][T18454] dump_stack+0x15/0x1b [ 327.596059][T18454] should_fail_ex+0x265/0x280 [ 327.596096][T18454] should_failslab+0x8c/0xb0 [ 327.596134][T18454] __kmalloc_node_track_caller_noprof+0xa4/0x410 [ 327.596217][T18454] ? device_rename+0x82/0x180 [ 327.596260][T18454] kstrdup+0x3e/0xd0 [ 327.596341][T18454] device_rename+0x82/0x180 [ 327.596416][T18454] netif_change_name+0x1eb/0x6b0 [ 327.596459][T18454] ? xfd_validate_state+0x45/0xf0 [ 327.596567][T18454] ? nla_strscpy+0xec/0x120 [ 327.596619][T18454] do_setlink+0x80b/0x2810 [ 327.596694][T18454] ? __schedule+0x6b9/0xb30 [ 327.596728][T18454] ? __list_del_entry_valid_or_report+0x65/0x130 [ 327.596776][T18454] ? _raw_spin_unlock_irqrestore+0x2b/0x60 [ 327.596842][T18454] ? __mutex_lock+0x25d/0xcc0 [ 327.596929][T18454] rtnl_newlink+0xe75/0x12d0 [ 327.597057][T18454] ? xas_load+0x413/0x430 [ 327.597166][T18454] ? xas_load+0x413/0x430 [ 327.597248][T18454] ? css_rstat_updated+0xb7/0x240 [ 327.597294][T18454] ? mod_memcg_lruvec_state+0x1fc/0x2c0 [ 327.597334][T18454] ? __rcu_read_unlock+0x4f/0x70 [ 327.597366][T18454] ? avc_has_perm_noaudit+0x1b1/0x200 [ 327.597405][T18454] ? cred_has_capability+0x210/0x280 [ 327.597467][T18454] ? selinux_capable+0x31/0x40 [ 327.597511][T18454] ? security_capable+0x83/0x90 [ 327.597612][T18454] ? rtnetlink_rcv_msg+0x5d7/0x6d0 [ 327.597653][T18454] ? __pfx_rtnl_newlink+0x10/0x10 [ 327.597693][T18454] rtnetlink_rcv_msg+0x5fe/0x6d0 [ 327.597771][T18454] ? avc_has_perm_noaudit+0x1b1/0x200 [ 327.597811][T18454] netlink_rcv_skb+0x123/0x220 [ 327.597886][T18454] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 327.598000][T18454] rtnetlink_rcv+0x1c/0x30 [ 327.598057][T18454] netlink_unicast+0x5bd/0x690 [ 327.598090][T18454] netlink_sendmsg+0x58b/0x6b0 [ 327.598126][T18454] ? __pfx_netlink_sendmsg+0x10/0x10 [ 327.598237][T18454] __sock_sendmsg+0x145/0x180 [ 327.598353][T18454] ____sys_sendmsg+0x31e/0x4e0 [ 327.598421][T18454] ___sys_sendmsg+0x17b/0x1d0 [ 327.598480][T18454] __x64_sys_sendmsg+0xd4/0x160 [ 327.598521][T18454] x64_sys_call+0x191e/0x2ff0 [ 327.598593][T18454] do_syscall_64+0xd2/0x200 [ 327.598635][T18454] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 327.598712][T18454] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 327.598752][T18454] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 327.598783][T18454] RIP: 0033:0x7f1d08f0eec9 [ 327.598805][T18454] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 327.598832][T18454] RSP: 002b:00007f1d0796f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 327.598890][T18454] RAX: ffffffffffffffda RBX: 00007f1d09165fa0 RCX: 00007f1d08f0eec9 [ 327.598911][T18454] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 327.598929][T18454] RBP: 00007f1d0796f090 R08: 0000000000000000 R09: 0000000000000000 [ 327.598947][T18454] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 327.598964][T18454] R13: 00007f1d09166038 R14: 00007f1d09165fa0 R15: 00007ffe82b3bcc8 [ 327.598992][T18454] [ 327.932543][T18450] truncated [ 327.935665][T18450] loop1: p2 size 515840 extends beyond EOD, truncated [ 327.953224][T18450] loop1: p4 start 16777216 is beyond EOD, truncated [ 328.061391][T18477] loop7: detected capacity change from 0 to 128 [ 328.083492][T18477] ext4: Unknown parameter 'noacl' [ 328.093308][T18482] random: crng reseeded on system resumption [ 328.118471][T18479] SELinux: policydb version 0 does not match my version range 15-35 [ 328.126794][T18479] SELinux: failed to load policy [ 328.157804][T18483] loop3: detected capacity change from 0 to 2048 [ 328.181603][T18485] loop1: detected capacity change from 0 to 2048 [ 328.194026][T18483] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 328.262561][T18485] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 328.280560][T18503] loop8: detected capacity change from 0 to 128 [ 328.295503][T18503] FAT-fs (loop8): bogus sectors per cluster 0 [ 328.301740][T18503] FAT-fs (loop8): Can't find a valid FAT filesystem [ 328.366079][T18507] loop8: detected capacity change from 0 to 128 [ 328.378234][T18507] ext4: Unknown parameter 'noacl' [ 328.445429][T18485] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 328.499134][T18485] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1062 with error 28 [ 328.511726][T18485] EXT4-fs (loop1): This should not happen!! Data will be lost [ 328.511726][T18485] [ 328.521403][T18485] EXT4-fs (loop1): Total free blocks count 0 [ 328.527587][T18485] EXT4-fs (loop1): Free/Dirty block details [ 328.533633][T18485] EXT4-fs (loop1): free_blocks=2415919104 [ 328.539363][T18485] EXT4-fs (loop1): dirty_blocks=1072 [ 328.545009][T18485] EXT4-fs (loop1): Block reservation details [ 328.551037][T18485] EXT4-fs (loop1): i_reserved_data_blocks=67 [ 328.558119][T18513] mmap: syz.7.4170 (18513): VmData 167620608 exceed data ulimit 67108945. Update limits or use boot option ignore_rlimit_data. [ 328.668011][T17960] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 328.728368][T18520] random: crng reseeded on system resumption [ 328.806915][ T4413] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 28 [ 328.823638][T18526] loop8: detected capacity change from 0 to 128 [ 328.830690][T18526] ext4: Unknown parameter 'noacl' [ 328.833928][T18524] loop3: detected capacity change from 0 to 128 [ 328.886106][T18528] loop1: detected capacity change from 0 to 512 [ 328.894995][T18528] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 328.927709][T18528] EXT4-fs (loop1): 1 truncate cleaned up [ 328.940712][T18528] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 329.028077][T13540] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 329.038230][T18537] loop8: detected capacity change from 0 to 128 [ 329.058732][T18539] __nla_validate_parse: 1 callbacks suppressed [ 329.058750][T18539] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4181'. [ 329.089120][T18537] FAT-fs (loop8): bogus sectors per cluster 0 [ 329.095846][T18537] FAT-fs (loop8): Can't find a valid FAT filesystem [ 329.101200][T18539] FAULT_INJECTION: forcing a failure. [ 329.101200][T18539] name failslab, interval 1, probability 0, space 0, times 0 [ 329.115142][T18539] CPU: 1 UID: 0 PID: 18539 Comm: syz.3.4181 Not tainted syzkaller #0 PREEMPT(voluntary) [ 329.115178][T18539] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 329.115195][T18539] Call Trace: [ 329.115201][T18539] [ 329.115208][T18539] __dump_stack+0x1d/0x30 [ 329.115301][T18539] dump_stack_lvl+0xe8/0x140 [ 329.115324][T18539] dump_stack+0x15/0x1b [ 329.115346][T18539] should_fail_ex+0x265/0x280 [ 329.115409][T18539] should_failslab+0x8c/0xb0 [ 329.115437][T18539] kmem_cache_alloc_node_noprof+0x57/0x320 [ 329.115518][T18539] ? __alloc_skb+0x101/0x320 [ 329.115547][T18539] __alloc_skb+0x101/0x320 [ 329.115582][T18539] netlink_dump+0x10d/0x8a0 [ 329.115603][T18539] ? finish_task_switch+0xad/0x2b0 [ 329.115635][T18539] __netlink_dump_start+0x43e/0x520 [ 329.115675][T18539] nf_tables_getobj_reset+0x150/0x2f0 [ 329.115705][T18539] ? __pfx_nf_tables_dumpreset_obj_start+0x10/0x10 [ 329.115732][T18539] ? __pfx_nf_tables_dumpreset_obj+0x10/0x10 [ 329.115775][T18539] ? __pfx_nf_tables_dump_obj_done+0x10/0x10 [ 329.115798][T18539] ? __pfx_nf_tables_getobj_reset+0x10/0x10 [ 329.115827][T18539] nfnetlink_rcv_msg+0x3c3/0x590 [ 329.115867][T18539] ? __rcu_read_unlock+0x34/0x70 [ 329.115923][T18539] netlink_rcv_skb+0x123/0x220 [ 329.115945][T18539] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 329.115997][T18539] nfnetlink_rcv+0x16b/0x1690 [ 329.116077][T18539] ? nlmon_xmit+0x4f/0x60 [ 329.116125][T18539] ? consume_skb+0x49/0x150 [ 329.116151][T18539] ? nlmon_xmit+0x4f/0x60 [ 329.116191][T18539] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 329.116283][T18539] ? __dev_queue_xmit+0x1200/0x2000 [ 329.116306][T18539] ? __dev_queue_xmit+0x182/0x2000 [ 329.116335][T18539] ? ref_tracker_free+0x37d/0x3e0 [ 329.116431][T18539] ? __netlink_deliver_tap+0x4dc/0x500 [ 329.116493][T18539] netlink_unicast+0x5bd/0x690 [ 329.116522][T18539] netlink_sendmsg+0x58b/0x6b0 [ 329.116595][T18539] ? __pfx_netlink_sendmsg+0x10/0x10 [ 329.116665][T18539] __sock_sendmsg+0x145/0x180 [ 329.116703][T18539] ____sys_sendmsg+0x31e/0x4e0 [ 329.116744][T18539] ___sys_sendmsg+0x17b/0x1d0 [ 329.116796][T18539] __x64_sys_sendmsg+0xd4/0x160 [ 329.116899][T18539] x64_sys_call+0x191e/0x2ff0 [ 329.116928][T18539] do_syscall_64+0xd2/0x200 [ 329.117015][T18539] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 329.117047][T18539] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 329.117083][T18539] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 329.117110][T18539] RIP: 0033:0x7ff3e15beec9 [ 329.117207][T18539] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 329.117230][T18539] RSP: 002b:00007ff3e001f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 329.117256][T18539] RAX: ffffffffffffffda RBX: 00007ff3e1815fa0 RCX: 00007ff3e15beec9 [ 329.117272][T18539] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 329.117364][T18539] RBP: 00007ff3e001f090 R08: 0000000000000000 R09: 0000000000000000 [ 329.117379][T18539] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 329.117395][T18539] R13: 00007ff3e1816038 R14: 00007ff3e1815fa0 R15: 00007ffcfe174da8 [ 329.117418][T18539] [ 329.433357][ T2953] IPVS: starting estimator thread 0... [ 329.579878][T18551] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4186'. [ 329.617268][T18554] random: crng reseeded on system resumption [ 329.623567][T18544] IPVS: using max 2112 ests per chain, 105600 per kthread [ 329.674502][T18559] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 