last executing test programs: 12m32.63558696s ago: executing program 32 (id=71): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xfc, &(0x7f0000000040)={&(0x7f00000001c0)=@RTM_NEWMDB={0x38, 0x54, 0x1e5, 0x0, 0x0, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {r3, 0x1, 0x0, 0x0, {@ip4=@broadcast}}}]}, 0x38}}, 0x0) 12m32.245573456s ago: executing program 4 (id=74): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0) umount2(&(0x7f0000000480)='./file0\x00', 0x2) 12m32.125485397s ago: executing program 4 (id=76): r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 12m31.550186125s ago: executing program 4 (id=78): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, 0x0, 0x4008800) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x34, 0x0, 0xa09, 0x70bd27, 0x25dfdc00, {{}, {}, {0x18, 0x17, {0x1b, 0x0, @l2={'ib', 0x3a, 'tunl0\x00'}}}}}, 0x34}, 0x1, 0x0, 0x0, 0x44871}, 0x20000840) 12m31.544751695s ago: executing program 33 (id=78): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, 0x0, 0x4008800) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x34, 0x0, 0xa09, 0x70bd27, 0x25dfdc00, {{}, {}, {0x18, 0x17, {0x1b, 0x0, @l2={'ib', 0x3a, 'tunl0\x00'}}}}}, 0x34}, 0x1, 0x0, 0x0, 0x44871}, 0x20000840) 12m30.760778336s ago: executing program 34 (id=87): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendto$inet6(r0, &(0x7f0000000240)="8a", 0x1, 0x51, &(0x7f0000000080)={0xa, 0x3, 0x1, @local, 0x9}, 0x1c) 12m12.528333634s ago: executing program 35 (id=337): r0 = io_uring_setup(0xdac, &(0x7f0000000180)) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000380)={0x1d, 0x0, 0x1, {0x0, 0x1, 0x3}, 0xfe}, 0x18) io_uring_enter(0xffffffffffffffff, 0x2def, 0x0, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 12m11.746846055s ago: executing program 36 (id=351): ioperm(0x3c, 0x1, 0x8) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000d80)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d00)=ANY=[@ANYBLOB="140000001000010000000000000000000020000a3c000000120a09080000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a"], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0) 12m8.076255765s ago: executing program 37 (id=381): io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r1) bind$unix(r1, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) getsockname$packet(r1, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2], 0x48}}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{r3}, &(0x7f0000000000), 0x0}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}}, 0x0) 11m28.86008608s ago: executing program 38 (id=809): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x7c9, 0x10, &(0x7f0000000400)) r0 = openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000040)={0x101000, 0x0, 0x22}, 0x18) mknodat$null(r0, &(0x7f00000000c0)='./file0\x00', 0x2, 0x103) 11m26.015966688s ago: executing program 4 (id=810): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x101091, 0x0) umount2(&(0x7f0000000480)='./file0\x00', 0x2) 11m25.990038459s ago: executing program 4 (id=841): r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x301b02, 0x0) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f00000000c0)={0x3f, 0x18, '\x00', 0x1, &(0x7f0000000080)=[0x0, 0x0, 0x0]}) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000400)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newtfilter={0x24, 0x11, 0x1, 0x691522eb, 0x0, {0x0, 0x0, 0x74, r2, {0x10, 0x4}, {}, {0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000080)='pids.max\x00', 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x3, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}}, &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) setuid(0xee00) r5 = accept4$inet(0xffffffffffffffff, 0x0, &(0x7f00000001c0), 0x80000) getsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f0000000300)={{{@in=@local, @in=@dev}}, {{@in=@multicast1}, 0x0, @in=@initdev}}, &(0x7f0000000200)=0xe8) 11m24.302287972s ago: executing program 4 (id=855): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="18010000bc0000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x6, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', r0, 0x0, 0x3}, 0x18) r1 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'ipvlan0\x00'}) socket$netlink(0x10, 0x3, 0x0) timer_create(0xfffffffffffffffc, &(0x7f0000000140)={0x0, 0x7}, &(0x7f0000001400)=0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYRESOCT=0x0, @ANYRES32=r2], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000000000000000000001811000040be52918eee224d56fb21976bddc07f3b0965b556ab87d61926d77a851a9817e9af0349bec29ad84dd3f638efbba1d4b92caec5c2f9f740b8657154729b0d8d9d1d34200d6bd286142965f592248deeb5f5d3fbcf1f94b944244e3f2b0c38adcbf7083be2e547c7e931cea1a1c0e97387f755ae5894e77d538b96da2b6495b1360a94b6a3a4b1229131932987c39e9963641d8a97f6b67756cfb54ecbd49bb4c5d1caa6add97af9c890d33d54c674", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='kfree\x00', r4, 0x0, 0x10000}, 0x18) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010076657468305f746f5f687372000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c0003801400010076657468305f746f5f687372000000001400010076657468315f766c616e"], 0xfc}}, 0x20000004) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000200)={[{}, {@oldalloc}, {@resuid}, {@nodiscard}, {@block_validity}, {@jqfmt_vfsv1}]}, 0x6, 0x453, &(0x7f00000006c0)="$eJzs3MtvG0UYAPBv10n6JqGURx9AoDwiHkmTFuiBCwgkDiAhwaEcQ5JWpW6DmiDRqoKCUDmiStwRRyT+Ak5wQcAJiSvcUaWq6qUFLkZr7ya2Y7t1SOJQ/37SJjP70Mzn2bFnduIE0LdGsx9JxM6I+D0ihmvZxhNGa79uXr8w89f1CzNJVCpvXUuq5924fmGmOLW4bkeeGUsj0s+S2N+i3IVz509Nl8tzZ/P8xOLp9ycWzp1/9uTp6RNzJ+bOTB09euTw5AvPTz3XuuL/XOkqzqxON/Z9NH9g72vvXH5j5tjld3/+Ninib4pjjYx2Ovh4pbLGxfXWrrp0MtDDitCVUkRkzTVY7f/DUYrlxhuOVz/taeWAdVWpVCo72h++WAHuYEn0ugZAbxQf9Nn8t9g2aOixKVx9qTYByuK+mW+1IwOR5ucM1s1vh9a4/NGIOHbx76+yLdbnOQQAQIPvs/HPM63Gf2ncV3feXfna0EhE3B0RuyPinojYExH3RlTPvT8iHuiy/OZFkpXjn7S7hZ4uZeO/F/O1rcbxXzH6i5FSnttVjX8wOX6yPHcof03GYnBLlp/sUMYPr/z2Rbtj9eO/bMvKL8aCeT2uDGxpvGZ2enH6v8Rc7+onEfsGWsWfLK0EJBGxNyL2rbKMk099c6DdsYb4t+Y7G+LvYA3WmSpfRzxZa/+L0RR/Iem8PjmxNcpzhyaKu2KlX3699Ga78m/d/usra//tLe//pfhHkvr12oXuy7j0x+dt5zSrvf+Hkrer6WI+9uH04uLZyYih5PVapev3Ty1fW+SL87P4xw627v+7Y/mV2B8R2U38YEQ8FBEP53V/JCIejYiDHeL/6eXH3lt9/Osri3+2q/ZfTgxF857WidKpH79rKHSkm/iz9j9STY3le2rvf6WOcd1OvVZ3NwMAAMD/TxoROyNJx5fSaTo+Xvt7+T2xPS3PLyw+fXz+gzOzte8IjMRgWjzpGq57HjqZT+uL/FRT/nD+3PjL0rZqfnxmvjzb6+Chz+1o0/8zf3Z+xAbcCXxfC/qX/g/9S/+H/qX/Q/9q0f+39aIewMZr9fn/cQ/qAWy8pv5v2Q/6iPk/9C/9H/qX/g99aWFb3PpL8hLtEmlEbIJqrEg8cS1i9ZeXbucfO0S6KSKVWKdEr9+ZAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA1sa/AQAA//8aH+CA") mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) creat(&(0x7f0000000d80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) rename(&(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) ioprio_set$uid(0x3, 0x0, 0x0) sched_setattr(0x0, &(0x7f00000002c0)={0x38, 0x5, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffffc}, 0x0) ioprio_get$pid(0x2, 0x0) r6 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) ioctl$MON_IOCG_STATS(r6, 0x80089203, &(0x7f00000000c0)) dup2(0xffffffffffffffff, 0xffffffffffffffff) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/timers\x00', 0x0, 0x0) close(r7) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b4050000000000007112920000000000bf200000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0xa, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x2, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0xf2de1000) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, 0x0, 0x24008000) 11m24.257794633s ago: executing program 39 (id=855): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="18010000bc0000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x6, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', r0, 0x0, 0x3}, 0x18) r1 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'ipvlan0\x00'}) socket$netlink(0x10, 0x3, 0x0) timer_create(0xfffffffffffffffc, &(0x7f0000000140)={0x0, 0x7}, &(0x7f0000001400)=0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYRESOCT=0x0, @ANYRES32=r2], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000000000000000000001811000040be52918eee224d56fb21976bddc07f3b0965b556ab87d61926d77a851a9817e9af0349bec29ad84dd3f638efbba1d4b92caec5c2f9f740b8657154729b0d8d9d1d34200d6bd286142965f592248deeb5f5d3fbcf1f94b944244e3f2b0c38adcbf7083be2e547c7e931cea1a1c0e97387f755ae5894e77d538b96da2b6495b1360a94b6a3a4b1229131932987c39e9963641d8a97f6b67756cfb54ecbd49bb4c5d1caa6add97af9c890d33d54c674", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='kfree\x00', r4, 0x0, 0x10000}, 0x18) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010076657468305f746f5f687372000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c0003801400010076657468305f746f5f687372000000001400010076657468315f766c616e"], 0xfc}}, 0x20000004) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000200)={[{}, {@oldalloc}, {@resuid}, {@nodiscard}, {@block_validity}, {@jqfmt_vfsv1}]}, 0x6, 0x453, &(0x7f00000006c0)="$eJzs3MtvG0UYAPBv10n6JqGURx9AoDwiHkmTFuiBCwgkDiAhwaEcQ5JWpW6DmiDRqoKCUDmiStwRRyT+Ak5wQcAJiSvcUaWq6qUFLkZr7ya2Y7t1SOJQ/37SJjP70Mzn2bFnduIE0LdGsx9JxM6I+D0ihmvZxhNGa79uXr8w89f1CzNJVCpvXUuq5924fmGmOLW4bkeeGUsj0s+S2N+i3IVz509Nl8tzZ/P8xOLp9ycWzp1/9uTp6RNzJ+bOTB09euTw5AvPTz3XuuL/XOkqzqxON/Z9NH9g72vvXH5j5tjld3/+Ninib4pjjYx2Ovh4pbLGxfXWrrp0MtDDitCVUkRkzTVY7f/DUYrlxhuOVz/taeWAdVWpVCo72h++WAHuYEn0ugZAbxQf9Nn8t9g2aOixKVx9qTYByuK+mW+1IwOR5ucM1s1vh9a4/NGIOHbx76+yLdbnOQQAQIPvs/HPM63Gf2ncV3feXfna0EhE3B0RuyPinojYExH3RlTPvT8iHuiy/OZFkpXjn7S7hZ4uZeO/F/O1rcbxXzH6i5FSnttVjX8wOX6yPHcof03GYnBLlp/sUMYPr/z2Rbtj9eO/bMvKL8aCeT2uDGxpvGZ2enH6v8Rc7+onEfsGWsWfLK0EJBGxNyL2rbKMk099c6DdsYb4t+Y7G+LvYA3WmSpfRzxZa/+L0RR/Iem8PjmxNcpzhyaKu2KlX3699Ga78m/d/usra//tLe//pfhHkvr12oXuy7j0x+dt5zSrvf+Hkrer6WI+9uH04uLZyYih5PVapev3Ty1fW+SL87P4xw627v+7Y/mV2B8R2U38YEQ8FBEP53V/JCIejYiDHeL/6eXH3lt9/Osri3+2q/ZfTgxF857WidKpH79rKHSkm/iz9j9STY3le2rvf6WOcd1OvVZ3NwMAAMD/TxoROyNJx5fSaTo+Xvt7+T2xPS3PLyw+fXz+gzOzte8IjMRgWjzpGq57HjqZT+uL/FRT/nD+3PjL0rZqfnxmvjzb6+Chz+1o0/8zf3Z+xAbcCXxfC/qX/g/9S/+H/qX/Q/9q0f+39aIewMZr9fn/cQ/qAWy8pv5v2Q/6iPk/9C/9H/qX/g99aWFb3PpL8hLtEmlEbIJqrEg8cS1i9ZeXbucfO0S6KSKVWKdEr9+ZAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA1sa/AQAA//8aH+CA") mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) creat(&(0x7f0000000d80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) rename(&(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) ioprio_set$uid(0x3, 0x0, 0x0) sched_setattr(0x0, &(0x7f00000002c0)={0x38, 0x5, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffffc}, 0x0) ioprio_get$pid(0x2, 0x0) r6 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) ioctl$MON_IOCG_STATS(r6, 0x80089203, &(0x7f00000000c0)) dup2(0xffffffffffffffff, 0xffffffffffffffff) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/timers\x00', 0x0, 