last executing test programs: 5m21.273571556s ago: executing program 4 (id=638): pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r0, &(0x7f00000002c0)=ANY=[], 0x200002e6) fcntl$setpipe(r0, 0x407, 0x1) r1 = openat$full(0xffffffffffffff9c, &(0x7f00000004c0), 0x4100, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b000000000000000004ca148004d32aa2b01459e88300000000000400dd1d67ec", @ANYRES32=r1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xf, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000fdffff", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf01000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) open(&(0x7f0000000500)='./file0\x00', 0x400081, 0x18a) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="640000000206010800000000040000000000000014000780080011400000000005001500020000000500010006000000050005000a00000005000400000000000900020073797a320000000016000300686173683a6e65742c706f72742c6e6574"], 0x64}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001000ffff26bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="15170000bcb7040008000a00", @ANYRES32=r6, @ANYBLOB="140012800c0001006d6163767461700004000280080005"], 0x44}, 0x1, 0x0, 0x0, 0x240448d5}, 0x8000002) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYRES8=r5], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r7}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) r8 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x2000) ioctl$SG_GET_VERSION_NUM(r8, 0x2284, &(0x7f0000000080)) r9 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000003c0), 0x4) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000070000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, &(0x7f0000000a00)=0xe) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000040)='kfree\x00', r10}, 0x18) r11 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r11, &(0x7f0000005f40)=[{{&(0x7f0000000d00)={0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, &(0x7f0000003400)=ANY=[@ANYBLOB="20000000000000000000000007000000440cd1700000000700000e0f940401001400000000000000000600000200000002000000000000001100000000000000000000000100000009000000000000001400000000000000eaffffff0100000006000000000000001400000000000000000000000200000006"], 0x80}}, {{&(0x7f00000010c0)={0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, &(0x7f00000012c0)=ANY=[], 0x28}}], 0x2, 0x4000004) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="06000010060000000600000003000000230a0400", @ANYRES32=r2, @ANYRES64=0x0, @ANYRES64, @ANYRES32=r9, @ANYBLOB="00000000041300000100000000000000000000000007000000000000"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='scmi_xfer_response_wait\x00', r3}, 0x18) r12 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) recvmmsg(r12, &(0x7f00000004c0), 0xf02, 0xf0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x18, 0x7, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000e50003000000000085100000fcffffff250000001000000007000000faffffff95"], &(0x7f0000000140)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x4c, '\x00', r6, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400000a}, 0x94) unshare(0x80) 5m20.423490157s ago: executing program 4 (id=656): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010000000000800000400002e00000040", @ANYRES32=0x0, @ANYBLOB="00000000400000002400128009000100626f6e64000000001400028008000a000000000005001d"], 0x44}}, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="4808000010001fff3a4ee9bfd5c3a3696c40af0b", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e"], 0x3}}, 0x0) write$binfmt_misc(r3, &(0x7f0000000000), 0xfffffecc) splice(r2, 0x0, r4, 0x0, 0x4ffe2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000840), 0xffffffffffffffff) r7 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r7, 0x11b, 0x3, 0x0, 0x0) setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f0000000100)={0x0, 0x204000, 0x1000}, 0x20) r8 = socket$phonet(0x23, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r7, 0x11b, 0x6, &(0x7f0000000180)=0x10000, 0x4) setsockopt$XDP_UMEM_FILL_RING(r7, 0x11b, 0x5, &(0x7f0000000040)=0x4000, 0x4) bind$xdp(r7, &(0x7f00000002c0)={0x2c, 0x4, r9, 0x30, r7}, 0x10) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r5, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000000)={0x20, r6, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x8094}, 0x90) 5m19.55886181s ago: executing program 4 (id=669): r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x18) fstat(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000580)={{{@in=@empty, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@dev}}, &(0x7f0000000040)=0xe8) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file1\x00', 0x0, &(0x7f0000000140)={[], [{@appraise}, {@uid_lt={'uid<', r1}}, {@uid_gt={'uid>', r2}}, {@uid_eq={'uid', 0x3d, r1}}, {@appraise}]}, 0xfe, 0x250, &(0x7f0000000300)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_FIEMAP(r3, 0xc020660b, &(0x7f0000000200)=ANY=[]) 5m19.475004528s ago: executing program 4 (id=671): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3, 0x0, 0x1000000000000008}, 0x18) r4 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f00000001c0)='cpu&00\t&&') sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)=ANY=[@ANYRES32=r2, @ANYRESOCT=r3, @ANYBLOB="000000000000000008001b000000000010001a800c002d80080001e5d98b0ab164b26a9b8ea9027e510f7645680d250928448f63439d1ef1e71d47e7c6c461839b7335ffe6f34951e5648bd5197c9ca4a8a6b539ac2c9aa2722501fb10d72f7ad5dfb641c08635fa38de130a01b4d4c9566f8db78c6a7fd5875bea6428ddf0c6c87b91bbd99c48"], 0x38}, 0x1, 0x0, 0x0, 0xc0}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000140)={[{}, {@oldalloc}, {@resuid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@noquota}, {@jqfmt_vfsv1}]}, 0x3, 0x447, &(0x7f0000000380)="$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") r5 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x3, 0x1, 0x0, 0x0, 0x0, 0x8, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_bp={0x0}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x200003, 0x6, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x9) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000002c0)={'syztnl2\x00', &(0x7f0000000200)={'erspan0\x00', 0x0, 0x0, 0x1, 0x7, 0x6, {{0xb, 0x4, 0x0, 0x2, 0x2c, 0x66, 0x0, 0x9, 0x2f, 0x0, @multicast2, @rand_addr=0x64010101, {[@end, @generic={0x88, 0xf, "9a28a3c67e21de7a080ece9974"}, @end, @ra={0x94, 0x4}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000800)={'ip6gre0\x00', r7, 0x4, 0x8, 0xb, 0x8001, 0x44, @dev={0xfe, 0x80, '\x00', 0x3d}, @remote, 0x700, 0x700, 0x1, 0x7fffffff}}) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000940)={'syztnl2\x00', &(0x7f00000008c0)={'syztnl2\x00', r7, 0x4, 0x6, 0x8, 0x800, 0x9, @remote, @mcast2, 0x1, 0x40, 0x6, 0x5}}) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r8) keyctl$session_to_parent(0x12) open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r9, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000001a00)={0x1c, 0x1, 0x2, 0x801, 0x0, 0x0, {0x0, 0x0, 0x1}, [@CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x880}, 0x80) r10 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r10, 0x4c04, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fd0400000000000000c2542ded71038259ca171ce1ac08ef54ecef0e1e14ef3dc177e9b48b00", "f28359738e22924c66810000000000d31cf4965dbdb0aa530000000000000001", [0x200]}) r11 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x4e042, 0x0) pwritev2(r11, &(0x7f0000000100)=[{&(0x7f0000000000)="ff", 0x1}], 0x1, 0x5412, 0x0, 0x0) 5m19.001877103s ago: executing program 4 (id=677): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004802800018007000100637400001c0002800500030001000000080001400000001708000240000000080900010073797a30000000000900020073797a32001d0000140000001100010000000000000000000000000a"], 0x80}}, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000640)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x65, 0x0, 0x0, 0x3a, 0x0, @dev={0xac, 0x14, 0x14, 0x1f}, @multicast1}, {0x4e22, 0x4e21, 0x10, 0x0, @gue={{0x2, 0x0, 0x3, 0x0, 0x100}}}}}}}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x1b, &(0x7f00000000c0)={@remote={0xfe, 0x80, '\x00', 0xffffffffffffffff}}, 0x20) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r2, 0xffffffffffffffff, 0x0) 5m18.568633525s ago: executing program 4 (id=685): r0 = socket$nl_route(0x10, 0x3, 0x0) open(0x0, 0x14957e, 0x0) socket$inet_icmp(0x2, 0x2, 0x1) r1 = perf_event_open(0x0, 0x0, 0xe, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x220, 0xf0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x188, 0xffffffff, 0xffffffff, 0x188, 0xffffffff, 0x7fffffe, 0x0, {[{{@uncond, 0x6, 0xa8, 0xf0, 0x0, {}, [@common=@unspec=@time={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}, {{@ip={@local, @local, 0x0, 0x0, 'veth0_to_team\x00', 'veth1_virt_wifi\x00', {}, {}, 0x2f}, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE0={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x280) r3 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x2c6fcae84cb7adca}, 0x94) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000140)=ANY=[@ANYBLOB="e0000001ac1414aa0000"], 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x60}, 0x1, 0x7}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2e, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbf7}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001380)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000818110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000007c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x41, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='kfree\x00', r8}, 0x10) r9 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_msfilter(r9, 0x0, 0x29, 0x0, 0x57) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x2000, {0x0, 0x0, 0x74, r10, {0xfff1, 0x10}, {0x8, 0x4}, {0x6, 0x3}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x14004804}, 0x8804) fsetxattr$security_selinux(r6, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:mqueue_spool_t:s0\x00', 0x24, 0x2) 5m18.565469865s ago: executing program 32 (id=685): r0 = socket$nl_route(0x10, 0x3, 0x0) open(0x0, 0x14957e, 0x0) socket$inet_icmp(0x2, 0x2, 0x1) r1 = perf_event_open(0x0, 0x0, 0xe, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x220, 0xf0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x188, 0xffffffff, 0xffffffff, 0x188, 0xffffffff, 0x7fffffe, 0x0, {[{{@uncond, 0x6, 0xa8, 0xf0, 0x0, {}, [@common=@unspec=@time={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}, {{@ip={@local, @local, 0x0, 0x0, 'veth0_to_team\x00', 'veth1_virt_wifi\x00', {}, {}, 0x2f}, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE0={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x280) r3 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x2c6fcae84cb7adca}, 0x94) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000140)=ANY=[@ANYBLOB="e0000001ac1414aa0000"], 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x60}, 0x1, 0x7}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2e, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbf7}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001380)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000818110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000007c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x41, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='kfree\x00', r8}, 0x10) r9 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_msfilter(r9, 0x0, 0x29, 0x0, 0x57) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x2000, {0x0, 0x0, 0x74, r10, {0xfff1, 0x10}, {0x8, 0x4}, {0x6, 0x3}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x14004804}, 0x8804) fsetxattr$security_selinux(r6, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:mqueue_spool_t:s0\x00', 0x24, 0x2) 3m10.962281436s ago: executing program 1 (id=3133): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x66, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], 0x14b0}}, 0x0) 3m10.909728581s ago: executing program 1 (id=3128): mknod$loop(&(0x7f00000008c0)='./file0\x00', 0x1000, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x5, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffdfe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000000c0), 0x4) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, &(0x7f0000000000)) semtimedop(0x0, &(0x7f00000003c0), 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0xa, 0xfb, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f00000001c0)) 3m10.876166414s ago: executing program 1 (id=3130): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) ftruncate(r2, 0x2007ffb) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000005000000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r3}, &(0x7f0000000380), &(0x7f00000003c0)=r4}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4, 0x0, 0xfffffffffffffff2}, 0x18) sendfile(r2, r2, 0x0, 0x1000000201005) 3m6.696818934s ago: executing program 1 (id=3137): syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10, &(0x7f00000005c0), 0x1, 0x50d, &(0x7f0000000600)="$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") chdir(&(0x7f0000000000)='./file0\x00') ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000300)={@dev={0xfe, 0x80, '\x00', 0xa}, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3, 0x0, 0x0, 0x280, 0x8, 0x4d2005e}) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = msgget$private(0x0, 0x0) msgsnd(r1, 0x0, 0x2000, 0x0) r2 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$binfmt_aout(r2, &(0x7f00000000c0)=ANY=[], 0x20) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x12, r3, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) r7 = syz_clone(0x80, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r6, 0x0, 0x30, 0x90, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)=[0x5], 0x0, 0x0, 0x1, 0x1, r7}}, 0x40) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) poll(0x0, 0x0, 0x9) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x10010, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) mkdirat(0xffffffffffffff9c, 0x0, 0x408) 3m6.541923559s ago: executing program 1 (id=3191): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f00000001c0)='kfree\x00', r2}, 0x18) setsockopt(r0, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000280)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000080)=ANY=[@ANYRES32=r4], 0x9) 3m4.971326059s ago: executing program 1 (id=3226): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c10, &(0x7f0000000000)={[{@nodelalloc}, {@abort}]}, 0xff, 0x258, &(0x7f0000000780)="$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") r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x1b, 0x18, 0x0, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000400002000000000000000850000005000000085000000d000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1800403, &(0x7f0000000940), 0x2, 0x5ad, &(0x7f0000000180)="$eJzs3c1vVFUbAPDnzkwLpe9rKzEqLkyjIZAoLS1g8GMBe0LwY+fGSgtBho/QGi2aWBLcmBg3LkhcuRD/CyW6dWXiwoUbV4akGsNGY3TMnbkzDO1MOy0dbu39/ZLbOeeeOz3nQp85Z+49ZyaAwhpLf5Qi9kTE5SRipK2sElnhWOO4O7+/fzrdkqjVXv0tiSTb1zw+yR6Hsyf/PRLx/TdJ7C6vrHdu4er56Wp19kqWn5i/cHlibuHqgXMXps/Onp29OPXc1NEjh48cnTx4X+dXakufuP7WOyMfnXz9i8/+Sia//OlkEsfi1zONsvbz2CxjMRZ/1GofLN+f/rse3ezKclJu/Z3clSzfwZZVyWJkMCIei5Eot/1vjsSHL+faOKCvaklEDSioRPxDQTXHAc339r29Dy71eVQCPAhLx9OfAx3iv9K4NhijMRARe5c9r8MlvQ1J6/ju25PX0y36dB0O6Gzx2o4stTz+k3psjsbOem7XndI913nTEcCp7DHd/8oG6x9blhf/8OAsXouIxzuN/9eO/zfa4v/NDdYv/gEAAAAAAGDz3DoeEc92uv9Xyu7N7Yyn6vf/ksb9vx/urhA8tgn1r33/r3R7E6oBOlg6HvFSx/m/rTm+o+Us9//GbMDkzLnq7MGIeCgi9sfAjjQ/uUodBz7efaNbWfv8v3RL62/OBczacbuy497nzEzPT9/POQMNS9cinqh0n/+T9v9Je/+fSV8PLvdYx+69N091K1s7/oF+qX0esa9j/5+0jklW/3yOifp4YKI5Kljpyfc++apb/eIf8pP2/7tWj//RpP3zeubW9/sHI+LQQqXWrXyj4//B5LVy8/en3p2en78yGTGYnFi5f2p9bYbtqhkPzXhJ43//06tf/2uN/9vicCgiFnus89F/hn/uVqb/h/yk8T+zrv5//Ympm6Nfd6u/t/7/cL1P35/tcf0PVtdrgObdTgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4LypFxP8iKY230qXS+HjEcEQ8ErtK1Utz88+cufT2xZm0rP79/6XmN/2ONPJJ8/v/R9vyU8vyhyLi4Yj4tDxUz4+fvlSdyfvkAQAAAAAAAAAAAAAAAAAAYIsY7rL+P/VLOe/WAX1XyR7FOxRPJe8GALkR/1Bc4h+KS/xDcYl/KK4Nxr/bBbAN6P+hqAZ6O2xnv9sB5EH/DwAAAAAA28qtF5+/kUTE4gtD9S01mJW1bgwO5dU6oJ9KeTcAyI05vFBcpv5AcfU4+RfYxpJW6s9ap/Lus/+T/jQIAAAAAAAAAAAAAFhh355bP665/h/Ylqz/h+Ky/h+Ky/p/KC7v8YG1VvFb/w8AAAAAAAAAAAAA+ZtbuHp+ulqdvSIhsdUSAxGxBZqRQ2Iw//DM+YUJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABo+TcAAP//Swsk/Q==") sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000100001000000f5ffffffffffffff000a14000000060a0000000000000000000002"], 0x3c}}, 0x0) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f00000000c0)='nfs\x00', 0x400000000000000, &(0x7f0000000000)='\x06\x00\x00\x00\x04\xb0\xfe\x98\x9a!s\x91]\xab\xc9\xa2IV\xb6-\xd9z\x81\x91\x8aP}I\xc6\x0e\xd9\v\xda\xbfS\x16 \x04\r\xcd\xdb:\xd4\xaf\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\x02\x000xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000280)=r0}, 0x20) r3 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r2}, &(0x7f0000000340), &(0x7f00000003c0)=r3}, 0x20) syz_read_part_table(0x1053, &(0x7f0000001080)="$eJzsz8EJwlAQBND5MYkBPaQDtRR70H4C9uLBArxaik1YgPhREAtQD+9ddmGGhQ0/dk1K0iRllsdaPvI2mSe5ZVFb3fCWTetNDtsmGZJyWWZKcly90u45+5RxTJtzpvTZlVqvl/enb3wIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP/uHgAA//+AkQhu") 1m45.884060067s ago: executing program 2 (id=4588): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) iopl(0x3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x5, 0x0) umount2(&(0x7f00000002c0)='./file0/../file0\x00', 0x9) 1m45.815117424s ago: executing program 2 (id=4589): syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000800)='./file1\x00', 0x800, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x2, 0x6b9, &(0x7f0000000840)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000002001000001"], 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bc00551a000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x18) unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfdffa000) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r4, 0x11b, 0x3, &(0x7f0000000380)=0x20000, 0x4) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000100)={&(0x7f0000000000)=""/5, 0x204000, 0x1000}, 0x20) r5 = socket$phonet(0x23, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f0000000180)=0x10000, 0x4) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000000040)=0x4000, 0x4) bind$xdp(r4, &(0x7f00000002c0)={0x2c, 0x4, r6, 0x30, r4}, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='cpuset.effective_cpus\x00', 0x0, 0x0) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0) openat(r7, &(0x7f00000000c0)='./file0\x00', 0x6a1c2, 0x50) 1m45.505335084s ago: executing program 2 (id=4598): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_io_uring_setup(0x117, &(0x7f0000000100)={0x0, 0x4, 0x80, 0x2000000, 0x3a2}, &(0x7f00000001c0)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_OPENAT2={0x1c, 0x40, 0x0, 0xffffffffffffff9c, &(0x7f00000002c0)={0x200200, 0x10, 0x1}, &(0x7f0000000300)='./file0\x00', 0x18, 0x0, 0x12345}) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r1, 0x47f6, 0x80ffff, 0x0, 0x0, 0x0) r4 = syz_io_uring_setup(0x5c6, &(0x7f0000000140)={0x0, 0x80001021, 0x80, 0x6, 0x110}, &(0x7f0000000340)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x18, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x40, 0x1}) io_uring_enter(r4, 0x6e2, 0xc49, 0x1, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r8 = openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x0, 0x0) open_by_handle_at(r8, &(0x7f0000000240)=@reiserfs_2={0x8, 0x2, {0xb}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) socket(0x10, 0x3, 0x0) msgrcv(0x0, 0x0, 0x0, 0x2, 0x3800) msgsnd(0x0, &(0x7f0000000e00)={0x1, "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"}, 0xfee, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22, @empty}, 0x10) setsockopt$sock_int(r0, 0x1, 0x800000000f, &(0x7f0000000080)=0x7, 0x4) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r9, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) listen(r0, 0x3) bind$inet6(r9, &(0x7f0000000140)={0xa, 0x4e22, 0xfffffffe, @empty, 0x7}, 0x1c) listen(r9, 0x0) pipe2(&(0x7f00000006c0)={0xffffffffffffffff}, 0x0) close_range(r10, 0xffffffffffffffff, 0x0) getsockopt$TIPC_GROUP_JOIN(r10, 0x10f, 0x87, &(0x7f00000007c0), &(0x7f0000000800)=0x4) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) write$tun(r11, &(0x7f0000000280)={@val={0x0, 0x4305}, @val={0x1, 0x4, 0x1, 0x14, 0x620, 0x3}, @ipv4=@generic={{0x17, 0x4, 0x2, 0x0, 0x158, 0x66, 0x0, 0x5, 0x2e, 0x0, @remote, @private=0xa010102, {[@noop, @generic={0x82, 0x7, "eac3eeba75"}, @noop, @timestamp_prespec={0x44, 0x3c, 0xb8, 0x3, 0xd, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2}, {@empty}, {@broadcast, 0xc}, {@broadcast, 0x3}, {@local, 0x5}, {@private=0xa010102, 0x12}, {@private=0xa010100, 0xeebb}]}]}}, "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"}}, 0x166) 1m44.660071854s ago: executing program 2 (id=4612): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000640)={&(0x7f00000004c0)='kmem_cache_free\x00', r1, 0x0, 0x400000}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, @perf_config_ext={0x40000000000, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x12c7007, 0x0) sendto(0xffffffffffffffff, 0x0, 0x0, 0x8800, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) r3 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r2, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x1, 0x353a, 0x1}}, 0x20) r4 = dup(r3) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000040)='./file0\x00', r4}, 0x18) 1m44.549719725s ago: executing program 2 (id=4616): pipe(&(0x7f0000000080)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX]) writev(0xffffffffffffffff, &(0x7f0000000580)=[{0x0}], 0x1) r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x50, 0x2, 0x1, 0x3, 0x0, 0x0, {0xa, 0x0, 0x3}, [@CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8}]}, @CTA_TUPLE_REPLY={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x5}, 0x20008805) fchdir(r2) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) r4 = openat(0xffffffffffffff9c, &(0x7f0000000880)='./file0\x00', 0x0, 0x1a7) openat(r4, &(0x7f00000000c0)='.\x00', 0x515401, 0x408) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f}, 0x94) getpeername$packet(0xffffffffffffffff, &(0x7f0000000040), 0x0) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/pm_wakeup_irq', 0x0, 0x1a2) r7 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000002080)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffd98, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r9}, 0x10) ioctl$LOOP_CONFIGURE(r7, 0x4c0a, &(0x7f0000001600)={r6, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f00", [0x4, 0x40000000000000]}}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r5}, 0x0, &(0x7f0000000180)}, 0x20) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5334, &(0x7f0000000280)={0x9, 0x5, 0x0, 'queue0\x00', 0xfffffff8}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r10}, 0x18) syz_open_dev$usbfs(0x0, 0x204, 0x2) r11 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000300)={'bond0\x00'}) socket$netlink(0x10, 0x3, 0x0) 1m29.55440208s ago: executing program 34 (id=4616): pipe(&(0x7f0000000080)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX]) writev(0xffffffffffffffff, &(0x7f0000000580)=[{0x0}], 0x1) r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x50, 0x2, 0x1, 0x3, 0x0, 0x0, {0xa, 0x0, 0x3}, [@CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8}]}, @CTA_TUPLE_REPLY={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x5}, 0x20008805) fchdir(r2) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) r4 = openat(0xffffffffffffff9c, &(0x7f0000000880)='./file0\x00', 0x0, 0x1a7) openat(r4, &(0x7f00000000c0)='.