329.683102][T18559] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 329.812908][T18558] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4188'. [ 329.849746][T18563] loop3: detected capacity change from 0 to 128 [ 329.955494][T18563] ext4: Unknown parameter 'noacl' [ 330.024609][ T29] kauditd_printk_skb: 298 callbacks suppressed [ 330.024627][ T29] audit: type=1400 audit(1759106195.001:88163): avc: denied { create } for pid=18565 comm="syz.7.4191" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 330.050891][ T29] audit: type=1400 audit(1759106195.001:88164): avc: denied { connect } for pid=18565 comm="syz.7.4191" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 330.153022][T18570] FAULT_INJECTION: forcing a failure. [ 330.153022][T18570] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 330.166320][T18570] CPU: 1 UID: 0 PID: 18570 Comm: syz.7.4193 Not tainted syzkaller #0 PREEMPT(voluntary) [ 330.166352][T18570] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 330.166381][T18570] Call Trace: [ 330.166391][T18570] [ 330.166401][T18570] __dump_stack+0x1d/0x30 [ 330.166436][T18570] dump_stack_lvl+0xe8/0x140 [ 330.166537][T18570] dump_stack+0x15/0x1b [ 330.166554][T18570] should_fail_ex+0x265/0x280 [ 330.166579][T18570] should_fail+0xb/0x20 [ 330.166620][T18570] should_fail_usercopy+0x1a/0x20 [ 330.166648][T18570] _copy_from_user+0x1c/0xb0 [ 330.166690][T18570] __sys_connect+0xd0/0x2b0 [ 330.166725][T18570] __x64_sys_connect+0x3f/0x50 [ 330.166751][T18570] x64_sys_call+0x2c08/0x2ff0 [ 330.166838][T18570] do_syscall_64+0xd2/0x200 [ 330.166869][T18570] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 330.166976][T18570] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 330.167012][T18570] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 330.167038][T18570] RIP: 0033:0x7f1d08f0eec9 [ 330.167066][T18570] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 330.167107][T18570] RSP: 002b:00007f1d0796f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 330.167203][T18570] RAX: ffffffffffffffda RBX: 00007f1d09165fa0 RCX: 00007f1d08f0eec9 [ 330.167219][T18570] RDX: 0000000000000010 RSI: 0000200000000040 RDI: 0000000000000007 [ 330.167231][T18570] RBP: 00007f1d0796f090 R08: 0000000000000000 R09: 0000000000000000 [ 330.167254][T18570] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 330.167266][T18570] R13: 00007f1d09166038 R14: 00007f1d09165fa0 R15: 00007ffe82b3bcc8 [ 330.167287][T18570] [ 330.367702][T18578] loop7: detected capacity change from 0 to 128 [ 330.378086][T18578] bio_check_eod: 11407 callbacks suppressed [ 330.378105][T18578] syz.7.4194: attempt to access beyond end of device [ 330.378105][T18578] loop7: rw=2049, sector=154, nr_sectors = 8 limit=128 [ 330.409667][T18578] syz.7.4194: attempt to access beyond end of device [ 330.409667][T18578] loop7: rw=2049, sector=160, nr_sectors = 2 limit=128 [ 330.423283][T18578] Buffer I/O error on dev loop7, logical block 80, lost async page write [ 330.448032][T18578] syz.7.4194: attempt to access beyond end of device [ 330.448032][T18578] loop7: rw=2049, sector=162, nr_sectors = 8 limit=128 [ 330.505349][T18583] loop1: detected capacity change from 0 to 512 [ 330.599375][T18583] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 330.612311][T18583] ext4 filesystem being mounted at /268/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 330.723905][T18578] syz.7.4194: attempt to access beyond end of device [ 330.723905][T18578] loop7: rw=2049, sector=168, nr_sectors = 2 limit=128 [ 330.737552][T18578] Buffer I/O error on dev loop7, logical block 84, lost async page write [ 330.858958][T18578] syz.7.4194: attempt to access beyond end of device [ 330.858958][T18578] loop7: rw=2049, sector=170, nr_sectors = 80 limit=128 [ 330.924000][ T29] audit: type=1400 audit(1759106195.931:88165): avc: denied { read } for pid=18586 comm="syz.0.4195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 330.952223][T18578] syz.7.4194: attempt to access beyond end of device [ 330.952223][T18578] loop7: rw=2049, sector=138, nr_sectors = 16 limit=128 [ 330.972366][T13540] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 330.996813][T18587] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 331.024821][ T29] audit: type=1326 audit(1759106196.081:88166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18597 comm="syz.3.4198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3e15beec9 code=0x7ffc0000 [ 331.048504][ T29] audit: type=1326 audit(1759106196.081:88167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18597 comm="syz.3.4198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3e15beec9 code=0x7ffc0000 [ 331.081612][T18600] loop1: detected capacity change from 0 to 128 [ 331.086798][ T29] audit: type=1326 audit(1759106196.081:88168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18597 comm="syz.3.4198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7ff3e15beec9 code=0x7ffc0000 [ 331.111559][ T29] audit: type=1326 audit(1759106196.081:88169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18597 comm="syz.3.4198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3e15beec9 code=0x7ffc0000 [ 331.135545][ T29] audit: type=1326 audit(1759106196.081:88170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18597 comm="syz.3.4198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3e15beec9 code=0x7ffc0000 [ 331.159237][ T29] audit: type=1326 audit(1759106196.091:88171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18597 comm="syz.3.4198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=276 compat=0 ip=0x7ff3e15beec9 code=0x7ffc0000 [ 331.183049][ T29] audit: type=1326 audit(1759106196.091:88172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18597 comm="syz.3.4198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3e15beec9 code=0x7ffc0000 [ 331.346009][T18629] loop1: detected capacity change from 0 to 128 [ 331.353037][T18629] ext4: Unknown parameter 'noacl' [ 331.397961][T18637] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4210'. [ 331.649870][T18653] loop7: detected capacity change from 0 to 512 [ 331.668060][T18653] EXT4-fs error (device loop7): ext4_orphan_get:1418: comm syz.7.4215: bad orphan inode 11862016 [ 331.669376][T18653] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 331.669429][T18653] ext4 filesystem being mounted at /176/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 331.693527][T18655] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 331.693552][T18655] vhci_hcd: default hub control req: 2314 v0008 i0002 l0 [ 331.715160][T18653] FAULT_INJECTION: forcing a failure. [ 331.715160][T18653] name failslab, interval 1, probability 0, space 0, times 0 [ 331.731701][T18653] CPU: 0 UID: 0 PID: 18653 Comm: syz.7.4215 Not tainted syzkaller #0 PREEMPT(voluntary) [ 331.731733][T18653] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 331.731801][T18653] Call Trace: [ 331.731809][T18653] [ 331.731818][T18653] __dump_stack+0x1d/0x30 [ 331.731844][T18653] dump_stack_lvl+0xe8/0x140 [ 331.731865][T18653] dump_stack+0x15/0x1b [ 331.731881][T18653] should_fail_ex+0x265/0x280 [ 331.731951][T18653] ? selinux_netlbl_sock_genattr+0x88/0x260 [ 331.731994][T18653] should_failslab+0x8c/0xb0 [ 331.732092][T18653] __kmalloc_cache_noprof+0x4c/0x320 [ 331.732133][T18653] selinux_netlbl_sock_genattr+0x88/0x260 [ 331.732167][T18653] selinux_netlbl_socket_post_create+0x68/0x100 [ 331.732203][T18653] selinux_socket_post_create+0x214/0x2a0 [ 331.732327][T18653] security_socket_post_create+0x5d/0xb0 [ 331.732368][T18653] __sock_create+0x362/0x5b0 [ 331.732412][T18653] sock_create_kern+0x38/0x50 [ 331.732559][T18653] mptcp_subflow_create_socket+0x84/0x630 [ 331.732596][T18653] __mptcp_nmpc_sk+0xb5/0x3d0 [ 331.732632][T18653] mptcp_listen+0xc0/0x570 [ 331.732692][T18653] __x64_sys_listen+0x110/0x170 [ 331.732712][T18653] x64_sys_call+0x206c/0x2ff0 [ 331.732733][T18653] do_syscall_64+0xd2/0x200 [ 331.732806][T18653] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 331.732837][T18653] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 331.732874][T18653] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.732901][T18653] RIP: 0033:0x7f1d08f0eec9 [ 331.732919][T18653] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 331.732949][T18653] RSP: 002b:00007f1d0796f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000032 [ 331.732968][T18653] RAX: ffffffffffffffda RBX: 00007f1d09165fa0 RCX: 00007f1d08f0eec9 [ 331.732980][T18653] RDX: 0000000000000000 RSI: 00000000fffffffc RDI: 0000000000000006 [ 331.732992][T18653] RBP: 00007f1d0796f090 R08: 0000000000000000 R09: 0000000000000000 [ 331.733004][T18653] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 331.733018][T18653] R13: 00007f1d09166038 R14: 00007f1d09165fa0 R15: 00007ffe82b3bcc8 [ 331.733082][T18653] [ 331.802084][T15313] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 332.018192][T18667] loop7: detected capacity change from 0 to 128 [ 332.024929][T18667] FAT-fs (loop7): bogus sectors per cluster 0 [ 332.024971][T18667] FAT-fs (loop7): Can't find a valid FAT filesystem [ 332.068938][T18669] netlink: 48 bytes leftover after parsing attributes in process `syz.7.4220'. [ 332.125262][T18675] loop3: detected capacity change from 0 to 128 [ 332.133428][T18675] ext4: Unknown parameter 'noacl' [ 332.183135][T18676] random: crng reseeded on system resumption [ 332.206118][T18678] loop3: detected capacity change from 0 to 512 [ 332.227651][T18678] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 332.227714][T18678] ext4 filesystem being mounted at /41/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 332.229679][T18678] EXT4-fs error (device loop3): __ext4_new_inode:1279: comm syz.3.4223: failed to insert inode 16: doubly allocated? [ 332.234746][T18678] SELinux: Context system_u:object_r:usbmon_device_t:s0 is not valid (left unmapped). [ 332.250138][T17960] EXT4-fs error (device loop3) in ext4_free_inode:361: Corrupt filesystem [ 332.305385][T17960] EXT4-fs error (device loop3) in ext4_free_inode:361: Corrupt filesystem [ 332.305981][T17960] EXT4-fs error (device loop3) in ext4_free_inode:361: Corrupt filesystem [ 332.306304][T17960] EXT4-fs error (device loop3) in ext4_free_inode:361: Corrupt filesystem [ 332.306590][T17960] EXT4-fs error (device loop3): ext4_xattr_block_get:593: inode #15: comm syz-executor: corrupted xattr block 32: bad e_name length [ 332.306732][T17960] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 332.306911][T17960] EXT4-fs error (device loop3): ext4_xattr_block_get:593: inode #15: comm syz-executor: corrupted xattr block 32: bad e_name length [ 332.307017][T17960] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 332.307116][T17960] EXT4-fs error (device loop3): ext4_xattr_block_get:593: inode #15: comm syz-executor: corrupted xattr block 32: bad e_name length [ 332.307270][T17960] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 332.307540][T17960] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2962: inode #15: comm syz-executor: corrupted xattr block 32: bad e_name length [ 332.307753][T17960] EXT4-fs warning (device loop3): ext4_evict_inode:274: xattr delete (err -117) [ 332.308157][T17960] EXT4-fs error (device loop3) in ext4_free_inode:361: Corrupt filesystem [ 332.545072][T18681] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 332.562844][T18694] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=18694 comm=syz.8.4230 [ 332.575484][T18694] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=18694 comm=syz.8.4230 [ 332.614656][T17127] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.696220][T17127] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.730670][T18712] FAULT_INJECTION: forcing a failure. [ 332.730670][T18712] name failslab, interval 1, probability 0, space 0, times 0 [ 332.743530][T18712] CPU: 1 UID: 0 PID: 18712 Comm: syz.8.4238 Not tainted syzkaller #0 PREEMPT(voluntary) [ 332.743558][T18712] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 332.743573][T18712] Call Trace: [ 332.743582][T18712] [ 332.743592][T18712] __dump_stack+0x1d/0x30 [ 332.743672][T18712] dump_stack_lvl+0xe8/0x140 [ 332.743697][T18712] dump_stack+0x15/0x1b [ 332.743718][T18712] should_fail_ex+0x265/0x280 [ 332.743744][T18712] should_failslab+0x8c/0xb0 [ 332.743770][T18712] kmem_cache_alloc_lru_noprof+0x55/0x310 [ 332.743840][T18712] ? __d_alloc+0x3d/0x340 [ 332.743875][T18712] __d_alloc+0x3d/0x340 [ 332.743974][T18712] ? mpol_shared_policy_init+0xbd/0x4c0 [ 332.743998][T18712] d_alloc_pseudo+0x1e/0x80 [ 332.744080][T18712] alloc_file_pseudo+0x71/0x160 [ 332.744119][T18712] __shmem_file_setup+0x1de/0x210 [ 332.744228][T18712] shmem_file_setup+0x3b/0x50 [ 332.744334][T18712] __se_sys_memfd_create+0x2c3/0x590 [ 332.744361][T18712] __x64_sys_memfd_create+0x31/0x40 [ 332.744386][T18712] x64_sys_call+0x2abe/0x2ff0 [ 332.744410][T18712] do_syscall_64+0xd2/0x200 [ 332.744454][T18712] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 332.744482][T18712] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 332.744553][T18712] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 332.744582][T18712] RIP: 0033:0x7f87444feec9 [ 332.744600][T18712] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 332.744637][T18712] RSP: 002b:00007f8742f5ee18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 332.744658][T18712] RAX: ffffffffffffffda RBX: 000000000000063f RCX: 00007f87444feec9 [ 332.744672][T18712] RDX: 00007f8742f5eef0 RSI: 0000000000000000 RDI: 00007f8744582960 [ 332.744685][T18712] RBP: 0000200000000d80 R08: 00007f8742f5ebb7 R09: 00007f8742f5ee40 [ 332.744748][T18712] R10: 000000000000000a R11: 0000000000000202 R12: 00002000000005c0 [ 332.744763][T18712] R13: 00007f8742f5eef0 R14: 00007f8742f5eeb0 R15: 00002000000003c0 [ 332.744789][T18712] [ 332.962133][T17127] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.980305][T18717] SELinux: policydb version 0 does not match my version range 15-35 [ 332.989303][T18717] SELinux: failed to load policy [ 333.036969][T17127] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.063379][T18732] netlink: 32 bytes leftover after parsing attributes in process `syz.7.4246'. [ 333.100590][T18737] loop1: detected capacity change from 0 to 2048 [ 333.167232][T17127] bridge_slave_1: left allmulticast mode [ 333.173011][T17127] bridge_slave_1: left promiscuous mode [ 333.178791][T17127] bridge0: port 2(bridge_slave_1) entered disabled state [ 333.196862][T18737] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 333.219022][T17127] bridge_slave_0: left allmulticast mode [ 333.224886][T17127] bridge_slave_0: left promiscuous mode [ 333.230694][T17127] bridge0: port 1(bridge_slave_0) entered disabled state [ 333.370284][T18761] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 333.370514][T18761] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 916 with error 28 [ 333.370543][T18761] EXT4-fs (loop1): This should not happen!! Data will be lost [ 333.370543][T18761] [ 333.370605][T18761] EXT4-fs (loop1): Total free blocks count 0 [ 333.370621][T18761] EXT4-fs (loop1): Free/Dirty block details [ 333.370652][T18761] EXT4-fs (loop1): free_blocks=2415919104 [ 333.370665][T18761] EXT4-fs (loop1): dirty_blocks=928 [ 333.370678][T18761] EXT4-fs (loop1): Block reservation details [ 333.370734][T18761] EXT4-fs (loop1): i_reserved_data_blocks=58 [ 333.513526][T17127] $Hÿ (unregistering): (slave bond_slave_0): Releasing backup interface [ 333.515417][T17127] bond_slave_0: left promiscuous mode [ 333.527093][T17127] $Hÿ (unregistering): (slave bond_slave_1): Releasing backup interface [ 333.527371][T17127] bond_slave_1: left promiscuous mode [ 333.528109][T17127] $Hÿ (unregistering): Released all slaves [ 333.532263][T18766] netlink: 'syz.0.4250': attribute type 1 has an invalid length. [ 333.532281][T18766] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4250'. [ 333.551702][T18764] netlink: 96 bytes leftover after parsing attributes in process `syz.0.4250'. [ 333.663641][T17168] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 28 [ 333.745370][T18774] SELinux: policydb version 0 does not match my version range 15-35 [ 333.745552][T18774] SELinux: failed to load policy [ 333.796983][T17127] hsr_slave_0: left promiscuous mode [ 333.802991][T17127] hsr_slave_1: left promiscuous mode [ 333.803466][T17127] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 333.803537][T17127] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 333.809360][T17127] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 333.809377][T17127] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 333.821135][T17127] veth1_macvtap: left promiscuous mode [ 333.821160][T17127] veth0_macvtap: left promiscuous mode [ 333.821238][T17127] veth1_vlan: left promiscuous mode [ 333.821278][T17127] veth0_vlan: left promiscuous mode [ 333.925247][T17127] team0 (unregistering): Port device team_slave_1 removed [ 333.942805][T17127] team0 (unregistering): Port device team_slave_0 removed [ 333.979623][T18715] chnl_net:caif_netlink_parms(): no params data found [ 334.073343][T18715] bridge0: port 1(bridge_slave_0) entered blocking state [ 334.073383][T18715] bridge0: port 1(bridge_slave_0) entered disabled state [ 334.073487][T18715] bridge_slave_0: entered allmulticast mode [ 334.092512][T18803] loop1: detected capacity change from 0 to 2048 [ 334.114834][T18806] loop7: detected capacity change from 0 to 512 [ 334.125488][T18803] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 334.126139][T18715] bridge_slave_0: entered promiscuous mode [ 334.138016][T18715] bridge0: port 2(bridge_slave_1) entered blocking state [ 334.151617][T18715] bridge0: port 2(bridge_slave_1) entered disabled state [ 334.161108][T18715] bridge_slave_1: entered allmulticast mode [ 334.167486][T18715] bridge_slave_1: entered promiscuous mode [ 334.168019][T18806] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c01c, mo2=0002] [ 334.199211][T18806] System zones: 0-2, 18-18, 34-35 [ 334.204403][T18813] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4265'. [ 334.215874][T18806] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 334.215993][T18806] ext4 filesystem being mounted at /195/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 334.230003][T18806] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 334.264260][T18715] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 334.268468][T18715] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 334.290534][T18815] SELinux: policydb version 0 does not match my version range 15-35 [ 334.305955][T18815] SELinux: failed to load policy [ 334.403776][T18715] team0: Port device team_slave_0 added [ 334.408121][T18821] random: crng reseeded on system resumption [ 334.429528][T18715] team0: Port device team_slave_1 added [ 334.444787][T18812] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 334.444948][T18812] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1158 with error 28 [ 334.444978][T18812] EXT4-fs (loop1): This should not happen!! Data will be lost [ 334.444978][T18812] [ 334.444994][T18812] EXT4-fs (loop1): Total free blocks count 0 [ 334.445011][T18812] EXT4-fs (loop1): Free/Dirty block