0x0) close(r7) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b4050000000000007112920000000000bf200000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0xa, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x2, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0xf2de1000) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, 0x0, 0x24008000) 9m31.48946621s ago: executing program 3 (id=2674): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x1c9640) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000083c0)={{0x1}}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@ringbuf_output={{0x18, 0x2, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xc}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x43}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000001640)='kfree\x00', r2}, 0x10) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000140)={0x7, 0x3, 0x3ff, 0x0, 0xd}) 9m31.422123861s ago: executing program 3 (id=2676): r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x440, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x18, &(0x7f0000000100)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kfree\x00', r2}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x70}, 0x1, 0x0, 0x0, 0x4000}, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'veth0_virt_wifi\x00', 0x2000000}, 0x18) 9m31.42156751s ago: executing program 3 (id=2677): r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) r1 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r1, &(0x7f0000000040)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) bpf$OBJ_GET_PROG(0x7, &(0x7f00000001c0)=@generic={&(0x7f0000000140)='./file0\x00', 0x0, 0x10}, 0x18) syz_io_uring_setup(0x497, &(0x7f0000000200)={0x0, 0x4661, 0x400, 0x3, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000020000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000000)='kmem_cache_free\x00', r6}, 0x18) getrlimit(0x6, 0x0) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r1, 0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="b700000081000000bfa30000000000000703000002feffff720af0fff8ffffff71a4f0ff000000002d030000000000001d400500000000004704000001ed000072030000000000001d44000000000000db0a00fe000000007303000000000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c7bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ad1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) close_range(r0, r1, 0x0) 9m31.406406911s ago: executing program 3 (id=2678): syz_mount_image$iso9660(&(0x7f0000001240), &(0x7f0000000000)='./file1\x00', 0x204419, &(0x7f00000004c0)=ANY=[], 0x2f, 0x5ae, &(0x7f0000001280)="$eJzs3V1v29Ydx/EfHXuxXaAYtiELjDycJhvgAKlCSY0DoRcDRx3ZbCVSI+nBviqCxi6MyO2QdMDimyU32QZsL6K3w17DXtGKXe7SAx9kW9FTZtlx5n4/Qnso8vDwT1o9/x5bPBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJDjN1236qgdhJtbZjy/GUed47fl3kMrdG+gmHBcycn+0eKirherrv/sePO17F93dKN4d0OLWbGogw+u/fjTn87P9fefEPA78fzFwdPHvd7Os4sO5BzdvDp+27oNgyQKOt66NUESmcbamvtgo5WYVtC2yXaS2o7xY+ulUWxW/Xum2mjUja1sR5vhetNr2/7KRx/XXHfNfFbpWi9OovDBZ5XE3wja7SBcz+tkm7M6j7IP4udBalLrdYzZ3evt1KedQFap+jaVatMq1dxarVqt1aprDxsPH7nu/NAK9w0aqnHxH1qcoYfLRz3h0lvuclZdNzCzuTL/q61AoTa1JTPy5aupWJE6Y7aXysTv/PKBnXjck/m/n+WvH29eUZ7/bxXvbmX5//aI/D8mlumv7P8nTrvvyddzvdCBnuqxeuppR8/ytUtn1Posr9vv5CjrsgoV/KalSIE68vI1RoESRTJqaE1rcvWFNtRSIqOWArVllWhbiVLZ/BPlK5aVp1SRYhmtytc9GVXVUEN1GVlVtK1Imwq1rqa8vJVd7amnf8zXJ8SoeSn/4VTHVlnuf+52VJvQ0mz5/9CRyP842w4cmMFhP/8DAAAAAIBLy8l/+56N/xd0M19qBW3rXnRYAAAAAADgDOV/+b+RFQvZ0k05g+P/q2X58oLiAwAAAAAAs3Pye+wcScu6XSztyslvl+JLAAAAAAAAXBL53/9vZUU+B8ptOeWcKoz/AQAAAAC4NP48fo79/lf+u1edf/5bcbzgvOpu/cLZ97KV3v6VYuuVN1tMWyvOh2UjebE2X77z7Q2nnP3yaBLM78tid9pc/84pAviVBgPQX/vzE3/0pCif9LeUWkHbVvyo/WlVnvfhXGq30t9/vfcH5af/l7BTVnv55Te9J3ksr7K3r/bLCRSH5lEcfzH0bT7fQn7PxcgzXshvxCiPu+xod6+34548/7li97n/4Zivdaeoc3elKJePzz875mJ2zGpl3NmXUVRnPPPXultGsXq3KEZEUdOUKGonozjVtRgVRf0/h4fFCeVR1Kddi/qMUQDARdmdkoWc4cR/il7uXLL7iB59taizupJ1rIvzKwcfXFs62rPo0d1pPbp71KMv6TTZ7e9Dz0Aal2Oz4/7tjaz6XbbDd2OOuyCp5mSX8Mq3+7/TtecvDj7e23/81c5XO1/XavU19xPXfVjTQn4aZTE20rf+iAAALqHBZ+yMyv9Tazif6KOixohRdVbjJ0dfKajoS32jnp7ofn63gYrH+oxodfnE1xDu90etd8rntLwxal3O02TxhJf7E8aWP8rvcui3W5tYdzCG+vn/IAAAeIfujMzDxdj+bfP//cFxt/Jx98g8muXyyaPj47rVd3odAAD4IbHx985y+icnjoPuF9VGo+qlG9bEkf+5iYPmujVBmNrY3/DCdWu6cZRGftQ2/d9Lm2Sz243i1LSi2HSjJNjKn/xuyke/J7bjhWngJ9229RJr/ChMPT81zSDx+228jPOdk671g1bge2kQhSaJNmPfVoxJrDXdzV+3g2TDxiZo2jANWkG2GJpuHHS8eNv8Nmpvdqxp2sSPg24aFQ32jxWErSju5M1WLvJCAwDwHnn+4uDp415v59kZLuhwcM1FnyMAABhElgYAAAAAAAAAAAAAAAAAAAAA4P13ipv8NLRmSae5WXC4HRayBedcbsr8/1n4+fsRxnkv/OtZ8V/gjO28LufhPvMIp3YdfzznrgnAOftvAAAA//+bYUXN") r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x20081e, &(0x7f0000000100), 0x1, 0x502, &(0x7f0000000a00)="$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") r1 = syz_clone(0x20a00000, 0x0, 0x0, 0x0, 0x0, 0x0) close(r0) ptrace(0x10, r1) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000142020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000e02800850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r2}, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) ptrace$getregset(0x4204, r1, 0x202, &(0x7f0000000180)={&(0x7f0000000000)=""/16, 0x10}) 9m31.308821862s ago: executing program 3 (id=2681): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0xd, [@enum={0xa}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x5f, 0x61]}}, &(0x7f0000000080)=""/159, 0x31, 0x9f, 0x1, 0x0, 0x0, @void, @value}, 0x28) 9m31.194019434s ago: executing program 3 (id=2685): pipe2(0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) close_range(0xffffffffffffffff, r0, 0x0) 9m31.176374184s ago: executing program 40 (id=2685): pipe2(0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) close_range(0xffffffffffffffff, r0, 0x0) 4m50.349027342s ago: executing program 1 (id=7022): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000012c0)={&(0x7f0000000040)='kfree\x00', r0}, 0x10) r1 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "69dcaf20127e9a854528f45826cb35be51ca73845d177dd8dba7221daeccfda56b75cfe286fdd14cb5b11b1cab614fec2236da7d88ea0f0700", 0x1c}, 0x48, 0xfffffffffffffffe) keyctl$search(0xa, r1, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0) 4m50.253794143s ago: executing program 1 (id=7024): recvmmsg(0xffffffffffffffff, &(0x7f0000001140)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000001c0)=""/34, 0x22}], 0x1}, 0xe}, {{&(0x7f0000000300)=@can, 0x80, &(0x7f0000000380)=[{&(0x7f0000000780)=""/205, 0xcd}, {&(0x7f0000000880)=""/144, 0x90}], 0x2, &(0x7f0000000940)=""/113, 0x71}, 0x8}, {{0x0, 0x0, &(0x7f0000000ec0)=[{&(0x7f0000000a00)=""/100, 0x64}, {&(0x7f0000000a80)=""/106, 0x6a}, {&(0x7f0000000b00)=""/99, 0x63}, {&(0x7f0000000b80)=""/138, 0x8a}, {&(0x7f0000000c40)=""/48, 0x30}, {&(0x7f0000000c80)=""/117, 0x75}, {&(0x7f0000000d00)=""/72, 0x48}, {&(0x7f0000000d80)=""/145, 0x91}, {&(0x7f0000000e40)=""/112, 0x70}], 0x9, &(0x7f0000000f80)=""/195, 0xc3}, 0x9}, {{&(0x7f0000001080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10}, 0x80, &(0x7f0000001500)=[{&(0x7f00000005c0)=""/76, 0x4c}, {&(0x7f00000012c0)=""/191, 0xbf}, {&(0x7f0000001380)=""/77, 0x4d}, {&(0x7f0000000200)}, {&(0x7f0000001400)=""/206, 0xce}], 0x5}, 0x3ff}], 0x4, 0x2021, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) connect$pppoe(0xffffffffffffffff, &(0x7f0000000040)={0x18, 0x0, {0x3, @remote, 'vcan0\x00'}}, 0x1e) sendmmsg(0xffffffffffffffff, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x74, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x10001, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r1}, 0x10) r3 = socket$inet6(0xa, 0xa, 0x8) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000200)={@private1={0xfc, 0x1, '\x00', 0x1}}, 0x14) close(r3) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001080)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000c5000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7020000140000fbb703000000e31f008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000c00)='sys_enter\x00', r5}, 0x10) r6 = gettid() rt_sigtimedwait(&(0x7f0000000040)={[0xfffffffffffffffe]}, 0x0, 0x0, 0x8) tkill(r6, 0x15) kexec_load(0x4, 0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000058110000", @ANYRESHEX=r2, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) move_mount(0xffffffffffffff9c, 0x0, 0xffffffffffffffff, 0x0, 0x160) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0, 0xffffffffffffffff, 0x0, 0x5d3}, 0x18) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) 4m50.164238305s ago: executing program 1 (id=7027): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[], 0x48) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x48, &(0x7f00000010c0)=0xfffffcb5, 0x4) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x5, r0}, 0x38) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000820000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x41, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = socket$inet(0x2, 0x2, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32, @ANYBLOB="00000000000000001c001a800800028008000200080000003e"], 0x44}}, 0x0) sendmsg$inet(r3, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0xffff, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10, &(0x7f0000000d40)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f00000004c0)="1ed8b7f9d457", 0x6}], 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101027f00000100000000001c00"/43], 0x40}, 0x20008080) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000000c0)='f2fs_iostat\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffffd}, 0x18) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00') setsockopt(0xffffffffffffffff, 0x84, 0x81, &(0x7f00000003c0)="1a00000002000100", 0x8) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xfc, {"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", 0x8f5}}, 0x1006) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000380)={0x0, 0x5}, &(0x7f0000000180)=0x8) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) 4m50.163147585s ago: executing program 1 (id=7029): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) creat(&(0x7f0000000980)='./bus\x00', 0x19) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x9d, &(0x7f0000000300)='trans=rdma,') 4m50.094015136s ago: executing program 1 (id=7030): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x10, &(0x7f00000000c0)={[{@grpjquota, 0x4a}, {@debug}, {@jqfmt_vfsold}, {@noquota}, {@bsdgroups}, {@usrjquota, 0x22}], [], 0x2c}, 0x84, 0x4c2, &(0x7f0000000980)="$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") (async) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x10, &(0x7f00000000c0)={[{@grpjquota, 0x4a}, {@debug}, {@jqfmt_vfsold}, {@noquota}, {@bsdgroups}, {@usrjquota, 0x22}], [], 0x2c}, 0x84, 0x4c2, &(0x7f0000000980)="$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") socket$inet6(0xa, 0x80002, 0x88) r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x101) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x10) 