\x00', 0x515401, 0x408) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f}, 0x94) getpeername$packet(0xffffffffffffffff, &(0x7f0000000040), 0x0) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/pm_wakeup_irq', 0x0, 0x1a2) r7 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000002080)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffd98, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r9}, 0x10) ioctl$LOOP_CONFIGURE(r7, 0x4c0a, &(0x7f0000001600)={r6, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f00", [0x4, 0x40000000000000]}}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r5}, 0x0, &(0x7f0000000180)}, 0x20) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5334, &(0x7f0000000280)={0x9, 0x5, 0x0, 'queue0\x00', 0xfffffff8}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r10}, 0x18) syz_open_dev$usbfs(0x0, 0x204, 0x2) r11 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000300)={'bond0\x00'}) socket$netlink(0x10, 0x3, 0x0) 49.798237854s ago: executing program 7 (id=5807): syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x5, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000073000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) umount2(&(0x7f0000000300)='./file0/../file0\x00', 0x3) 49.767636888s ago: executing program 7 (id=5809): bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffef0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x18) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, 0x0, 0x26}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1b, 0x3, &(0x7f0000000900)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, r1, 0xc, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94) add_key(&(0x7f0000001340)='id_resolver\x00', &(0x7f0000001380)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e22, 0xfffffffd, @empty}, 0x1c) recvmsg(0xffffffffffffffff, &(0x7f0000001300)={0x0, 0x0, &(0x7f00000002c0)}, 0x10000) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r2 = openat$selinux_checkreqprot(0xffffffffffffff9c, 0x0, 0x0, 0x0) unlinkat(r2, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082"], &(0x7f0000000740)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f00000017c0)='./file1\x00', 0x0, &(0x7f00000016c0)={[{@grpjquota}, {@bsdgroups}]}, 0x1, 0xb8e, &(0x7f0000001800)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(0x0, r2) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0xb, 0x100005, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', r6, 0xffffffffffffffff, 0x0, 0x2}, 0x50) 49.557781568s ago: executing program 7 (id=5816): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)={0x10, 0x29, 0x1, 0x0, 0x25dfdbfc}, 0x10}], 0x1, 0x0, 0x0, 0x1}, 0x0) 49.540031859s ago: executing program 7 (id=5817): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xeda}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000280)='kfree\x00', r1}, 0x18) r3 = syz_clone3(&(0x7f0000000080)={0x100001200, &(0x7f0000000040), 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_pidfd_open(r3, 0x0) r4 = getpid() r5 = socket$packet(0x11, 0x3, 0x300) r6 = epoll_create(0x3ff) kcmp$KCMP_EPOLL_TFD(r3, r4, 0x7, r5, &(0x7f0000000140)={r6, r2, 0x7}) sendmsg$nl_route_sched(r0, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000680)=@newtaction={0x180, 0x30, 0x216822a75a8bdd29, 0xffe4, 0x0, {}, [{0x16c, 0x1, [@m_connmark={0x50, 0x2, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0xd, 0x5, 0x0, 0x3}, 0x8}}]}, {0xfffffdd6}, {0xc}, {0xc}}}, @m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0xd4, 0x3, 0x0, 0x0, {{0x9}, {0x58, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0x0, 0x3, {0x2, 0xea3, 0x7}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x1d28}}, @TCA_GACT_PARMS={0x18, 0x2, {0xb66, 0xb3, 0x10000000, 0x34e, 0xffff}}, @TCA_GACT_PARMS={0x18, 0x2, {0x7ff, 0xd8, 0x0, 0x9, 0x100000e0}}]}, {0x52, 0x6, "a06b1d1931f3579c6d7c5159238a286074602c3726c701f3c0d5382de62a6e8c4fb714fcd674c66cd306a4f78d3d05530609c9b04b7483bd084d70df8e77e6fbd503917aa0a6c737cef0ed021b60"}, {0xc}, {0x1, 0x8, {0x2, 0x2}}}}]}]}, 0x180}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0xb4, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x8c, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x54, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_XOR={0x1c, 0x5, 0x0, 0x1, [@NFTA_DATA_VALUE={0x17, 0x1, "f3307250e3eee7af8996af1b5e9074fc4ba19c"}]}, @NFTA_BITWISE_MASK={0xc, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x8, 0x1, "6eee7e00"}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x128}}, 0x800) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000008c0)='./file0\x00', 0x1008490, &(0x7f0000000a40)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000a80)="$eJzs3c9vVFsdAPDvnXZoKQMFZaFGBRFFQ5j+ABqCC2GjMYTESFy5gNoOTdMZpum0SCuLsnRvIokr/RPcuTBh5cKdO925wYUJKnkv9CVvMS/3zqUd2g7te7Qd6Hw+ye2955xhvufMcM6Ze2B6AuhZZyNiNSKORMS9iBjO85P8iButI33cq5ePp9ZePp5Kotm8878kK0/zou3PpI7lzzkYET/7ccQvk61xG8src5PVamUhT48s1uZHGssrl2YLec74xNjE6LXLV8f3rK1nan968aPZWz//y5+/8fzvq9//dVqt0m+OZ2Xt7dhLraYXo9SW1x8Rt/YjWJf0539/+PCkve1LEXEu6//D0Ze9mwDAYdZsDkdzuD0NABx26f1/KZJCOV8LKEWhUC631vBOx1ChWm8sXhyuLz2YjmwN62QUC/dnq5XRfK3wZBSTND2WXW+kxzelL0fEqYj47cDRLF2eqlenu/nBBwB62LFN8//HA635HwA45Aa7XQEA4MCZ/wGg95j/AaD3fI7537cDAeCQcP8PAL3H/A8AvWfH+f/JwdQDADgQP719Oz2aa/nvv55+uLz0g9LDS9OVxly5tjRVnqovzJdn6vWZaqU81Wzu9HzVen1+7Mp6srG8crdWX3qweHe2NjlTuVsp7nN7AICdnTrz7J9JRKxeP5od0baXg7kaDrdCtysAdE1ftysAdI3v80Dv2sU9vmUAOOS22aL3DR3/i9BTm7/Ch+rCV63/Q6+y/g+964ut//9wz+sBHDzr/9C7ms3Env8A0GOs8QPv9O//AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0KNK2ZEUytle4Kvpz0K5HHE8Ik5GMbk/W62MRsSJiPjHQHEgTY91u9IAwDsq/CfJ9/+6MHy+tLn0SPLJQHaOiF/9/s7vHk0uLi6Mpfn/X89ffJrnjx/pRgMAgHY3tma15un83HYj/+rl46nXx0FW8cXN1uaiady1/GiV9Ed/dh6MYkQMfZTk6Zb080rfHsRffRIRX9lo/6O2CKVsDaS18+nm+Gns4/sQf+P13xy/8Eb8QlaWnovZa/HlPagL9JpnN1vjZN730i6W979CnM3O2/f/wWyEenevx7+1LeNfYX3869sSP8n6/Nn19Ntr8uLKX3+yJbM53Cp7EvG1/u3iJ+vxkw7j7/ldtvFfX//muU5lzT9EXIjt47fUsmF2ZLE2P9JYXrk0W5ucqcxUHoyPT4xNjF67fHV8JFujbv3823Yx/nv94olO8dP2D3WIP7hD+7+zy/b/8dN7v/jWW+J/79vbv/+n3xI/nRO/u8v4k0M3Om7fncaf7tD+nd7/i7uM//zfK9O7fCgAcAAayytzk9VqZWGHi/Sz5k6PcfFhXsRqxHtQDRfv1UW3RyZgv210+m7XBAAAAAAAAAAAAAAA6KSxvDI3EPv7daJutxEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDD67MAAAD//w/PzvM=") syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x48a, &(0x7f0000000000)={[{@jqfmt_vfsold}, {@grpjquota, 0x22}, {@errors_continue}, {@noload}, {@nombcache}, {@usrjquota, 0x22}, {@errors_continue}, {@usrjquota}, {@barrier}]}, 0x1, 0x455, &(0x7f0000000d80)="$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") openat2(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x206001, 0x20}, 0x18) mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2390024, &(0x7f0000000000)) 49.407433602s ago: executing program 7 (id=5818): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000800), r0) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYRES16=r1, @ANYBLOB="eb7a2bbd7000fcdbdf252100000009001f00706879310000000005002000010000000a0001007770611f1f13"], 0x34}, 0x1, 0x0, 0x0, 0x4000010}, 0x4048882) 48.971271383s ago: executing program 7 (id=5825): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'lo\x00', &(0x7f00000003c0)=@ethtool_drvinfo={0x3, "5e88f9cc36acc3363da4e9456893e34b481d623fe28a049857b2503f07317bde", "a3c115caece865dd513b063090f2634ef5ccb040bd5b1d317280968f94add800", "b621fe888341317de85c95cee737f8e2c0018ca1fbe39e3ed409b58f7173c21a", "954618bc06d5859acafab540ff287d7fb5763a5feb4e69b0300498ef735bc9d1", "8e07a2ed361266dded66a5a2eb0637ad03709bbf0035c8ff5e91918c0311ef84", "361d669acd83e676e1ac43c7", 0x10001, 0xffe, 0x1, 0x7, 0xc8ff}}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x14ee}, 0x18) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r3) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000001400000000000000ff000000850000000e000000850000000700000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000000)='kmem_cache_free\x00', r4}, 0x18) r5 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r5, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r5, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @local, 0x1}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000780)="f4000900062b2c25fe80000000000000dc8b850f238466cc00007a000000ad6e911b51818462b4003a000001", 0x2c}], 0x1}, 0x40) 48.970584063s ago: executing program 35 (id=5825): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'lo\x00', &(0x7f00000003c0)=@ethtool_drvinfo={0x3, "5e88f9cc36acc3363da4e9456893e34b481d623fe28a049857b2503f07317bde", "a3c115caece865dd513b063090f2634ef5ccb040bd5b1d317280968f94add800", "b621fe888341317de85c95cee737f8e2c0018ca1fbe39e3ed409b58f7173c21a", "954618bc06d5859acafab540ff287d7fb5763a5feb4e69b0300498ef735bc9d1", "8e07a2ed361266dded66a5a2eb0637ad03709bbf0035c8ff5e91918c0311ef84", "361d669acd83e676e1ac43c7", 0x10001, 0xffe, 0x1, 0x7, 0xc8ff}}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x14ee}, 0x18) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r3) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000001400000000000000ff000000850000000e000000850000000700000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000000)='kmem_cache_free\x00', r4}, 0x18) r5 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r5, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r5, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @local, 0x1}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000780)="f4000900062b2c25fe80000000000000dc8b850f238466cc00007a000000ad6e911b51818462b4003a000001", 0x2c}], 0x1}, 0x40) 1.537744463s ago: executing program 3 (id=7251): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140003006e657464657673696d30000000000000080000000000000014000000110001"], 0xac}, 0x1, 0x0, 0x0, 0x4008805}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @loopback}, 0x4}}, 0x2e) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000002440)=[{{&(0x7f0000000440)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000006c0)=[{&(0x7f0000000600)="4d386c162a150e3e14182be19630a01209a436a751d0f8ef75afcde547c0c9a1078395c24383a2d529d596f5e6f173f7b4e4355bbb2473103736b49c08ac3732d807a130b460b05d818da1beb2e1f4d14c1a32da19e7eda090be27513cb563154884aa80feb54fc0b1c33d242f1855fcc3b40d5828a575002b2acadb208a1f4e7c7b872dd06af096adc6b536224a70266ab7", 0x92}, {&(0x7f0000000800)="ce9ec4ce9943616875cf3ac68b9b969992e4f78cab46ea9eaddf200d3d85a4371e57f79b71562b3db4fbf4c96bf1f56c6e1812b932ec1a769f52d658d3cbe356a151af931ee4b8ccb2ff1413085067ef678008fc78d05ae1b731e0eac2b749fd3e436b981409b6b0681ed6174d0760a388c6925c1e468fecf5c61e6c6de4a8cae333ff3c07045bb4170764cec136efb007d42db34bc2472f8cc2e49b3a65277084a5fd2f670768aa2b60806894d920cbfba0dadaa26df5e7a9244b5ed7d739e5709c9ba5a42945", 0xc7}, {&(0x7f0000000c00)="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", 0x1000}, {&(0x7f00000004c0)="228fc8ab74f4137085828405457caf68185d33bbc43ffc618cec447cace47b725b3dcfda1b25c7f79477de6a93d0a175c330f58767988a1dc48bc9b04addc5cb7845c51fce64fb42667e8564", 0x4c}, {&(0x7f0000000040)="3fbdbe07000000a49a77ea912b79d882d7f5b04e5a9d6cdd4e3eb59184", 0x1d}], 0x5, &(0x7f00000002c0)=[@rights={{0x1c, 0x1, 0x1, [r5, r2, r5]}}], 0x20, 0x8881}}, {{&(0x7f00000009c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000900)=[{&(0x7f0000000340)="24ac4b4834bca222d5e0759757a8d66b4edd33a5d5c910", 0x17}, {&(0x7f0000000a40)="7396efc23252d94346416b7ff9bb85dec991fe6326f612f6619031c9cf352d3b95f930c39a7a37e90f72cf583210b177b6bb6bceea2d2e9c2846922619179b225d1479876810da2305add59187e28e6e2a299260fffb827a8327fe40d933659b91d30e6b1228269a31130ec2daaf346ab8a61253dcabac1ce90567ea683ecd95bca09750896ac23ad70edb56e1d90408c7cbaf6a310b0c27971f1ff614098d050bdc2937b2a522c85bff51a3197d78554cd0684113d2726eec811e3befb569ade4b408567be9cd6b", 0xc8}, {&(0x7f0000000b40)="90190d77832b95dfb50090d2590777b7dd8328f2e409f30b36138a5af85a9fbfa52555bb3de463dd3c879be3d5acef8aeef24eb86a2d59bca1151042b955b3ff6dcea86b5d78cfda9a081b242dfdf72c13e8549315b0", 0x56}, {&(0x7f0000001c00)="7f8fc896cca8f0b63f6d394e5dcd2bdb18c38a630d74be0611274ec8b65a53706550a532440f3bf3749ecbfd178d1ade59a47f379643cd0f8a3e4aabaf09c83ef33369048327c5f75c885728671bf22fa7421071f7309eb3615f7e9ee6460b1fc5980e7b1bda0d289caee0456d46a748c1ea982e131f6c5e1d2dfb94d0733fa37ea1", 0x82}], 0x4, 0x0, 0x0, 0x8008}}, {{&(0x7f0000001cc0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001ec0)=[{&(0x7f0000001d40)="2527eb8e080b66ea4c5614efdd64799aa26c1ca0e099ad58353e993455e486bd484b6343b043f650df6ce1edfbc2e5b0cf495c280bae68a827103043da7ebd7b4077b04b72826d75ba965c63717c413e573cd3055661cb4c8515ecb167ee07389877ce21b7fa8a5e3ad07c7529c65456de1ea1621f98c5f42f1297c961df511ac798130bf33c70d6ab42306128e708c4600d032adcb32ed8d719d84be908663f9407504c3032e7c57902c2c6cb0f1c143dae6def3406", 0xb6}, {&(0x7f0000001e00)="b5f1942c8ac3ed2197df8ca9de2b20e4c788d1c313d6355a5115f64cf43536c2ad01274037d13d59e6cd10589c0e9edce8b0f340ac9c25be63d33f9f001c14b6aadd3fcf0b18b3be4733b3915aae62211b9a86e652f7905c387ac73ab52850f0b3417d2dabfa363a39bca60ba2d3846711947a0d5aed4d88f7b6944fbc6a8e70fe63f6f789c8f18df8800fce2d76c3a878b34ac152", 0x95}], 0x2, 0x0, 0x0, 0x22000010}}, {{&(0x7f0000001f00)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000002080)=[{&(0x7f0000001f80)="7232ce782cceb1895392d6f2aeff9d1bab5e4ae955b5ed79912094eeb7bc1e1d1d357ea4d49ba6d6111dc5363022afe152351d1caf183a1f6d838cd686a7f45466df0e6fa258675560e5bda516ab1a5f25cde4e031ec7efd9df673856c310266d921bb4c73f74f34413994a2cd9af812db8d90aec27a46f1267945fda076c50b35e8cb73c427b4d8d4a4e2aaf83b328b574c2f87a2c77308049f3b7ba13ac727337fcfb076daf6a1cba592c0cffce564f1ddd7685740604830432bfedcdd2c0df0677ce2827d91a4d1e7a4d46fb2a809eebec0c89b3436df4c162bd59b0973", 0xdf}], 0x1, &(0x7f0000002380)=[@cred={{0x1c, 0x1, 0x2, {r4}}}, @cred={{0x1c, 0x1, 0x2, {r4}}}, @cred={{0x1c, 0x1, 0x2, {r4}}}, @rights={{0x10}}, @rights={{0x24, 0x1, 0x1, [r3, r5, r3, r0, r0]}}], 0x98, 0x44008055}}], 0x4, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) ftruncate(0xffffffffffffffff, 0x8800000) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0x8, &(0x7f0000000940)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000100000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r7, 0xffffffffffffffff}, &(0x7f0000000540), &(0x7f0000000580)=r8}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r9, &(0x7f0000000780)}, 0x20) r10 = socket$packet(0x11, 0x2, 0x300) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000780), r12) getsockname$packet(r12, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x3c) sendmsg$nl_route(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="4400000010000104001007fb5c360dff9fe30000", @ANYRES32=r13, @ANYBLOB="0100000000000000240012000c000100627269646765000e140002000800070005"], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendto$packet(r10, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x11, 0x8100, r13, 0x1, 0x0, 0x6, @broadcast}, 0x14) 1.234254822s ago: executing program 5 (id=7254): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800"/15, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x8fd, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r1, 0x0, 0x8008000000010, &(0x7f0000001640)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r2, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="0213000002"], 0x10}}, 0x0) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 1.215742894s ago: executing program 6 (id=7255): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = socket(0x10, 0x3, 0x9) connect$netlink(r1, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) sendmsg$AUDIT_SET_FEATURE(r1, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) 1.155910199s ago: executing program 5 (id=7256): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000003664ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sched_setscheduler(0x0, 0x4, 0x0) setsockopt(0xffffffffffffffff, 0x84, 0x80, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) syz_open_dev$usbmon(0x0, 0x6, 0x200) unshare(0x64000680) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x8, 0xf9, 0x7ffc1ffb}]}) pipe2$9p(&(0x7f0000001900), 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={0x0, r0, 0x0, 0x7ff}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x2, 0xb, &(0x7f00000009c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000000000f6000000006debff00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000200)='ext4_es_find_extent_range_enter\x00', r1, 0x0, 0x9}, 0x18) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000140)=0x1) epoll_wait(0xffffffffffffffff, &(0x7f000000affb)=[{}], 0x1, 0x7fff) syz_emit_ethernet(0x46, &(0x7f00000003c0)=ANY=[@ANYBLOB="0daaaaaaaaaabbbbbbbbbbbb0800450000380000000000019078acff0001ae1414aa030490781200183f2500000000680000000100007f4ead177cb1e02371eb000001020101000018ac92"], 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r2, &(0x7f0000000240)={0xa0000004}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r3, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000140)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010028bd70000000000008000000180001801400020073797a5f74756e0000000000000000001c0002801800038010"], 0x48}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) geteuid() 1.091457765s ago: executing program 6 (id=7257): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803002e000b12d25a80648c2594f90124fc60100c03400a000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 1.048891789s ago: executing program 6 (id=7258): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) lsm_list_modules(0x0, 0x0, 0x0) 967.594817ms ago: executing program 6 (id=7259): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="07000000040000008000000004"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000700000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70300000000000085"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000300)='kmem_cache_free\x00', r2}, 0x18) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000180)="10030600e0ff020004004788aa96a13bb100001100007fca1a00", 0x10608, 0x0, &(0x7f0000000140)={0x11, 0x0, r3}, 0x14) 850.803738ms ago: executing program 6 (id=7261): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803002e000b12d25a80648c2594f90124fc60100c03400a000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 806.027312ms ago: executing program 6 (id=7263): socket$pppl2tp(0x18, 0x1, 0x1) socket$packet(0x11, 0x3, 0x300) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="070000000400000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b7000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x18) pause() timer_create(0x7, &(0x7f00000000c0)={0x0, 0x12}, &(0x7f0000000280)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x20d00, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) acct(&(0x7f0000000040)='./file0\x00') 646.331008ms ago: executing program 3 (id=7265): openat$ptmx(0xffffffffffffff9c, 0x0, 0x800, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000023896) close(r0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) lsm_get_self_attr(0x65, &(0x7f0000000500)={0x0, 0x0, 0xc5, 0xa5, ""/165}, 0x0, 0x1) truncate(&(0x7f0000000140)='./file2\x00', 0x5c00) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=0x0) timer_settime(r3, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18) 518.04855ms ago: executing program 5 (id=7269): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32], 0x0, 0x8fd, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r1, 0x0, 0x8008000000010, &(0x7f0000001640)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17", 0xb6) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r2, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="0213000002"], 0x10}}, 0x0) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) 517.45719ms ago: executing program 0 (id=7270): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.events\x00', 0x26e1, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x13, r0, 0xcc2f2000) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) r3 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r3, 0x1, 0x24, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000300)="2e0000001000818807b62aa73f72cc9f0ba1f8483a0000005e120602000300000e000a0010000000028000001294", 0x2e}], 0x1}, 0x20008800) r5 = socket$kcm(0x2, 0x2, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000000)=0x8000000000003, 0x2) r6 = syz_io_uring_setup(0x45, &(0x7f0000000300)={0x0, 0x0, 0x40, 0x2, 0x1b}, &(0x7f0000000100), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_PBUF_RING(r6, 0x22, &(0x7f0000000380)={&(0x7f0000003000)={[{0x0, 0x0, 0x103}]}, 0x1}, 0x1) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) syz_mount_image$ext4(&(0x7f0000000100)='ext3\x00', &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4000804, &(0x7f0000000480)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x2}}, {@grpid}, {@nouid32}, {@noauto_da_alloc}, {@init_itable}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@init_itable_val={'init_itable', 0x3d, 0x9}}, {@noblock_validity}, {@jqfmt_vfsv1}, {@errors_continue}, {@norecovery}]}, 0xfe, 0x47f, &(0x7f0000000f00)="$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") sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) r8 = creat(&(0x7f0000000340)='./bus\x00', 0x182) openat(0xffffffffffffff9c, 0x0, 0x80642, 0x150) fallocate(r8, 0x0, 0xbf5, 0x2000402) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000040)='kmem_cache_free\x00', r9}, 0x18) fgetxattr(r10, &(0x7f00000002c0)=ANY=[@ANYBLOB="73658375726974792e00"], &(0x7f0000000300)=""/82, 0x52) setsockopt$sock_attach_bpf(r5, 0x1, 0x2e, &(0x7f0000000640)=r0, 0x4) recvmsg$kcm(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, 0x0) 493.010083ms ago: executing program 5 (id=7271): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="07000000040000008000000004"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000700000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70300000000000085"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000300)='kmem_cache_free\x00', r2}, 0x18) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000180)="10030600e0ff020004004788aa96a13bb100001100007fca1a00", 0x10608, 0x0, &(0x7f0000000140)={0x11, 0x0, r3}, 0x14) 474.729774ms ago: executing program 5 (id=7272): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000100)='mm_page_free\x00'}, 0x18) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000009c0000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000100), 0x582, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b0000000700000008000000a6ad6a1a05"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000000)={0x2, 0x93, 0x28, 0x1, 0x0, 0x0, 0x0, 0x107, 0x8458, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x1, 0x401, 0x20004, 0xb, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r3, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000018c0)=0x4, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000001900)=ANY=[@ANYBLOB="1c00000068000100fdfc0000fbdbdf25020000000000000004000b003470344f288d1cae96a3e897ae1565ddd7ba10e71fcf755822566f8202227a434e36a22c46bebe90f508c204489fb970e78a6bcbc96b9fdb4ec4231b9daff1dfdf10f36e2944109571eca0888c604314a31ba1e23a6408f4185b5e9c8df6c2ba9b9b1f42"], 