details [ 334.445022][T18812] EXT4-fs (loop1): free_blocks=2415919104 [ 334.445035][T18812] EXT4-fs (loop1): dirty_blocks=1168 [ 334.445085][T18812] EXT4-fs (loop1): Block reservation details [ 334.445096][T18812] EXT4-fs (loop1): i_reserved_data_blocks=73 [ 334.582331][T18715] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 334.589365][T18715] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 334.589404][T18715] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 334.590293][T18715] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 334.590305][T18715] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 334.590338][T18715] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 334.724847][T18715] hsr_slave_0: entered promiscuous mode [ 334.725392][T18715] hsr_slave_1: entered promiscuous mode [ 334.745917][T18715] debugfs: 'hsr0' already exists in 'hsr' [ 334.751791][T18715] Cannot create hsr debugfs directory [ 334.802180][T18828] random: crng reseeded on system resumption [ 334.900964][ T4415] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 28 [ 334.915647][T18831] loop8: detected capacity change from 0 to 128 [ 334.916131][T18831] ext4: Unknown parameter 'noacl' [ 335.002073][T18715] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 335.036578][T18837] loop1: detected capacity change from 0 to 128 [ 335.037159][T18837] ext4: Unknown parameter 'noacl' [ 335.043706][T18715] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 335.046789][T18715] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 335.049805][T18715] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 335.104570][T18715] 8021q: adding VLAN 0 to HW filter on device bond0 [ 335.108338][ T2953] IPVS: starting estimator thread 0... [ 335.218977][T18859] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4278'. [ 335.230391][T18857] loop7: detected capacity change from 0 to 512 [ 335.241451][T18851] IPVS: using max 2016 ests per chain, 100800 per kthread [ 335.256938][T18861] loop1: detected capacity change from 0 to 128 [ 335.264912][ T29] kauditd_printk_skb: 378 callbacks suppressed [ 335.264952][ T29] audit: type=1326 audit(1759106200.321:88551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18862 comm="syz.0.4280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b8942eec9 code=0x7ffc0000 [ 335.267151][T18715] 8021q: adding VLAN 0 to HW filter on device team0 [ 335.271801][ T29] audit: type=1326 audit(1759106200.331:88552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18862 comm="syz.0.4280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b8942eec9 code=0x7ffc0000 [ 335.329459][T18864] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 335.338124][T18864] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 335.374299][T18861] ext4: Unknown parameter 'noacl' [ 335.408512][ T29] audit: type=1326 audit(1759106200.381:88553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18862 comm="syz.0.4280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f7b8942eec9 code=0x7ffc0000 [ 335.432256][ T29] audit: type=1326 audit(1759106200.401:88554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18862 comm="syz.0.4280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b8942eec9 code=0x7ffc0000 [ 335.455855][ T29] audit: type=1326 audit(1759106200.401:88555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18862 comm="syz.0.4280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b8942eec9 code=0x7ffc0000 [ 335.479546][ T29] audit: type=1326 audit(1759106200.401:88556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18862 comm="syz.0.4280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7b8942eec9 code=0x7ffc0000 [ 335.503085][ T29] audit: type=1326 audit(1759106200.401:88557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18862 comm="syz.0.4280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b8942eec9 code=0x7ffc0000 [ 335.526756][ T29] audit: type=1326 audit(1759106200.401:88558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18862 comm="syz.0.4280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b8942eec9 code=0x7ffc0000 [ 335.550338][ T29] audit: type=1326 audit(1759106200.401:88559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18862 comm="syz.0.4280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7b8942eec9 code=0x7ffc0000 [ 335.573920][ T29] audit: type=1326 audit(1759106200.401:88560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18862 comm="syz.0.4280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b8942eec9 code=0x7ffc0000 [ 335.649339][T18868] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4281'. [ 335.665164][T18868] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 335.680689][T17128] bridge0: port 1(bridge_slave_0) entered blocking state [ 335.687933][T17128] bridge0: port 1(bridge_slave_0) entered forwarding state [ 335.694091][T18857] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c01c, mo2=0002] [ 335.697828][T17128] bridge0: port 2(bridge_slave_1) entered blocking state [ 335.704877][T18857] System zones: 0-2, 18-18, 34-35 [ 335.710236][T17128] bridge0: port 2(bridge_slave_1) entered forwarding state [ 335.710246][T18857] [ 335.711907][T18857] ext4 filesystem being mounted at /200/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 335.735829][T18715] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 335.746250][T18715] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 335.819613][T18876] loop7: detected capacity change from 0 to 512 [ 335.835221][T18880] SELinux: policydb version 0 does not match my version range 15-35 [ 335.846875][T18880] SELinux: failed to load policy [ 335.854291][T18876] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c01c, mo2=0002] [ 335.855753][T18715] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 335.862460][T18876] System zones: 0-2, 18-18, 34-35 [ 335.883730][T18882] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=18882 comm=syz.1.4285 [ 335.890224][T18876] ext4 filesystem being mounted at /201/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 335.896432][T18882] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=18882 comm=syz.1.4285 [ 336.030428][T18905] loop1: detected capacity change from 0 to 128 [ 336.044847][T18905] ext4: Unknown parameter 'noacl' [ 336.092731][T18917] loop7: detected capacity change from 0 to 128 [ 336.101439][T18917] ext4: Unknown parameter 'noacl' [ 336.137594][T18921] SELinux: policydb version 0 does not match my version range 15-35 [ 336.149323][T18921] SELinux: failed to load policy [ 336.156286][T18715] veth0_vlan: entered promiscuous mode [ 336.165785][T18924] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4295'. [ 336.184407][T18715] veth1_vlan: entered promiscuous mode [ 336.210775][T18715] veth0_macvtap: entered promiscuous mode [ 336.258759][T18932] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=18932 comm=syz.1.4299 [ 336.271504][T18932] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=18932 comm=syz.1.4299 [ 336.285494][T18715] veth1_macvtap: entered promiscuous mode [ 336.303566][T18715] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 336.318746][T18715] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 336.359385][T17168] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.382277][T17168] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.399840][T18947] loop7: detected capacity change from 0 to 128 [ 336.400303][T18947] ext4: Unknown parameter 'noacl' [ 336.407943][T17168] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.408003][T17168] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.565683][T18965] random: crng reseeded on system resumption [ 336.654508][T18964] loop9: detected capacity change from 0 to 1024 [ 336.655221][T18964] EXT4-fs: Ignoring removed orlov option [ 336.764572][T18976] random: crng reseeded on system resumption [ 336.803482][T18978] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4313'. [ 336.891482][T18982] loop9: detected capacity change from 0 to 8192 [ 336.928042][T18986] loop7: detected capacity change from 0 to 512 [ 336.935997][T18986] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c01c, mo2=0002] [ 336.936037][T18986] System zones: 0-2, 18-18, 34-35 [ 336.936976][T18986] ext4 filesystem being mounted at /212/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 336.963205][T18982] loop9: p1 p2 p4 < > [ 336.963217][T18982] loop9: partition table partially beyond EOD, truncated [ 336.963335][T18982] loop9: p1 start 16777224 is beyond EOD, truncated [ 336.963363][T18982] loop9: p2 size 515840 extends beyond EOD, truncated [ 336.963920][T18982] loop9: p4 start 16777216 is beyond EOD, truncated [ 336.965629][T18982] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 337.013844][T18982] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 337.021324][T18982] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 337.040611][T18982] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 337.048252][T18982] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 337.130755][T18999] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4322'. [ 337.237994][T19007] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4326'. [ 337.250630][T19010] random: crng reseeded on system resumption [ 337.666122][T19038] loop7: detected capacity change from 0 to 2048 [ 337.988882][T19043] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 338.004029][T19043] EXT4-fs (loop7): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 338.004068][T19043] EXT4-fs (loop7): This should not happen!! Data will be lost [ 338.004068][T19043] [ 