4m50.093625356s ago: executing program 1 (id=7031): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=@newqdisc={0x78, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x3, 0x0, 0x7ff, 0x1}, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x1e, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0xfffffffc}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) 4m46.15401203s ago: executing program 5 (id=7056): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b708000002001e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000d00)='sched_switch\x00', r2}, 0x10) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f0000000140)=[{&(0x7f0000000900)="580000001400192340834b80040d8c560a066e0202ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200060c10000000010000000000", 0x58}], 0x1) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./bus\x00', 0x1010048, &(0x7f0000000440), 0x1, 0x4d8, &(0x7f0000000b00)="$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") creat(&(0x7f0000000040)='./bus\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='kfree\x00'}, 0x10) 4m45.874559583s ago: executing program 5 (id=7058): r0 = open(&(0x7f0000000140)='./file1\x00', 0x64042, 0x169) pwritev2(r0, &(0x7f0000001800)=[{&(0x7f0000000740)="350e12b86d39bd18adb1ed3f6dc39862a96ba44ede27d1c35095d9a25f5c833994649ee3294ac5cd5e85479a145e5fc22c6eb4f9b2e0cf008ea029370c0a25ea72b7827c0380ad01428b128c0d46e1293e73fb022f108ef9ebbe0bcc3bfc505eb32c896b74f5431a9b9b56ef55ae2212fbd0ffe0137e328164fd44e4", 0x7c}, {&(0x7f0000000800)="337ba87b9559fee885cd9f7c7166b02eef16f66ac0269cdd797a72008c4115a67a9bcaa01177df10a12cba7bdcc6184ff31c6b61298835cf6c1628979a3c135b22f17f2698474f8740c5600d0704ba43b7df854a4bd4e40e5a6da17e2955bcf302763391a7ef1acf69d7d5122913d8bf2bee2fe12d1de6bd92f8c72233a9def74d3665b2a7e9bee59e3932b6e60054bcb0d9aeb27e35b746a7a397eb952eba6b6d7370209e277329e9661083296ed10e4006d4899a014db2a71d8dced0a9ab3e8ba27d73cb4d0d179e873b52bcd419943dc4fda1436ba220678e3365b407110ce210d7aaae50866ff8c506dde484eab56a78ac652920f2d6c3a606fdbf9f92a01e7434aa7eb58cbf23b4bbce63fc96ccbc581aab5f23aff87338afd105430eb5182c5072e222d6eb871906053158b341461de748199f26ac961541e3a8b63b8a560fc99ec6582ab351e3c37939b8aae89fd0487634c4f55bae42567649a4611abc4c81f6a87e58b31d8dbf463c762da339f1f339b8877404f21268ef83511ece80fc745b813fd32028f02a8fb8fc2c1074716d958edfe946afcd077a89a5feb8ae83cfa83fa1d3ff423294004007c795422d855bedbbb5a05713cb26e33d35e201d7c2fb7a9a625730f5a5f62dde4ed7435e6e904471bae6b11bbd4965744153525672ae8e82d965b9c9389f0a03e539dea6616d8350b0e3f331596b7bc7ae357b37d631adc334513685d275b1b952726f1e02d5d4b5c196e50d267251df00167abd9ba6beeb30f6d99c7622cc08731e4411180e7daf5ed23ce5cc338e9ccca98560b8839f08f5d5cea91112e288cab9bcd774c7e3ab381e1c845f6bf4cf11a8d0249de7f2a52ba6899d594de00acbfef736c7f3f734c06e5a97298ae74ded0db3da1dadb5944e8c53e62ed351acda549eed129cf31b7be67c4be2aab551447c98b436cea395e3a38966ac8dc5d479e3c709f0712669f68ff245a8c892e7f7e165ab045b6d17cf8d5f8302fa08115a1ba094cf8a1ead43414f7d2b0ba9d5c80cbce197a0472b720fa261f46cfce4aaf99af9f9099a24b193d0263ca8c0a82b5962c70d72f0acbe81f134372df415c9fbe8225464007e6de08fc2284fe87c068194f0e8419ce1cd601e2060e2476a743ddb775fdf11600c97840c022b2ade14562f1cbcc65f031e569743c3b0b77952362131c6e2a392dfb97bd5a6d1b17429e82df182f27c6f6b5bd2d853c3678a9bcd01ebd0fd0aa29e9ede396f5f90efbfe32a47a8aa15cd204788609c5ae29a8e342a9b23374ddb41e4a295c9d7898c363063678cd9f51ececcca3fc41b626039e34ce02a6b9299f192e6e0ddf63127ef362f48ff98f07f1c141db28be53ec08b30d259e5bce2e11bc1a0c772854c26dfdb1714f051c9f1ce6c327a0de407d6e63c7e2a77267f307122dcaadc7e11fa9d587c6aa139ab6d23f4c565277db0873d6d86e823fb2da54c1695bd5a1b6b29f8cbd3ab1eceff63d59ed635b8562e36534adf02802cb356c77e7bdb6ac65789bdc6934d26ee61eac5c561bdab0c2f0f17f3fc91893f160fe71187f0ae3e7866afcd6ef86373a5d8e3153e4e4a578a03e7990630c656a83d055069f84ba4a368a1168b9d918ee93b98783b555c3c67030d04f542562559739f5d2d55932bf7ae431494e31ec33f43b1108db4a7ac605345f308d82e6f842d3ceb512aaab9eb74080a08eac71d11be407a303f2dbe01fd25e66cf73bf7cdb0ed76ab473c72322cce3e0bf0079a51316e6fa7cf9bc331277a7ec82ab1e36c45d84ab71425c2354b527ef1b5f81bbc63d4fb888937a1528add64616ddbc8a2a1fd163a6e2dba64a768a3198b439012fc33ac9997b7622dc544985fa3353c7c42a4241c0140622bf643102b77a3c85725656ae06f4766aa018257c08d57c013137e96ec9e656cb55a697abb0a0379ecd591d845bf1ea254426198f0c25d63f113b873d7679e33d491847b89ef716337759d2471c9da920e17a57c8deb7ca3eef5d21d853d81861a7c5a3d20b108b52978c937a0f0064ba449e565455bc5c1551ffc2ce534865921893c73e48acaabdeef880ec3a5ed124487420af5d8e7d2c0af5c1eb4a09fbeadc1e0502e14a250c4eef876d748a21e0dc161f9d92e2854769215110471a6254f6857dee55404a6013a12a2897c3088226e2f9f5e1c208bb5adf6bbdc667f69c842c00dac6106cb47bfb61ac8c5536c7aefd83bfcfe4826722ebdd3740b1d04890da05cad4ff4ff2d4aafd79e29e648381133c13ba39d22f9c9474214bcee58614759ffc162c6022d360844fb141b16f3f2c8ef62de05301f39eb2695a0da8acc4d0d35430e915cc6c6b18ea990bdcd6927db637e0a1b24b9fff419ffdb90321bccdd39cab4dade8eb4bb34da304ab096327056cea9f01fc5108a51284f2e7eb15416535ea9ce6b9939343a7b308c105c082342a4abe072e9e440f1070e49917ae59dcea88767d00d5827987410dc06c2bac5d692843afcc4644b25cb6a7399cd50d5f6dcf7f1679727a2a3c5ac1d0779955b60b614c388d33d2563cd34351bfc2b783789263a314af52826fa0a248066ee282d05e858d37c3535626205388699482ee32c03989a57e09d65a30fcf4f2c048b69875e336044059467ebc3ec1b938b90257634bf5a86cec4d0cb4c5e41e33facbb6c9d2a69a42a4d42b328ce80be5c96e17ba66e182d52e584be4d03074f11e66dd8794a0d9f6bebcd90e9f2e9c3ad3807db21d2734a1f6ad48847423b339e249dc72174edf10c4aa8d2409dff0bffad2b61d223ddf456e9d01047f283c113ec0716bb0dbf7e5213709af359ac0ca21a6360a2e184ac31160e18e88708b1bbe2a158a820622bb9242a55c6e075acd5f596f7831cf8e6879b3a63748e9bec15d1b618e2b3b51b51a2b94787935488d84c053f90b50940ea81c0a2785c4ce909bb4679a23e366e1070f8fae0a714dcc699c8d142473e5741a8391cc274ab0caa04234547fa41081254580f2d6df1a1d64a341fb784e270be8b04349b57a81ee31b4b0e8ac22aee4197bf74077c89a1364ab52783a34d591c736971285a45150806954870969792e0c4cde046ea265990db528c14f06d93bdcc7878574e428af676322bfbf76e73aa7844cc3c92627e91779fa4828d9ee5ff8d24a123fa5146bcee5690f2d3ef100966024216df7d7f70ebd1bed0cf482f15a718d3852fe0559c5fe7cd877e4502b74d3bc818dca0088d4b14bd2585592cdf9303b80a81154fdd20a52d2af372c68f78bbff73fedfc43b4450686df90714c51f0d5380bbced0b8645c6247b3f8adebcbf4a986b84e53f7524cc05f3f0cdef577410652083f88eda3a08a8c071dd1dc7ca4fd810d9977771e9df1961df01eff04bcf037d010b74ef451adb413e499858214d872c0bb75521937483a03fab4157cc80a6930a284ab5bcb1c16acd153417447e5a65ebca71a418d2e919e79c496795f24c1e350ca69602a7e909f59f4f2f02cbd7eecb52e4de292c5b68b1ce5a769d2ca9a01632dcbf0b883e42f490b8329f7c8cc713c046f8a6f14ec88b56ab6787e2f95fb643bcd73f320cfb73c21a95fb4b83f70fc703f8f49ab7ac08520238ac085e882b1284fd086485b4923204e5481f5c55529e8907a1fb12cd71ed498b355af565dcef00b2dc8127c59011dd0d2de8ca52cc871ea1cc4ff43cb602ac4fae4dc308f6a093599abf4e0c26bc6031fcd07e7c8b5157d849a24a784eda56d16df198b1dfaaf492e3780a54c3941c0b94b43848b59e8035333e263be53ce1b45248c34bea9c4309893d98671710a250e76a9b17d0c691d742c0e64540313fb7a91095a516b67ac3e86d528d3a68b18ee888c92b38526149e7fe20373101780f724c814260a994a99f11c88e17a5e7c67deda4623a2997881183b273188657eec9b20221286450b04d3dfaa841b952f8459c41abb55f4171f0008103d4af9ed21d80c0781faf3e771ba45a2e93330996756fd184a01439fef7509d6fa2f23ae72f6a5ef169be6d6e60b12841be7283a9bf66b8ed3dc3fdcdcec99e1c58916c5e8a563bb868264d1d1e94c7d88ce1777ffc2fcb9d097f8554956d07a3aef4a5a06d8d788fc18923523b1c418194b7d1d281653186be135f49a96a47aac60fe60ce0dcbff525b124d60b57a965b6c3e9a0feeab458311a1167d59f319934f66826614c9b1f006fa0cbeffb8158125df8f9f781217f4c9e3854a301df218f1a690d5ded877bff63da200a7ff93c8bf5da36bd31b664c34f5e70d969994cf9788cf9c5cb381e22c2082968fdb4571470ae9a74ef4449d2ee7f884cadac5d1417edfbaa1869832647e2448b10e8ea91aa86b86bf54429e90a86a323dea1adf56f8bcb048d6793771d0bfcfda9a6c32f0ff7b77cc33587259391f05b24da63ac2162b1b0a7046fbf79a3a869ea0b9cb8b67f20fa9b2d0fdbb501ee632767aa1e4d4b8f7c2f31a7c640c03a9f1a13885aa7e6af9e7c8dc91b21a9d5b3d9edbfb9e2db2e5a80d55d4dd9b36ede33173d76cb0e75ced63bcac12fd7bca30d03e5bb2f8c7c3462e1160f946f68530387eeb1f3bb08c463bc2713ab5845953864f6dfc916705847ea7e3a63d032692f66fb8043011a31211bccbd5692c59b260db18624bb68b6f274e48aff248b628dbbe2104553294cdf5465b689d918dbb9d51ee22c51753c5c321520282ea0b7f456bce2c93ea4666e00c6e5a3725b0609f971b3bcd2e919a5dd424a104b882b2340fe2f47c0256fae2c896bf534b1e4c4278477813a115f04d4c93998ac185839ee8c65dd49d71270e4425a67bb5cfb522f97ee547bde726c9b3d80ef89b18d3544e86a866cfacde33ae5f1f4d3f334259f7369df57fad99d63de568ac49c00ab09480eab5c899bc8f186759f9835f287f27df65408c2639ca4f558ed886928f1976a216397a2c9417175ddd82140dfd2ffb7ba4efd2a8e2909293eb75a4cfb3595f27f6f9a9fa3ba72f6bfbc0888144ba0dc3d16f114797aca8614581c92ab9816da618b5a7c8d9cfdcc9de0a5f875037ca69668766d4aa4a4f3974fbedf80f21b21aa013cb115f84c3da6883a8ca9b1fbd7ee5205ccdccb0112a617229cc40367d5678de3901ad00a9081989124e1c4604a66bc4195f097bc4f5b642e9daf991b3c05162bbf00a34eb7a7a920f8c5f497029453d8e3ff7bf41a9a3cbc366de44cc142650cd7d3c69684380792ad802ee34a47e65161883586b1f30df1c1acdaf8be835186d4ce1f149961f87b2fc0db1eb579716d0d30a028a0f02947f21ffe14ab347584f36d909c80ba5adbeb90809ba5b77cf303d20af937b69e02b06af36b4a6f90fe8ba71be2244ad89d1e26d8f55fd54a9de5107907c0d0732ae6cb2b7917973b8ccffaa5359bb5ec14cfafaf8dc209fe0d510d4908fc0cf23e9a41714ad106dbb89eff955407f5f8eaeac07194f8f06676a176caa3ac10ad8c2aef7c36fde897be6938dcbdb2c1c4fe0a12f6aa829fb4958fb623f3a2ada6809fb9e58e65550d72d9248d0a4784b80d68569b580b42b87edfd659d8fd1cb179cbd3083f520032e9be0c97b2406756007e254e268da108d0a4839fbdd0c11d0282181bb11fb4bef2a727cfd685c46f604fcd72e5d9a2d84e321e00c359af578482b3487f7e24e27308bb7643544f95f30fb054076ff8ce1d60440c5920d579062c1477c0f70ce0fb3c9a9146e60a76c529b79bc8190aea48af1f649dc92020f3fb21c429ae020f7d6068a91d7ecda97f7ba00", 0x1000}], 0x2, 0x2000, 0x0, 0x1b) 4m45.777710345s ago: executing program 5 (id=7060): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f00000003c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc0006}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000180)='./bus\x00', 0x0) renameat2(r1, &(0x7f0000000380)='./file0\x00', r1, &(0x7f0000000200)='./bus/file0\x00', 0x0) unlinkat(r1, &(0x7f0000000080)='./bus/file0\x00', 0x200) 4m45.738113025s ago: executing program 5 (id=7062): syz_clone3(&(0x7f00000002c0)={0x4c100c80, &(0x7f0000000000)=0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080), {0x13}, &(0x7f00000000c0)=""/130, 0x82, &(0x7f0000000180)=""/61, &(0x7f0000000200)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0], 0x4}, 0x58) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000240)=0x0) fcntl$lock(r0, 0x5, &(0x7f0000000380)={0x0, 0x0, 0xffffffff, 0x400, r1}) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'hsr0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_opts(r7, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c16, &(0x7f0000000500)={[{@resuid}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x4}}]}, 0xff, 0x247, &(0x7f0000000ac0)="$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") r8 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r8, &(0x7f0000000980)=ANY=[], 0x5b0) close(r8) mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2390024, 0x0) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000040)='batadv_slave_0\x00', 0x10) connect$inet(r7, &(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$inet_opts(r7, 0x0, 0x4, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f0000000140), 0x4) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x40000000, 0x0, &(0x7f00000000c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="0218000019000000000000000000000005000600000000000a00040000000000fc0000000000000000000000000000000000000000000000080012000000000000000000000000000600000000000000000000000000000000000000000000000000000000000000e000000200000000000000000000000005000500000000000a00000000000000000000000000000000000000000000000000000000000000050019000000000002004e2264010101000000000000000002"], 0xc8}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6, 0x0, 0xfffffffffffffffe}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x100) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000580)='hugetlbfs\x00', 0x4000, 0x0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000180)='tmpfs\x00', 0x3200890, 0x0) r9 = open_tree(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) move_mount(r9, &(0x7f0000000400)='.