0x1c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x80c0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r5 = mq_open(&(0x7f000084dff0)='\xa1sxt\x1a\x00\x00\x00\x00\x00\x00\x00\x01\x88\xbdd', 0x6e93ebbbcc0884f2, 0x100, &(0x7f0000000300)={0x0, 0x1, 0x3}) mq_timedsend(r5, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r5, 0x0, 0x0, 0x0, 0x0) mq_timedreceive(r5, &(0x7f0000000180)=""/204, 0xcc, 0x0, 0x0) 363.362615ms ago: executing program 8 (id=7274): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)={0x70, 0x0, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'team_slave_1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x70}}, 0x20000800) sendmsg$SMC_PNETID_DEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="270e28bd70000000000004"], 0x14}, 0x1, 0x40030000000000}, 0x4000) 362.841595ms ago: executing program 5 (id=7275): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140003006e657464657673696d30000000000000080000000000000014000000110001"], 0xac}, 0x1, 0x0, 0x0, 0x4008805}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @loopback}, 0x4}}, 0x2e) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000002440)=[{{&(0x7f0000000440)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000006c0)=[{&(0x7f0000000600)="4d386c162a150e3e14182be19630a01209a436a751d0f8ef75afcde547c0c9a1078395c24383a2d529d596f5e6f173f7b4e4355bbb2473103736b49c08ac3732d807a130b460b05d818da1beb2e1f4d14c1a32da19e7eda090be27513cb563154884aa80feb54fc0b1c33d242f1855fcc3b40d5828a575002b2acadb208a1f4e7c7b872dd06af096adc6b536224a70266ab7", 0x92}, {&(0x7f0000000800)="ce9ec4ce9943616875cf3ac68b9b969992e4f78cab46ea9eaddf200d3d85a4371e57f79b71562b3db4fbf4c96bf1f56c6e1812b932ec1a769f52d658d3cbe356a151af931ee4b8ccb2ff1413085067ef678008fc78d05ae1b731e0eac2b749fd3e436b981409b6b0681ed6174d0760a388c6925c1e468fecf5c61e6c6de4a8cae333ff3c07045bb4170764cec136efb007d42db34bc2472f8cc2e49b3a65277084a5fd2f670768aa2b60806894d920cbfba0dadaa26df5e7a9244b5ed7d739e5709c9ba5a42945", 0xc7}, {&(0x7f0000000c00)="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", 0x1000}, {&(0x7f00000004c0)="228fc8ab74f4137085828405457caf68185d33bbc43ffc618cec447cace47b725b3dcfda1b25c7f79477de6a93d0a175c330f58767988a1dc48bc9b04addc5cb7845c51fce64fb42667e8564", 0x4c}, {&(0x7f0000000040)="3fbdbe07000000a49a77ea912b79d882d7f5b04e5a9d6cdd4e3eb59184", 0x1d}], 0x5, &(0x7f00000002c0)=[@rights={{0x1c, 0x1, 0x1, [r5, r2, r5]}}], 0x20, 0x8881}}, {{&(0x7f00000009c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000900)=[{&(0x7f0000000340)="24ac4b4834bca222d5e0759757a8d66b4edd33a5d5c910", 0x17}, {&(0x7f0000000a40)="7396efc23252d94346416b7ff9bb85dec991fe6326f612f6619031c9cf352d3b95f930c39a7a37e90f72cf583210b177b6bb6bceea2d2e9c2846922619179b225d1479876810da2305add59187e28e6e2a299260fffb827a8327fe40d933659b91d30e6b1228269a31130ec2daaf346ab8a61253dcabac1ce90567ea683ecd95bca09750896ac23ad70edb56e1d90408c7cbaf6a310b0c27971f1ff614098d050bdc2937b2a522c85bff51a3197d78554cd0684113d2726eec811e3befb569ade4b408567be9cd6b", 0xc8}, {&(0x7f0000000b40)="90190d77832b95dfb50090d2590777b7dd8328f2e409f30b36138a5af85a9fbfa52555bb3de463dd3c879be3d5acef8aeef24eb86a2d59bca1151042b955b3ff6dcea86b5d78cfda9a081b242dfdf72c13e8549315b0", 0x56}, {&(0x7f0000001c00)="7f8fc896cca8f0b63f6d394e5dcd2bdb18c38a630d74be0611274ec8b65a53706550a532440f3bf3749ecbfd178d1ade59a47f379643cd0f8a3e4aabaf09c83ef33369048327c5f75c885728671bf22fa7421071f7309eb3615f7e9ee6460b1fc5980e7b1bda0d289caee0456d46a748c1ea982e131f6c5e1d2dfb94d0733fa37ea1", 0x82}], 0x4, 0x0, 0x0, 0x8008}}, {{&(0x7f0000001cc0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001ec0)=[{&(0x7f0000001d40)="2527eb8e080b66ea4c5614efdd64799aa26c1ca0e099ad58353e993455e486bd484b6343b043f650df6ce1edfbc2e5b0cf495c280bae68a827103043da7ebd7b4077b04b72826d75ba965c63717c413e573cd3055661cb4c8515ecb167ee07389877ce21b7fa8a5e3ad07c7529c65456de1ea1621f98c5f42f1297c961df511ac798130bf33c70d6ab42306128e708c4600d032adcb32ed8d719d84be908663f9407504c3032e7c57902c2c6cb0f1c143dae6def3406", 0xb6}, {&(0x7f0000001e00)="b5f1942c8ac3ed2197df8ca9de2b20e4c788d1c313d6355a5115f64cf43536c2ad01274037d13d59e6cd10589c0e9edce8b0f340ac9c25be63d33f9f001c14b6aadd3fcf0b18b3be4733b3915aae62211b9a86e652f7905c387ac73ab52850f0b3417d2dabfa363a39bca60ba2d3846711947a0d5aed4d88f7b6944fbc6a8e70fe63f6f789c8f18df8800fce2d76c3a878b34ac152", 0x95}], 0x2, 0x0, 0x0, 0x22000010}}, {{&(0x7f0000001f00)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000002080)=[{&(0x7f0000001f80)="7232ce782cceb1895392d6f2aeff9d1bab5e4ae955b5ed79912094eeb7bc1e1d1d357ea4d49ba6d6111dc5363022afe152351d1caf183a1f6d838cd686a7f45466df0e6fa258675560e5bda516ab1a5f25cde4e031ec7efd9df673856c310266d921bb4c73f74f34413994a2cd9af812db8d90aec27a46f1267945fda076c50b35e8cb73c427b4d8d4a4e2aaf83b328b574c2f87a2c77308049f3b7ba13ac727337fcfb076daf6a1cba592c0cffce564f1ddd7685740604830432bfedcdd2c0df0677ce2827d91a4d1e7a4d46fb2a809eebec0c89b3436df4c162bd59b0973", 0xdf}], 0x1, &(0x7f0000002380)=[@cred={{0x1c, 0x1, 0x2, {r4}}}, @cred={{0x1c, 0x1, 0x2, {r4}}}, @cred={{0x1c, 0x1, 0x2, {r4}}}, @rights={{0x10}}, @rights={{0x24, 0x1, 0x1, [r3, r5, r3, r0, r0]}}], 0x98, 0x44008055}}], 0x4, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) ftruncate(0xffffffffffffffff, 0x8800000) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0x8, &(0x7f0000000940)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000100000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r7, 0xffffffffffffffff}, &(0x7f0000000540), &(0x7f0000000580)=r8}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r9, &(0x7f0000000780)}, 0x20) r10 = socket$packet(0x11, 0x2, 0x300) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000780), r12) getsockname$packet(r12, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x3c) sendmsg$nl_route(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="4400000010000104001007fb5c360dff9fe30000", @ANYRES32=r13, @ANYBLOB="0100000000000000240012000c000100627269646765000e140002000800070005"], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendto$packet(r10, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x11, 0x8100, r13, 0x1, 0x0, 0x6, @broadcast}, 0x14) 327.171448ms ago: executing program 8 (id=7276): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2000c16, &(0x7f0000000280)={[{@usrquota}, {@nodelalloc}]}, 0xff, 0x25e, &(0x7f0000000e80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101042, 0x45) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000140)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2141, 0x59) pwrite64(r1, &(0x7f0000000140)="f6", 0xffffff07, 0x8000c61) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b70400000000000085000000010000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r3, 0x0, 0x3}, 0x18) ioctl$EXT4_IOC_MIGRATE(r1, 0x6609) 260.200555ms ago: executing program 0 (id=7277): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000000000001800", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x8fd, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r1, 0x0, 0x8008000000010, &(0x7f0000001640)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r2, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="0213000002"], 0x10}}, 0x0) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 226.416908ms ago: executing program 3 (id=7278): bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$tipc(r1, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000007c0)={{r2}, &(0x7f0000000740), &(0x7f0000000780)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x0, 0x22c7, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f00000005c0)='kfree_skb\x00', r3}, 0x18) close(r0) 225.814918ms ago: executing program 0 (id=7279): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, 0x0) openat$autofs(0xffffffffffffff9c, 0x0, 0x40, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000240), 0xc, 0x101301) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000440)='kfree\x00', r3, 0x0, 0x5}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) creat(&(0x7f0000010280)='./file0\x00', 0x182) lsetxattr$security_capability(0x0, &(0x7f00000000c0), &(0x7f0000000040)=@v3, 0x18, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], 0x0, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_SETCONFIGURATION(r1, 0x80045505, &(0x7f0000000000)=0x1) 192.666951ms ago: executing program 3 (id=7280): pipe(&(0x7f0000005880)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_selinux(r0, &(0x7f00000000c0), &(0x7f0000000040)='system_u:object_r:dhcp_state_t:s0\x00', 0x1e, 0x0) ioctl$SIOCGETVIFCNT(r0, 0x89e0, &(0x7f00000003c0)={0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x40000) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc0, 0x20) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000340)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_DELCHAIN={0x70, 0x5, 0xa, 0x100, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_CHAIN_USERDATA={0x53, 0xc, "6f5e09118fa71b073aca80788defb770cbfb01464430e64dd79f1c244f973b99cb2ca6ac951f7ca5cca425ffd74dfc4389ed8574f5831a4610b66d90feb223236dbd9cf088a42522d52a8dbc6f02c7"}, @NFTA_CHAIN_FLAGS={0x8}]}, @NFT_MSG_NEWFLOWTABLE={0x8c, 0x16, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_HOOK={0x60, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x54, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ipvlan1\x00'}, {0x14, 0x1, 'veth0_to_bridge\x00'}, {0x14, 0x1, 'veth0_to_team\x00'}, {0x14, 0x1, 'veth1_macvtap\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_DELRULE={0xf8, 0x8, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x70, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @match={{0xa}, @void}}, {0x10, 0x1, 0x0, 0x1, @redir={{0xa}, @void}}, {0x10, 0x1, 0x0, 0x1, @meta={{0x9}, @void}}, {0x10, 0x1, 0x0, 0x1, @numgen={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @tunnel={{0xb}, @void}}, {0xc, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @void}}, {0x10, 0x1, 0x0, 0x1, @reject={{0xb}, @void}}]}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x3}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_COMPAT={0x24, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x5e}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0xa01}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x30, 0x3, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffb}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x24c}, 0x1, 0x0, 0x0, 0x2000c880}, 0x4) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00'}, 0x10) socket$rds(0x15, 0x5, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) setsockopt$inet_mreqsrc(r1, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) 174.187273ms ago: executing program 3 (id=7281): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32], 0x0, 0x8fd, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r1, 0x0, 0x8008000000010, &(0x7f0000001640)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17", 0xb6) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r2, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="0213000002"], 0x10}}, 0x0) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) 170.700333ms ago: executing program 0 (id=7282): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) syz_io_uring_setup(0x26b6, &(0x7f0000000200)={0x0, 0xf906, 0x800, 0x0, 0x308}, &(0x7f0000000080), &(0x7f0000000280)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x4000}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x5}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x7}}], {0x14}}, 0x70}}, 0x0) 141.900716ms ago: executing program 8 (id=7283): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x8fd, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r1, 0x0, 0x8008000000010, &(0x7f0000001640)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r2, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[], 0x10}}, 0x0) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB], 0x10}}, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 141.258617ms ago: executing program 0 (id=7284): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1, @perf_config_ext={0x0, 0x10007}, 0x2, 0x10000, 0xba, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000200)="5c00000014006b05c84e21000ab16d6e230675f811000000440002005817d30461bc24eeb556a7ef595105ea1698fa51f60a64c9f408000000e786a6d0bdbdc3d44bd70011b6c0504bb9189d9193e9bd00"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x240040c4) fsetxattr$security_ima(r0, &(0x7f0000000f80), &(0x7f0000000fc0)=@sha1={0x1, "0d729c9047296656bee7e228538ece065b1a50b6"}, 0x15, 0xbb9a01d3c1081a8c) pipe(&(0x7f0000005880)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_selinux(r5, &(0x7f00000000c0), &(0x7f0000000040)='system_u:object_r:dhcp_state_t:s0\x00', 0x1e, 0x0) bind$rds(r5, &(0x7f0000000e40)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001180)={r5, 0x20, &(0x7f0000001140)={&(0x7f0000001000)=""/6, 0x6, 0x0, &(0x7f0000001040)=""/241, 0xf1}}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1805000000e6ffb968da7ffb8900"/24], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000001200)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffa}]}) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="180200000400000000000000fcffff0185000000bc0000001801000020646c2400000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000f000000850000000600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={0xffffffffffffffff, 0x3, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x26) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)=ANY=[], 0x10) r9 = fcntl$getown(r8, 0x9) sched_setaffinity(r9, 0x8, &(0x7f00000011c0)=0x1ff) futimesat(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r1, r5, 0x17, 0x0, @void}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='page_pool_state_release\x00', r2}, 0x10) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="18020000800000000000000000000000850000004100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000008000000bca30000000000002403000020feffffd70af0fff8ffffff71a4f2ff000000001f03000000000000e5000500000000002604fdffff02000015010000033800001d13fcff000000007a0af0ff0000001f0f14000000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f300020000fe275daf51efd601b6bf01c8e8b1b526375ee4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff61623604000000000000006a89adaf17b0a6041bdeebdfd1f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564163427afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652d950ad31928b0b036dc2869f478341d02d0f5ad94b081fcd507acb4b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101a3062cd54f9ff51d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566d674e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48153baae244e7bf573eac34b781337ad5905c6bbf1137548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a90144022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab540b8d7b4ead35a385e0b4a26b702396df7e0c1e02b88c114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb11883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcd857ab15e355713767c536cbae2f5c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ced301efeb6dc5f6a9037d2283c42efc54fa84323afc4c10eff462c8843187f1dd48ef0981000000000000ff0f40b1888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fc08001011e32f80fb60e14b9eee094277bbc170882c8890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e3f753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f983e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28ebc15edb4d91675767999d146aef7799738b292fd64bb25b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a794963342aece449a0d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b6ef9d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec035d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a881192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56397c78f12205db653a536f9f3322405d1efd78e578dc6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf79a43746979f99f6a1527f004f1e37a3926937e84fb478199dc1020f4beb98b8074bf7df8b5e783637da740800000000000000c55a4385e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035abc46271a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db18c472dafc5569adc282928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a6a2740000000000000000000000000000000000000000000a0009dd14b38f2f4426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4100260ffcd8f1d04166d291ebcef893e1b9ccb6797d0646fe0e7274434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb0000000000000005375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10baa804a707f0a1fcbfc309381aeba191950bae71f37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d34d3757b1450fdb0a9a69f432e277f3a0386eb2bd3305c821c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cff5d6b6898335792749df7b1f51e91f8c1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d94362200000000000000000000f296b0c1484e5f781ad26bff696b05ff0a5e2270e07618b04273bd4075ea38ab463bfa6a38e7c537498ba3e4df8dfc9e040000003c3ffad44d2a376def42e41e9fc31678257e040fa7cf32c221aaac08000000000000001a00000000000000000000173570f0c11ae694b0f7a4f9c2f6790044a357e785af6e153d5f1ea460af92c7cbbd6295afe740f5e154346d483e0d641ef02e4d5295d756e110522a7a945b93fb705b95b6aae27a8fb33732ce1da1c0b1af8eb9222a06e984ab1e6984c8bdc12360627137ab67b6b68ab08acb29a74dc36b51209cfbc87f61182bbeb2772e9d5a1ffc477179be481efe46a4ce86be0b1d8eee42a611a3d44ca450b14586ed63dd92005c79e4a8ab8a94f0c6cb4bed8594a39bd76d3ef8a7ab014e787596db796bd93a36c2880423291e3bccc86f66ba792ff4d87b3f80e5908779e51c5e9055fc5b23605cd000c723187ef09dcf4b07b06a9342f3f62ee7acddff292082c1f4d8eb9561f80873a09a1ae0c9af1121175e5600f43a1179484502009759264a5729f07c2b218fa36ba2316a99aaad0130df83d0bda1e711290f78c143ea143967b00adcd77e6ad5e48d839ea61aadb83e4d071c54691924a3830d3e7b5c198bb0ed623153590000000000000000004b985ea1702f34f2f85b168c083e810ed567e3f1979b9ed1a4bf6a10dac825c96a0828b335de445a4880bb6474157efd1a72ca46ae4cbe3ab648c9bc4867a5a4cb87d7d6d55475b34b3cb6aa9e2337d4e04a37e35109752522ac9b186ddd80c47da6a2f4ef7bb909c975520000000000000000000000219cf5c1376ab33786f6b856d354e90a2733f78f2d188057cead3480eade49d55b770fad7fa000d23da6275768810b6b2df91d3a991ea98d929d271696c258d5b735d5db11df434e7dd1b7c1ca05cea3977df564115f4ec6ffab1d2ff8a642ca50934b3fbe44b0abeba9df209566984a29dfc0466e439a94e177b3c4d5f6e92b8176b9d6ddeeeb196fa964217f88e1acc180aaa4"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe8a, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r10, 0x0, 0xe, 0x0, &(0x7f00000003c0)="131c8701feaa16bca4ac74ab821d", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) ioctl$BLKTRACETEARDOWN(r4, 0x1276, 0x0) 137.884387ms ago: executing program 3 (id=7285): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800"], 0x48) timer_create(0xb, 0x0, &(0x7f00000000c0)) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000080b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000980)='mm_page_free\x00', r3, 0x0, 0x1000000000000}, 0x18) r4 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x9840) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffffffffffb, 0x6, 0x1, @buffer={0x300, 0x56, &(0x7f0000000440)=""/86}, &(0x7f0000000380)="259374c94982", 0x0, 0x0, 0x1c, 0x0, 0x0}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.time\x00', 0x26e1, 0x0) close(r5) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000011c0)={r5, 0x18000000000002a0, 0xeff, 0x7, &(0x7f0000001240)="b9ff03076804268c989e14f088a8657986dd", 0x0, 0x4068, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$SCSI_IOCTL_GET_IDLUN(r5, 0x5382, &(0x7f0000000700)) syz_usb_disconnect(r1) syz_usb_connect$rtl8150(0x0, 0x3f, &(0x7f0000000240)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) ioctl$EVIOCRMFF(r1, 0x5501, 0x0) clock_adjtime(0x0, &(0x7f00000001c0)={0x8b8d, 0x4, 0x3, 0x0, 0x0, 0xfffffffffffffffd, 0xe00, 0x0, 0x0, 0x0, 0x2, 0x7, 0x80000001, 0x3cf2a278, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x8000}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r6, 0x0, 0x4}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x21c91c, &(0x7f0000000440)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800000}}, {@noblock_validity}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x200000}}, {@jqfmt_vfsold}, {@noinit_itable}, {@quota}, {@noauto_da_alloc}, {@sysvgroups}, {@resgid, 0x32}]}, 0x1, 0x4e0, &(0x7f0000001a40)="$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") socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000140)=[{0x20, 0x0, 0x0, 0xfffff024}, {0xb1, 0x0, 0x0, 0xffeff024}, {0x6, 0x0, 0x4}]}, 0x10) syz_mount_image$ext4(&(0x7f00000007c0)='ext2\x00', &(0x7f00000006c0)='./file1\x00', 0x20040, &(0x7f00000000c0)={[{@user_xattr}, {@nodioread_nolock}]}, 0x1, 0x576, &(0x7f0000000140)="$eJzs3T1sG2UfAPD/neO3X3nf9JXeVwLUoQKkIlV1kn5AYWpXRKVKHZBYIHLcqIoTV7EDTZQh3StEBwSoS9lgYAQxMCAWRlYWEDNSRSOQmg5g5K80TZzglDouud9POvuee87+P8+d/499pzs5gMw62nhII56OiItJxMi6uqFoVx5trbe6slS8v7JUTKJev/RLEklE3FtZKnbWT9rPhyJiOSKeiohv8hHH081xqwuL0xPlcmmuXR6tzVwdrS4snrgyMzFVmirNnnrp5TNnT58ZPzm+/mX36+tL+Z319caPN9+98d2rt29++tmR5eL7E0mci+F23fp+PE6tbZKPcxuWn+5HsAFKBt0AHkmuneeNVPp/jESunfXd1Ed2tWlAn9X3RdSBjErkP2RU53dA4/i3M+3m748751sHII24q+2pVTPUOjcR+5vHJgd/TR46Mmkcbx7ezYayJy1fj4ixoaHNn/+k/fl7dGOPo4H01dfnWztq8/5P18af6DL+DHfOnf5NnfFvddP49yB+bovx72KPMX5/46ePtox/PeKZrvGTtfhJl/hpRLzVY/xbr395dqu6+scRx6J7/I5k+/PDo5evlEtjrceuMb46duSV7fp/cIv4rXO2+5tfM922f5fT2l198e3nzy5vE/+F57bf/922/4GIeK/H+P+998lrW9XduZ7cbfwK2On+TyIft3uM/+K5oz/0uCoAAAAAAAAAALADafNatiQtrM2naaHQuof3f3EwLVeqteOXK/Ozk61r3g5HPu1caTXSKieN8nj7etxO+eSG8qlcO2DuQLNcKFbKkwPuOwAAAAAAAAAAAAAAAAAAADwpDm24//+3XPP+/41/Vw3sVVv/5Tew18l/yK6H8z8ZWDuA3ef7HzKrLv8hu+Q/ZJf8h+yS/5Bd8h+yS/5Ddsl/AAAAAAAAAAAAAAAAAAAAAAAAAADoi4sXLjSm+v2VpWKjPDm0MD9defvEZKk6XZiZLxaKlbmrhalKZapcKhQrM3/1fkmlcnUsZuevjdZK1dpodWHxzZnK/GznP0VL+b73CAAAAAAAAAAAAAAAAAAAAP55hptTkhYiIm3Op2mhEPHviDicRHL5Srk0FhH/iYjvc/l9jfL4oBsNAAAAAAAAAAAAAAAAAAAAe0x1YXF6olwuzWVkZmgnK0fE8uNtRuMdd/yqfHtfPSnb0EwWZgY8MAEAAAAAAAAAAAAAAAAAQAY9uOm311f80d8GAQAAAAAAAAAAAAAAAAAAQCalPycR0ZiOjTw/vLH2X8lqrvkcEe/cuvTBtYlabW68sfzu2vLah+3lJwfRfqBXnTzt5DEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwQHVhcXqiXC7N9XFm0H0EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeBR/BgAA///eANcP") r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, 0xffffffffffffffff, 0x10, &(0x7f0000000100)={0x7fff}) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xf, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r8}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r9}, 0x10) r10 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r10, 0x6, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) 107.32092ms ago: executing program 8 (id=7286): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000100)='mm_page_free\x00'}, 0x18) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000009c0000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000100), 0x582, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b0000000700000008000000a6ad6a1a05"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000000)={0x2, 0x93, 0x28, 0x1, 0x0, 0x0, 0x0, 0x107, 0x8458, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x1, 0x401, 0x20004, 