338.004085][T19043] EXT4-fs (loop7): Total free blocks count 0 [ 338.004103][T19043] EXT4-fs (loop7): Free/Dirty block details [ 338.004118][T19043] EXT4-fs (loop7): free_blocks=2415919104 [ 338.004188][T19043] EXT4-fs (loop7): dirty_blocks=2624 [ 338.004200][T19043] EXT4-fs (loop7): Block reservation details [ 338.004241][T19043] EXT4-fs (loop7): i_reserved_data_blocks=164 [ 338.286945][T19052] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4339'. [ 338.290502][T19053] loop8: detected capacity change from 0 to 128 [ 338.300384][T19053] ext4: Unknown parameter 'noacl' [ 338.318942][T19055] loop9: detected capacity change from 0 to 512 [ 338.368336][T19055] ext4 filesystem being mounted at /5/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 338.496678][T19064] loop8: detected capacity change from 0 to 512 [ 338.521164][T19064] ext4 filesystem being mounted at /61/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 338.539872][ T4413] EXT4-fs (loop7): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 28 [ 338.539900][ T4413] EXT4-fs (loop7): This should not happen!! Data will be lost [ 338.539900][ T4413] [ 338.686388][T19075] loop9: detected capacity change from 0 to 128 [ 338.686805][T19075] ext4: Unknown parameter 'noacl' [ 338.718137][T19077] loop7: detected capacity change from 0 to 2048 [ 338.948104][T19089] loop1: detected capacity change from 0 to 512 [ 339.021595][T19090] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 339.030272][T19090] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 339.098238][T19092] syzkaller1: entered promiscuous mode [ 339.103907][T19092] syzkaller1: entered allmulticast mode [ 339.139143][T19084] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 339.211147][T19084] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 339.218604][T19084] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 339.230489][T19084] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 339.237931][T19084] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 339.619821][T19092] bond1: entered promiscuous mode [ 339.624969][T19092] bond1: entered allmulticast mode [ 339.633606][T19089] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c01c, mo2=0002] [ 339.642078][T19089] System zones: 0-2, 18-18, 34-35 [ 339.649402][T19092] 8021q: adding VLAN 0 to HW filter on device bond1 [ 339.657671][T19089] ext4 filesystem being mounted at /296/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 339.678309][T19092] bond1 (unregistering): Released all slaves [ 339.846581][T19103] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=19103 comm=syz.1.4355 [ 339.859245][T19103] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=19103 comm=syz.1.4355 [ 340.076849][T19125] loop7: detected capacity change from 0 to 2048 [ 340.224423][T19138] random: crng reseeded on system resumption [ 340.556303][T19141] loop1: detected capacity change from 0 to 8192 [ 340.618468][T19147] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4366'. [ 340.673909][T19141] loop1: p1 p2 p4 < > [ 340.678039][T19141] loop1: partition table partially beyond EOD, truncated [ 340.698025][T19141] loop1: p1 start 16777224 is beyond EOD, truncated [ 340.704771][T19141] loop1: p2 size 515840 extends beyond EOD, truncated [ 340.715773][T19141] loop1: p4 start 16777216 is beyond EOD, truncated [ 340.862515][T19151] loop1: detected capacity change from 0 to 512 [ 340.874780][T19151] ext4 filesystem being mounted at /304/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 340.925648][ T29] kauditd_printk_skb: 436 callbacks suppressed [ 340.925664][ T29] audit: type=1326 audit(1759106205.981:88997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19150 comm="syz.1.4369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cb4d7eec9 code=0x7ffc0000 [ 340.981983][ T29] audit: type=1326 audit(1759106206.011:88998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19150 comm="syz.1.4369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cb4d7eec9 code=0x7ffc0000 [ 341.005730][ T29] audit: type=1326 audit(1759106206.011:88999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19150 comm="syz.1.4369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2cb4d7eec9 code=0x7ffc0000 [ 341.029533][ T29] audit: type=1326 audit(1759106206.011:89000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19150 comm="syz.1.4369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cb4d7eec9 code=0x7ffc0000 [ 341.053438][ T29] audit: type=1326 audit(1759106206.011:89001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19150 comm="syz.1.4369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cb4d7eec9 code=0x7ffc0000 [ 341.077231][ T29] audit: type=1326 audit(1759106206.011:89002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19150 comm="syz.1.4369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2cb4d7eec9 code=0x7ffc0000 [ 341.100994][ T29] audit: type=1326 audit(1759106206.011:89003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19150 comm="syz.1.4369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cb4d7eec9 code=0x7ffc0000 [ 341.124800][ T29] audit: type=1326 audit(1759106206.011:89004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19150 comm="syz.1.4369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cb4d7eec9 code=0x7ffc0000 [ 341.148506][ T29] audit: type=1326 audit(1759106206.011:89005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19150 comm="syz.1.4369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2cb4d7eec9 code=0x7ffc0000 [ 341.172264][ T29] audit: type=1326 audit(1759106206.011:89006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19150 comm="syz.1.4369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cb4d7eec9 code=0x7ffc0000 [ 341.205907][T19155] loop7: detected capacity change from 0 to 128 [ 341.213183][T19155] ext4: Unknown parameter 'noacl' [ 341.281781][T19163] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4372'. [ 341.642772][T19177] loop7: detected capacity change from 0 to 512 [ 341.655646][T19177] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c01c, mo2=0002] [ 341.663972][T19177] System zones: 0-2, 18-18, 34-35 [ 341.670117][T19177] ext4 filesystem being mounted at /224/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 341.800160][T19182] random: crng reseeded on system resumption [ 342.270505][T19213] loop9: detected capacity change from 0 to 128 [ 342.272720][T19213] FAT-fs (loop9): bogus sectors per cluster 0 [ 342.272737][T19213] FAT-fs (loop9): Can't find a valid FAT filesystem [ 342.328399][T19209] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4385'. [ 342.375717][T19217] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=19217 comm=syz.7.4389 [ 342.375750][T19217] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=19217 comm=syz.7.4389 [ 342.655414][T19220] loop8: detected capacity change from 0 to 2048 [ 342.721097][ T3385] IPVS: starting estimator thread 0... [ 342.821439][T19240] IPVS: using max 2352 ests per chain, 117600 per kthread [ 342.840465][T19246] random: crng reseeded on system resumption [ 343.462180][T19256] loop8: detected capacity change from 0 to 128 [ 343.474693][T19256] FAT-fs (loop8): bogus sectors per cluster 0 [ 343.480822][T19256] FAT-fs (loop8): Can't find a valid FAT filesystem [ 343.521142][T19257] FAULT_INJECTION: forcing a failure. [ 343.521142][T19257] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 343.534361][T19257] CPU: 1 UID: 0 PID: 19257 Comm: syz.7.4400 Not tainted syzkaller #0 PREEMPT(voluntary) [ 343.534397][T19257] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 343.534415][T19257] Call Trace: [ 343.534424][T19257] [ 343.534434][T19257] __dump_stack+0x1d/0x30 [ 343.534476][T19257] dump_stack_lvl+0xe8/0x140 [ 343.534503][T19257] dump_stack+0x15/0x1b [ 343.534524][T19257] should_fail_ex+0x265/0x280 [ 343.534554][T19257] should_fail+0xb/0x20 [ 343.534578][T19257] should_fail_usercopy+0x1a/0x20 [ 343.534664][T19257] _copy_to_iter+0x387/0xe70 [ 343.534745][T19257] ? _raw_spin_unlock_irqrestore+0x2b/0x60 [ 343.534821][T19257] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 343.534851][T19257] __skb_datagram_iter+0xc6/0x690 [ 343.534885][T19257] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 343.534935][T19257] skb_copy_datagram_iter+0x3d/0x110 [ 343.534965][T19257] netlink_recvmsg+0x1a8/0x550 [ 343.535010][T19257] ? __pfx_netlink_recvmsg+0x10/0x10 [ 343.535039][T19257] sock_recvmsg+0x139/0x170 [ 343.535108][T19257] ____sys_recvmsg+0xf5/0x280 [ 343.535217][T19257] ___sys_recvmsg+0x11f/0x370 [ 343.535264][T19257] do_recvmmsg+0x1ef/0x540 [ 343.535381][T19257] ? get_timespec64+0xc9/0x100 [ 343.535408][T19257] __x64_sys_recvmmsg+0xfb/0x170 [ 343.535533][T19257] x64_sys_call+0x27a6/0x2ff0 [ 343.535569][T19257] do_syscall_64+0xd2/0x200 [ 343.535597][T19257] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 343.535641][T19257] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 343.535675][T19257] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 343.535754][T19257] RIP: 0033:0x7f1d08f0eec9 [ 343.535773][T19257] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 343.535791][T19257] RSP: 002b:00007f1d0794e038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 343.535810][T19257] RAX: ffffffffffffffda RBX: 00007f1d09166090 RCX: 00007f1d08f0eec9 [ 343.535821][T19257] RDX: 04000000000003b4 RSI: 00002000000037c0 RDI: 0000000000000003 [ 343.535833][T19257] RBP: 00007f1d0794e090 R08: 0000200000003700 R09: 0000000000000000 [ 343.535844][T19257] R10: 0000000002040000 R11: 0000000000000246 R12: 0000000000000001 [ 343.535859][T19257] R13: 00007f1d09166128 R14: 00007f1d09166090 R15: 00007ffe82b3bcc8 [ 343.535892][T19257] [ 343.786999][T19261] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=19261 comm=syz.8.4402 [ 343.799603][T19261] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=19261 comm=syz.8.4402 [ 343.851443][T19259] FAULT_INJECTION: forcing a failure. [ 343.851443][T19259] name failslab, interval 1, probability 0, space 0, times 0 [ 343.864909][T19259] CPU: 0 UID: 0 PID: 19259 Comm: syz.1.4399 Not tainted syzkaller #0 PREEMPT(voluntary) [ 343.864947][T19259] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 343.864965][T19259] Call Trace: [ 343.864975][T19259] [ 343.865043][T19259] __dump_stack+0x1d/0x30 [ 343.865070][T19259] dump_stack_lvl+0xe8/0x140 [ 343.865096][T19259] dump_stack+0x15/0x1b [ 343.865118][T19259] should_fail_ex+0x265/0x280 [ 343.865150][T19259] ? ipv6_add_addr+0x389/0x830 [ 343.865202][T19259] should_failslab+0x8c/0xb0 [ 343.865255][T19259] __kmalloc_cache_noprof+0x4c/0x320 [ 343.865296][T19259] ipv6_add_addr+0x389/0x830 [ 343.865345][T19259] inet6_addr_add+0x26e/0x6a0 [ 343.865387][T19259] ? __mutex_lock+0x1a7/0xcc0 [ 343.865476][T19259] addrconf_add_ifaddr+0x1ab/0x270 [ 343.865518][T19259] inet6_ioctl+0xb0/0x190 [ 343.865555][T19259] ? ioctl_has_perm+0x257/0x2a0 [ 343.865594][T19259] sock_do_ioctl+0x70/0x220 [ 343.865631][T19259] sock_ioctl+0x41b/0x610 [ 343.865665][T19259] ? __pfx_sock_ioctl+0x10/0x10 [ 343.865760][T19259] __se_sys_ioctl+0xce/0x140 [ 343.865782][T19259] __x64_sys_ioctl+0x43/0x50 [ 343.865840][T19259] x64_sys_call+0x1816/0x2ff0 [ 343.865865][T19259] do_syscall_64+0xd2/0x200 [ 343.865974][T19259] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 343.866068][T19259] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 343.866101][T19259] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 343.866126][T19259] RIP: 0033:0x7f2cb4d7eec9 [ 343.866184][T19259] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 343.866221][T19259] RSP: 002b:00007f2cb37e7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 343.866244][T19259] RAX: ffffffffffffffda RBX: 00007f2cb4fd5fa0 RCX: 00007f2cb4d7eec9 [ 343.866331][T19259] RDX: 0000200000005b80 RSI: 0000000000008916 RDI: 0000000000000003 [ 343.866346][T19259] RBP: 00007f2cb37e7090 R08: 0000000000000000 R09: 0000000000000000 [ 343.866360][T19259] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 343.866375][T19259] R13: 00007f2cb4fd6038 R14: 00007f2cb4fd5fa0 R15: 00007fff6021db18 [ 343.866412][T19259] [ 344.283728][T19275] random: crng reseeded on system resumption [ 344.403295][T19287] SELinux: policydb version 0 does not match my version range 15-35 [ 344.453602][T19287] SELinux: failed to load policy [ 344.568675][T19296] loop7: detected capacity change from 0 to 128 [ 344.581463][T19296] FAT-fs (loop7): bogus sectors per cluster 0 [ 344.587638][T19296] FAT-fs (loop7): Can't find a valid FAT filesystem [ 344.621506][T19298] random: crng reseeded on system resumption [ 344.657054][T19301] loop7: detected capacity change from 0 to 512 [ 344.682388][T19301] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c01c, mo2=0002] [ 344.700003][T19301] System zones: 0-2, 18-18, 34-35 [ 344.844531][T19301] EXT4-fs mount: 27 callbacks suppressed [ 344.844551][T19301] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 344.866048][T19301] ext4 filesystem being mounted at /234/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 344.883490][T19301] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 344.904189][T19309] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=19309 comm=syz.8.4418 [ 344.916804][T19309] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=19309 comm=syz.8.4418 [ 345.202328][T19328] SELinux: policydb version 0 does not match my version range 15-35 [ 345.222044][T19328] SELinux: failed to load policy [ 345.343941][T19335] loop1: detected capacity change from 0 to 128 [ 345.351187][T19335] FAT-fs (loop1): bogus sectors per cluster 0 [ 345.357314][T19335] FAT-fs (loop1): Can't find a valid FAT filesystem [ 345.469733][T19344] loop9: detected capacity change from 0 to 512 [ 345.483437][T19345] loop1: detected capacity change from 0 to 128 [ 345.490394][T19345] ext4: Unknown parameter 'noacl' [ 345.512508][T19344] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c01c, mo2=0002] [ 345.520715][T19344] System zones: 0-2, 18-18, 34-35 [ 345.526837][T19344] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 345.539559][T19344] ext4 filesystem being mounted at /20/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 345.568722][T19343] loop7: detected capacity change from 0 to 1024 [ 345.575987][T19343] EXT4-fs: Ignoring removed orlov option [ 345.592891][T19343] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 345.646850][T18715] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 345.664887][T15313] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 345.724307][T19353] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=19353 comm=syz.8.4434 [ 345.737000][T19353] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=19353 comm=syz.8.4434 [ 345.949102][T19369] loop1: detected capacity change from 0 to 128 [ 345.958054][T19368] loop8: detected capacity change from 0 to 512 [ 345.965832][T19369] FAT-fs (loop1): bogus sectors per cluster 0 [ 345.972005][T19369] FAT-fs (loop1): Can't find a valid FAT filesystem [ 345.983665][T19368] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 346.011514][T19368] ext4 filesystem being mounted at /78/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 346.107709][ C0] ================================================================== [ 346.115853][ C0] BUG: KCSAN: data-race in can_rcv_filter / can_rcv_filter [ 346.123073][ C0] [ 346.125414][ C0] read-write to 0xffff8881014626a8 of 8 bytes by interrupt on cpu 1: [ 346.133494][ C0] can_rcv_filter+0xd9/0x4f0 [ 346.138109][ C0] can_receive+0x163/0x1c0 [ 346.142536][ C0] canfd_rcv+0xed/0x190 [ 346.146713][ C0] __netif_receive_skb+0x120/0x270 [ 346.151851][ C0] process_backlog+0x229/0x420 [ 346.156647][ C0] __napi_poll+0x66/0x310 [ 346.161007][ C0] net_rx_action+0x391/0x830 [ 346.165631][ C0] handle_softirqs+0xb7/0x290 [ 346.170333][ C0] do_softirq+0x5d/0x90 [ 346.174517][ C0] __local_bh_enable_ip+0x70/0x80 [ 346.179564][ C0] _raw_write_unlock_bh+0x1f/0x30 [ 346.184616][ C0] pfkey_release+0x178/0x230 [ 346.189230][ C0] sock_close+0x68/0x150 [ 346.193503][ C0] __fput+0x29b/0x650 [ 346.197524][ C0] ____fput+0x1c/0x30 [ 346.201538][ C0] task_work_run+0x131/0x1a0 [ 346.206154][ C0] exit_to_user_mode_loop+0xe4/0x100 [ 346.211470][ C0] do_syscall_64+0x1d6/0x200 [ 346.216101][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 346.222022][ C0] [ 346.224357][ C0] read-write to 0xffff8881014626a8 of 8 bytes by interrupt on cpu 0: [ 346.232442][ C0] can_rcv_filter+0xd9/0x4f0 [ 346.237049][ C0] can_receive+0x163/0x1c0 [ 346.241485][ C0] canfd_rcv+0xed/0x190 [ 346.245664][ C0] __netif_receive_skb+0x120/0x270 [ 346.250809][ C0] process_backlog+0x229/0x420 [ 346.255623][ C0] __napi_poll+0x66/0x310 [ 346.259978][ C0] net_rx_action+0x391/0x830 [ 346.264593][ C0] handle_softirqs+0xb7/0x290 [ 346.269294][ C0] __irq_exit_rcu+0x3a/0xc0 [ 346.273808][ C0] sysvec_irq_work+0x6b/0x80 [ 346.278422][ C0] asm_sysvec_irq_work+0x1a/0x20 [ 346.283377][ C0] native_apic_msr_write+0x3d/0x60 [ 346.288533][ C0] x2apic_send_IPI_self+0x10/0x20 [ 346.293590][ C0] arch_irq_work_raise+0x46/0x50 [ 346.298548][ C0] __irq_work_queue_local+0x10f/0x2c0 [ 346.303949][ C0] irq_work_queue+0x70/0x100 [ 346.308566][ C0] bpf_send_signal_common+0x280/0x300 [ 346.313972][ C0] bpf_send_signal+0x1d/0x30 [ 346.318582][ C0] bpf_prog_631417f49dd64198+0x25/0x4c [ 346.324060][ C0] bpf_trace_run2+0x107/0x1c0 [ 346.328756][ C0] __traceiter_kfree+0x2e/0x50 [ 346.333539][ C0] kfree+0x27b/0x320 [ 346.337459][ C0] ___sys_recvmsg+0x135/0x370 [ 346.342162][ C0] do_recvmmsg+0x1ef/0x540 [ 346.346609][ C0] __x64_sys_recvmmsg+0xe5/0x170 [ 346.351575][ C0] x64_sys_call+0x27a6/0x2ff0 [ 346.356301][ C0] do_syscall_64+0xd2/0x200 [ 346.360850][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 346.366770][ C0] [ 346.369104][ C0] value changed: 0x000000000004ddc8 -> 0x000000000004ddc9 [ 346.376220][ C0] [ 346.378559][ C0] Reported by Kernel Concurrency Sanitizer on: [ 346.384720][ C0] CPU: 0 UID: 0 PID: 19336 Comm: syz.0.4427 Not tainted syzkaller #0 PREEMPT(voluntary) [ 346.394548][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 346.404625][ C0] ================================================================== [ 346.457818][ C1] ================================================================== [ 346.465948][ C1] BUG: KCSAN: data-race in can_can_gw_rcv / can_can_gw_rcv [ 346.473191][ C1] [ 346.475524][ C1] read-write to 0xffff88810a474020 of 4 bytes by interrupt on cpu 0: [ 346.483601][ C1] can_can_gw_rcv+0x807/0x820 [ 346.488310][ C1] can_rcv_filter+0xc4/0x4f0 [ 346.492920][ C1] can_receive+0x163/0x1c0 [ 346.497361][ C1] canfd_rcv+0xed/0x190 [ 346.501536][ C1] __netif_receive_skb+0x120/0x270 [ 346.506680][ C1] process_backlog+0x229/0x420 [ 346.511480][ C1] __napi_poll+0x66/0x310 [ 346.515837][ C1] net_rx_action+0x391/0x830 [ 346.520456][ C1] handle_softirqs+0xb7/0x290 [ 346.525158][ C1] __irq_exit_rcu+0x3a/0xc0 [ 346.529694][ C1] sysvec_irq_work+0x6b/0x80 [ 346.534305][ C1] asm_sysvec_irq_work+0x1a/0x20 [ 346.539267][ C1] native_apic_msr_write+0x3d/0x60 [ 346.544408][ C1] x2apic_send_IPI_self+0x10/0x20 [ 346.549466][ C1] arch_irq_work_raise+0x46/0x50 [ 346.554425][ C1] __irq_work_queue_local+0x10f/0x2c0 [ 346.559830][ C1] irq_work_queue+0x70/0x100 [ 346.564444][ C1] bpf_send_signal_common+0x280/0x300 [ 346.569848][ C1] bpf_send_signal+0x1d/0x30 [ 346.574454][ C1] bpf_prog_631417f49dd64198+0x25/0x4c [ 346.579953][ C1] bpf_trace_run2+0x107/0x1c0 [ 346.584657][ C1] __traceiter_kfree+0x2e/0x50 [ 346.589439][ C1] kfree+0x27b/0x320 [ 346.593359][ C1] ___sys_recvmsg+0x135/0x370 [ 346.598058][ C1] do_recvmmsg+0x1ef/0x540 [ 346.602506][ C1] __x64_sys_recvmmsg+0xe5/0x170 [ 346.607467][ C1] x64_sys_call+0x27a6/0x2ff0 [ 346.612166][ C1] do_syscall_64+0xd2/0x200 [ 346.616704][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 346.622613][ C1] [ 346.624947][ C1] read-write to 0xffff88810a474020 of 4 bytes by interrupt on cpu 1: [ 346.633025][ C1] can_can_gw_rcv+0x807/0x820 [ 346.637733][ C1] can_rcv_filter+0xc4/0x4f0 [ 346.642345][ C1] can_receive+0x163/0x1c0 [ 346.646782][ C1] canfd_rcv+0xed/0x190 [ 346.650953][ C1] __netif_receive_skb+0x120/0x270 [ 346.656090][ C1] process_backlog+0x229/0x420 [ 346.660897][ C1] __napi_poll+0x66/0x310 [ 346.665255][ C1] net_rx_action+0x391/0x830 [ 346.669876][ C1] handle_softirqs+0xb7/0x290 [ 346.674587][ C1] __irq_exit_rcu+0x3a/0xc0 [ 346.679119][ C1] sysvec_irq_work+0x6b/0x80 [ 346.683727][ C1] asm_sysvec_irq_work+0x1a/0x20 [ 346.688680][ C1] native_apic_msr_write+0x3d/0x60 [ 346.693823][ C1] x2apic_send_IPI_self+0x10/0x20 [ 346.698880][ C1] arch_irq_work_raise+0x46/0x50 [ 346.703839][ C1] __irq_work_queue_local+0x10f/0x2c0 [ 346.709250][ C1] irq_work_queue+0x70/0x100 [ 346.713866][ C1] bpf_send_signal_common+0x280/0x300 [ 346.719268][ C1] bpf_send_signal+0x1d/0x30 [ 346.723871][ C1] bpf_prog_631417f49dd64198+0x25/0x4c [ 346.729348][ C1] bpf_trace_run2+0x107/0x1c0 [ 346.734050][ C1] __traceiter_kfree+0x2e/0x50 [ 346.738836][ C1] kfree+0x27b/0x320 [ 346.742760][ C1] vfs_writev+0x73c/0x8b0 [ 346.747123][ C1] do_writev+0xe7/0x210 [ 346.751318][ C1] __x64_sys_writev+0x45/0x50 [ 346.756022][ C1] x64_sys_call+0x1e9a/0x2ff0 [ 346.760717][ C1] do_syscall_64+0xd2/0x200 [ 346.765248][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 346.771168][ C1] [ 346.773499][ C1] value changed: 0x00054e0c -> 0x00054e0d [ 346.779225][ C1] [ 346.781556][ C1] Reported by Kernel Concurrency Sanitizer on: [ 346.787720][ C1] CPU: 1 UID: 101 PID: 3028 Comm: dhcpcd Not tainted syzkaller #0 PREEMPT(voluntary) [ 346.797277][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 346.807349][ C1] ================================================================== [ 349.123896][ C0] ================================================================== [ 349.132035][ C0] BUG: KCSAN: data-race in can_rcv_filter / can_rcv_filter [ 349.139295][ C0] [ 349.141627][ C0] read-write to 0xffff8881014626a8 of 8 bytes by interrupt on cpu 1: [ 349.149717][ C0] can_rcv_filter+0xd9/0x4f0 [ 349.154330][ C0] can_receive+0x163/0x1c0 [ 349.158764][ C0] canfd_rcv+0xed/0x190 [ 349.162969][ C0] __netif_receive_skb+0x120/0x270 [ 349.168109][ C0] process_backlog+0x229/0x420 [ 349.172909][ C0] __napi_poll+0x66/0x310 [ 349.177266][ C0] net_rx_action+0x391/0x830 [ 349.181891][ C0] handle_softirqs+0xb7/0x290 [ 349.186596][ C0] do_softirq+0x5d/0x90 [ 349.190773][ C0] __local_bh_enable_ip+0x70/0x80 [ 349.195819][ C0] _raw_spin_unlock_bh+0x36/0x40 [ 349.200916][ C0] nsim_dev_trap_report_work+0x52b/0x630 [ 349.206569][ C0] process_scheduled_works+0x4ce/0x9d0 [ 349.212069][ C0] worker_thread+0x582/0x770 [ 349.216706][ C0] kthread+0x486/0x510 [ 349.220804][ C0] ret_from_fork+0x11f/0x1b0 [ 349.225417][ C0] ret_from_fork_asm+0x1a/0x30 [ 349.230209][ C0] [ 349.232543][ C0] read-write to 0xffff8881014626a8 of 8 bytes by interrupt on cpu 0: [ 349.240620][ C0] can_rcv_filter+0xd9/0x4f0 [ 349.245227][ C0] can_receive+0x163/0x1c0 [ 349.249661][ C0] canfd_rcv+0xed/0x190 [ 349.253836][ C0] __netif_receive_skb+0x120/0x270 [ 349.258983][ C0] process_backlog+0x229/0x420 [ 349.263966][ C0] __napi_poll+0x66/0x310 [ 349.268317][ C0] net_rx_action+0x391/0x830 [ 349.272945][ C0] handle_softirqs+0xb7/0x290 [ 349.277639][ C0] __irq_exit_rcu+0x3a/0xc0 [ 349.282219][ C0] sysvec_apic_timer_interrupt+0x74/0x80 [ 349.287881][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 349.293883][ C0] kcsan_setup_watchpoint+0x415/0x430 [ 349.299285][ C0] bpf_trace_run2+0x114/0x1c0 [ 349.303984][ C0] __traceiter_kfree+0x2e/0x50 [ 349.308775][ C0] kfree+0x27b/0x320 [ 349.312698][ C0] ___sys_recvmsg+0x135/0x370 [ 349.317402][ C0] do_recvmmsg+0x1ef/0x540 [ 349.321846][ C0] __x64_sys_recvmmsg+0xe5/0x170 [ 349.326812][ C0] x64_sys_call+0x27a6/0x2ff0 [ 349.331513][ C0] do_syscall_64+0xd2/0x200 [ 349.336095][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 349.342028][ C0] [ 349.342464][ T29] kauditd_printk_skb: 62 callbacks suppressed [ 349.342484][ T29] audit: type=1326 audit(1759106214.131:89069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19366 comm="syz.8.4439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87444feec9 code=0x7ffc0000 [ 349.344387][ C0] value changed: 0x00000000000a41c7 -> 0x00000000000a41c8 [ 349.344403][ C0] [ 349.344408][ C0] Reported by Kernel Concurrency Sanitizer on: [ 349.344423][ C0] CPU: 0 UID: 0 PID: 19336 Comm: syz.0.4427 Not tainted syzkaller #0 PREEMPT(voluntary) [ 349.344459][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 349.344476][ C0] ================================================================== [ 349.424618][ T29] audit: type=1326 audit(1759106214.131:89070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19366 comm="syz.8.4439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87444feec9 code=0x7ffc0000 [ 349.449091][ T29] audit: type=1326 audit(1759106214.311:89071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19366 comm="syz.8.4439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f87444feec9 code=0x7ffc0000 [ 349.473661][ T29] audit: type=1326 audit(1759106214.311:89072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19366 comm="syz.8.4439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87444feec9 code=0x7ffc0000 [ 349.498174][ T29] audit: type=1326 audit(1759106214.311:89073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19366 comm="syz.8.4439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87444feec9 code=0x7ffc0000 [ 349.522707][ T29] audit: type=1326 audit(1759106214.311:89074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19366 comm="syz.8.4439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=327 compat=0 ip=0x7f87444feec9 code=0x7ffc0000 [ 349.547229][ T29] audit: type=1326 audit(1759106214.311:89075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19366 comm="syz.8.4439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87444feec9 code=0x7ffc0000 [ 349.571850][ T29] audit: type=1326 audit(1759106214.311:89076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19366 comm="syz.8.4439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87444feec9 code=0x7ffc0000 [ 349.617662][ C0] ================================================================== [ 349.625807][ C0] BUG: KCSAN: data-race in can_can_gw_rcv / can_can_gw_rcv [ 349.633065][ C0] [ 349.635401][ C0] read-write to 0xffff88810a474020 of 4 bytes by interrupt on cpu 1: [ 349.643487][ C0] can_can_gw_rcv+0x807/0x820 [ 349.648200][ C0] can_rcv_filter+0xc4/0x4f0 [ 349.652825][ C0] can_receive+0x163/0x1c0 [ 349.657294][ C0] canfd_rcv+0xed/0x190 [ 349.661466][ C0] __netif_receive_skb+0x120/0x270 [ 349.666606][ C0] process_backlog+0x229/0x420 [ 349.671407][ C0] __napi_poll+0x66/0x310 [ 349.675762][ C0] net_rx_action+0x391/0x830 [ 349.680390][ C0] handle_softirqs+0xb7/0x290 [ 349.685094][ C0] do_softirq+0x5d/0x90 [ 349.689272][ C0] __local_bh_enable_ip+0x70/0x80 [ 349.694325][ C0] wg_timers_any_authenticated_packet_traversal+0xdd/0x100 [ 349.701564][ C0] wg_packet_tx_worker+0xeb/0x330 [ 349.706608][ C0] process_scheduled_works+0x4ce/0x9d0 [ 349.712102][ C0] worker_thread+0x582/0x770 [ 349.716730][ C0] kthread+0x486/0x510 [ 349.720820][ C0] ret_from_fork+0x11f/0x1b0 [ 349.725435][ C0] ret_from_fork_asm+0x1a/0x30 [ 349.730227][ C0] [ 349.732571][ C0] read-write to 0xffff88810a474020 of 4 bytes by interrupt on cpu 0: [ 349.740649][ C0] can_can_gw_rcv+0x807/0x820 [ 349.745395][ C0] can_rcv_filter+0xc4/0x4f0 [ 349.750005][ C0] can_receive+0x163/0x1c0 [ 349.754449][ C0] canfd_rcv+0xed/0x190 [ 349.758625][ C0] __netif_receive_skb+0x120/0x270 [ 349.763765][ C0] process_backlog+0x229/0x420 [ 349.768565][ C0] __napi_poll+0x66/0x310 [ 349.772925][ C0] net_rx_action+0x391/0x830 [ 349.777551][ C0] handle_softirqs+0xb7/0x290 [ 349.782250][ C0] __irq_exit_rcu+0x3a/0xc0 [ 349.786774][ C0] sysvec_apic_timer_interrupt+0x74/0x80 [ 349.792440][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 349.798443][ C0] __tsan_read_write8+0x14d/0x190 [ 349.803494][ C0] __import_iovec+0x321/0x540 [ 349.808213][ C0] import_iovec+0x61/0x80 [ 349.812580][ C0] ___sys_recvmsg+0x358/0x370 [ 349.817284][ C0] do_recvmmsg+0x1ef/0x540 [ 349.821724][ C0] __x64_sys_recvmmsg+0xe5/0x170 [ 349.826709][ C0] x64_sys_call+0x27a6/0x2ff0 [ 349.831407][ C0] do_syscall_64+0xd2/0x200 [ 349.835947][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 349.841974][ C0] [ 349.844313][ C0] value changed: 0x000aa2b1 -> 0x000aa2b2 [ 349.850132][ C0] [ 349.852469][ C0] Reported by Kernel Concurrency Sanitizer on: [ 349.858671][ C0] CPU: 0 UID: 0 PID: 19336 Comm: syz.0.4427 Not tainted syzkaller #0 PREEMPT(voluntary) [ 349.868510][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 349.878602][ C0] ================================================================== [ 350.672040][T19391] random: crng