\x00', r9, 0x0, 0x262) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0xc}, {0xfff3, 0x8}}}, 0x24}}, 0x20040000) 4m43.001802523s ago: executing program 5 (id=7083): socket$inet6(0xa, 0x80002, 0x88) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000400000000dfffff1918120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x4, &(0x7f00000002c0)={[{@max_batch_time={'max_batch_time', 0x3d, 0x6}}, {@i_version}]}, 0x6, 0x5fd, &(0x7f0000000c00)="$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") ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000400)=@urb_type_interrupt={0x1, {0x1, 0x1}, 0x0, 0x60, 0x0, 0x0, 0xc, 0x0, 0x3f, 0x5, 0x5f8480, 0x0}) openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0xa102, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r3}, &(0x7f0000000040), &(0x7f0000000440)=r4}, 0x20) unshare(0x62040200) 4m41.341708515s ago: executing program 5 (id=7090): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010000000900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a32000000007c000000060a010700000000000000000100000508000b400000000054000480340001800b040100657874686472000024000280080001400000000c0800034000000000080004400000003005000200070000001c0001800a00010072656469720000000c00028008000140000000150900010073797a3000"], 0xf0}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01", @ANYRES8=r1, @ANYRESOCT=0x0, @ANYRES64=r1, @ANYRES32=r1], 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r4}, 0x10) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f00000002c0)=@mangle={'mangle\x00', 0x2, 0x6, 0x5f0, 0x450, 0x290, 0x290, 0x360, 0x360, 0x570, 0x360, 0x570, 0x570, 0x570, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [], [], 'pimreg0\x00', 'macvtap0\x00', {}, {}, 0x6, 0x10}, 0x0, 0x188, 0x1b0, 0x0, {0x7a00000010000000}, [@common=@srh1={{0x20}, {0x32, 0x0, 0x0, 0x0, 0x0, @local, @mcast2, @private2={0xfc, 0x2, '\x00', 0x40}, [0x0, 0x0, 0xff000000]}}, @common=@inet=@multiport={{0x50}, {0x10, 0xd, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4e20], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd]}}]}, @HL={0x28}}, {{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @dev, [0x0, 0xff, 0xffffffff], [0x0, 0x0, 0xff000000], 'veth1_macvtap\x00', 'macvlan0\x00', {}, {}, 0x0, 0x3}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {}, {0x0, 0xff}}}}, {{@ipv6={@remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xffffffff], [0x0, 0xffffffff, 0xff], '\x00', 'bond_slave_0\x00'}, 0x0, 0xa8, 0xd0, 0x48000000}, @common=@unspec=@CLASSIFY={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv4=@loopback}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x650) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0) r6 = socket$inet6(0xa, 0x4, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r6, 0x894b, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r7 = epoll_create1(0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000a50000002a00000095"], &(0x7f0000000b40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x10) epoll_pwait2(r7, &(0x7f0000000640)=[{}], 0x1, &(0x7f0000000080)={0x0, 0x3938700}, 0x0, 0x0) mount$bind(&(0x7f0000000500)='./file0/file0\x00', &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x80600a, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f00000008c0), 0x5, r2}, 0x38) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x18, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r9, 0x0, 0x2}, 0x18) setresgid(0x0, 0xee01, 0x0) kexec_load(0xab, 0x0, &(0x7f0000000b40), 0x320000) 4m41.341156665s ago: executing program 41 (id=7090): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010000000900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a32000000007c000000060a010700000000000000000100000508000b400000000054000480340001800b040100657874686472000024000280080001400000000c0800034000000000080004400000003005000200070000001c0001800a00010072656469720000000c00028008000140000000150900010073797a3000"], 0xf0}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01", @ANYRES8=r1, @ANYRESOCT=0x0, @ANYRES64=r1, @ANYRES32=r1], 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r4}, 0x10) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f00000002c0)=@mangle={'mangle\x00', 0x2, 0x6, 0x5f0, 0x450, 0x290, 0x290, 0x360, 0x360, 0x570, 0x360, 0x570, 0x570, 0x570, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [], [], 'pimreg0\x00', 'macvtap0\x00', {}, {}, 0x6, 0x10}, 0x0, 0x188, 0x1b0, 0x0, {0x7a00000010000000}, [@common=@srh1={{0x20}, {0x32, 0x0, 0x0, 0x0, 0x0, @local, @mcast2, @private2={0xfc, 0x2, '\x00', 0x40}, [0x0, 0x0, 0xff000000]}}, @common=@inet=@multiport={{0x50}, {0x10, 0xd, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4e20], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd]}}]}, @HL={0x28}}, {{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @dev, [0x0, 0xff, 0xffffffff], [0x0, 0x0, 0xff000000], 'veth1_macvtap\x00', 'macvlan0\x00', {}, {}, 0x0, 0x3}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {}, {0x0, 0xff}}}}, {{@ipv6={@remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xffffffff], [0x0, 0xffffffff, 0xff], '\x00', 'bond_slave_0\x00'}, 0x0, 0xa8, 0xd0, 0x48000000}, @common=@unspec=@CLASSIFY={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv4=@loopback}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x650) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0) r6 = socket$inet6(0xa, 0x4, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r6, 0x894b, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r7 = epoll_create1(0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000a50000002a00000095"], &(0x7f0000000b40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x10) epoll_pwait2(r7, &(0x7f0000000640)=[{}], 0x1, &(0x7f0000000080)={0x0, 0x3938700}, 0x0, 0x0) mount$bind(&(0x7f0000000500)='./file0/file0\x00', &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x80600a, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f00000008c0), 0x5, r2}, 0x38) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x18, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r9, 0x0, 0x2}, 0x18) setresgid(0x0, 0xee01, 0x0) kexec_load(0xab, 0x0, &(0x7f0000000b40), 0x320000) 4m35.09004816s ago: executing program 42 (id=7031): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=@newqdisc={0x78, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x3, 0x0, 0x7ff, 0x1}, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x1e, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0xfffffffc}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) 3m18.928914889s ago: executing program 9 (id=8085): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r0, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) syz_open_dev$vcsn(&(0x7f00000000c0), 0x9, 0x151b01) openat2(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x450302, 0x0, 0x10}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x4) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r2, &(0x7f0000001240)=""/102400, 0x200000, 0x0) 3m18.82487842s ago: executing program 9 (id=8089): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x25, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x23) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={r3}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r4, 0x0, 0x4}, 0x18) r5 = socket(0x40000000015, 0x5, 0x0) bind$inet(r5, &(0x7f0000000340)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@ringbuf_output={{0x18, 0x2, 0x1, 0x0, r8}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xc}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x43}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @void, @value}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000001640)='kfree\x00', r9}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000021c0)=@newtfilter={0xe84, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r7, {0x0, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_fw={{0x7}, {0xe58, 0x2, [@TCA_FW_ACT={0xe54, 0x4, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0xafcc, 0x7, 0xffffffffffffffff, 0x8, 0x8001}, 0x7, 0x1}, [{0xe205, 0x80000001, 0x9, 0x1842, 0x1, 0x8000}, {0xfffffff9, 0x8, 0x7, 0xb145, 0x4, 0x8}, {0x0, 0xf8d5, 0x1ff, 0x87, 0xa, 0x5}, {0xf, 0x7e7, 0x9, 0x7, 0x0, 0xa}, {0x1, 0x101, 0x5c78, 0xffffff56, 0xee, 0x8}, {0x3, 0x73, 0xb, 0x7, 0x2, 0x6}, {0x8, 0x5, 0x4, 0x4, 0x2, 0x8}, {0x1ff, 0x1, 0x2f, 0x7, 0x533f, 0x200}, {0x8, 0x4bd5, 0x5, 0x2, 0x2, 0xf8}, {0x2, 0x8, 0x4, 0x7, 0x32, 0x1000}, {0x6, 0x0, 0x0, 0x8, 0x6, 0x5}, {0x5, 0x9, 0x1, 0x10, 0x8, 0x4}, {0x4, 0x0, 0x3, 0x80000000, 0x2, 0x1}, {0x6, 0xfffff800, 0xbf, 0x1, 0xffffffff, 0x8}, {0x48a3, 0x3ff, 0x9, 0x6e, 0x3, 0x8}, {0x4, 0x200000, 0xaeb, 0x360, 0x2, 0x400}, {0x0, 0xffffffff, 0xbe, 0x1, 0x7, 0x8}, {0x5ad, 0xfaec, 0x401, 0x9, 0x8, 0x45}, {0x3, 0x9, 0x400, 0x3, 0x6, 0x5}, {0xde, 0x0, 0x5, 0x8000, 0x2, 0xffff}, {0x80, 0x3491, 0x83, 0x8001, 0x3, 0x165c}, {0x6d, 0x5, 0xf, 0xe, 0x8, 0xec}, {0x6, 0x1, 0xfffffffc, 0x5, 0x0, 0x81}, {0xcd0, 0x9, 0x6, 0x7fffffff, 0x80, 0xfffffff8}, {0x7, 0x3, 0x2b0, 0x5, 0x2, 0xd6}, {0x6, 0x3, 0x0, 0x2, 0xc4}, {0x0, 0x99, 0x200, 0x1b8, 0x4, 0x1}, {0x1cff, 0xc7a9, 0x25, 0xffffffff, 0x7, 0x2}, {0xff, 0x4, 0x7fff, 0x7, 0xfffffff9, 0xd46}, {0x7, 0x2, 0xec, 0x0, 0x8}, {0x3, 0x8, 0x0, 0x6, 0xebc, 0x8}, {0x3, 0xfe9, 0x1, 0x4, 0x0, 0x401}, {0x4, 0x8, 0xd, 0x7fff, 0xb, 0x87c}, {0x4a, 0x1000, 0x1, 0x81, 0x6063}, {0xfffffe00, 0xe392, 0x0, 0x9, 0x3, 0x9}, {0x8, 