0xb, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r3, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000018c0)=0x4, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000001900)=ANY=[@ANYBLOB="1c00000068000100fdfc0000fbdbdf25020000000000000004000b003470344f288d1cae96a3e897ae1565ddd7ba10e71fcf755822566f8202227a434e36a22c46bebe90f508c204489fb970e78a6bcbc96b9fdb4ec4231b9daff1dfdf10f36e2944109571eca0888c604314a31ba1e23a6408f4185b5e9c8df6c2ba9b9b1f42"], 0x1c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x80c0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r5 = mq_open(&(0x7f000084dff0)='\xa1sxt\x1a\x00\x00\x00\x00\x00\x00\x00\x01\x88\xbdd', 0x6e93ebbbcc0884f2, 0x100, &(0x7f0000000300)={0x0, 0x1, 0x3}) mq_timedsend(r5, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r5, 0x0, 0x0, 0x0, 0x0) mq_timedreceive(r5, &(0x7f0000000180)=""/204, 0xcc, 0x0, 0x0) 11.446039ms ago: executing program 0 (id=7287): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000900)='kfree\x00', r1}, 0x18) syz_usb_connect$uac1(0x4, 0x71, &(0x7f00000002c0)=ANY=[], 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 11.212769ms ago: executing program 8 (id=7288): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)={0x70, 0x0, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'team_slave_1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x70}}, 0x20000800) sendmsg$SMC_PNETID_DEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="270e28bd70000000000004"], 0x14}, 0x1, 0x40030000000000}, 0x4000) 0s ago: executing program 8 (id=7289): openat$ptmx(0xffffffffffffff9c, 0x0, 0x800, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000023896) close(r0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) lsm_get_self_attr(0x65, &(0x7f0000000500)={0x0, 0x0, 0xc5, 0xa5, ""/165}, 0x0, 0x1) truncate(&(0x7f0000000140)='./file2\x00', 0x5c00) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=0x0) timer_settime(r3, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18) kernel console output (not intermixed with test programs): bridge0: port 1(bridge_slave_0) entered blocking state [ 344.884474][T19333] bridge0: port 1(bridge_slave_0) entered disabled state [ 344.894848][T19333] bridge_slave_0: entered allmulticast mode [ 344.902738][T19333] bridge_slave_0: entered promiscuous mode [ 344.910583][T19333] bridge0: port 2(bridge_slave_1) entered blocking state [ 344.918046][T19333] bridge0: port 2(bridge_slave_1) entered disabled state [ 344.931860][T19333] bridge_slave_1: entered allmulticast mode [ 344.938771][T19333] bridge_slave_1: entered promiscuous mode [ 344.974378][T19333] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 344.986217][T19333] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 345.015030][T19333] team0: Port device team_slave_0 added [ 345.022998][T19333] team0: Port device team_slave_1 added [ 345.044076][T19333] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 345.051571][T19333] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 345.078373][T19333] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 345.090963][T19333] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 345.098241][T19333] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 345.124763][T19333] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 345.184592][T19370] __nla_validate_parse: 9 callbacks suppressed [ 345.184612][T19370] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5757'. [ 345.217988][T19372] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5760'. [ 345.224710][T19333] hsr_slave_0: entered promiscuous mode [ 345.235121][T19333] hsr_slave_1: entered promiscuous mode [ 345.241854][T19333] debugfs: 'hsr0' already exists in 'hsr' [ 345.247839][T19333] Cannot create hsr debugfs directory [ 345.292705][T19376] netlink: 'syz.6.5761': attribute type 3 has an invalid length. [ 345.300778][T19376] netlink: 'syz.6.5761': attribute type 1 has an invalid length. [ 345.308898][T19376] netlink: 181400 bytes leftover after parsing attributes in process `syz.6.5761'. [ 345.358710][T19380] netlink: 'syz.6.5763': attribute type 3 has an invalid length. [ 345.366846][T19380] netlink: 'syz.6.5763': attribute type 1 has an invalid length. [ 345.374860][T19380] netlink: 181400 bytes leftover after parsing attributes in process `syz.6.5763'. [ 345.606164][T19333] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 345.615728][T19333] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 345.633711][T19333] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 345.643777][T19333] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 345.668593][T19402] netlink: 'syz.6.5769': attribute type 7 has an invalid length. [ 345.676856][T19402] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5769'. [ 345.719308][T19333] 8021q: adding VLAN 0 to HW filter on device bond0 [ 345.733698][T19333] 8021q: adding VLAN 0 to HW filter on device team0 [ 345.745539][ T7365] bridge0: port 1(bridge_slave_0) entered blocking state [ 345.753306][ T7365] bridge0: port 1(bridge_slave_0) entered forwarding state [ 345.776790][ T1530] bridge0: port 2(bridge_slave_1) entered blocking state [ 345.783925][ T1530] bridge0: port 2(bridge_slave_1) entered forwarding state [ 345.831064][T19424] loop7: detected capacity change from 0 to 128 [ 345.840835][T19424] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 345.854480][T19424] ext4 filesystem being mounted at /132/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 345.926669][T19333] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 345.935799][T16975] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 346.038010][T19333] veth0_vlan: entered promiscuous mode [ 346.051109][T19333] veth1_vlan: entered promiscuous mode [ 346.074391][T19333] veth0_macvtap: entered promiscuous mode [ 346.083853][T19333] veth1_macvtap: entered promiscuous mode [ 346.091005][T19444] syz.7.5783 (19444): /proc/19438/oom_adj is deprecated, please use /proc/19438/oom_score_adj instead. [ 346.097210][T19333] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 346.119538][T19333] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 346.132267][ T53] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.146117][ T53] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.158660][ T53] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.172790][ T53] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.224364][T19450] loop0: detected capacity change from 0 to 1024 [ 346.231781][T19450] EXT4-fs: Ignoring removed oldalloc option [ 346.238079][T19450] EXT4-fs: Ignoring removed bh option [ 346.255185][T19450] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 346.307901][T19459] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5787'. [ 346.373347][T19333] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 346.441272][T19469] blktrace: Concurrent blktraces are not allowed on loop0 [ 346.587717][T19480] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5797'. [ 346.655634][T19485] pim6reg1: entered promiscuous mode [ 346.661265][T19485] pim6reg1: entered allmulticast mode [ 346.824079][ T29] kauditd_printk_skb: 210 callbacks suppressed [ 346.824164][ T29] audit: type=1400 audit(1766646008.302:22043): avc: denied { mounton } for pid=19486 comm="syz.7.5799" path="/syzcgroup/cpu/syz7/cgroup.procs" dev="cgroup" ino=494 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 346.824221][T19487] tmpfs: Unknown parameter 'fsuuid' [ 346.868102][ T29] audit: type=1326 audit(1766646008.342:22044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19486 comm="syz.7.5799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c9e3bf749 code=0x7ffc0000 [ 346.876569][T19487] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 346.892912][ T29] audit: type=1326 audit(1766646008.342:22045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19486 comm="syz.7.5799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c9e3bf749 code=0x7ffc0000 [ 346.924401][ T29] audit: type=1326 audit(1766646008.342:22046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19486 comm="syz.7.5799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=100 compat=0 ip=0x7f8c9e3bf749 code=0x7ffc0000 [ 346.934625][T19487] atomic_op ffff888101d0fd28 conn xmit_atomic 0000000000000000 [ 346.948534][ T29] audit: type=1326 audit(1766646008.342:22047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19486 comm="syz.7.5799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c9e3bf749 code=0x7ffc0000 [ 346.948568][ T29] audit: type=1326 audit(1766646008.342:22048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19486 comm="syz.7.5799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c9e3bf749 code=0x7ffc0000 [ 346.948593][ T29] audit: type=1326 audit(1766646008.342:22049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19486 comm="syz.7.5799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8c9e3bf749 code=0x7ffc0000 [ 346.948618][ T29] audit: type=1326 audit(1766646008.342:22050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19486 comm="syz.7.5799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c9e3bf749 code=0x7ffc0000 [ 346.948647][ T29] audit: type=1326 audit(1766646008.342:22051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19486 comm="syz.7.5799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c9e3bf749 code=0x7ffc0000 [ 346.948675][ T29] audit: type=1326 audit(1766646008.342:22052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19486 comm="syz.7.5799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8c9e3bf749 code=0x7ffc0000 [ 347.164819][T19495] loop7: detected capacity change from 0 to 512 [ 347.191983][T19495] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 347.200810][T19495] EXT4-fs (loop7): orphan cleanup on readonly fs [ 347.209558][T19495] EXT4-fs error (device loop7): ext4_do_update_inode:5617: inode #16: comm syz.7.5803: corrupted inode contents [ 347.223480][T19495] EXT4-fs (loop7): Remounting filesystem read-only [ 347.230716][T19495] EXT4-fs (loop7): 1 truncate cleaned up [ 347.247687][ T1473] EXT4-fs (loop7): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 347.258528][ T1473] EXT4-fs (loop7): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 347.274018][ T1473] EXT4-fs (loop7): Quota write (off=8, len=24) cancelled because transaction is not started [ 347.291113][T19495] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 347.306278][T19498] netlink: 'syz.0.5801': attribute type 7 has an invalid length. [ 347.314219][T19498] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5801'. [ 347.335263][T16975] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 347.363840][T19508] netlink: 'syz.5.5808': attribute type 3 has an invalid length. [ 347.372089][T19508] netlink: 'syz.5.5808': attribute type 1 has an invalid length. [ 347.380044][T19508] netlink: 181400 bytes leftover after parsing attributes in process `syz.5.5808'. [ 347.427248][T19510] loop7: detected capacity change from 0 to 4096 [ 347.442656][T19510] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 347.455005][T19510] EXT4-fs error (device loop7): ext4_ext_check_inode:523: inode #4: comm syz.7.5809: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 4(0), depth 0(0) [ 347.488098][T19510] EXT4-fs error (device loop7): ext4_quota_enable:7180: comm syz.7.5809: Bad quota inode: 4, type: 1 [ 347.500318][T19510] EXT4-fs warning (device loop7): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 347.516105][T19510] EXT4-fs (loop7): mount failed [ 347.601097][T19529] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5815'. [ 347.614900][T19531] loop7: detected capacity change from 0 to 512 [ 347.638347][T19531] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 347.651959][T19531] ext4 filesystem being mounted at /140/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 347.667149][T19531] EXT4-fs: Cannot change journaled quota options when quota turned on [ 347.686429][T16975] EXT4-fs error (device loop7): ext4_empty_dir:3078: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 347.700327][T16975] EXT4-fs error (device loop7): ext4_empty_dir:3078: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 347.715645][T16975] EXT4-fs error (device loop7): ext4_empty_dir:3078: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 347.729777][T16975] EXT4-fs error (device loop7): ext4_empty_dir:3078: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 347.743490][T16975] EXT4-fs error (device loop7): ext4_empty_dir:3078: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 347.758449][T16975] EXT4-fs error (device loop7): ext4_empty_dir:3078: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 347.772654][T16975] EXT4-fs error (device loop7): ext4_empty_dir:3078: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 347.786289][T16975] EXT4-fs error (device loop7): ext4_empty_dir:3078: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 347.800401][T16975] EXT4-fs error (device loop7): ext4_empty_dir:3078: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 347.814089][T16975] EXT4-fs error (device loop7): ext4_empty_dir:3078: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 348.094747][T16975] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 348.104921][ T1530] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.173549][ T1530] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.223484][ T1530] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.273657][ T1530] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.353063][T19550] chnl_net:caif_netlink_parms(): no params data found [ 348.367466][ T1530] bridge_slave_1: left allmulticast mode [ 348.373533][ T1530] bridge_slave_1: left promiscuous mode [ 348.379477][ T1530] bridge0: port 2(bridge_slave_1) entered disabled state [ 348.395020][ T1530] bridge_slave_0: left allmulticast mode [ 348.400894][ T1530] bridge_slave_0: left promiscuous mode [ 348.406808][ T1530] bridge0: port 1(bridge_slave_0) entered disabled state [ 348.593970][ T1530] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 348.623924][ T1530] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 348.635641][ T1530] bond0 (unregistering): Released all slaves [ 348.714819][T19550] bridge0: port 1(bridge_slave_0) entered blocking state [ 348.722129][T19550] bridge0: port 1(bridge_slave_0) entered disabled state [ 348.739054][T19550] bridge_slave_0: entered allmulticast mode [ 348.748731][T19550] bridge_slave_0: entered promiscuous mode [ 348.812984][T19550] bridge0: port 2(bridge_slave_1) entered blocking state [ 348.820268][T19550] bridge0: port 2(bridge_slave_1) entered disabled state [ 348.832178][T19550] bridge_slave_1: entered allmulticast mode [ 348.839015][T19550] bridge_slave_1: entered promiscuous mode [ 348.847162][T19594] team0: Device ipvlan0 failed to register rx_handler [ 348.869089][ T1530] hsr_slave_0: left promiscuous mode [ 348.876134][ T1530] hsr_slave_1: left promiscuous mode [ 348.891884][ T1530] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 348.899708][ T1530] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 348.909064][ T1530] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 348.917291][ T1530] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 348.929291][ T1530] veth1_macvtap: left promiscuous mode [ 348.935344][ T1530] veth0_macvtap: left promiscuous mode [ 348.940977][ T1530] veth1_vlan: left promiscuous mode [ 348.946576][ T1530] veth0_vlan: left promiscuous mode [ 349.044353][ T1530] team0 (unregistering): Port device team_slave_1 removed [ 349.055471][ T1530] team0 (unregistering): Port device team_slave_0 removed [ 349.107173][T19550] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 349.119259][T19550] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 349.143941][T19550] team0: Port device team_slave_0 added [ 349.151219][T19550] team0: Port device team_slave_1 added [ 349.169580][T19550] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 349.176636][T19550] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 349.203315][T19550] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 349.215579][T19550] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 349.222749][T19550] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 349.249141][T19550] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 349.282334][T19550] hsr_slave_0: entered promiscuous mode [ 349.288960][T19550] hsr_slave_1: entered promiscuous mode [ 349.295554][T19550] debugfs: 'hsr0' already exists in 'hsr' [ 349.301492][T19550] Cannot create hsr debugfs directory [ 349.454461][T19550] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 349.465826][T19550] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 349.476305][T19550] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 349.488033][T19550] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 349.493573][T19628] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 349.548529][T19550] bridge0: port 2(bridge_slave_1) entered blocking state [ 349.555809][T19550] bridge0: port 2(bridge_slave_1) entered forwarding state [ 349.563235][T19550] bridge0: port 1(bridge_slave_0) entered blocking state [ 349.570503][T19550] bridge0: port 1(bridge_slave_0) entered forwarding state [ 349.710710][T19550] 8021q: adding VLAN 0 to HW filter on device bond0 [ 349.718489][ T7365] bridge0: port 1(bridge_slave_0) entered disabled state [ 349.730803][T19651] loop0: detected capacity change from 0 to 512 [ 349.738186][ T7365] bridge0: port 2(bridge_slave_1) entered disabled state [ 349.764513][T19648] validate_nla: 16 callbacks suppressed [ 349.764531][T19648] netlink: 'syz.5.5857': attribute type 7 has an invalid length. [ 349.779442][T19651] EXT4-fs (loop0): can't mount with journal_checksum, fs mounted w/o journal [ 349.797674][T19550] 8021q: adding VLAN 0 to HW filter on device team0 [ 349.809256][ T7365] bridge0: port 1(bridge_slave_0) entered blocking state [ 349.816784][ T7365] bridge0: port 1(bridge_slave_0) entered forwarding state [ 349.846529][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 349.853693][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 349.895576][T19664] netlink: 'syz.0.5864': attribute type 3 has an invalid length. [ 349.903471][T19664] netlink: 'syz.0.5864': attribute type 1 has an invalid length. [ 349.964095][T19550] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 350.126424][T19550] veth0_vlan: entered promiscuous mode [ 350.143438][T19550] veth1_vlan: entered promiscuous mode [ 350.166801][T19550] veth0_macvtap: entered promiscuous mode [ 350.175570][T19550] veth1_macvtap: entered promiscuous mode [ 350.191989][T19550] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 350.209668][T19550] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 350.230055][ T53] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.246645][ T53] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.256083][ T53] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.265525][ T53] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.350842][T19718] __nla_validate_parse: 17 callbacks suppressed [ 350.350860][T19718] netlink: 16 bytes leftover after parsing attributes in process `syz.8.5880'. [ 350.373147][T19720] netlink: 'syz.6.5881': attribute type 10 has an invalid length. [ 350.383000][T19720] team0: Device ipvlan0 failed to register rx_handler [ 350.518124][T19732] netlink: 'syz.5.5886': attribute type 3 has an invalid length. [ 350.526340][T19732] netlink: 'syz.5.5886': attribute type 1 has an invalid length. [ 350.534578][T19732] netlink: 181400 bytes leftover after parsing attributes in process `syz.5.5886'. [ 350.659054][T19745] loop0: detected capacity change from 0 to 512 [ 350.674649][T19745] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 350.684144][T19745] EXT4-fs (loop0): orphan cleanup on readonly fs [ 350.693238][T19745] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #16: comm syz.0.5892: corrupted inode contents [ 350.708143][T19745] EXT4-fs (loop0): Remounting filesystem read-only [ 350.714965][T19745] EXT4-fs (loop0): 1 truncate cleaned up [ 350.720861][T14890] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 350.731865][T14890] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 350.742820][T14890] EXT4-fs (loop0): Quota write (off=8, len=24) cancelled because transaction is not started [ 350.792120][T19745] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 350.821096][T19333] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 350.854806][T19756] openvswitch: netlink: EtherType 0 is less than min 600 [ 350.865143][T19752] netlink: 'syz.5.5894': attribute type 7 has an invalid length. [ 350.873017][T19752] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5894'. [ 350.904045][T19760] netlink: 'syz.3.5898': attribute type 3 has an invalid length. [ 350.912842][T19760] netlink: 'syz.3.5898': attribute type 1 has an invalid length. [ 350.920716][T19760] netlink: 181400 bytes leftover after parsing attributes in process `syz.3.5898'. [ 350.947123][T19763] blktrace: Concurrent blktraces are not allowed on loop6 [ 351.500751][T19789] openvswitch: netlink: EtherType 0 is less than min 600 [ 351.603984][T19802] netlink: 'syz.8.5915': attribute type 3 has an invalid length. [ 351.612006][T19802] netlink: 181400 bytes leftover after parsing attributes in process `syz.8.5915'. [ 351.730405][T19817] loop0: detected capacity change from 0 to 512 [ 351.737146][T19815] openvswitch: netlink: EtherType 0 is less than min 600 [ 351.756107][T19817] EXT4-fs (loop0): can't mount with journal_checksum, fs mounted w/o journal [ 351.833221][T19829] netlink: 181400 bytes leftover after parsing attributes in process `syz.8.5927'. [ 351.835318][T19831] blktrace: Concurrent blktraces are not allowed on loop0 [ 351.851962][ T29] kauditd_printk_skb: 464 callbacks suppressed [ 351.851979][ T29] audit: type=1326 audit(1766646013.332:22505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19797 comm="syz.5.5913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ffbb5f749 code=0x7ffc0000 [ 351.889753][ T29] audit: type=1326 audit(1766646013.332:22506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19797 comm="syz.5.5913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f3ffbb5f749 code=0x7ffc0000 [ 351.913731][ T29] audit: type=1326 audit(1766646013.332:22507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19797 comm="syz.5.5913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ffbb5f749 code=0x7ffc0000 [ 351.937888][ T29] audit: type=1326 audit(1766646013.332:22508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19797 comm="syz.5.5913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ffbb5f749 code=0x7ffc0000 [ 352.088850][T19847] openvswitch: netlink: EtherType 0 is less than min 600 [ 352.129502][T19858] netlink: 181400 bytes leftover after parsing attributes in process `syz.8.5939'. [ 352.191193][T19866] blktrace: Concurrent blktraces are not allowed on loop10 [ 352.213175][T19867] netlink: 28 bytes leftover after parsing attributes in process `syz.8.5940'. [ 352.238438][T19869] loop0: detected capacity change from 0 to 512 [ 352.245462][T19869] EXT4-fs: Ignoring removed mblk_io_submit option [ 352.253603][T19869] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 352.266168][T19869] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 352.275223][T19869] EXT4-fs (loop0): orphan cleanup on readonly fs [ 352.283953][T19869] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.5943: Invalid block bitmap block 0 in block_group 0 [ 352.301550][T19869] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.5943: Invalid block bitmap block 0 in block_group 0 [ 352.316442][T19869] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.5943: Invalid block bitmap block 0 in block_group 0 [ 352.331548][T19869] Quota error (device loop0): write_blk: dquota write failed [ 352.339135][T19869] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota [ 352.349584][T19869] EXT4-fs error (device loop0): ext4_acquire_dquot:6986: comm syz.0.5943: Failed to acquire dquot type 1 [ 352.366067][T19869] EXT4-fs (loop0): 1 orphan inode deleted [ 352.372793][ T420] Quota error (device loop0): do_check_range: Getting block 0 out of range 1-5 [ 352.382039][ T420] EXT4-fs error (device loop0): ext4_release_dquot:7022: comm kworker/u8:8: Failed to release dquot type 1 [ 352.402460][T19869] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 352.418743][ T29] audit: type=1326 audit(1766646013.892:22509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19868 comm="syz.0.5943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c4198f749 code=0x7ffc0000 [ 352.443094][ T29] audit: type=1326 audit(1766646013.892:22510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19868 comm="syz.0.5943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3c4198f749 code=0x7ffc0000 [ 352.471706][ T29] audit: type=1326 audit(1766646013.892:22511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19868 comm="syz.0.5943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c4198f749 code=0x7ffc0000 [ 352.508801][T19333] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 352.530249][T19883] netlink: 60 bytes leftover after parsing attributes in process `syz.5.5948'. [ 352.540102][T19883] unsupported nlmsg_type 40 [ 352.586286][T19887] Invalid argument reading file caps for ./file0 [ 352.661052][T19901] blktrace: Concurrent blktraces are not allowed on loop6 [ 352.676938][T19903] netlink: 40 bytes leftover after parsing attributes in process `syz.8.5955'. [ 353.482563][T19944] loop0: detected capacity change from 0 to 1024 [ 353.773988][T19968] ipvlan0: entered allmulticast mode [ 353.779357][T19968] veth0_vlan: entered allmulticast mode [ 353.786405][T19968] team0: Device ipvlan0 failed to register rx_handler [ 353.796342][T19964] syzkaller1: entered promiscuous mode [ 353.802308][T19964] syzkaller1: entered allmulticast mode [ 353.808783][T19968] loop0: detected capacity change from 0 to 512 [ 353.823449][T19968] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 353.834175][T19968] EXT4-fs error (device loop0): ext4_iget_extra_inode:5073: inode #15: comm syz.0.5983: corrupted in-inode xattr: e_value size too large [ 353.849527][T19968] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.5983: couldn't read orphan inode 15 (err -117) [ 353.862155][T19968] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 353.932572][T19977] openvswitch: netlink: EtherType 0 is less than min 600 [ 353.987735][T19333] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 354.048480][T19988] loop0: detected capacity change from 0 to 1024 [ 354.065290][T19988] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 354.140446][T19333] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 354.195006][T19998] loop0: detected capacity change from 0 to 512 [ 354.213089][T20000] openvswitch: netlink: EtherType 0 is less than min 600 [ 354.236287][T19998] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 354.249517][T19998] EXT4-fs (loop0): orphan cleanup on readonly fs [ 354.257505][T19998] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #16: comm syz.0.5994: corrupted inode contents [ 354.270133][T19998] EXT4-fs (loop0): Remounting filesystem read-only [ 354.280787][T19998] EXT4-fs (loop0): 1 truncate cleaned up [ 354.287323][ T7396] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 354.298049][ T7396] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 354.309668][ T7396] EXT4-fs (loop0): Quota write (off=8, len=24) cancelled because transaction is not started [ 354.322271][T19998] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 354.393370][T19333] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 354.438603][T20026] blktrace: Concurrent blktraces are not allowed on loop6 [ 354.716887][T20052] xt_cgroup: invalid path, errno=-2 [ 354.897336][T20064] validate_nla: 9 callbacks suppressed [ 354.897441][T20064] netlink: 'syz.8.6024': attribute type 10 has an invalid length. [ 354.913297][T20064] ipvlan0: entered allmulticast mode [ 354.918723][T20064] veth0_vlan: entered allmulticast mode [ 354.929458][T20064] team0: Device ipvlan0 failed to register rx_handler [ 355.089904][T20083] loop0: detected capacity change from 0 to 1024 [ 355.125863][T20083] EXT4-fs: Ignoring removed nomblk_io_submit option [ 355.145160][T20083] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 355.176444][T20066] EXT4-fs (loop0): shut down requested (1) [ 355.184103][T20066] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=16 [ 355.193103][T20066] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=16 [ 355.202300][T20066] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=16 [ 355.212749][T20066] SELinux: Context Ü is not valid (left unmapped). [ 355.219408][T20066] SELinux: Context syzkalle is not valid (left unmapped). [ 355.376908][T20106] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 355.687267][T20131] wg1 speed is unknown, defaulting to 1000 [ 355.693239][T20131] wg1 speed is unknown, defaulting to 1000 [ 355.699332][T20131] wg1 speed is unknown, defaulting to 1000 [ 355.706298][T20131] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 355.719410][T20131] wg1 speed is unknown, defaulting to 1000 [ 355.725797][T20131] wg1 speed is unknown, defaulting to 1000 [ 355.732096][T20131] wg1 speed is unknown, defaulting to 1000 [ 355.738466][T20131] wg1 speed is unknown, defaulting to 1000 [ 355.744752][T20131] wg1 speed is unknown, defaulting to 1000 [ 355.751013][T20131] wg1 speed is unknown, defaulting to 1000 [ 355.757382][T20131] wg1 speed is unknown, defaulting to 1000 [ 355.771894][T20131] wg1 speed is unknown, defaulting to 1000 [ 355.778827][T20131] wg1 speed is unknown, defaulting to 1000 [ 355.786084][T19333] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 355.796431][T20131] wg1 speed is unknown, defaulting to 1000 [ 355.978053][T20150] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 355.990499][T20157] netlink: 'syz.0.6059': attribute type 3 has an invalid length. [ 355.998362][T20157] netlink: 'syz.0.6059': attribute type 1 has an invalid length. [ 356.006544][T20157] __nla_validate_parse: 4 callbacks suppressed [ 356.006562][T20157] netlink: 181400 bytes leftover after parsing attributes in process `syz.0.6059'. [ 356.088786][T20167] netlink: 136 bytes leftover after parsing attributes in process `syz.3.6063'. [ 356.098365][T20167] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 356.157803][T20176] sd 0:0:1:0: device reset [ 356.225594][T20177] wg1 speed is unknown, defaulting to 1000 [ 356.414554][T20198] xt_hashlimit: max too large, truncated to 1048576 [ 356.429245][T20198] nfs4: Bad value for 'source' [ 356.453186][T20198] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6075'. [ 356.928390][T20202] netlink: 'syz.3.6077': attribute type 1 has an invalid length. [ 356.950932][T20202] bond1: entered promiscuous mode [ 356.956130][T20202] bond1: entered allmulticast mode [ 356.968373][T20202] 8021q: adding VLAN 0 to HW filter on device bond1 [ 356.990223][T20205] blktrace: Concurrent blktraces are not allowed on loop10 [ 356.997883][T20202] bridge1: entered promiscuous mode [ 356.998048][T20202] bridge1: entered allmulticast mode [ 356.998566][T20202] bond1: (slave bridge1): Enslaving as a backup interface with an up link [ 357.065467][T20209] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6080'. [ 357.075302][ T52] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 357.125195][ T29] kauditd_printk_skb: 547 callbacks suppressed [ 357.125211][ T29] audit: type=1400 audit(1766646018.582:23053): avc: denied { write } for pid=20208 comm="syz.3.6080" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 357.151809][ T29] audit: type=1400 audit(1766646018.592:23054): avc: denied { read } for pid=20208 comm="syz.3.6080" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 357.171764][ T29] audit: type=1400 audit(1766646018.602:23055): avc: denied { create } for pid=20208 comm="syz.3.6080" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 357.192584][ T29] audit: type=1400 audit(1766646018.602:23056): avc: denied { write } for pid=20208 comm="syz.3.6080" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 357.212964][ T385] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 357.356939][ T29] audit: type=1326 audit(1766646018.832:23057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20210 comm="syz.0.6081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c4198f749 code=0x7ffc0000 [ 357.381648][ T29] audit: type=1326 audit(1766646018.862:23058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20210 comm="syz.0.6081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7f3c4198f749 code=0x7ffc0000 [ 357.424379][ T29] audit: type=1326 audit(1766646018.892:23059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20210 comm="syz.0.6081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c4198f749 code=0x7ffc0000 [ 357.448811][ T29] audit: type=1326 audit(1766646018.892:23060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20210 comm="syz.0.6081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3c4198f749 code=0x7ffc0000 [ 357.473214][ T29] audit: type=1326 audit(1766646018.892:23061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20210 comm="syz.0.6081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c4198f749 code=0x7ffc0000 [ 357.497153][ T29] audit: type=1326 audit(1766646018.892:23062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20210 comm="syz.0.6081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3c4198f749 code=0x7ffc0000 [ 357.695483][T20229] loop0: detected capacity change from 0 to 512 [ 357.734215][T20229] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 357.763680][T20229] EXT4-fs (loop0): orphan cleanup on readonly fs [ 357.770237][T20227] netlink: 'syz.5.6087': attribute type 7 has an invalid length. [ 357.778195][T20227] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6087'. [ 357.794436][T20229] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #16: comm syz.0.6089: corrupted inode contents [ 357.810941][T20229] EXT4-fs (loop0): Remounting filesystem read-only [ 357.817946][T20229] EXT4-fs (loop0): 1 truncate cleaned up [ 357.824153][ T385] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 357.834751][ T385] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 357.899408][ T385] EXT4-fs (loop0): Quota write (off=8, len=24) cancelled because transaction is not started [ 357.920166][T20229] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 357.976090][T19333] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 358.016559][T20245] netlink: 'syz.0.6095': attribute type 3 has an invalid length. [ 358.024490][T20245] netlink: 'syz.0.6095': attribute type 1 has an invalid length. [ 358.032969][T20245] netlink: 181400 bytes leftover after parsing attributes in process `syz.0.6095'. [ 358.198150][T20261] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6104'. [ 358.261830][T20261] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 358.269325][T20261] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 358.283269][T20261] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 358.290711][T20261] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 358.309282][T20263] netlink: 'syz.6.6100': attribute type 7 has an invalid length. [ 358.317835][T20263] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6100'. [ 358.412146][T20266] netlink: 'syz.0.6105': attribute type 3 has an invalid length. [ 358.419954][T20266] netlink: 'syz.0.6105': attribute type 1 has an invalid length. [ 358.428396][T20266] netlink: 181400 bytes leftover after parsing attributes in process `syz.0.6105'. [ 358.546581][T20270] loop0: detected capacity change from 0 to 512 [ 358.560880][T20274] blktrace: Concurrent blktraces are not allowed on loop16 [ 358.573651][T20270] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 358.587872][T20270] EXT4-fs (loop0): orphan cleanup on readonly fs [ 358.601759][T20270] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #16: comm syz.0.6106: corrupted inode contents [ 358.621510][T20270] EXT4-fs (loop0): Remounting filesystem read-only [ 358.641388][T20270] EXT4-fs (loop0): 1 truncate cleaned up [ 358.655481][ T2016] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 358.666334][ T2016] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 358.691566][ T2016] EXT4-fs (loop0): Quota write (off=8, len=24) cancelled because transaction is not started [ 358.709111][T20278] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6108'. [ 358.709175][T20270] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 358.750555][T19333] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 358.775211][T20287] syzkaller1: entered promiscuous mode [ 358.780741][T20287] syzkaller1: entered allmulticast mode [ 358.946047][T20300] blktrace: Concurrent blktraces are not allowed on loop16 [ 359.076997][T20318] loop0: detected capacity change from 0 to 512 [ 359.116371][T20318] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 359.126519][T20318] EXT4-fs (loop0): orphan cleanup on readonly fs [ 359.144275][T20318] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #16: comm syz.0.6129: corrupted inode contents [ 359.170005][T20318] EXT4-fs (loop0): Remounting filesystem read-only [ 359.188429][T20318] EXT4-fs (loop0): 1 truncate cleaned up [ 359.189625][T20325] blktrace: Concurrent blktraces are not allowed on loop12 [ 359.206969][ T385] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 359.217930][ T385] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 359.229361][ T385] EXT4-fs (loop0): Quota write (off=8, len=24) cancelled because transaction is not started [ 359.240943][T20318] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 359.266058][T19333] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 359.481053][T20348] blktrace: Concurrent blktraces are not allowed on loop16 [ 359.582326][T20365] team0: Device ipvlan0 failed to register rx_handler [ 359.643061][T20365] loop0: detected capacity change from 0 to 512 [ 359.661856][T20365] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 359.714677][T20365] EXT4-fs error (device loop0): ext4_iget_extra_inode:5073: inode #15: comm syz.0.6151: corrupted in-inode xattr: e_value size too large [ 359.737508][T20365] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.6151: couldn't read orphan inode 15 (err -117) [ 359.750778][T20365] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 359.806080][T19333] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 359.963381][T20426] validate_nla: 11 callbacks suppressed [ 359.963401][T20426] netlink: 'syz.3.6175': attribute type 3 has an invalid length. [ 359.977180][T20426] netlink: 'syz.3.6175': attribute type 1 has an invalid length. [ 359.998248][T20422] netlink: 'syz.0.6167': attribute type 7 has an invalid length. [ 360.045079][T20435] netlink: 'syz.8.6179': attribute type 3 has an invalid length. [ 360.053006][T20435] netlink: 'syz.8.6179': attribute type 1 has an invalid length. [ 360.993250][T20471] blktrace: Concurrent blktraces are not allowed on loop10 [ 361.108553][T20459] wg1 speed is unknown, defaulting to 1000 [ 361.188357][T20477] netlink: 'syz.3.6192': attribute type 3 has an invalid length. [ 361.196329][T20477] netlink: 'syz.3.6192': attribute type 1 has an invalid length. [ 361.204192][T20477] __nla_validate_parse: 11 callbacks suppressed [ 361.204209][T20477] netlink: 181400 bytes leftover after parsing attributes in process `syz.3.6192'. [ 361.280488][T20459] chnl_net:caif_netlink_parms(): no params data found [ 361.491415][T20459] bridge0: port 1(bridge_slave_0) entered blocking state [ 361.498635][T20459] bridge0: port 1(bridge_slave_0) entered disabled state [ 361.518186][T20459] bridge_slave_0: entered allmulticast mode [ 361.538713][T20459] bridge_slave_0: entered promiscuous mode [ 361.554862][T20489] netlink: 'syz.3.6197': attribute type 7 has an invalid length. [ 361.563530][T20489] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6197'. [ 361.584033][T20497] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6201'. [ 361.595570][T20459] bridge0: port 2(bridge_slave_1) entered blocking state [ 361.602881][T20459] bridge0: port 2(bridge_slave_1) entered disabled state [ 361.616033][T20499] loop0: detected capacity change from 0 to 256 [ 361.629322][T20499] FAT-fs (loop0): Directory bread(block 64) failed [ 361.637815][T20459] bridge_slave_1: entered allmulticast mode [ 361.647448][T20459] bridge_slave_1: entered promiscuous mode [ 361.659887][T20499] FAT-fs (loop0): Directory bread(block 65) failed [ 361.672848][T20499] FAT-fs (loop0): Directory bread(block 66) failed [ 361.679765][T20499] FAT-fs (loop0): Directory bread(block 67) failed [ 361.686626][T20499] FAT-fs (loop0): Directory bread(block 68) failed [ 361.688674][T20459] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 361.705918][T20497] ip6gre1: entered allmulticast mode [ 361.711505][T20499] FAT-fs (loop0): Directory bread(block 69) failed [ 361.719927][T20459] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 361.736068][T20499] FAT-fs (loop0): Directory bread(block 70) failed [ 361.738056][T20503] blktrace: Concurrent blktraces are not allowed on loop16 [ 361.742920][T20499] FAT-fs (loop0): Directory bread(block 71) failed [ 361.764774][T20459] team0: Port device team_slave_0 added [ 361.771677][T20499] FAT-fs (loop0): Directory bread(block 72) failed [ 361.778525][T20499] FAT-fs (loop0): Directory bread(block 73) failed [ 361.786571][T20459] team0: Port device team_slave_1 added [ 361.810233][T20459] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 361.817975][T20459] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 361.844992][T20459] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 361.877484][T20459] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 361.884634][T20459] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 361.911226][T20459] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 361.922961][T20499] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 361.931637][T20499] FAT-fs (loop0): Filesystem has been set read-only [ 361.938309][T20499] syz.0.6202: attempt to access beyond end of device [ 361.938309][T20499] loop0: rw=524288, sector=1736, nr_sectors = 32 limit=256 [ 361.952742][T20499] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 361.970681][T20499] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 361.989616][T20459] hsr_slave_0: entered promiscuous mode [ 362.002072][T20459] hsr_slave_1: entered promiscuous mode [ 362.008429][T20499] syz.0.6202: attempt to access beyond end of device [ 362.008429][T20499] loop0: rw=8388608, sector=1736, nr_sectors = 8 limit=256 [ 362.023373][T20459] debugfs: 'hsr0' already exists in 'hsr' [ 362.029145][T20459] Cannot create hsr debugfs directory [ 362.197075][T20459] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.262705][ T29] kauditd_printk_skb: 274 callbacks suppressed [ 362.262722][ T29] audit: type=1400 audit(1766646023.732:23319): avc: denied { create } for pid=20521 comm="syz.3.6213" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 362.290385][ T29] audit: type=1400 audit(1766646023.732:23320): avc: denied { write } for pid=20521 comm="syz.3.6213" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 362.314738][T20459] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.334624][T20526] blktrace: Concurrent blktraces are not allowed on loop0 [ 362.356458][ T29] audit: type=1326 audit(1766646023.832:23321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20521 comm="syz.3.6213" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5408a6f749 code=0x0 [ 362.382679][T20459] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.411008][ T29] audit: type=1400 audit(1766646023.882:23322): avc: denied { ioctl } for pid=20527 comm="syz.0.6215" path="socket:[69631]" dev="sockfs" ino=69631 ioctlcmd=0x9432 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 362.437303][ T29] audit: type=1400 audit(1766646023.882:23323): avc: denied { setopt } for pid=20527 comm="syz.0.6215" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 362.457766][ T29] audit: type=1400 audit(1766646023.882:23324): avc: denied { write } for pid=20527 comm="syz.0.6215" path="socket:[69631]" dev="sockfs" ino=69631 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 362.488790][T20459] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.500625][ T29] audit: type=1400 audit(1766646023.952:23325): avc: denied { read write } for pid=20529 comm="syz.8.6216" name="uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 362.500655][T20530] sch_tbf: burst 22 is lower than device lo mtu (65550) ! [ 362.532383][ T29] audit: type=1400 audit(1766646023.952:23326): avc: denied { open } for pid=20529 comm="syz.8.6216" path="/dev/uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 362.556662][ T29] audit: type=1326 audit(1766646023.992:23327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20529 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34ecbdf749 code=0x7ffc0000 [ 362.580069][ T29] audit: type=1326 audit(1766646023.992:23328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20529 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f34ecbdf749 code=0x7ffc0000 [ 362.640375][T20459] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 362.660048][T20459] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 362.682510][T20459] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 362.702796][T20459] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 362.789376][T20459] 8021q: adding VLAN 0 to HW filter on device bond0 [ 362.813066][T20459] 8021q: adding VLAN 0 to HW filter on device team0 [ 362.823991][ T385] bridge0: port 1(bridge_slave_0) entered blocking state [ 362.831341][ T385] bridge0: port 1(bridge_slave_0) entered forwarding state [ 362.857670][ T385] bridge0: port 2(bridge_slave_1) entered blocking state [ 362.864904][ T385] bridge0: port 2(bridge_slave_1) entered forwarding state [ 363.021061][T20459] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 363.113568][T20563] blktrace: Concurrent blktraces are not allowed on loop0 [ 363.179791][T20572] netlink: 'syz.0.6226': attribute type 3 has an invalid length. [ 363.187767][T20572] netlink: 'syz.0.6226': attribute type 1 has an invalid length. [ 363.195724][T20572] netlink: 181400 bytes leftover after parsing attributes in process `syz.0.6226'. [ 363.225849][T20575] netlink: 181400 bytes leftover after parsing attributes in process `syz.0.6227'. [ 363.245830][T20459] veth0_vlan: entered promiscuous mode [ 363.258294][T20459] veth1_vlan: entered promiscuous mode [ 363.292149][T20459] veth0_macvtap: entered promiscuous mode [ 363.308156][T20459] veth1_macvtap: entered promiscuous mode [ 