reseeded on system resumption [ 351.292337][T17503] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 352.145061][ C0] ================================================================== [ 352.153232][ C0] BUG: KCSAN: data-race in can_rcv_filter / can_rcv_filter [ 352.160643][ C0] [ 352.162981][ C0] read-write to 0xffff8881014626a8 of 8 bytes by interrupt on cpu 1: [ 352.171072][ C0] can_rcv_filter+0xd9/0x4f0 [ 352.175701][ C0] can_receive+0x163/0x1c0 [ 352.180150][ C0] canfd_rcv+0xed/0x190 [ 352.184328][ C0] __netif_receive_skb+0x120/0x270 [ 352.189474][ C0] process_backlog+0x229/0x420 [ 352.194270][ C0] __napi_poll+0x66/0x310 [ 352.198633][ C0] net_rx_action+0x391/0x830 [ 352.203256][ C0] handle_softirqs+0xb7/0x290 [ 352.207957][ C0] do_softirq+0x5d/0x90 [ 352.212132][ C0] __local_bh_enable_ip+0x70/0x80 [ 352.217178][ C0] _raw_spin_unlock_bh+0x36/0x40 [ 352.222139][ C0] nsim_dev_trap_report_work+0x52b/0x630 [ 352.227799][ C0] process_scheduled_works+0x4ce/0x9d0 [ 352.233380][ C0] worker_thread+0x582/0x770 [ 352.238025][ C0] kthread+0x486/0x510 [ 352.242132][ C0] ret_from_fork+0x11f/0x1b0 [ 352.246747][ C0] ret_from_fork_asm+0x1a/0x30 [ 352.251536][ C0] [ 352.253867][ C0] read-write to 0xffff8881014626a8 of 8 bytes by interrupt on cpu 0: [ 352.261950][ C0] can_rcv_filter+0xd9/0x4f0 [ 352.266564][ C0] can_receive+0x163/0x1c0 [ 352.271003][ C0] canfd_rcv+0xed/0x190 [ 352.275178][ C0] __netif_receive_skb+0x120/0x270 [ 352.280310][ C0] process_backlog+0x229/0x420 [ 352.285099][ C0] __napi_poll+0x66/0x310 [ 352.289456][ C0] net_rx_action+0x391/0x830 [ 352.294092][ C0] handle_softirqs+0xb7/0x290 [ 352.298880][ C0] do_softirq+0x5d/0x90 [ 352.303053][ C0] __local_bh_enable_ip+0x70/0x80 [ 352.308102][ C0] _raw_spin_unlock_bh+0x36/0x40 [ 352.313059][ C0] batadv_nc_purge_paths+0x22b/0x270 [ 352.318367][ C0] batadv_nc_worker+0x3d8/0xae0 [ 352.323235][ C0] process_scheduled_works+0x4ce/0x9d0 [ 352.328735][ C0] worker_thread+0x582/0x770 [ 352.333386][ C0] kthread+0x486/0x510 [ 352.337474][ C0] ret_from_fork+0x11f/0x1b0 [ 352.342091][ C0] ret_from_fork_asm+0x1a/0x30 [ 352.346895][ C0] [ 352.349227][ C0] value changed: 0x00000000000f523e -> 0x00000000000f523f [ 352.356522][ C0] [ 352.358862][ C0] Reported by Kernel Concurrency Sanitizer on: [ 352.365024][ C0] CPU: 0 UID: 0 PID: 4415 Comm: kworker/u8:15 Not tainted syzkaller #0 PREEMPT(voluntary) [ 352.375050][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 352.385128][ C0] Workqueue: bat_events batadv_nc_worker [ 352.390795][ C0] ================================================================== [ 352.648237][ C1] ================================================================== [ 352.656410][ C1] BUG: KCSAN: data-race in can_can_gw_rcv / can_can_gw_rcv [ 352.663648][ C1] [ 352.665985][ C1] read-write to 0xffff88810a474020 of 4 bytes by interrupt on cpu 0: [ 352.674064][ C1] can_can_gw_rcv+0x807/0x820 [ 352.678765][ C1] can_rcv_filter+0xc4/0x4f0 [ 352.683406][ C1] can_receive+0x163/0x1c0 [ 352.687856][ C1] canfd_rcv+0xed/0x190 [ 352.692030][ C1] __netif_receive_skb+0x120/0x270 [ 352.697167][ C1] process_backlog+0x229/0x420 [ 352.701962][ C1] __napi_poll+0x66/0x310 [ 352.706323][ C1] net_rx_action+0x391/0x830 [ 352.710944][ C1] handle_softirqs+0xb7/0x290 [ 352.715665][ C1] run_ksoftirqd+0x1c/0x30 [ 352.720113][ C1] smpboot_thread_fn+0x328/0x530 [ 352.725094][ C1] kthread+0x486/0x510 [ 352.729183][ C1] ret_from_fork+0x11f/0x1b0 [ 352.733805][ C1] ret_from_fork_asm+0x1a/0x30 [ 352.738598][ C1] [ 352.740934][ C1] read-write to 0xffff88810a474020 of 4 bytes by interrupt on cpu 1: [ 352.749013][ C1] can_can_gw_rcv+0x807/0x820 [ 352.753720][ C1] can_rcv_filter+0xc4/0x4f0 [ 352.758337][ C1] can_receive+0x163/0x1c0 [ 352.762774][ C1] canfd_rcv+0xed/0x190 [ 352.766954][ C1] __netif_receive_skb+0x120/0x270 [ 352.772095][ C1] process_backlog+0x229/0x420 [ 352.776896][ C1] __napi_poll+0x66/0x310 [ 352.781253][ C1] net_rx_action+0x391/0x830 [ 352.785885][ C1] handle_softirqs+0xb7/0x290 [ 352.790585][ C1] run_ksoftirqd+0x1c/0x30 [ 352.795026][ C1] smpboot_thread_fn+0x328/0x530 [ 352.799991][ C1] kthread+0x486/0x510 [ 352.804071][ C1] ret_from_fork+0x11f/0x1b0 [ 352.808677][ C1] ret_from_fork_asm+0x1a/0x30 [ 352.813509][ C1] [ 352.815844][ C1] value changed: 0x0010087f -> 0x00100880 [ 352.821585][ C1] [ 352.823936][ C1] Reported by Kernel Concurrency Sanitizer on: [ 352.830098][ C1] CPU: 1 UID: 0 PID: 22 Comm: ksoftirqd/1 Not tainted syzkaller #0 PREEMPT(voluntary) [ 352.839747][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 352.849840][ C1] ================================================================== [ 355.156984][ C1] ================================================================== [ 355.165126][ C1] BUG: KCSAN: data-race in can_rcv_filter / can_rcv_filter [ 355.172354][ C1] [ 355.174690][ C1] read-write to 0xffff8881014626a8 of 8 bytes by interrupt on cpu 0: [ 355.182855][ C1] can_rcv_filter+0xd9/0x4f0 [ 355.187473][ C1] can_receive+0x163/0x1c0 [ 355.191905][ C1] canfd_rcv+0xed/0x190 [ 355.196080][ C1] __netif_receive_skb+0x120/0x270 [ 355.201227][ C1] process_backlog+0x229/0x420 [ 355.206028][ C1] __napi_poll+0x66/0x310 [ 355.210405][ C1] net_rx_action+0x391/0x830 [ 355.215030][ C1] handle_softirqs+0xb7/0x290 [ 355.219732][ C1] do_softirq+0x5d/0x90 [ 355.223912][ C1] __local_bh_enable_ip+0x70/0x80 [ 355.228957][ C1] _raw_spin_unlock_bh+0x36/0x40 [ 355.234003][ C1] nsim_dev_trap_report_work+0x52b/0x630 [ 355.239666][ C1] process_scheduled_works+0x4ce/0x9d0 [ 355.245161][ C1] worker_thread+0x582/0x770 [ 355.249790][ C1] kthread+0x486/0x510 [ 355.253878][ C1] ret_from_fork+0x11f/0x1b0 [ 355.258493][ C1] ret_from_fork_asm+0x1a/0x30 [ 355.263277][ C1] [ 355.265615][ C1] read-write to 0xffff8881014626a8 of 8 bytes by interrupt on cpu 1: [ 355.273691][ C1] can_rcv_filter+0xd9/0x4f0 [ 355.278305][ C1] can_receive+0x163/0x1c0 [ 355.282746][ C1] canfd_rcv+0xed/0x190 [ 355.286914][ C1] __netif_receive_skb+0x120/0x270 [ 355.292057][ C1] process_backlog+0x229/0x420 [ 355.296865][ C1] __napi_poll+0x66/0x310 [ 355.301241][ C1] net_rx_action+0x391/0x830 [ 355.305887][ C1] handle_softirqs+0xb7/0x290 [ 355.310582][ C1] do_softirq+0x5d/0x90 [ 355.314756][ C1] __local_bh_enable_ip+0x70/0x80 [ 355.319799][ C1] _raw_spin_unlock_bh+0x36/0x40 [ 355.324768][ C1] batadv_tt_local_purge+0x1a8/0x1f0 [ 355.330075][ C1] batadv_tt_purge+0x2b/0x610 [ 355.334780][ C1] process_scheduled_works+0x4ce/0x9d0 [ 355.340272][ C1] worker_thread+0x582/0x770 [ 355.344894][ C1] kthread+0x486/0x510 [ 355.348987][ C1] ret_from_fork+0x11f/0x1b0 [ 355.353609][ C1] ret_from_fork_asm+0x1a/0x30 [ 355.358426][ C1] [ 355.360766][ C1] value changed: 0x0000000000150f0f -> 0x0000000000150f11 [ 355.367998][ C1] [ 355.370345][ C1] Reported by Kernel Concurrency Sanitizer on: [ 355.376513][ C1] CPU: 1 UID: 0 PID: 4413 Comm: kworker/u8:14 Not tainted syzkaller #0 PREEMPT(voluntary) [ 355.386523][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 355.396595][ C1] Workqueue: bat_events batadv_tt_purge [ 355.402176][ C1] ================================================================== [ 355.653511][ C1] ================================================================== [ 355.661665][ C1] BUG: KCSAN: data-race in can_can_gw_rcv / can_can_gw_rcv [ 355.668931][ C1] [ 355.671264][ C1] read-write to 0xffff88810a474020 of 4 bytes by interrupt on cpu 0: [ 355.679350][ C1] can_can_gw_rcv+0x807/0x820 [ 355.684058][ C1] can_rcv_filter+0xc4/0x4f0 [ 355.688668][ C1] can_receive+0x163/0x1c0 [ 355.693097][ C1] canfd_rcv+0xed/0x190 [ 355.697294][ C1] __netif_receive_skb+0x120/0x270 [ 355.702437][ C1] process_backlog+0x229/0x420 [ 355.707225][ C1] __napi_poll+0x66/0x310 [ 355.711588][ C1] net_rx_action+0x391/0x830 [ 355.716211][ C1] handle_softirqs+0xb7/0x290 [ 355.720907][ C1] do_softirq+0x5d/0x90 [ 355.725111][ C1] __local_bh_enable_ip+0x70/0x80 [ 355.730169][ C1] _raw_spin_unlock_bh+0x36/0x40 [ 355.735125][ C1] nsim_dev_trap_report_work+0x52b/0x630 [ 355.740782][ C1] process_scheduled_works+0x4ce/0x9d0 [ 355.746283][ C1] worker_thread+0x582/0x770 [ 355.750913][ C1] kthread+0x486/0x510 [ 355.755009][ C1] ret_from_fork+0x11f/0x1b0 [ 355.759622][ C1] ret_from_fork_asm+0x1a/0x30 [ 355.764413][ C1] [ 355.766752][ C1] read-write to 0xffff88810a474020 of 4 bytes by interrupt on cpu 1: [ 355.774835][ C1] can_can_gw_rcv+0x807/0x820 [ 355.779554][ C1] can_rcv_filter+0xc4/0x4f0 [ 355.784166][ C1] can_receive+0x163/0x1c0 [ 355.788602][ C1] canfd_rcv+0xed/0x190 [ 355.792782][ C1] __netif_receive_skb+0x120/0x270 [ 355.797920][ C1] process_backlog+0x229/0x420 [ 355.802718][ C1] __napi_poll+0x66/0x310 [ 355.807075][ C1] net_rx_action+0x391/0x830 [ 355.811696][ C1] handle_softirqs+0xb7/0x290 [ 355.816412][ C1] do_softirq+0x5d/0x90 [ 355.820610][ C1] __local_bh_enable_ip+0x70/0x80 [ 355.825658][ C1] _raw_spin_unlock_bh+0x36/0x40 [ 355.830628][ C1] batadv_tt_purge+0x2cd/0x610 [ 355.835418][ C1] process_scheduled_works+0x4ce/0x9d0 [ 355.840909][ C1] worker_thread+0x582/0x770 [ 355.845541][ C1] kthread+0x486/0x510 [ 355.849629][ C1] ret_from_fork+0x11f/0x1b0 [ 355.854240][ C1] ret_from_fork_asm+0x1a/0x30 [ 355.859025][ C1] [ 355.861356][ C1] value changed: 0x0015ce31 -> 0x0015ce33 [ 355.867089][ C1] [ 355.869422][ C1] Reported by Kernel Concurrency Sanitizer on: [ 355.875581][ C1] CPU: 1 UID: 0 PID: 4413 Comm: kworker/u8:14 Not tainted syzkaller #0 PREEMPT(voluntary) [ 355.885588][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 355.895659][ C1] Workqueue: bat_events batadv_tt_purge [ 355.901235][ C1] ==================================================================