0xff, 0x1, 0x101, 0x10000000, 0x4ac9}, {0x8, 0xffffffdb, 0x3, 0xe4c, 0x3, 0x2ca759d6}, {0x5, 0x4, 0x9, 0x2, 0x2, 0xfffffffa}, {0x0, 0x3, 0x4, 0x1, 0x10001, 0x9}, {0x5f21eb86, 0x1, 0x9, 0x40, 0x4, 0x9}, {0x55f, 0x8, 0x401, 0x5, 0x3, 0x40}, {0x7, 0x6, 0x7, 0x8000, 0x81}, {0x4, 0x9, 0x5, 0x6, 0x3, 0x2}, {0x100, 0x4, 0x7, 0x8, 0x66, 0x9}, {0x5, 0x5, 0x3, 0x7ff, 0x2, 0x80000001}, {0x8, 0x6, 0x88, 0x9, 0x6, 0x1}, {0x7b, 0x74, 0x1, 0xd, 0x8, 0x7fff}, {0x69, 0xcd, 0x7f, 0xd, 0x200006, 0xf}, {0x9, 0x0, 0xe0e, 0x4, 0x3, 0x6}, {0x1, 0x2, 0x4, 0xc9, 0x6, 0xfffffff7}, {0xb, 0x2, 0x5, 0x7fde, 0x101, 0x1}, {0x3, 0x392, 0xb19, 0x1, 0x8d, 0x9}, {0xff, 0x5, 0xffff, 0x6972, 0x1, 0xfffffff9}, {0x6, 0x200, 0xb1, 0x1, 0x1000, 0x401}, {0x8, 0x54a0ee99, 0xfffffffa, 0x2, 0x99, 0x4}, {0x4, 0x2, 0xc979, 0x2, 0x4, 0x7ff}, {0xffffffff, 0x8, 0x7, 0x8, 0x7fffffff, 0x2b25}, {0x5, 0x4, 0xd55, 0xff, 0x0, 0x2}, {0x5, 0x2cfd091, 0x8, 0x9, 0x4, 0x3}, {0x0, 0x8, 0x1b89, 0x7, 0x5, 0x6}, {0x2887b03a, 0xc54, 0x3, 0x0, 0x5, 0x7}, {0x2ee, 0x2, 0x8, 0x7, 0x10001, 0x5}, {0x3, 0x6, 0xe, 0x8, 0x5}, {0x1000, 0x9, 0x6, 0x1, 0x40, 0x7}, {0x9, 0x7fff, 0x4, 0x0, 0x4, 0x10}, {0xffff0001, 0x7, 0x8, 0xe, 0x400, 0xfffff521}, {0x7, 0x6, 0xd65a, 0x2, 0x3, 0xffffff93}, {0x6, 0x7, 0xffffff7e, 0x5, 0x80000000, 0xfffffffc}, {0x7, 0x800, 0xc, 0x7fff, 0x2, 0x4}, {0x0, 0x6c0, 0x2, 0x3ff, 0x8, 0x7fd7}, {0x0, 0x8000010, 0xa52, 0x3, 0x4, 0xd91}, {0x0, 0x80000000, 0x400, 0x2, 0x6, 0x7}, {0x1, 0xad3, 0x9, 0x12000000, 0x7, 0x6}, {0x7, 0x6, 0x4, 0x5, 0x9, 0x9}, {0x9e2, 0x8, 0x5, 0x1, 0x3a, 0x2}, {0x74863fbb, 0x5, 0xffc000, 0x401, 0xffffff8e, 0xfffffff8}, {0xa99b, 0x4, 0x4, 0x5, 0x4, 0xfffffffa}, {0x8001, 0x0, 0xfffffffe, 0x2, 0x0, 0x7}, {0x6, 0x7, 0x0, 0x7, 0x80000000, 0x50}, {0x0, 0x0, 0xc, 0x2, 0x3, 0x4}, {0x1ff, 0x4, 0xb5, 0x7, 0x1cec, 0x8}, {0x5, 0x7, 0x9, 0x1, 0x7, 0x7}, {0x7, 0x2, 0x71e892ab, 0xe8, 0xfffffff8, 0x4}, {0x80000000, 0xb07, 0x1, 0x8, 0x6, 0x3}, {0x9, 0x2, 0x5, 0x2, 0x9, 0xe}, {0xfffffff5, 0x2, 0x0, 0x5, 0x4a3, 0x8}, {0x5, 0x9, 0x4, 0x10000, 0x3, 0x6}, {0x4, 0x3, 0xfff, 0x4, 0x4, 0x1}, {0x1, 0x6, 0x8, 0x4, 0x7, 0x40}, {0x80000001, 0x389, 0x6, 0x400, 0x5, 0x7fffffff}, {0x65, 0x7fffffff, 0x6, 0x6, 0xea8, 0x8}, {0xb, 0x0, 0x4, 0x33, 0xb, 0x7}, {0x4, 0x1, 0x3, 0x1, 0x8, 0xb49}, {0x1, 0xd, 0x1ff, 0x7, 0x9, 0x9}, {0xc98f, 0x2, 0x10004, 0x8, 0x6, 0xc2f}, {0x4, 0x80000000, 0xc, 0x100, 0xe961, 0xffffffff}, {0x1, 0x8, 0x8, 0x9, 0xff, 0x800}, {0x5, 0x6, 0x5, 0x77, 0x0, 0x8}, {0x5, 0x10000, 0x81, 0xb, 0x1ff, 0x5}, {0x1, 0x0, 0xfffffff8, 0xc0c, 0x6fa, 0x8c1}, {0x8, 0x80000000, 0x9, 0x8, 0x0, 0x7}, {0x4, 0x0, 0x2, 0x0, 0x100, 0x5}, {0x2, 0x10001, 0x1, 0x53da, 0x2, 0x8001}, {0x401, 0x68c, 0x9, 0x2, 0x8, 0x7}, {0x5, 0x80000001, 0x7f, 0x5, 0xb0e, 0xeb}, {0x6, 0xad2b, 0x1, 0x85, 0x101, 0x3ff}, {0x93, 0x7, 0x4, 0x99b, 0x5, 0x11aa729f}, {0x8, 0x3, 0x3, 0x4, 0x32a, 0x10001}, {0x5, 0x80000000, 0x6, 0x1000, 0xffffff81, 0x200}, {0xd4, 0x91000, 0x80, 0xc, 0x4, 0x2}, {0x10000, 0xfffffff4, 0x0, 0x1, 0x6, 0xe5}, {0x3, 0x100, 0x6, 0x2, 0x8, 0x1}, {0x1, 0xffff, 0x10001, 0x1ff, 0x3, 0xfffffff5}, {0x4, 0x7, 0xfffffffc, 0x6, 0x6, 0x2}, {0xf74f, 0xd, 0x0, 0x0, 0x3ff, 0x6}, {0xfff, 0xff, 0x3, 0x2, 0x8, 0xc}, {0x5, 0x9, 0x45, 0x1, 0x6, 0x1000}, {0x4, 0x0, 0x1ff, 0xb, 0xa, 0x1}, {0x5, 0x6, 0x6a5, 0x0, 0x7}, {0x0, 0x5, 0x7fffffff, 0x6, 0x9, 0x9}, {0x18152e2c, 0x5, 0x0, 0xff, 0x2, 0xffffffff}, {0x7554, 0xffffffff, 0x5, 0x201, 0x2, 0x6}, {0xef6, 0x7, 0x61a, 0x0, 0x4, 0x9}, {0x19, 0x10001, 0x3, 0x3, 0x0, 0xfff}, {0x7, 0x4000, 0x100, 0x10000}, {0x57b, 0x2, 0x10e, 0x80, 0x7, 0x5}, {0x9a, 0x5, 0x3, 0x0, 0x3, 0x7fff}, {0x1000000, 0x9, 0x7, 0x0, 0x2, 0x101}], [{0x3}, {0x4, 0x1}, {0x1}, {0x4, 0x1}, {0x1, 0x1}, {}, {0x4}, {}, {0x3}, {0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x1}, {0x1}, {0x4}, {0x4}, {0x5}, {0x5}, {0x6, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x2}, {0x3}, {0x4}, {0x5, 0x1}, {0x2, 0x1}, {0x5}, {0x5, 0x1}, {0x4}, {0x4, 0x1}, {0x3, 0x1}, {0x3}, {}, {0x3, 0x1}, {0x2}, {0x1}, {0x3}, {}, {}, {0x5, 0x3}, {0x4}, {0x4, 0x1}, {0x0, 0x1}, {0x2}, {0x2}, {}, {0x3, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0xe, 0x1}, {0x3}, {0x1}, {0x5}, {0x1}, {0x6}, {0x4, 0x1}, {0x5}, {0x3, 0x1}, {0x2, 0x1}, {0x4}, {0x3, 0x1}, {0x5, 0x3}, {0x5}, {}, {0x5}, {0x1, 0x1}, {0x2, 0x2}, {0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x5}, {0x4}, {0x5}, {0x0, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {}, {}, {0x5}, {0x5, 0x1}, {0x3, 0x1}, {0x2, 0xdcdcfc412ebb7d41}, {0x1, 0x1}, {0x1}, {0x5}, {0x2, 0x1}, {0x1, 0x1}, {0x4}, {0x5}, {0x2}, {0x3}, {0x0, 0x1}, {0x4}, {0x5, 0x1}, {0x2, 0x1}, {0x1}, {0x2}, {0x3}, {0x1}, {}, {0x5}, {0x4}, {0xbe9e5652533709fb}, {0x4}, {}, {0x0, 0x1}, {0x3}, {0x1}, {0x1}, {}, {0x1, 0x1}, {0x3}, {0x0, 0x1}, {0x5, 0x1}, {0x5}, {0x1, 0x1}, {0x5, 0x1}, {0x3}, {0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x2, 0x1}]}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0xe84}, 0x1, 0x0, 0x0, 0x81}, 0x800) 3m18.753492701s ago: executing program 9 (id=8091): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r2, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0x0, @empty}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000580)="ec981480bb58", 0x6}], 0x2, &(0x7f00000006c0)=ANY=[], 0x9}, 0x0) recvmsg(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x40014040) 3m18.752850221s ago: executing program 9 (id=8092): r0 = socket(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f0000000300)={[{@jqfmt_vfsv1}, {@dioread_lock}, {@barrier_val}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x5}}, {@errors_continue}]}, 0xfc, 0x56f, &(0x7f0000003780)="$eJzs3d9rW1UcAPDvTdPup66DMdQHGezByVy6tv6YIDgfRYcDfZ+hzcpouowmHWsduD24F19kCCIOxD/Adx+H/4B/xUAHQ0bRBxEiN73psjZp2i4z2fL5wG3Pyb23535z7vf2nNyEBDC0jqU/chEvR8Q3ScShlnX5yFYeW9tu9eH1mXRJol7/9M8kkuyx5vZJ9vtAVnkpIn79KuJkbnO71eWV+WK5XFrM6hO1hSsT1eWVU5cWinOludLlqenpM29NT737zts9i/X1839//8ndD898fXz1u5/vH76dxNk4mK1rjeMJ3GitHCv+m5VG4+yGDSd70NggSfp9AOzKSJbno5FeAw7FSJb1wPPvy4ioA0Mqkf8wpJrjgObcvkfz4GfGgw/WJkCN2Mda48+vvTYSextzo/2ryWMzo3S+O96D9tM2fvnjzu10ia1fh9jXpQ6wIzduRsTpfH7z9T/Jrn+7d7rx4vHWNrYxbP9/oJ/upuOfN9qN/3Lr459oM/450CZ3d6N7/ufu96CZjtLx33ttx7/rl67xkaz2QmPMN5pcvFQunY6IFyPiRNS73vo4s3qv3mld6/gvXdL2m2PB7Dju5/c8vs9ssVaMiLFdhvyYBzcjXsm3iz9Z7/+kTf+nz8f5bbZxtHTn1U7rusf/dNV/initbf8/6tZk6/uTE43zYaJ5Vmz2162jv3Vqv9/xp/2/f+v4x5PW+7XVnbfx495/Sp3W7fb8H0s+a5SbSXCtWKstTkaMJR9vfnzq0b7NenP7NP4Tx7e+/rU7/9PJ1+fbjP/WkVsdNx2E/p/dUf/vvHDvoy9+6NT+9vr/zUbpRPZIdv1rLztXtnuAT/r8AQAAAAAAwCDJRcTBSHKF9XIuVyisvb/jSOzPlSvV2smLlaXLs9H4rOx4jOaad7oPtbwfYjJ7P2yzPrWhPh0RhyPi25F9jXphplKe7XfwAAAAAAAAAAAAAAAAAAAAMCAOdPj8f+r3kX4fHfDUNb7YYE+/jwLoh65f+d+Lb3oCBlLX/AeeW/Ifhpf8h+El/2F4yX8YXvIfhpf8h+El/wEAAAAAAAAAAAAAAAAAAAAAAAAAAKCnzp87ly711YfXZ9L67NXlpfnK1VOzpep8YWFppjBTWbxSmKtU5sqlwkxlodvfK1cqVyanYunaRK1UrU1Ul1cuLFSWLtcuXFoozpUulEb/l6gAAAAAAAAAAAAAAAAAAADg2VJdXpkvlsulRYWOhfdjIA7jaQa4Zle75wclCoUOhZtZ9+5srz5elAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgg/8CAAD//4yLMZo=") r4 = open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r5, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @empty}, 0xc) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r6, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x200]}) r7 = socket$tipc(0x1e, 0x2, 0x0) renameat2(r6, &(0x7f0000000040)='./bus\x00', r4, &(0x7f0000000480)='./file1\x00', 0x2) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000001380)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000818110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x41, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='kfree\x00', r9}, 0x10) r10 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f00000000c0)='9', 0x1, 0xffffffffffffffff) r11 = socket$rds(0x15, 0x5, 0x0) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r12}, 0x10) bind$rds(r11, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r11, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}], 0x1}}, @rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000004c0)=[{&(0x7f0000000080)=""/28, 0x1c}], 0x1}}], 0x90}, 0x0) keyctl$chown(0x4, r10, 0xee00, 0xffffffffffffffff) keyctl$chown(0x4, r10, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) close(r3) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000800)=@newqdisc={0x22, 0x24, 0x3fe3aa0262d8c583, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x6, 0xfff2}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_QUANTUM={0x8}]}}, @qdisc_kind_options=@q_qfg]}, 0x60}}, 0x20004004) 3m18.557921944s ago: executing program 9 (id=8096): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='\v\x00\x00\x00\b\x00\x00'], 0x48) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b000000"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) io_setup(0x1ff, &(0x7f0000001540)) 3m17.937977672s ago: executing program 9 (id=8108): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) unlinkat(0xffffffffffffffff, 0x0, 0x200) 3m17.937672992s ago: executing program 43 (id=8108): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) unlinkat(0xffffffffffffffff, 0x0, 0x200) 4.826408125s ago: executing program 2 (id=10167): r0 = socket(0x1e, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan0\x00'}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x5}]}], {0x52}}, 0x64}, 0x1, 0x0, 0x0, 0x890}, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x2a82) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r5 = inotify_init() prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) inotify_add_watch(r5, &(0x7f0000000000)='./file1\x00', 0x7a8) r6 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x40, 0x0, 0x0, 0xff, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, @perf_config_ext={0x8, 0xb}, 0x100002, 0x0, 0xfffffffc, 0x0, 0x0, 0xfffffffe, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180200000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r7}, &(0x7f0000000180), &(0x7f00000001c0)=r6}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) fsync(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x40, 0x7ffc1ffb}]}) r8 = getuid() setuid(r8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', 0xffffffffffffffff, 0x0, 0xffffffffffffffff}, 0x18) ioctl$SG_IO(r4, 0x2285, &(0x7f00000005c0)={0x53, 0xfffffffe, 0x6, 0x2, @scatter={0x0, 0xcc, 0x0}, &(0x7f0000000080)="0800501ef663", 0x0, 0x800004, 0x10032, 0x0, 0x0}) sendmsg$NL80211_CMD_NOTIFY_RADAR(r1, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="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", @ANYRES16=r2, @ANYRES8=r3], 0x34}, 0x1, 0x0, 0x0, 0x4000001}, 0x20000000) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './cgroup/../file0\x00'}, 0x6e) 4.706026386s ago: executing program 2 (id=10170): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000040)='gre0\x00', 0x10) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) listxattr(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f00000000c0)={[{@data_err_ignore}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) sendfile(r0, 