363.334568][T20459] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 363.362643][T20459] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 363.389496][T18005] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.424090][T18005] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.442904][T20584] xt_hashlimit: max too large, truncated to 1048576 [ 363.461850][T18005] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.461932][T20584] nfs4: Bad value for 'source' [ 363.487504][T18005] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.497564][T20589] loop0: detected capacity change from 0 to 128 [ 363.587910][T20592] loop6: detected capacity change from 0 to 1024 [ 363.597125][T20592] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 363.889455][T20595] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6235'. [ 364.335714][T20631] loop0: detected capacity change from 0 to 128 [ 364.387575][T20631] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 364.419812][T20631] ext4 filesystem being mounted at /119/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 364.541671][T19333] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 364.563546][T20653] netlink: 181400 bytes leftover after parsing attributes in process `syz.8.6261'. [ 364.586625][T20612] loop6: detected capacity change from 0 to 512 [ 364.814190][T20612] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 364.830955][T20612] ext4 filesystem being mounted at /3/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 365.077761][T20459] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 365.330713][T20717] blktrace: Concurrent blktraces are not allowed on loop12 [ 365.615951][T20739] validate_nla: 4 callbacks suppressed [ 365.615970][T20739] netlink: 'syz.3.6296': attribute type 3 has an invalid length. [ 365.629683][T20739] netlink: 'syz.3.6296': attribute type 1 has an invalid length. [ 365.638073][T20739] netlink: 181400 bytes leftover after parsing attributes in process `syz.3.6296'. [ 365.678644][T20747] loop0: detected capacity change from 0 to 128 [ 365.697701][T20747] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 54) [ 365.705989][T20747] FAT-fs (loop0): Filesystem has been set read-only [ 365.751766][T19333] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 54) [ 365.813212][T20755] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 365.936047][T20770] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 365.945326][T20770] vhci_hcd vhci_hcd.2: invalid port number 96 [ 365.952001][T20770] vhci_hcd vhci_hcd.2: default hub control req: 0300 vfffa i0060 l0 [ 366.010506][T20778] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6313'. [ 366.039783][T20778] bridge_slave_1: left allmulticast mode [ 366.046144][T20778] bridge_slave_1: left promiscuous mode [ 366.052299][T20778] bridge0: port 2(bridge_slave_1) entered disabled state [ 366.063130][T20778] bridge_slave_0: left allmulticast mode [ 366.068828][T20778] bridge_slave_0: left promiscuous mode [ 366.075625][T20778] bridge0: port 1(bridge_slave_0) entered disabled state [ 366.116182][T20780] ip6gre0: entered promiscuous mode [ 366.124941][T20780] team0: Device ip6gre0 is of different type [ 366.136614][T20780] sd 0:0:1:0: device reset [ 366.273706][T20805] netlink: 'syz.8.6322': attribute type 3 has an invalid length. [ 366.282212][T20805] netlink: 'syz.8.6322': attribute type 1 has an invalid length. [ 366.290062][T20805] netlink: 181400 bytes leftover after parsing attributes in process `syz.8.6322'. [ 366.300439][T20790] netlink: 32 bytes leftover after parsing attributes in process `syz.5.6318'. [ 366.309513][T20790] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6318'. [ 366.359993][T20793] random: crng reseeded on system resumption [ 366.388461][T20816] blktrace: Concurrent blktraces are not allowed on loop6 [ 366.409556][T20815] xt_hashlimit: max too large, truncated to 1048576 [ 366.438048][T20815] nfs4: Bad value for 'source' [ 366.443378][T20822] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 366.450658][T20822] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 366.458230][T20822] vhci_hcd vhci_hcd.0: Device attached [ 366.489124][T20822] x_tables: duplicate underflow at hook 1 [ 366.504485][T20823] vhci_hcd: connection closed [ 366.504850][ T1604] vhci_hcd vhci_hcd.5: stop threads [ 366.515158][ T1604] vhci_hcd vhci_hcd.5: release socket [ 366.520628][ T1604] vhci_hcd vhci_hcd.5: disconnect device [ 366.529661][T20828] usb usb1: usbfs: process 20828 (syz.8.6332) did not claim interface 0 before use [ 366.658596][T20847] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 366.677840][T20847] SELinux: failed to load policy [ 366.864737][T20867] netlink: 4900 bytes leftover after parsing attributes in process `syz.6.6348'. [ 366.874227][T20867] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 366.933105][ T37] Bluetooth: hci0: Frame reassembly failed (-84) [ 366.989803][T20877] netlink: 'syz.3.6351': attribute type 3 has an invalid length. [ 366.997755][T20877] netlink: 'syz.3.6351': attribute type 1 has an invalid length. [ 367.006173][T20877] netlink: 181400 bytes leftover after parsing attributes in process `syz.3.6351'. [ 367.057472][T20881] loop2: detected capacity change from 0 to 7 [ 367.064524][T20881] loop2: [ 367.284068][ T29] kauditd_printk_skb: 472 callbacks suppressed [ 367.284086][ T29] audit: type=1326 audit(1766646028.762:23801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20900 comm="syz.5.6363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ffbb5f749 code=0x7ffc0000 [ 367.338578][ T29] audit: type=1326 audit(1766646028.762:23802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20900 comm="syz.5.6363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ffbb5f749 code=0x7ffc0000 [ 367.346263][T20905] wg1 speed is unknown, defaulting to 1000 [ 367.363836][ T29] audit: type=1326 audit(1766646028.782:23803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20900 comm="syz.5.6363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f3ffbb5f749 code=0x7ffc0000 [ 367.393828][ T29] audit: type=1326 audit(1766646028.782:23804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20900 comm="syz.5.6363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ffbb5f749 code=0x7ffc0000 [ 367.417898][ T29] audit: type=1326 audit(1766646028.782:23805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20900 comm="syz.5.6363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ffbb5f749 code=0x7ffc0000 [ 367.442236][ T29] audit: type=1326 audit(1766646028.782:23806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20900 comm="syz.5.6363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=26 compat=0 ip=0x7f3ffbb5f749 code=0x7ffc0000 [ 367.466349][ T29] audit: type=1326 audit(1766646028.782:23807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20900 comm="syz.5.6363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ffbb5f749 code=0x7ffc0000 [ 367.490932][ T29] audit: type=1326 audit(1766646028.782:23808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20900 comm="syz.5.6363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ffbb5f749 code=0x7ffc0000 [ 367.515300][ T29] audit: type=1326 audit(1766646028.792:23809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20904 comm="syz.0.6364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c4198f749 code=0x7ffc0000 [ 367.539155][ T29] audit: type=1326 audit(1766646028.792:23810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20904 comm="syz.0.6364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c4198f749 code=0x7ffc0000 [ 367.614979][T20905] loop0: detected capacity change from 0 to 2048 [ 367.623920][T20913] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6367'. [ 367.675478][T20905] Alternate GPT is invalid, using primary GPT. [ 367.682381][T20905] loop0: p2 p3 p7 [ 367.813995][T20921] nftables ruleset with unbound chain [ 367.836759][T20923] xt_hashlimit: max too large, truncated to 1048576 [ 367.849451][T20923] nfs4: Bad value for 'source' [ 367.992885][T20939] netlink: 'syz.8.6380': attribute type 3 has an invalid length. [ 368.000906][T20939] netlink: 'syz.8.6380': attribute type 1 has an invalid length. [ 368.009507][T20939] netlink: 181400 bytes leftover after parsing attributes in process `syz.8.6380'. [ 368.216468][T20947] netlink: 'syz.8.6381': attribute type 7 has an invalid length. [ 368.225165][T20947] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6381'. [ 368.737058][T20995] openvswitch: netlink: Message has 8 unknown bytes. [ 368.991561][ T3565] Bluetooth: hci0: command 0x1003 tx timeout [ 368.997824][ T3652] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 369.456046][T21040] netlink: 'syz.3.6423': attribute type 7 has an invalid length. [ 369.464222][T21040] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6423'. [ 369.631077][T21047] ip_tunnel: non-ECT from 0.0.64.0 with TOS=0x3 [ 369.710087][T21051] xt_hashlimit: max too large, truncated to 1048576 [ 369.737613][T21053] loop6: detected capacity change from 0 to 512 [ 369.773803][T21053] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 369.803534][T21053] EXT4-fs (loop6): orphan cleanup on readonly fs [ 369.812427][T21053] EXT4-fs error (device loop6): ext4_do_update_inode:5617: inode #16: comm syz.6.6429: corrupted inode contents [ 369.829101][T21053] EXT4-fs (loop6): Remounting filesystem read-only [ 369.850381][T21053] EXT4-fs (loop6): 1 truncate cleaned up [ 369.860720][ T327] EXT4-fs (loop6): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 369.871382][ T327] EXT4-fs (loop6): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 369.912703][ T327] EXT4-fs (loop6): Quota write (off=8, len=24) cancelled because transaction is not started [ 369.924326][T21053] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 369.969600][T20459] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 370.006232][T21061] openvswitch: netlink: Key type 11954 is out of range max 32 [ 370.052931][T21065] netlink: 181400 bytes leftover after parsing attributes in process `syz.5.6434'. [ 370.122802][T21071] ip6gre1: entered promiscuous mode [ 370.128432][T21071] ip6gre1: entered allmulticast mode [ 370.242984][T21091] team0: Device ipvlan0 failed to register rx_handler [ 370.583932][T21125] blktrace: Concurrent blktraces are not allowed on loop16 [ 370.620904][T21133] blktrace: Concurrent blktraces are not allowed on loop16 [ 370.766109][T21157] loop0: detected capacity change from 0 to 512 [ 370.783915][T21157] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 370.792242][T21157] EXT4-fs (loop0): orphan cleanup on readonly fs [ 370.801305][T21152] validate_nla: 3 callbacks suppressed [ 370.801323][T21152] netlink: 'syz.8.6449': attribute type 7 has an invalid length. [ 370.822847][T21157] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #16: comm syz.0.6450: corrupted inode contents [ 370.837444][T21157] EXT4-fs (loop0): Remounting filesystem read-only [ 370.844588][T21157] EXT4-fs (loop0): 1 truncate cleaned up [ 370.850632][ T2452] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 370.862334][ T2452] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 370.873439][ T2452] EXT4-fs (loop0): Quota write (off=8, len=24) cancelled because transaction is not started [ 370.884346][T21157] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 371.375093][T19333] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 371.404111][T21253] xt_hashlimit: max too large, truncated to 1048576 [ 371.631341][T21280] netlink: 'syz.8.6468': attribute type 3 has an invalid length. [ 371.639350][T21280] netlink: 'syz.8.6468': attribute type 1 has an invalid length. [ 371.647293][T21280] __nla_validate_parse: 2 callbacks suppressed [ 371.647309][T21280] netlink: 181400 bytes leftover after parsing attributes in process `syz.8.6468'. [ 371.831027][T21291] netlink: 'syz.8.6471': attribute type 7 has an invalid length. [ 371.839129][T21291] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6471'. [ 371.978002][T21313] loop0: detected capacity change from 0 to 128 [ 371.993103][T21313] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 372.012923][T21313] ext4 filesystem being mounted at /172/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 372.069625][T21323] loop6: detected capacity change from 0 to 128 [ 372.077419][T19333] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 372.287074][T21323] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6488'. [ 372.301056][ T29] kauditd_printk_skb: 492 callbacks suppressed [ 372.301094][ T29] audit: type=1400 audit(1766646033.782:24291): avc: denied { ioctl } for pid=21322 comm="syz.6.6488" path="socket:[72379]" dev="sockfs" ino=72379 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 372.334210][ T29] audit: type=1400 audit(1766646033.782:24292): avc: denied { create } for pid=21322 comm="syz.6.6488" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 372.355065][ T29] audit: type=1400 audit(1766646033.782:24293): avc: denied { accept } for pid=21322 comm="syz.6.6488" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 372.377476][ T29] audit: type=1400 audit(1766646033.832:24294): avc: denied { egress } for pid=21322 comm="syz.6.6488" saddr=fe80::1b daddr=ff02::2 netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 372.401650][ T29] audit: type=1400 audit(1766646033.832:24295): avc: denied { sendto } for pid=21322 comm="syz.6.6488" saddr=fe80::1b daddr=ff02::2 netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 372.729541][T21358] wg1 speed is unknown, defaulting to 1000 [ 372.884448][ T29] audit: type=1400 audit(1766646034.362:24296): avc: denied { unmount } for pid=20459 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 372.929598][T21373] loop6: detected capacity change from 0 to 128 [ 372.938221][T21373] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 372.952015][T21373] ext4 filesystem being mounted at /49/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 372.982960][ T29] audit: type=1400 audit(1766646034.462:24297): avc: denied { kexec_image_load } for pid=21377 comm="syz.5.6511" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 373.065484][T20459] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 373.114108][T21385] blktrace: Concurrent blktraces are not allowed on loop0 [ 373.160224][ T29] audit: type=1400 audit(1766646034.632:24298): avc: denied { sys_module } for pid=21388 comm="syz.6.6516" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 373.285228][T21399] FAULT_INJECTION: forcing a failure. [ 373.285228][T21399] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 373.298734][T21399] CPU: 1 UID: 0 PID: 21399 Comm: syz.3.6520 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 373.298828][T21399] Tainted: [W]=WARN [ 373.298835][T21399] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 373.298847][T21399] Call Trace: [ 373.298923][T21399] [ 373.298932][T21399] __dump_stack+0x1d/0x30 [ 373.298957][T21399] dump_stack_lvl+0x95/0xd0 [ 373.298978][T21399] dump_stack+0x15/0x1b [ 373.299062][T21399] should_fail_ex+0x265/0x280 [ 373.299085][T21399] should_fail+0xb/0x20 [ 373.299168][T21399] should_fail_usercopy+0x1a/0x20 [ 373.299191][T21399] _copy_to_user+0x20/0xa0 [ 373.299232][T21399] simple_read_from_buffer+0xb5/0x130 [ 373.299281][T21399] proc_fail_nth_read+0x10e/0x150 [ 373.299308][T21399] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 373.299408][T21399] vfs_read+0x1a8/0x770 [ 373.299425][T21399] ? __rcu_read_unlock+0x4f/0x70 [ 373.299444][T21399] ? __fget_files+0x184/0x1c0 [ 373.299521][T21399] ? mutex_lock+0x58/0x90 [ 373.299549][T21399] ksys_read+0xda/0x1a0 [ 373.299568][T21399] __x64_sys_read+0x40/0x50 [ 373.299586][T21399] x64_sys_call+0x2889/0x3000 [ 373.299631][T21399] do_syscall_64+0xca/0x2b0 [ 373.299750][T21399] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 373.299771][T21399] RIP: 0033:0x7f5408a6e15c [ 373.299787][T21399] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 373.299850][T21399] RSP: 002b:00007f54074cf030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 373.299871][T21399] RAX: ffffffffffffffda RBX: 00007f5408cc5fa0 RCX: 00007f5408a6e15c [ 373.299883][T21399] RDX: 000000000000000f RSI: 00007f54074cf0a0 RDI: 0000000000000006 [ 373.299929][T21399] RBP: 00007f54074cf090 R08: 0000000000000000 R09: 0000000000000000 [ 373.299941][T21399] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 373.299953][T21399] R13: 00007f5408cc6038 R14: 00007f5408cc5fa0 R15: 00007ffe4d5d5e08 [ 373.299971][T21399] [ 373.549717][T21404] netlink: 'syz.3.6523': attribute type 3 has an invalid length. [ 373.553908][ T29] audit: type=1400 audit(1766646035.012:24299): avc: denied { create } for pid=21402 comm="syz.0.6521" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 373.557582][T21404] netlink: 'syz.3.6523': attribute type 1 has an invalid length. [ 373.577970][ T29] audit: type=1400 audit(1766646035.012:24300): avc: denied { ioctl } for pid=21402 comm="syz.0.6521" path="socket:[72894]" dev="sockfs" ino=72894 ioctlcmd=0x89f7 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 373.612544][T21404] netlink: 181400 bytes leftover after parsing attributes in process `syz.3.6523'. [ 373.645189][T21409] xt_hashlimit: max too large, truncated to 1048576 [ 373.881763][T21429] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 373.954120][T21444] netlink: 'syz.5.6541': attribute type 10 has an invalid length. [ 373.964765][T21444] team0: Device ipvlan0 failed to register rx_handler [ 373.995350][T21448] netlink: 'syz.0.6537': attribute type 3 has an invalid length. [ 374.003274][T21448] netlink: 'syz.0.6537': attribute type 1 has an invalid length. [ 374.011299][T21448] netlink: 181400 bytes leftover after parsing attributes in process `syz.0.6537'. [ 374.039133][T21450] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6540'. [ 374.269551][T21465] netlink: 'syz.8.6549': attribute type 3 has an invalid length. [ 374.278159][T21465] netlink: 181400 bytes leftover after parsing attributes in process `syz.8.6549'. [ 374.352052][T21477] netlink: 181400 bytes leftover after parsing attributes in process `syz.0.6553'. [ 374.398820][T21481] blktrace: Concurrent blktraces are not allowed on loop0 [ 374.458418][T21491] netlink: 181400 bytes leftover after parsing attributes in process `syz.3.6561'. [ 374.602606][T21504] netlink: 181400 bytes leftover after parsing attributes in process `syz.0.6567'. [ 374.633114][T21506] blktrace: Concurrent blktraces are not allowed on loop0 [ 374.967972][T21535] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 374.984169][T21537] loop0: detected capacity change from 0 to 128 [ 374.996140][T21537] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 375.009338][T21537] ext4 filesystem being mounted at /199/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 375.050301][T21544] team0: Device ipvlan0 failed to register rx_handler [ 375.079728][T19333] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 375.134073][T21548] team0: Device ipvlan0 failed to register rx_handler [ 375.157004][T21548] loop0: detected capacity change from 0 to 512 [ 375.165014][T21548] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 375.175673][T21548] EXT4-fs error (device loop0): ext4_iget_extra_inode:5073: inode #15: comm syz.0.6585: corrupted in-inode xattr: e_value size too large [ 375.192626][T21548] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.6585: couldn't read orphan inode 15 (err -117) [ 375.208701][T21548] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 375.330885][T19333] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 375.361982][T21569] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 375.500811][T21571] wg1 speed is unknown, defaulting to 1000 [ 375.533827][T21578] loop6: detected capacity change from 0 to 2048 [ 375.586177][T21578] Alternate GPT is invalid, using primary GPT. [ 375.593010][T21578] loop6: p2 p3 p7 [ 375.854208][T21602] validate_nla: 13 callbacks suppressed [ 375.854230][T21602] netlink: 'syz.3.6608': attribute type 3 has an invalid length. [ 375.867931][T21602] netlink: 'syz.3.6608': attribute type 1 has an invalid length. [ 375.975966][T21618] loop6: detected capacity change from 0 to 128 [ 376.001065][T21618] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 376.014981][T21618] ext4 filesystem being mounted at /73/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 376.100222][T21629] netlink: 'syz.3.6621': attribute type 3 has an invalid length. [ 376.108200][T21629] netlink: 'syz.3.6621': attribute type 1 has an invalid length. [ 376.119935][T20459] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 376.157301][T21635] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 376.210704][T21647] xt_hashlimit: max too large, truncated to 1048576 [ 376.261012][T21653] netlink: 'syz.6.6631': attribute type 3 has an invalid length. [ 376.269576][T21653] netlink: 'syz.6.6631': attribute type 1 has an invalid length. [ 376.371984][T21657] netlink: 'syz.8.6630': attribute type 7 has an invalid length. [ 376.381262][T21665] netlink: 'syz.6.6636': attribute type 3 has an invalid length. [ 376.389804][T21665] netlink: 'syz.6.6636': attribute type 1 has an invalid length. [ 376.438697][T21672] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 376.468345][T21681] loop0: detected capacity change from 0 to 128 [ 376.478724][T21681] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 376.491884][T21681] ext4 filesystem being mounted at /206/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 376.549374][T19333] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 376.750798][T21700] netlink: 'syz.0.6651': attribute type 3 has an invalid length. [ 376.758824][T21700] __nla_validate_parse: 8 callbacks suppressed [ 376.758905][T21700] netlink: 181400 bytes leftover after parsing attributes in process `syz.0.6651'. [ 376.870320][T21707] blktrace: Concurrent blktraces are not allowed on loop0 [ 377.170165][T21732] blktrace: Concurrent blktraces are not allowed on loop16 [ 377.255975][T21738] team0: Device ipvlan0 failed to register rx_handler [ 377.303524][ T29] kauditd_printk_skb: 272 callbacks suppressed [ 377.303541][ T29] audit: type=1326 audit(1766646038.782:24573): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21721 comm="syz.0.6662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f3c4198f749 code=0x7ffc0000 [ 377.380511][T21723] wg1 speed is unknown, defaulting to 1000 [ 377.397175][ T29] audit: type=1326 audit(1766646038.872:24574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21726 comm="syz.3.6664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5408a6f749 code=0x7ffc0000 [ 377.421012][ T29] audit: type=1326 audit(1766646038.872:24575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21726 comm="syz.3.6664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7f5408a6f749 code=0x7ffc0000 [ 377.476235][ T29] audit: type=1326 audit(1766646038.872:24576): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21721 comm="syz.0.6662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c4198f749 code=0x7ffc0000 [ 377.502784][ T29] audit: type=1326 audit(1766646038.872:24577): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21721 comm="syz.0.6662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c4198f749 code=0x7ffc0000 [ 377.527743][ T29] audit: type=1326 audit(1766646038.932:24578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21726 