0xffffffffffffffff, 0x0, 0x3ffff) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000300)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x10) gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)) timer_getoverrun(0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x7ffff000) timer_gettime(0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='mm_page_free\x00', r2}, 0x18) syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210003, &(0x7f0000000540)={[{@acl}, {@barrier}, {@prjquota}, {@journal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@resuid}, {@noacl}, {@acl}, {@noquota}]}, 0x0, 0x595, &(0x7f0000000f80)="$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") add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9) r3 = socket$tipc(0x1e, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000d8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b4560a117fffffff81008e220e227f000008925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) 4.637135567s ago: executing program 6 (id=10172): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000070000000300000048"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sys_enter\x00', r2}, 0x18) syz_read_part_table(0x106d, &(0x7f0000001080)="$eJzsz7FNw0AYBeB3trFNR0VD44qaGdiBFiExiBENDSPQ0rAIG7AAI6SOLjpFyQhJiu8r7p6eTvfrD2d2M+UlQ0peP/okJbW8JXVbpyRdUoav9uy2HUvmtPo6ufp/f75v3WNfxvwefhv3V5+7tZaWNnN3HNXSw3dZaq1rks+/p5+TrwsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF2gXAAD//wCmE1Q=") 4.579783168s ago: executing program 8 (id=10173): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x1f) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = socket(0xa, 0x1, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a34000000000a4f1c0000000000000000020000000900010073797a300000000008000240000000020900010073797a310000000014000000110001"], 0x5c}}, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) read$hiddev(r5, &(0x7f0000000500)=""/72, 0x48) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r7}, 0x4) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r8}, 0x10) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x15615, 0xef}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x44}}, 0x0) sendmsg$NFT_MSG_GETSET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x20, 0xa, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x20}}, 0x0) r10 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r1, &(0x7f0000000080)={0x2017be01}) epoll_ctl$EPOLL_CTL_MOD(r10, 0x3, r1, &(0x7f0000000000)={0x40000000}) 4.492575079s ago: executing program 2 (id=10174): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000ac0)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r3, @ANYBLOB="0000000000000000b708000002001e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000d00)='sched_switch\x00', r4}, 0x10) r5 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, &(0x7f0000000140)=[{&(0x7f0000000900)}], 0x1) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./bus\x00', 0x1010048, &(0x7f0000000440), 0x1, 0x4d8, &(0x7f0000000b00)="$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") creat(&(0x7f0000000040)='./bus\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='kfree\x00'}, 0x10) 4.320691301s ago: executing program 6 (id=10176): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x7b, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xc1, @void, @value}, 0x94) openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000d00)='sched_switch\x00', r0}, 0x18) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r2, &(0x7f0000002a80)=[{&(0x7f0000000a00)="1b68e2", 0x3}], 0x1) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r6}, 0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r7}, 0x10) r8 = open(&(0x7f0000000200)='./bus\x00', 0x1050c1, 0x156) fgetxattr(r8, &(0x7f00000003c0)=@known='security.selinux\x00', 0x0, 0x0) splice(r3, 0x0, r5, 0x0, 0xf3a, 0x0) write$cgroup_pid(r5, &(0x7f0000000000), 0xffffff98) splice(r1, 0x0, r5, 0x0, 0x80, 0x6) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$ETHTOOL_MSG_COALESCE_GET(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)={0x34, r10, 0x1, 0x70bd23, 0x25dfdbfe, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x48000}, 0x10) sendmsg$ETHTOOL_MSG_COALESCE_SET(r4, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x24, r10, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@ETHTOOL_A_COALESCE_RX_MAX_FRAMES_LOW={0x8, 0xf, 0x1}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES={0x8, 0x7, 0x7f}]}, 0x24}, 0x1, 0x0, 0x0, 0x48000}, 0x4000) 2.366606288s ago: executing program 8 (id=10177): unshare(0x2c020400) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x109942, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000080)={0x0, 0xdfffffff, 0x800, 0x0, 0x1}, 0x20) ioctl$PPPIOCSPASS(r0, 0x40107447, 0x0) ioctl$PPPIOCSACTIVE(r0, 0x40107446, &(0x7f0000000080)) lchown(0x0, 0x0, 0x0) r2 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x2) write$binfmt_script(r2, &(0x7f0000000300)={'#! ', './file0'}, 0xb) execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) close(r0) pselect6(0x40, &(0x7f0000000000)={0x1, 0x1, 0x1, 0x9, 0x7, 0x1, 0x8, 0x6}, &(0x7f00000000c0)={0xd37, 0x2, 0xa1c, 0xe7c4, 0xdf5, 0x2, 0x5, 0x1}, &(0x7f0000000100)={0x6, 0x812, 0x2, 0x10, 0x1, 0x400, 0x401, 0xffff}, &(0x7f0000000140), &(0x7f0000000240)={&(0x7f0000000180)={[0x5]}, 0x8}) setsockopt(0xffffffffffffffff, 0x84, 0x81, &(0x7f00000002c0)="1a000000020000", 0x7) setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, &(0x7f0000000200)=ANY=[@ANYRES32=0x0, @ANYBLOB="05130000"], 0x9) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f00000003c0)={0x0, 0x5}, 0x8) r3 = msgget$private(0x0, 0x0) msgsnd(r3, &(0x7f0000000480)=ANY=[@ANYRESDEC], 0x2000, 0x0) unshare(0x10000) msgrcv(r3, &(0x7f0000001080)={0x0, ""/1}, 0x2000, 0x2, 0x3000) 2.037806063s ago: executing program 8 (id=10180): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x63, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='rpcgss_svc_seqno_low\x00', r1}, 0x18) io_uring_setup(0x7884, &(0x7f0000000a40)={0x0, 0x0, 0x1, 0xfffffffe, 0x3bf}) socket$rxrpc(0x21, 0x2, 0xa) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000020000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0xffffffff}, 0x1320, 0x0, 0x3, 0x5, 0x0, 0x800001, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000d40)={0x44, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x44}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000780), 0xffffffffffffffff) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000840)={r2, 0x58, &(0x7f00000007c0)}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000780)={'ip6gre0\x00'}) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r4, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000040)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0xd4}, 0x24008000) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, 0x0, &(0x7f00000002c0)) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700fc00000000000000000000000000000008000a00", @ANYRES32], 0x54}}, 0x0) 1.979280543s ago: executing program 2 (id=10182): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000040)='gre0\x00', 0x10) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) listxattr(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f00000000c0)={[{@data_err_ignore}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$eJzs3c9vFFUcAPDvbH/QUrSFGBUP0sQYSJSWFjDEeICrIQ3+iBcvVloQKdDQGi2aUBK8mBgvxph48iD+F0rkyklPHrx4MiREDUcT18x2pnTb2ZYubacyn0+y9M17O7w33X773r6+NxtAZQ2m/9Qi9kbEdBLRn8wvlnVGVji48Lx7f39yOn0kUa+/8WcSSZaXPz/JvvZlJ/dExM8/JbGnY2W9M3NXzo9PTU1ezo6HZy9MD8/MXTl47sL42cmzkxdHXxo9dvTI0WMjh9q6rqsFeSevv/9h/2djb3/3zT/JyPe/jSVxPF7Nnrj0OjbKYAw2vifJyqK+YxtdWUk6sp+TpS9x0llig1iX/PXrioinoj864v6L1x+fvlZq44BNVU8i6kBFJeIfKiofB+Tv7Ze/D66VMioBtsLdEwsTACvjv3NhbjB6GnMDO+8lsXRaJ4mI9mbmmu2KiNu3xq6fuTV2PTZpHg4oNn8tIp4uiv+kEf8D0RMDjfivNcV/Oi44lX1N819vs/7lU8XiH7bOQvz3rBr/0SL+31kS/++2Wf/g/eR7vU3x39vuJQEAAAAAAEBl3TwRES8W/f2/trj+JwrW//RFxPENqH9w2fHKv//X7mxANUCBuyciXilc/1vLV/8OdGSpxxrrAbqSM+emJg9FxOMRcSC6dqTHI6vUcfDzPV+3KhvM1v/lj7T+29lawKwddzp3NJ8zMT47/rDXDUTcvRbxTOH632Sx/08K+v/098H0A9ax5/kbp1qVrR3/wGapfxuxv7D/v3/XimT1+3MMN8YDw/moYKVnP/7ih1b1txv/bjEBDy/t/3euHv8DydL79cysv47Dc531VmXtjv+7kzcbt5zpzvI+Gp+dvTwS0Z2c7Ehzm/JH199meBTl8ZDHSxr/B55bff6vaPzfGxHzy/7v5K/mPcW5J//t+71Ve4z/oTxp/E+sq/9ff2L0xsCPrep/sP7/SKOvP5DlmP+DBV/lYdrdnF8Qjp1FRVvdXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4FNQiYlcktaHFdK02NBTRFxFPxM7a1KWZ2RfOXPrg4kRa1vj8/1r+Sb/9C8dJ/vn/A0uOR5cdH46I3RHxZUdv43jo9KWpibIvHgAAAAAAAAAAAAAAAAAAALaJvhb7/1N/dJTdOmDTdZbdAKA0BfH/SxntALae/h+qS/xDdYl/qC7xD9Ul/qG6xD9Ul/iH6hL/AAAAAADwSNm97+avSUTMv9zbeKS6s7KuUlsGbLZa2Q0ASuMWP1Bdlv5AdXmPDyRrlPe0PGmtM1czffohTgYAAAAAAAAAAACAytm/1/5/qCr7/6G67P+H6sr3/+8ruR3A1vMeH4g1dvIX7v9f8ywAAAAAAAAAAAAAYCPNzF05Pz41NXlZ4q3t0YytTNTr9avpT8F2ac//PJEvhd8u7VmWyPf6PdhZ5f1OAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmv0XAAD//xYSJMU=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000300)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sys_enter\x00', r2}, 0x10) gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)) timer_getoverrun(0x0) sendfile(r1, r0, 0x0, 0x7ffff000) timer_gettime(0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210003, &(0x7f0000000540)={[{@acl}, {@barrier}, {@prjquota}, {@journal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@resuid}, {@noacl}, {@acl}, {@noquota}]}, 0x0, 0x595, &(0x7f0000000f80)="$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") add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000d8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r3, &(0x7f00000005c0)={&(0x7f0000000000), 0x10, &(0x7f0000000480)=[{&(0x7f0000000180)="f7", 0x101d0}], 0x1}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b4560a117fffffff81008e220e227f000008925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) 1.847240396s ago: executing program 8 (id=10184): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c16, &(0x7f0000000040)={[{@nobh}, {@usrjquota}]}, 0xff, 0x240, &(0x7f00000002c0)="$eJzs3T1oO2UcB/DvXRL/tg1SdRHEFxARLZS6CS51UShIKSKCChURF6UVaotb6+TioLNKJ5ciblZH6VJcFMGpaoe6CFocLA46RJJrpbYRX1Jz4n0+cLm75J77Pcfd97kQOBKgsaaTzCdpJZlJ0klSnN/gzmqaPl3dnthfTnq9x34oBttV65WzdlNJtpI8kGSvLPJCO9nYferop4NH7nl9vXP3u7tPToz1IE8dHx0+evLO4msfLNy/8dkX3y0WmU/3d8d19Yoh77WL5KZ/o9h/RNGuuwf8FUuvvP9lP/c3J7lrkP9OylQn74216/Y6ue/tP2r75vef3zrOvgJXr9fr9O+BWz2gccok3RTlbJJquSxnZ6vv8F+1JssXV9dennl+dX3lubpHKuCqdJPDhz+69uHUhfx/26ryD/xPVT9KHT6+tPN1f+GkVXeHgLG4rZr17/8zz2zeG/mHxpF/aC75h+aSf2gu+Yfmkn9oLvmH5pJ/aC75h+aSf2iu8/kHAJqld63uJ5CButQ9/gAAAAAAAAAAAAAAAAAAAJdtT+wvn03jqvnJW8nxQ0naw+q3Bv9HnFw/eJ38sehv9puiajaSp+8YcQcjeq/mp69v+Kbe+p/eXm/9zZVk69Ukc+325euvOL3+/rkb/+TzzrMjFvibigvrDz4x3voX/bJTb/2Fg+Tj/vgzN2z8KXPLYD58/On2z9+I9V/6ecQdAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDa/BgAA//8YZW08") syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) listxattr(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f00000000c0)={[{@data_err_ignore}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$eJzs3c9vFFUcAPDvbH/QUrSFGBUP0sQYSJSWFjDEeICrIQ3+iBcvVloQKdDQGi2aUBK8mBgvxph48iD+F0rkyklPHrx4MiREDUcT18x2pnTb2ZYubacyn0+y9M17O7w33X773r6+NxtAZQ2m/9Qi9kbEdBLRn8wvlnVGVji48Lx7f39yOn0kUa+/8WcSSZaXPz/JvvZlJ/dExM8/JbGnY2W9M3NXzo9PTU1ezo6HZy9MD8/MXTl47sL42cmzkxdHXxo9dvTI0WMjh9q6rqsFeSevv/9h/2djb3/3zT/JyPe/jSVxPF7Nnrj0OjbKYAw2vifJyqK+YxtdWUk6sp+TpS9x0llig1iX/PXrioinoj864v6L1x+fvlZq44BNVU8i6kBFJeIfKiofB+Tv7Ze/D66VMioBtsLdEwsTACvjv3NhbjB6GnMDO+8lsXRaJ4mI9mbmmu2KiNu3xq6fuTV2PTZpHg4oNn8tIp4uiv+kEf8D0RMDjfivNcV/Oi44lX1N819vs/7lU8XiH7bOQvz3rBr/0SL+31kS/++2Wf/g/eR7vU3x39vuJQEAAAAAAEBl3TwRES8W/f2/trj+JwrW//RFxPENqH9w2fHKv//X7mxANUCBuyciXilc/1vLV/8OdGSpxxrrAbqSM+emJg9FxOMRcSC6dqTHI6vUcfDzPV+3KhvM1v/lj7T+29lawKwddzp3NJ8zMT47/rDXDUTcvRbxTOH632Sx/08K+v/098H0A9ax5/kbp1qVrR3/wGapfxuxv7D/v3/XimT1+3MMN8YDw/moYKVnP/7ih1b1txv/bjEBDy/t/3euHv8DydL79cysv47Dc531VmXtjv+7kzcbt5zpzvI+Gp+dvTwS0Z2c7Ehzm/JH199meBTl8ZDHSxr/B55bff6vaPzfGxHzy/7v5K/mPcW5J//t+71Ve4z/oTxp/E+sq/9ff2L0xsCPrep/sP7/SKOvP5DlmP+DBV/lYdrdnF8Qjp1FRVvdXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4FNQiYlcktaHFdK02NBTRFxFPxM7a1KWZ2RfOXPrg4kRa1vj8/1r+Sb/9C8dJ/vn/A0uOR5cdH46I3RHxZUdv43jo9KWpibIvHgAAAAAAAAAAAAAAAAAAALaJvhb7/1N/dJTdOmDTdZbdAKA0BfH/SxntALae/h+qS/xDdYl/qC7xD9Ul/qG6xD9Ul/iH6hL/AAAAAADwSNm97+avSUTMv9zbeKS6s7KuUlsGbLZa2Q0ASuMWP1Bdlv5AdXmPDyRrlPe0PGmtM1czffohTgYAAAAAAAAAAACAytm/1/5/qCr7/6G67P+H6sr3/+8ruR3A1vMeH4g1dvIX7v9f8ywAAAAAAAAAAAAAYCPNzF05Pz41NXlZ4q3t0YytTNTr9avpT8F2ac//PJEvhd8u7VmWyPf6PdhZ5f1OAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmv0XAAD//xYSJMU=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) sendfile(r0, 0xffffffffffffffff, 0x0, 0x3ffff) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000300)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x10) gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)) timer_getoverrun(0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x7ffff000) timer_gettime(0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='mm_page_free\x00', r2}, 0x18) syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210003, &(0x7f0000000540)={[{@acl}, {@barrier}, {@prjquota}, {@journal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@resuid}, {@noacl}, {@acl}, {@noquota}]}, 0x0, 0x595, &(0x7f0000000f80)="$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") add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9) r3 = socket$tipc(0x1e, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000d8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b4560a117fffffff81008e220e227f000008925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) 1.809489546s ago: executing program 0 (id=10185): setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000000000090003007379"], 0x7c}}, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x48) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000540)=@delpolicy={0x5c, 0x14, 0x1, 0x0, 0x0, {{@in=@broadcast, @in6=@mcast2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0xee00}}, [@sec_ctx={0xc, 0x8, {0x8}}]}, 0x5c}}, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = dup(r2) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$sock_SIOCADDRT(r3, 0x890b, &(0x7f00000003c0)={0x0, @ethernet={0x6, @remote}, @tipc=@name={0x1e, 0x2, 0x0, {{0x42, 0x1}, 0x4}}, @sco={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x1, 0x0, 0x0, 0x0, 0x400, &(0x7f0000000200)='tunl0\x00', 0x2, 0xe, 0x10}) write$P9_RLERRORu(r3, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r5}, 0x10) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000002c0)=0x1) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000140)=0x2) 1.808963356s ago: executing program 7 (id=10186): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0x94b9}, 0x18) syz_read_part_table(0x106d, &(0x7f0000001080)="$eJzsz7FNw0AYBeB3trFNR0VD44qaGdiBFiExiBENDSPQ0rAIG7AAI6SOLjpFyQhJiu8r7p6eTvfrD2d2M+UlQ0peP/okJbW8JXVbpyRdUoav9uy2HUvmtPo6ufp/f75v3WNfxvwefhv3V5+7tZaWNnN3HNXSw3dZaq1rks+/p5+TrwsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF2gXAAD//wCmE1Q=") 1.726379967s ago: executing program 0 (id=10187): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000de0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000440)='./file2\x00', 0x404, &(0x7f0000000380)={[{@errors_remount}, {@resuid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@resgid}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@quota}]}, 0x3, 0x42f, &(0x7f00000014c0)="$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") llistxattr(&(0x7f00000000c0)='./file1\x00', 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0x21, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000001850000001b000000b70000000000070095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x10) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0x29}}, './file0\x00'}) 1.719598827s ago: executing program 8 (id=10188): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x2e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400000, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x62, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.current\x00', 0x275a, 0x0) r1 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) close(r1) 1.615892568s ago: executing program 0 (id=10189): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRESHEX, @ANYRES64=0x0, @ANYRES64=0x0], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000080)=0x0) setfsuid(r2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x20) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000640)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x40, 0x0, 0x7ffc0001}]}) socket$inet_sctp(0x2, 0x5, 0x84) r3 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(r3, 0x5421, &(0x7f0000000100)=0x100000001) setsockopt$inet_tcp_int(r3, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) connect$inet(r3, &(0x7f0000000280)={0x2, 0x0, @dev}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r5) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0xfffffffc, @empty, 0x2}, 0x1c) listen(r5, 0x9) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r8, @ANYBLOB="010000000000fbdbdf250100000008000200000000000500050000000000080003000100000048000180050002002000000006000100020000000800060003000000080003"], 0x84}}, 0x20000000) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xffd, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r10}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r9}, &(0x7f0000000040), &(0x7f0000000080)=r10}, 0x20) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="14000000", @ANYRES16=r8, @ANYRESOCT=r8], 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x800) 1.560585149s ago: executing program 7 (id=10190): mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) 1.52913239s ago: executing program 0 (id=10191): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f00000002c0)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0d022abd7000fddbdf2501000000400008803c00008024000100d1732899f611cd8994034d7f413dc957630e5493c285aca40065cb6311be696b1400040002004e227f000001000000000000000008000100", @ANYRES32=r4], 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x40) write$cgroup_int(r0, &(0x7f0000000000), 0xffffff6a) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000980)={r0, 0x58, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bf", @ANYRESDEC=r1, @ANYRESOCT=r3], &(0x7f0000000a00)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', r5, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r6}, 0x10) 1.385500422s ago: executing program 7 (id=10192): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r1 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r1, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x2, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="00000000000057b6b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001700)={&(0x7f0000000080)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = fsmount(0xffffffffffffffff, 0x0, 0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000380)={0x0, @in6={{0xa, 0x4e23, 0x3, @empty}}, 0x9, 0xf, 0xffffffff, 0x4d, 0x8, 0x3, 0x6}, &(0x7f0000000300)=0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000a80)={r5, @in={{0x2, 0x4e21, @remote}}, 0x8, 0x800, 0x13c, 0xfff, 0x0, 0xfe89, 0xb2}, 0x9c) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x0, 0x11, 0x148, 0x0, 0x0, 0x440, 0x2a8, 0x2a8, 0x440, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x88000000, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00'}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}, {0x0, 0x0, 0x81}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x538) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f00000004c0)='kfree\x00', r6}, 0x23) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$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") r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000180)={'#! ', './file1', [], 0xa, "43ba463d98d5f1e6ff4ea5a2d1839e5e27c2c067be8e770f799db80e46037f3a0c705c23421b08d041129a8198df33f9ca10d6f48e462fef6f4f4f0a753fdf181901"}, 0x4d) fadvise64(r8, 0xd, 0x1, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='rxrpc_recvmsg\x00', r7}, 0x18) r9 = socket$kcm(0x21, 0x2, 0x2) recvmsg$kcm(r9, &(0x7f0000001a80)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) 1.228189334s ago: executing program 0 (id=10193): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000ac0)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r3, @ANYBLOB="0000000000000000b708000002001e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000d00)='sched_switch\x00', r4}, 0x10) r5 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, &(0x7f0000000140)=[{&(0x7f0000000900)}], 0x1) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./bus\x00', 0x1010048, &(0x7f0000000440), 0x1, 0x4d8, &(0x7f0000000b00)="$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") creat(&(0x7f0000000040)='./bus\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='kfree\x00'}, 0x10) 1.227421504s ago: executing program 6 (id=10194): ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, &(0x7f0000000040)={0x23, 0x3, 0x17, 0x6, 0x0, 0x5, 0x0}) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="a71c000000000000c910fe800000000000000000000000000025000100027b2311c4edd2c669d317a1417e77ff1b4286ae05c9eb622bf28c0f088048207f676c7a2d24067a53f3eaaa5534aa26567b5f405a94ba0f09c9892fb8ed0a4569d009ac51fde80e28630851de4b53f413ca97dbcae39b73949237220a2e8d08deb315dd3827a25cb0e5725ca6ec9117f880118644c90900590c20afc17288bb0106000000000000071000000001020908001a00000000"], 0xf0) r1 = openat$misdntimer(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IMADDTIMER(r1, 