comm="syz.3.6664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5408a6f749 code=0x7ffc0000 [ 377.552471][ T29] audit: type=1326 audit(1766646038.932:24579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21726 comm="syz.3.6664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5408a6f749 code=0x7ffc0000 [ 377.576941][ T29] audit: type=1326 audit(1766646038.932:24580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21726 comm="syz.3.6664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5408a6f749 code=0x7ffc0000 [ 377.601491][ T29] audit: type=1326 audit(1766646038.932:24581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21726 comm="syz.3.6664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5408a6f749 code=0x7ffc0000 [ 377.626046][ T29] audit: type=1326 audit(1766646038.932:24582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21726 comm="syz.3.6664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5408a6f749 code=0x7ffc0000 [ 377.796133][T21761] syz_tun: entered allmulticast mode [ 377.805538][T21761] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 377.814114][T21761] mroute: pending queue full, dropping entries [ 377.876595][T21777] netlink: 181400 bytes leftover after parsing attributes in process `syz.0.6683'. [ 377.952798][T21785] xt_hashlimit: max too large, truncated to 1048576 [ 378.444335][T21809] wg1 speed is unknown, defaulting to 1000 [ 378.477575][T21811] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 378.617935][T21824] netlink: 181400 bytes leftover after parsing attributes in process `syz.8.6702'. [ 378.683813][T21830] netlink: 36 bytes leftover after parsing attributes in process `syz.8.6706'. [ 378.712583][T21827] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6700'. [ 378.797116][T21841] xt_hashlimit: max too large, truncated to 1048576 [ 378.865095][T21853] netlink: 181400 bytes leftover after parsing attributes in process `syz.3.6716'. [ 378.956534][T21866] netlink: 181400 bytes leftover after parsing attributes in process `syz.6.6721'. [ 379.057265][T21884] netlink: 181400 bytes leftover after parsing attributes in process `syz.6.6729'. [ 379.072481][T21887] blktrace: Concurrent blktraces are not allowed on loop6 [ 379.153811][T21898] netlink: 181400 bytes leftover after parsing attributes in process `syz.6.6736'. [ 379.210743][T21906] loop6: detected capacity change from 0 to 512 [ 379.218557][T21906] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 379.240731][T21909] syz_tun: entered allmulticast mode [ 379.294118][T21916] netlink: 181400 bytes leftover after parsing attributes in process `syz.6.6744'. [ 379.342841][T21922] blktrace: Concurrent blktraces are not allowed on loop12 [ 379.435335][T21931] blktrace: Concurrent blktraces are not allowed on loop12 [ 379.537090][T21951] blktrace: Concurrent blktraces are not allowed on loop12 [ 379.645213][T21965] xt_hashlimit: max too large, truncated to 1048576 [ 379.665988][T21966] loop6: detected capacity change from 0 to 512 [ 379.675675][T21966] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 379.688879][T21966] EXT4-fs (loop6): 1 truncate cleaned up [ 379.695126][T21966] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 379.759845][T21969] wg1 speed is unknown, defaulting to 1000 [ 379.789406][T20459] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 379.842691][T21986] loop6: detected capacity change from 0 to 512 [ 379.850543][T21986] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 379.859011][T21986] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c000e118, mo2=0002] [ 379.867602][T21986] EXT4-fs (loop6): orphan cleanup on readonly fs [ 379.874312][T21986] EXT4-fs warning (device loop6): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 379.889769][T21986] EXT4-fs (loop6): Cannot turn on quotas: error -22 [ 379.897872][T21986] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.6772: bg 0: block 40: padding at end of block bitmap is not set [ 379.913387][T21986] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 379.922915][T21986] EXT4-fs (loop6): 1 truncate cleaned up [ 379.929398][T21986] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 379.969308][T21986] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=21986 comm=syz.6.6772 [ 380.003262][T20459] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 380.049641][T21998] bridge_slave_0: left allmulticast mode [ 380.055468][T21998] bridge_slave_0: left promiscuous mode [ 380.061351][T21998] bridge0: port 1(bridge_slave_0) entered disabled state [ 380.072984][T21998] bridge_slave_1: left allmulticast mode [ 380.078674][T21998] bridge_slave_1: left promiscuous mode [ 380.084793][T21998] bridge0: port 2(bridge_slave_1) entered disabled state [ 380.093313][T22007] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 380.104633][T21998] bond0: (slave bond_slave_0): Releasing backup interface [ 380.115803][T21998] bond0: (slave bond_slave_1): Releasing backup interface [ 380.129316][T21998] team0: Port device team_slave_0 removed [ 380.138999][T21998] team0: Port device team_slave_1 removed [ 380.150010][T21998] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 380.200149][T22015] nfs: Unknown parameter '' [ 380.209663][T22014] blktrace: Concurrent blktraces are not allowed on loop0 [ 380.233676][T22017] loop6: detected capacity change from 0 to 512 [ 380.257250][T22021] ip6gre1: entered promiscuous mode [ 380.262688][T22021] ip6gre1: entered allmulticast mode [ 380.278991][T22015] wg1 speed is unknown, defaulting to 1000 [ 380.297228][T22017] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 380.359305][T22017] EXT4-fs (loop6): orphan cleanup on readonly fs [ 380.373549][T22019] loop0: detected capacity change from 0 to 512 [ 380.380787][T22019] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 380.432913][T22017] EXT4-fs error (device loop6): ext4_do_update_inode:5617: inode #16: comm syz.6.6786: corrupted inode contents [ 380.477280][T22017] EXT4-fs (loop6): Remounting filesystem read-only [ 380.493236][T22017] EXT4-fs (loop6): 1 truncate cleaned up [ 380.494433][T22035] block device autoloading is deprecated and will be removed. [ 380.499337][ T37] EXT4-fs (loop6): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 380.518264][ T37] EXT4-fs (loop6): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 380.529054][T22019] EXT4-fs error (device loop0): ext4_get_branch:178: inode #11: block 4294967295: comm syz.0.6787: invalid block [ 380.541751][ T37] EXT4-fs (loop6): Quota write (off=8, len=24) cancelled because transaction is not started [ 380.552080][T22019] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.6787: invalid indirect mapped block 4294967295 (level 1) [ 380.567960][T22019] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.6787: invalid indirect mapped block 4294967295 (level 1) [ 380.568640][T22017] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 380.582676][T22019] EXT4-fs (loop0): 2 truncates cleaned up [ 380.602278][T22019] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 380.617235][T22039] xt_hashlimit: max too large, truncated to 1048576 [ 380.701647][T20459] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 380.799083][T22049] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 380.825724][T22051] loop6: detected capacity change from 0 to 128 [ 380.835093][T22015] Set syz1 is full, maxelem 65536 reached [ 380.838604][T22051] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 380.854547][T22051] ext4 filesystem being mounted at /118/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 380.935794][T20459] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 381.068443][T22057] validate_nla: 20 callbacks suppressed [ 381.068462][T22057] netlink: 'syz.8.6801': attribute type 7 has an invalid length. [ 381.097188][T19333] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 381.145350][T22071] netlink: 'syz.6.6808': attribute type 3 has an invalid length. [ 381.153970][T22071] netlink: 'syz.6.6808': attribute type 1 has an invalid length. [ 381.198224][T22073] wg1 speed is unknown, defaulting to 1000 [ 381.255186][T22076] loop0: detected capacity change from 0 to 2048 [ 381.304724][T22076] Alternate GPT is invalid, using primary GPT. [ 381.311135][T22076] loop0: p2 p3 p7 [ 381.326777][T22078] wg1 speed is unknown, defaulting to 1000 [ 381.419651][T22084] blktrace: Concurrent blktraces are not allowed on loop0 [ 381.550814][T22094] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 381.629191][T22104] loop0: detected capacity change from 0 to 128 [ 381.639116][T22104] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 381.655115][T22104] ext4 filesystem being mounted at /241/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 381.717074][T19333] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 381.721718][T22108] wg1 speed is unknown, defaulting to 1000 [ 381.828162][T22112] blktrace: Concurrent blktraces are not allowed on loop6 [ 382.001662][T22133] loop6: detected capacity change from 0 to 128 [ 382.024589][T22133] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 382.061008][T22133] ext4 filesystem being mounted at /131/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 382.195848][T22141] loop0: detected capacity change from 0 to 2048 [ 382.204477][T20459] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 382.221178][T22137] wg1 speed is unknown, defaulting to 1000 [ 382.243180][T22150] blktrace: Concurrent blktraces are not allowed on loop12 [ 382.308746][T22141] Alternate GPT is invalid, using primary GPT. [ 382.313121][T22156] loop6: detected capacity change from 0 to 512 [ 382.315214][T22141] loop0: p2 p3 p7 [ 382.332196][ T29] kauditd_printk_skb: 800 callbacks suppressed [ 382.332215][ T29] audit: type=1326 audit(1766646043.812:25376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22158 comm="syz.3.6843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5408a6f749 code=0x7ffc0000 [ 382.407222][ T29] audit: type=1326 audit(1766646043.842:25377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22158 comm="syz.3.6843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5408a6f749 code=0x7ffc0000 [ 382.412801][T22156] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 382.431115][ T29] audit: type=1326 audit(1766646043.842:25378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22158 comm="syz.3.6843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5408a6f749 code=0x7ffc0000 [ 382.463708][ T29] audit: type=1326 audit(1766646043.842:25379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22158 comm="syz.3.6843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5408a6f749 code=0x7ffc0000 [ 382.488041][ T29] audit: type=1326 audit(1766646043.842:25380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22158 comm="syz.3.6843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5408a6f749 code=0x7ffc0000 [ 382.512550][ T29] audit: type=1326 audit(1766646043.842:25381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22158 comm="syz.3.6843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5408a6f749 code=0x7ffc0000 [ 382.536167][ T29] audit: type=1326 audit(1766646043.842:25382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22158 comm="syz.3.6843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5408a6f749 code=0x7ffc0000 [ 382.559034][T22156] EXT4-fs (loop6): orphan cleanup on readonly fs [ 382.560711][ T29] audit: type=1326 audit(1766646043.842:25383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22158 comm="syz.3.6843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5408a6f749 code=0x7ffc0000 [ 382.568386][T22156] EXT4-fs error (device loop6): ext4_do_update_inode:5617: inode #16: comm syz.6.6844: corrupted inode contents [ 382.590665][ T29] audit: type=1326 audit(1766646043.842:25384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22158 comm="syz.3.6843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5408a6f749 code=0x7ffc0000 [ 382.590698][ T29] audit: type=1326 audit(1766646043.842:25385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22158 comm="syz.3.6843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5408a6f749 code=0x7ffc0000 [ 382.607392][T22156] EXT4-fs (loop6): Remounting filesystem read-only [ 382.748711][T22156] EXT4-fs (loop6): 1 truncate cleaned up [ 382.755403][ T420] EXT4-fs (loop6): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 382.766348][ T420] EXT4-fs (loop6): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 382.777059][ T420] EXT4-fs (loop6): Quota write (off=8, len=24) cancelled because transaction is not started [ 382.801091][T22156] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 382.848284][T22177] loop0: detected capacity change from 0 to 128 [ 382.855298][T22178] __nla_validate_parse: 7 callbacks suppressed [ 382.855317][T22178] netlink: 28 bytes leftover after parsing attributes in process `syz.8.6849'. [ 382.871206][T22178] netlink: 'syz.8.6849': attribute type 8 has an invalid length. [ 382.882617][T20459] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 382.883776][T22177] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 382.905498][T22177] ext4 filesystem being mounted at /245/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 382.996945][T19333] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 383.012033][T22154] wg1 speed is unknown, defaulting to 1000 [ 383.051094][T22188] blktrace: Concurrent blktraces are not allowed on loop12 [ 383.129934][T22199] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6857'. [ 383.142092][T22154] chnl_net:caif_netlink_parms(): no params data found [ 383.170393][T22198] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6857'. [ 383.241953][T22154] bridge0: port 1(bridge_slave_0) entered blocking state [ 383.249084][T22154] bridge0: port 1(bridge_slave_0) entered disabled state [ 383.288415][T22154] bridge_slave_0: entered allmulticast mode [ 383.324379][T22154] bridge_slave_0: entered promiscuous mode [ 383.352021][T22154] bridge0: port 2(bridge_slave_1) entered blocking state [ 383.359238][T22154] bridge0: port 2(bridge_slave_1) entered disabled state [ 383.397850][T22154] bridge_slave_1: entered allmulticast mode [ 383.410045][T22154] bridge_slave_1: entered promiscuous mode [ 383.443884][T22154] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 383.455723][T22208] wg1 speed is unknown, defaulting to 1000 [ 383.469201][T22154] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 383.514143][T22154] team0: Port device team_slave_0 added [ 383.523591][T22154] team0: Port device team_slave_1 added [ 383.550107][T22154] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 383.557535][T22154] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 383.584547][T22154] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 383.606114][T22226] 9p: Bad value for 'wfdno' [ 383.622413][T22154] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 383.629426][T22154] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 383.656118][T22154] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 383.719106][T22154] hsr_slave_0: entered promiscuous mode [ 383.732645][T22154] hsr_slave_1: entered promiscuous mode [ 383.742499][T22154] debugfs: 'hsr0' already exists in 'hsr' [ 383.748262][T22154] Cannot create hsr debugfs directory [ 383.941769][T22154] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.024616][T22154] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.122365][T22154] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.162836][T22267] loop6: detected capacity change from 0 to 2048 [ 384.169931][T22274] netlink: 'syz.3.6878': attribute type 7 has an invalid length. [ 384.177841][T22274] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6878'. [ 384.203525][T22263] wg1 speed is unknown, defaulting to 1000 [ 384.229385][T22267] Alternate GPT is invalid, using primary GPT. [ 384.236158][T22267] loop6: p2 p3 p7 [ 384.242412][T22154] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.335803][T22154] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 384.352580][T22154] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 384.371378][T22154] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 384.381377][T22154] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 384.391534][T22294] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 384.399800][T22294] EXT4-fs (loop0): orphan cleanup on readonly fs [ 384.408227][T22294] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #16: comm syz.0.6894: corrupted inode contents [ 384.423639][T22294] EXT4-fs (loop0): Remounting filesystem read-only [ 384.430633][T22294] EXT4-fs (loop0): 1 truncate cleaned up [ 384.434041][T22154] 8021q: adding VLAN 0 to HW filter on device bond0 [ 384.449890][ T420] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 384.454465][T22154] 8021q: adding VLAN 0 to HW filter on device team0 [ 384.460585][ T420] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 384.461001][ T420] EXT4-fs (loop0): Quota write (off=8, len=24) cancelled because transaction is not started [ 384.484641][T22154] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 384.499260][T22154] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 384.506464][T22294] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 384.524347][ T1473] bridge0: port 1(bridge_slave_0) entered blocking state [ 384.531586][ T1473] bridge0: port 1(bridge_slave_0) entered forwarding state [ 384.543153][ T1473] bridge0: port 2(bridge_slave_1) entered blocking state [ 384.550531][ T1473] bridge0: port 2(bridge_slave_1) entered forwarding state [ 384.576764][T19333] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 384.613958][T22154] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 384.692391][T22320] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 384.719331][T22323] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 384.725885][T22323] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 384.733978][T22323] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6899'. [ 384.743650][T22323] hsr_slave_0: left promiscuous mode [ 384.749856][T22323] hsr_slave_1: left promiscuous mode [ 384.785868][T22154] veth0_vlan: entered promiscuous mode [ 384.794452][T22154] veth1_vlan: entered promiscuous mode [ 384.812366][T22154] veth0_macvtap: entered promiscuous mode [ 384.820629][T22154] veth1_macvtap: entered promiscuous mode [ 384.833244][T22154] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 384.843595][T22154] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 384.883386][ T420] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.903550][ T420] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.923213][ T420] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.951010][ T420] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.975821][T22339] bridge_slave_0: left allmulticast mode [ 384.982376][T22339] bridge_slave_0: left promiscuous mode [ 384.988391][T22339] bridge0: port 1(bridge_slave_0) entered disabled state [ 384.993666][T22341] netlink: 'syz.6.6903': attribute type 3 has an invalid length. [ 385.003825][T22341] netlink: 'syz.6.6903': attribute type 1 has an invalid length. [ 385.012008][T22341] netlink: 181400 bytes leftover after parsing attributes in process `syz.6.6903'. [ 385.022650][T22342] netlink: 'syz.5.6841': attribute type 10 has an invalid length. [ 385.030649][T22342] netlink: 40 bytes leftover after parsing attributes in process `syz.5.6841'. [ 385.053182][T22339] bridge_slave_1: left allmulticast mode [ 385.059045][T22339] bridge_slave_1: left promiscuous mode [ 385.065079][T22339] bridge0: port 2(bridge_slave_1) entered disabled state [ 385.094296][T22339] bond0: (slave bond_slave_0): Releasing backup interface [ 385.102111][T22345] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 385.112970][T22339] bond0: (slave bond_slave_1): Releasing backup interface [ 385.120590][T22345] EXT4-fs (loop6): orphan cleanup on readonly fs [ 385.144985][T22345] EXT4-fs error (device loop6): ext4_do_update_inode:5617: inode #16: comm syz.6.6904: corrupted inode contents [ 385.163533][T22345] EXT4-fs (loop6): Remounting filesystem read-only [ 385.170375][T22345] EXT4-fs (loop6): 1 truncate cleaned up [ 385.171715][T22339] team0: Port device team_slave_0 removed [ 385.176785][ T385] EXT4-fs (loop6): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 385.193324][ T385] EXT4-fs (loop6): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 385.208275][T22339] team0: Port device team_slave_1 removed [ 385.220356][ T385] EXT4-fs (loop6): Quota write (off=8, len=24) cancelled because transaction is not started [ 385.232956][T22339] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 385.240368][T22339] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 385.249307][T22339] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 385.257363][T22339] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 385.258079][T22345] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 385.284246][T22339] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 385.304193][T22342] batman_adv: batadv0: Adding interface: veth1_vlan [ 385.310913][T22342] batman_adv: batadv0: The MTU of interface veth1_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 385.337762][T22342] batman_adv: batadv0: Interface activated: veth1_vlan [ 385.346276][T20459] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 385.372163][T22360] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 385.408495][T22362] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 385.450284][T22362] netlink: 400 bytes leftover after parsing attributes in process `syz.5.6910'. [ 385.461348][T22362] netlink: 'syz.5.6910': attribute type 10 has an invalid length. [ 385.469226][T22362] netlink: 40 bytes leftover after parsing attributes in process `syz.5.6910'. [ 385.584191][T22373] netlink: 'syz.5.6914': attribute type 3 has an invalid length. [ 385.592534][T22373] netlink: 181400 bytes leftover after parsing attributes in process `syz.5.6914'. [ 385.592646][T22371] set_capacity_and_notify: 2 callbacks suppressed [ 385.592661][T22371] loop6: detected capacity change from 0 to 512 [ 385.624822][T22371] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 385.637023][T22371] EXT4-fs (loop6): orphan cleanup on readonly fs [ 385.644964][T22371] EXT4-fs error (device loop6): ext4_do_update_inode:5617: inode #16: comm syz.6.6915: corrupted inode contents [ 385.657632][T22371] EXT4-fs (loop6): Remounting filesystem read-only [ 385.664844][T22371] EXT4-fs (loop6): 1 truncate cleaned up [ 385.670666][ T37] EXT4-fs (loop6): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 385.681348][ T37] EXT4-fs (loop6): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 385.699755][ T37] EXT4-fs (loop6): Quota write (off=8, len=24) cancelled because transaction is not started [ 385.710826][T22371] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 385.769321][T20459] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 385.798775][T22390] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 386.069797][T22411] FAULT_INJECTION: forcing a failure. [ 386.069797][T22411] name failslab, interval 1, probability 0, space 0, times 0 [ 386.082805][T22411] CPU: 1 UID: 0 PID: 22411 Comm: syz.6.6931 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 386.082844][T22411] Tainted: [W]=WARN [ 386.082853][T22411] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 386.082911][T22411] Call Trace: [ 386.082917][T22411] [ 386.082925][T22411] __dump_stack+0x1d/0x30 [ 386.082955][T22411] dump_stack_lvl+0x95/0xd0 [ 386.082981][T22411] dump_stack+0x15/0x1b [ 386.083035][T22411] should_fail_ex+0x265/0x280 [ 386.083061][T22411] should_failslab+0x8c/0xb0 [ 386.083128][T22411] kmem_cache_alloc_noprof+0x69/0x4b0 [ 386.083154][T22411] ? getname_flags+0x80/0x3b0 [ 386.083177][T22411] getname_flags+0x80/0x3b0 [ 386.083233][T22411] user_path_at+0x28/0x130 [ 386.083267][T22411] __se_sys_mount+0x25b/0x2e0 [ 386.083290][T22411] ? fput+0x8f/0xc0 [ 386.083315][T22411] __x64_sys_mount+0x67/0x80 [ 386.083376][T22411] x64_sys_call+0x2cca/0x3000 [ 386.083412][T22411] do_syscall_64+0xca/0x2b0 [ 386.083448][T22411] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 386.083469][T22411] RIP: 0033:0x7fba00b8f749 [ 386.083486][T22411] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 386.083567][T22411] RSP: 002b:00007fb9ff5ef038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 386.083591][T22411] RAX: ffffffffffffffda RBX: 00007fba00de5fa0 RCX: 00007fba00b8f749 [ 386.083607][T22411] RDX: 0000200000000040 RSI: 0000200000000080 RDI: 0000000000000000 [ 386.083690][T22411] RBP: 00007fb9ff5ef090 R08: 0000000000000000 R09: 0000000000000000 [ 386.083702][T22411] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 386.083717][T22411] R13: 00007fba00de6038 R14: 00007fba00de5fa0 R15: 00007fff1c359ca8 [ 386.083738][T22411] [ 386.345974][T22426] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 386.394569][T22435] validate_nla: 1 callbacks suppressed [ 386.394598][T22435] netlink: 'syz.8.6942': attribute type 3 has an invalid length. [ 386.408329][T22435] netlink: 'syz.8.6942': attribute type 1 has an invalid length. [ 386.570304][T22442] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 386.578314][T22442] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 386.611985][T22442] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 386.619540][T22442] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 386.662514][T22451] netlink: 'syz.6.6941': attribute type 7 has an invalid length. [ 387.079436][T22467] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 387.337262][T22474] wg1 speed is unknown, defaulting to 1000 [ 387.345333][ T29] kauditd_printk_skb: 468 callbacks suppressed [ 387.345352][ T29] audit: type=1326 audit(1766646048.822:25828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22473 comm="syz.6.6956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba00b8f749 code=0x7ffc0000 [ 387.427865][T22479] loop6: detected capacity change from 0 to 2048 [ 387.446799][ T29] audit: type=1326 audit(1766646048.822:25829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22473 comm="syz.6.6956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba00b8f749 code=0x7ffc0000 [ 387.470586][ T29] audit: type=1326 audit(1766646048.822:25830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22473 comm="syz.6.6956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba00b8f749 code=0x7ffc0000 [ 387.494504][ T29] audit: type=1326 audit(1766646048.822:25831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22473 comm="syz.6.6956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba00b8f749 code=0x7ffc0000 [ 387.518562][ T29] audit: type=1326 audit(1766646048.822:25832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22473 comm="syz.6.6956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fba00b8f749 code=0x7ffc0000 [ 387.542757][ T29] audit: type=1326 audit(1766646048.822:25833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22473 comm="syz.6.6956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba00b8f749 code=0x7ffc0000 [ 387.566691][ T29] audit: type=1326 audit(1766646048.822:25834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22473 comm="syz.6.6956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba00b8f749 code=0x7ffc0000 [ 387.591276][ T29] audit: type=1326 audit(1766646048.822:25835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22473 comm="syz.6.6956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba00b8f749 code=0x7ffc0000 [ 387.615386][ T29] audit: type=1326 audit(1766646048.822:25836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22473 comm="syz.6.6956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fba00b8df90 code=0x7ffc0000 [ 387.639048][ T29] audit: type=1326 audit(1766646048.822:25837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22473 comm="syz.6.6956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba00b8f749 code=0x7ffc0000 [ 387.648022][T22485] wg1 speed is unknown, defaulting to 1000 [ 387.695362][T22479] Alternate GPT is invalid, using primary GPT. [ 387.702199][T22479] loop6: p2 p3 p7 [ 387.712861][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 387.955527][T22498] SELinux: Context u:r:untrusted_app:s0:c512,c768 is not valid (left unmapped). [ 388.052039][T22513] netlink: 'syz.5.6971': attribute type 3 has an invalid length. [ 388.060387][T22513] netlink: 'syz.5.6971': attribute type 1 has an invalid length. [ 388.069226][T22513] __nla_validate_parse: 3 callbacks suppressed [ 388.069245][T22513] netlink: 181400 bytes leftover after parsing attributes in process `syz.5.6971'. [ 388.176582][T22514] netlink: 388 bytes leftover after parsing attributes in process `syz.8.6970'. [ 388.525106][T22558] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=22558 comm=syz.0.6990 [ 388.935836][T22578] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=22578 comm=syz.8.6999 [ 388.949118][T22578] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=22578 comm=syz.8.6999 [ 388.963946][T22578] 9p: Bad value for 'rfdno' [ 388.970454][T22579] loop0: detected capacity change from 0 to 128 [ 389.158181][T22590] netlink: 'syz.8.7002': attribute type 7 has an invalid length. [ 389.166028][T22590] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7002'. [ 389.215729][T22596] loop0: detected capacity change from 0 to 128 [ 389.228432][T22596] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 389.249000][T22596] ext4 filesystem being mounted at /288/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 389.293751][T19333] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 389.311360][T22609] loop6: detected capacity change from 0 to 128 [ 389.368858][T22623] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7018'. [ 389.465095][T22642] loop6: detected capacity change from 0 to 128 [ 389.474166][T22642] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 389.487495][T22642] ext4 filesystem being mounted at /163/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 389.557776][T20459] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 389.689015][T22662] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 389.718033][T22664] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 389.723175][T22660] wg1 speed is unknown, defaulting to 1000 [ 389.780774][T22669] loop6: detected capacity change from 0 to 128 [ 389.790467][T22669] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 389.803533][T22669] ext4 filesystem being mounted at /170/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 389.875441][T20459] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 389.965981][T22687] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 389.980964][T22690] loop6: detected capacity change from 0 to 128 [ 390.185168][T22704] netlink: 'syz.3.7051': attribute type 3 has an invalid length. [ 390.193278][T22704] netlink: 'syz.3.7051': attribute type 1 has an invalid length. [ 390.201011][T22704] netlink: 181400 bytes leftover after parsing attributes in process `syz.3.7051'. [ 390.213237][T22702] netlink: 'syz.6.7050': attribute type 7 has an invalid length. [ 390.213358][T22706] serio: Serial port ptm1 [ 390.220985][T22702] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7050'. [ 390.306274][T22713] loop0: detected capacity change from 0 to 512 [ 390.326417][T22713] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 390.346057][T22713] EXT4-fs (loop0): orphan cleanup on readonly fs [ 390.377489][T22713] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #16: comm syz.0.7054: corrupted inode contents [ 390.390209][T22713] EXT4-fs (loop0): Remounting filesystem read-only [ 390.398436][T22713] EXT4-fs (loop0): 1 truncate cleaned up [ 390.404336][ T1530] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 390.415515][ T1530] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 390.427088][ T1530] EXT4-fs (loop0): Quota write (off=8, len=24) cancelled because transaction is not started [ 390.438215][T22713] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 390.468232][T19333] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 390.668532][T22743] wg1 speed is unknown, defaulting to 1000 [ 390.857834][T22756] netlink: 'syz.3.7070': attribute type 3 has an invalid length. [ 390.866419][T22756] netlink: 181400 bytes leftover after parsing attributes in process `syz.3.7070'. [ 391.070527][T22771] wg1 speed is unknown, defaulting to 1000 [ 391.157544][T22780] netlink: 181400 bytes leftover after parsing attributes in process `syz.3.7081'. [ 391.341040][T22786] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7082'. [ 391.573830][T22809] loop0: detected capacity change from 0 to 128 [ 391.575026][T22811] validate_nla: 4 callbacks suppressed [ 391.575041][T22811] netlink: 'syz.6.7093': attribute type 3 has an invalid length. [ 391.594773][T22811] netlink: 'syz.6.7093': attribute type 1 has an invalid length. [ 391.602849][T22811] netlink: 181400 bytes leftover after parsing attributes in process `syz.6.7093'. [ 391.618179][T22809] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 391.635785][T22809] ext4 filesystem being mounted at /298/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 391.649780][T22817] loop6: detected capacity change from 0 to 512 [ 391.669159][T22817] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 391.677986][T22817] EXT4-fs (loop6): orphan cleanup on readonly fs [ 391.692198][T22817] EXT4-fs error (device loop6): ext4_do_update_inode:5617: inode #16: comm syz.6.7096: corrupted inode contents [ 391.705230][T22817] EXT4-fs (loop6): Remounting filesystem read-only [ 391.713422][T22817] EXT4-fs (loop6): 1 truncate cleaned up [ 391.719448][T21122] EXT4-fs (loop6): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 391.730659][T21122] EXT4-fs (loop6): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 391.748153][T21122] EXT4-fs (loop6): Quota write (off=8, len=24) cancelled because transaction is not started [ 391.761519][T19333] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 391.763561][T22817] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 391.824340][T20459] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 391.876266][T22838] loop0: detected capacity change from 0 to 128 [ 391.938845][T22845] netlink: 'syz.0.7107': attribute type 3 has an invalid length. [ 391.947726][T22845] netlink: 'syz.0.7107': attribute type 1 has an invalid length. [ 392.004403][T22850] loop0: detected capacity change from 0 to 512 [ 392.087372][T22850] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 392.121910][T22850] ext4 filesystem being mounted at /304/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 392.170854][T22864] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 392.201025][T22871] EXT4-fs error (device loop0): ext4_lookup:1785: inode #12: comm syz.0.7110: iget: bad i_size value: 2533274857506816 [ 392.236876][T22874] netlink: 'syz.3.7120': attribute type 3 has an invalid length. [ 392.245682][T22874] netlink: 'syz.3.7120': attribute type 1 has an invalid length. [ 392.249609][T22870] wg1 speed is unknown, defaulting to 1000 [ 392.290836][T22875] loop6: detected capacity change from 0 to 2048 [ 392.334483][T22875] Alternate GPT is invalid, using primary GPT. [ 392.341173][T22875] loop6: p2 p3 p7 [ 392.356241][ T29] kauditd_printk_skb: 726 callbacks suppressed [ 392.356261][ T29] audit: type=1326 audit(1766646053.832:26552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22867 comm="syz.6.7118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=262 compat=0 ip=0x7fba00b8de3a code=0x7ffc0000 [ 392.406822][ T29] audit: type=1326 audit(1766646053.832:26553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22867 comm="syz.6.7118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=262 compat=0 ip=0x7fba00b8de3a code=0x7ffc0000 [ 392.431712][ T29] audit: type=1326 audit(1766646053.832:26554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22867 comm="syz.6.7118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=266 compat=0 ip=0x7fba00b8ecc7 code=0x7ffc0000 [ 392.456028][ T29] audit: type=1326 audit(1766646053.832:26555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22867 comm="syz.6.7118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=262 compat=0 ip=0x7fba00b8de3a code=0x7ffc0000 [ 392.480711][ T29] audit: type=1326 audit(1766646053.832:26556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22867 comm="syz.6.7118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=266 compat=0 ip=0x7fba00b8ecc7 code=0x7ffc0000 [ 392.505395][ T29] audit: type=1326 audit(1766646053.832:26557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22867 comm="syz.6.7118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=262 compat=0 ip=0x7fba00b8de3a code=0x7ffc0000 [ 392.529447][ T29] audit: type=1326 audit(1766646053.832:26558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22867 comm="syz.6.7118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=262 compat=0 ip=0x7fba00b8de3a code=0x7ffc0000 [ 392.554402][ T29] audit: type=1326 audit(1766646053.832:26559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22867 comm="syz.6.7118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=262 compat=0 ip=0x7fba00b8de3a code=0x7ffc0000 [ 392.578484][ T29] audit: type=1326 audit(1766646053.832:26560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22867 comm="syz.6.7118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=262 compat=0 ip=0x7fba00b8de3a code=0x7ffc0000 [ 392.603081][ T29] audit: type=1326 audit(1766646053.832:26561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22867 comm="syz.6.7118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=266 compat=0 ip=0x7fba00b8ecc7 code=0x7ffc0000 [ 392.829204][T22889] netlink: 'syz.8.7124': attribute type 7 has an invalid length. [ 392.893476][T19333] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 392.922873][T22903] netlink: 'syz.6.7132': attribute type 3 has an invalid length. [ 392.952984][T22909] serio: Serial port ptm0 [ 393.050739][T22916] loop0: detected capacity change from 0 to 128 [ 393.128538][T22925] loop0: detected capacity change from 0 to 128 [ 393.138488][T22925] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 393.151933][T22925] ext4 filesystem being mounted at /308/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 393.184328][T19333] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 393.212412][T22932] netlink: 'syz.3.7142': attribute type 3 has an invalid length. [ 393.220390][T22932] netlink: 'syz.3.7142': attribute type 1 has an invalid length. [ 393.228924][T22932] __nla_validate_parse: 4 callbacks suppressed [ 393.228940][T22932] netlink: 181400 bytes leftover after parsing attributes in process `syz.3.7142'. [ 393.264418][T22936] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.7145'. [ 393.266448][T22934] wg1 speed is unknown, defaulting to 1000 [ 393.317770][T22937] loop0: detected capacity change from 0 to 2048 [ 393.386388][T22937] Alternate GPT is invalid, using primary GPT. [ 393.393568][T22937] loop0: p2 p3 p7 [ 393.719172][T22963] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.7156'. [ 393.748003][T22965] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 393.895970][T22985] loop6: detected capacity change from 0 to 128 [ 394.044301][T22995] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.7167'. [ 394.121030][T23000] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 394.211158][T23012] serio: Serial port ptm1 [ 394.408609][T23022] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.7178'. [ 394.530284][T23033] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 394.574992][T23037] loop0: detected capacity change from 0 to 128 [ 394.639366][T23046] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.7189'. [ 394.777666][T23069] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 394.792071][T23069] ext4 filesystem being mounted at /322/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 394.821627][T23069] EXT4-fs: Cannot change journaled quota options when quota turned on [ 394.839859][T19333] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 394.875035][T23083] netlink: 199836 bytes leftover after parsing attributes in process `syz.6.7204'. [ 394.919331][T23092] netlink: 199836 bytes leftover after parsing attributes in process `syz.6.7209'. [ 395.012241][T23107] netlink: 199836 bytes leftover after parsing attributes in process `syz.6.7217'. [ 395.109863][T23121] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 395.139647][T23126] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.7224'. [ 395.227681][T23139] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 395.253136][T23128] wg1 speed is unknown, defaulting to 1000 [ 395.284043][T23143] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 395.301681][T23143] EXT4-fs (loop0): orphan cleanup on readonly fs [ 395.312656][T23151] serio: Serial port ptm1 [ 395.313776][T23133] Alternate GPT is invalid, using primary GPT. [ 395.323503][T23133] loop6: p2 p3 p7 [ 395.328767][T23143] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #16: comm syz.0.7232: corrupted inode contents [ 395.342582][T23143] EXT4-fs (loop0): Remounting filesystem read-only [ 395.349248][T23143] EXT4-fs (loop0): 1 truncate cleaned up [ 395.355802][ T1604] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 395.366758][ T1604] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 395.410451][ T1604] EXT4-fs (loop0): Quota write (off=8, len=24) cancelled because transaction is not started [ 395.424059][T23143] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 395.454135][T19333] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 395.807448][T23193] msdos: Bad value for 'uid' [ 395.812190][T23193] msdos: Bad value for 'uid' [ 396.386792][T23200] wg1 speed is unknown, defaulting to 1000 [ 396.589021][T23227] validate_nla: 16 callbacks suppressed [ 396.589042][T23227] netlink: 'syz.0.7268': attribute type 3 has an invalid length. [ 396.622817][T23231] netlink: 'syz.0.7270': attribute type 10 has an invalid length. [ 396.632828][T23231] team0: Device ipvlan0 failed to register rx_handler [ 396.710998][T23231] set_capacity_and_notify: 7 callbacks suppressed [ 396.711020][T23231] loop0: detected capacity change from 0 to 512 [ 396.729263][T23231] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 396.740561][T23231] EXT4-fs error (device loop0): ext4_iget_extra_inode:5073: inode #15: comm syz.0.7270: corrupted in-inode xattr: e_value size too large [ 396.755948][T23231] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.7270: couldn't read orphan inode 15 (err -117) [ 396.769779][T23231] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 396.873882][T19333] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 396.910393][T23248] netlink: 'syz.5.7275': attribute type 7 has an invalid length. [ 397.000835][T23263] netlink: 'syz.0.7284': attribute type 2 has an invalid length. [ 397.146408][T23275] ================================================================== [ 397.154686][T23275] BUG: KCSAN: data-race in print_cpu / tick_nohz_idle_enter [ 397.162178][T23275] [ 397.164522][T23275] read-write to 0xffff888237d1bdb8 of 8 bytes by task 0 on cpu 1: [ 397.172328][T23275] tick_nohz_idle_enter+0x59/0xe0 [ 397.178939][T23275] do_idle+0x3c/0x230 [ 397.183022][T23275] cpu_startup_entry+0x25/0x30 [ 397.187799][T23275] start_secondary+0x95/0xa0 [ 397.192661][T23275] common_startup_64+0x13e/0x147 [ 397.197609][T23275] [ 397.200062][T23275] read to 0xffff888237d1bdb8 of 8 bytes by task 23275 on cpu 0: [ 397.208048][T23275] print_cpu+0x442/0x660 [ 397.212384][T23275] timer_list_show+0x107/0x170 [ 397.217158][T23275] seq_read_iter+0x31e/0x950 [ 397.221763][T23275] proc_reg_read_iter+0x110/0x180 [ 397.226897][T23275] copy_splice_read+0x442/0x660 [ 397.231759][T23275] splice_direct_to_actor+0x26f/0x680 [ 397.237137][T23275] do_splice_direct+0xda/0x150 [ 397.241915][T23275] do_sendfile+0x380/0x650 [ 397.246432][T23275] __x64_sys_sendfile64+0x105/0x150 [ 397.251932][T23275] x64_sys_call+0x2db1/0x3000 [ 397.256709][T23275] do_syscall_64+0xca/0x2b0 [ 397.261325][T23275] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 397.267526][T23275] [ 397.269858][T23275] value changed: 0x0000000000000038 -> 0x000000000000003d [ 397.276966][T23275] [ 397.279292][T23275] Reported by Kernel Concurrency Sanitizer on: [ 397.285446][T23275] CPU: 0 UID: 0 PID: 23275 Comm: syz.8.7289 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 397.296829][T23275] Tainted: [W]=WARN [ 397.300719][T23275] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 397.311306][T23275] ================================================================== [ 397.332225][T23267] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 397.341623][T23267] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 397.379105][ T29] kauditd_printk_skb: 313 callbacks suppressed [ 397.379201][ T29] audit: type=1400 audit(1766646058.858:26869): avc: denied { mount } for pid=23265 comm="syz.3.7285" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 403.078050][ T1473] bridge_slave_1: left allmulticast mode [ 403.083958][ T1473] bridge_slave_1: left promiscuous mode [ 403.089639][ T1473] bridge0: port 2(bridge_slave_1) entered disabled state [ 403.097575][ T1473] bridge_slave_0: left allmulticast mode [ 403.103333][ T1473] bridge_slave_0: left promiscuous mode [ 403.109156][ T1473] bridge0: port 1(bridge_slave_0) entered disabled state [ 403.122760][ T1473] bond_slave_1: left promiscuous mode [ 403.617761][ T1473] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 403.636277][ T1473] bond0 (unregistering): Released all slaves [ 403.644749][ T1473] bond1 (unregistering): Released all slaves [ 403.653410][ T1473] bond2 (unregistering): Released all slaves [ 403.661848][ T1473] bond3 (unregistering): Released all slaves [ 403.670476][ T1473] bond4 (unregistering): Released all slaves [ 403.679534][ T1473] bond5 (unregistering): Released all slaves [ 403.771691][ T1473] hsr_slave_0: left promiscuous mode [ 403.777343][ T1473] hsr_slave_1: left promiscuous mode [ 403.783203][ T1473] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 403.790778][ T1473] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 403.799088][ T1473] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 403.806876][ T1473] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 403.818092][ T1473] veth1_vlan: left promiscuous mode [ 403.823402][ T1473] veth0_vlan: left promiscuous mode [ 403.874143][ T1473] team0 (unregistering): Port device team_slave_1 removed [ 403.885824][ T1473] team0 (unregistering): Port device team_slave_0 removed