0x80044940, &(0x7f0000000080)=0x14) ioctl$IMADDTIMER(r1, 0x80044940, &(0x7f0000000200)=0x32) socket$kcm(0xa, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="020000000400000008000000"], 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYRESDEC], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x18) r3 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r3, 0x0, 0x0) sendmsg$inet6(r3, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="d7633b92beedf014dd4f61475d02a768535fabc44323179ff4093e64b833f130eb5c0962517d539ddfde7d2b4b90cdbb0a13b2ca78965e71c26432fe50eb11c58f11dff3f8d8c24449ac304b102de0bc19579f979ed767fc2810d716894be27c124737994614bd8281a05397cf8ec7e4ff2da4f7358b54cd12f407d68bca8696fdc8850cec1081f4ee0346402184e0cab2eeab7c8f7119905047ced9c21d35b834b9b279defa3d", @ANYRESHEX=r2], 0xf}, 0x6b87bd76ddbcbbe) pread64(0xffffffffffffffff, &(0x7f0000001240)=""/102400, 0x200000, 0x40000000) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r4}, 0x10) syz_clone(0x400a1400, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) fallocate(r2, 0x0, 0x400000000000000, 0x6) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) write$binfmt_aout(r5, &(0x7f00000001c0)=ANY=[], 0xff2e) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x3, 0x800000000003}, 0x1100, 0x5dd8, 0x0, 0x5, 0x0, 0x1ff, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000080)={0x0, 0x12, &(0x7f0000000000)={&(0x7f0000000240)={0x38, 0x1403, 0x1, 0x70bd2d, 0x25dfdbff, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth0_to_bridge\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0xc080}, 0x20000010) syz_open_pts(r5, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={0x0, r2, 0x0, 0x1}, 0x18) 1.226351794s ago: executing program 7 (id=10195): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700fc00000000000000000000000000000008000a00", @ANYRES32], 0x54}}, 0x0) 619.875382ms ago: executing program 8 (id=10196): ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, &(0x7f0000000040)={0x23, 0x3, 0x17, 0x6, 0x0, 0x5, 0x0}) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="a71c000000000000c910fe800000000000000000000000000025000100027b2311c4edd2c669d317a1417e77ff1b4286ae05c9eb622bf28c0f088048207f676c7a2d24067a53f3eaaa5534aa26567b5f405a94ba0f09c9892fb8ed0a4569d009ac51fde80e28630851de4b53f413ca97dbcae39b73949237220a2e8d08deb315dd3827a25cb0e5725ca6ec9117f880118644c90900590c20afc17288bb0106000000000000071000000001020908001a00000000"], 0xf0) r1 = openat$misdntimer(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IMADDTIMER(r1, 0x80044940, &(0x7f0000000080)=0x14) ioctl$IMADDTIMER(r1, 0x80044940, &(0x7f0000000200)=0x32) socket$kcm(0xa, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYRESDEC], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r3, 0x0, 0x0) sendmsg$inet6(r3, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="d7633b92beedf014dd4f61475d02a768535fabc44323179ff4093e64b833f130eb5c0962517d539ddfde7d2b4b90cdbb0a13b2ca78965e71c26432fe50eb11c58f11dff3f8d8c24449ac304b102de0bc19579f979ed767fc2810d716894be27c124737994614bd8281a05397cf8ec7e4ff2da4f7358b54cd12f407d68bca", @ANYRESHEX=r2], 0xf}, 0x6b87bd76ddbcbbe) pread64(0xffffffffffffffff, &(0x7f0000001240)=""/102400, 0x200000, 0x40000000) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r4}, 0x10) syz_clone(0x400a1400, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) rt_sigaction(0x1d, &(0x7f0000000000)={0xfffffffffffffffc, 0x4c000002, 0x0, {[0x368b97ba]}}, 0x0, 0x8, &(0x7f0000000440)) fallocate(r2, 0x0, 0x400000000000000, 0x6) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) write$binfmt_aout(r5, &(0x7f00000001c0)=ANY=[], 0xff2e) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x3, 0x800000000003}, 0x1100, 0x5dd8, 0x0, 0x5, 0x0, 0x1ff, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000080)={0x0, 0x12, &(0x7f0000000000)={&(0x7f0000000240)={0x38, 0x1403, 0x1, 0x70bd2d, 0x25dfdbff, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth0_to_bridge\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0xc080}, 0x20000010) syz_open_pts(r5, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={0x0, r2, 0x0, 0x1}, 0x18) 618.772642ms ago: executing program 7 (id=10197): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0) pwritev2(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ff", 0x1}], 0x1, 0xe7b, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000040000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r2, 0x0, 0xb, &(0x7f00000000c0)=0x3, 0x4) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x68, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 565.807123ms ago: executing program 2 (id=10198): setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000000000090003007379"], 0x7c}}, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x48) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000540)=@delpolicy={0x5c, 0x14, 0x1, 0x0, 0x0, {{@in=@broadcast, @in6=@mcast2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0xee00}}, [@sec_ctx={0xc, 0x8, {0x8}}]}, 0x5c}}, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = dup(r2) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$sock_SIOCADDRT(r3, 0x890b, &(0x7f00000003c0)={0x0, @ethernet={0x6, @remote}, @tipc=@name={0x1e, 0x2, 0x0, {{0x42, 0x1}, 0x4}}, @sco={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x1, 0x0, 0x0, 0x0, 0x400, &(0x7f0000000200)='tunl0\x00', 0x2, 0xe, 0x10}) write$P9_RLERRORu(r3, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r5}, 0x10) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000002c0)=0x1) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000140)=0x2) 473.814154ms ago: executing program 7 (id=10199): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000040)='gre0\x00', 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c16, &(0x7f0000000040)={[{@nobh}, {@usrjquota}]}, 0xff, 0x240, &(0x7f00000002c0)="$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") syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) listxattr(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f00000000c0)={[{@data_err_ignore}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000000085000000700000"], &(0x7f0000000300)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sys_enter\x00', r2}, 0x10) gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)) timer_getoverrun(0x0) sendfile(r1, r0, 0x0, 0x7ffff000) timer_gettime(0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='mm_page_free\x00', r3}, 0x18) syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210003, &(0x7f0000000540)={[{@acl}, {@barrier}, {@prjquota}, {@journal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@resuid}, {@noacl}, {@acl}, {@noquota}]}, 0x0, 0x595, &(0x7f0000000f80)="$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") add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000d8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kmem_cache_free\x00', r5}, 0x10) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r4, &(0x7f00000005c0)={&(0x7f0000000000), 0x10, &(0x7f0000000480)=[{&(0x7f0000000180)="f7", 0x101d0}], 0x1}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r6, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b4560a117fffffff81008e220e227f000008925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) 395.613895ms ago: executing program 2 (id=10200): ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, &(0x7f0000000040)={0x23, 0x3, 0x17, 0x6, 0x0, 0x5, 0x0}) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="a71c000000000000c910fe800000000000000000000000000025000100027b2311c4edd2c669d317a1417e77ff1b4286ae05c9eb622bf28c0f088048207f676c7a2d24067a53f3eaaa5534aa26567b5f405a94ba0f09c9892fb8ed0a4569d009ac51fde80e28630851de4b53f413ca97dbcae39b73949237220a2e8d08deb315dd3827a25cb0e5725ca6ec9117f880118644c90900590c20afc17288bb0106000000000000071000000001020908001a00000000"], 0xf0) r1 = openat$misdntimer(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IMADDTIMER(r1, 0x80044940, &(0x7f0000000080)=0x14) ioctl$IMADDTIMER(r1, 0x80044940, &(0x7f0000000200)=0x32) socket$kcm(0xa, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="020000000400000008000000"], 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYRESDEC], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x18) r3 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r3, 0x0, 0x0) sendmsg$inet6(r3, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="d7633b92beedf014dd4f61475d02a768535fabc44323179ff4093e64b833f130eb5c0962517d539ddfde7d2b4b90cdbb0a13b2ca78965e71c26432fe50eb11c58f11dff3f8d8c24449ac304b102de0bc19579f979ed767fc2810d716894be27c124737994614bd8281a05397cf8ec7e4ff2da4f7358b54cd12f407d68bca8696fdc8850cec1081f4ee0346402184e0cab2eeab7c8f7119905047ced9c21d35b834b9b279defa3d", @ANYRESHEX=r2], 0xf}, 0x6b87bd76ddbcbbe) pread64(0xffffffffffffffff, &(0x7f0000001240)=""/102400, 0x200000, 0x40000000) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r4}, 0x10) syz_clone(0x400a1400, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) rt_sigaction(0x1d, &(0x7f0000000000)={0xfffffffffffffffc, 0x4c000002, 0x0, {[0x368b97ba]}}, 0x0, 0x8, &(0x7f0000000440)) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) write$binfmt_aout(r5, &(0x7f00000001c0)=ANY=[], 0xff2e) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x3, 0x800000000003}, 0x1100, 0x5dd8, 0x0, 0x5, 0x0, 0x1ff, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000080)={0x0, 0x12, &(0x7f0000000000)={&(0x7f0000000240)={0x38, 0x1403, 0x1, 0x70bd2d, 0x25dfdbff, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth0_to_bridge\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0xc080}, 0x20000010) syz_open_pts(r5, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={0x0, r2, 0x0, 0x1}, 0x18) 330.954616ms ago: executing program 6 (id=10201): r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @host}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000380), 0x1, r1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000181100", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r2, 0x0, 0x2}, 0x18) connect$vsock_stream(r0, &(0x7f00000001c0)={0x28, 0x0, 0x2710}, 0x10) 297.019287ms ago: executing program 6 (id=10202): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e0000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0x94b9}, 0x18) syz_read_part_table(0x106d, &(0x7f0000001080)="$eJzsz7FNw0AYBeB3trFNR0VD44qaGdiBFiExiBENDSPQ0rAIG7AAI6SOLjpFyQhJiu8r7p6eTvfrD2d2M+UlQ0peP/okJbW8JXVbpyRdUoav9uy2HUvmtPo6ufp/f75v3WNfxvwefhv3V5+7tZaWNnN3HNXSw3dZaq1rks+/p5+TrwsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF2gXAAD//wCmE1Q=") 208.841188ms ago: executing program 0 (id=10203): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000900)='oom_score\x00') preadv(r0, &(0x7f0000002b00)=[{&(0x7f00000006c0)=""/220, 0xdc}, {&(0x7f0000000480)=""/154, 0x9a}, {&(0x7f0000001940)=""/170, 0xaa}, {&(0x7f0000001a00)=""/207, 0xcf}, {&(0x7f0000001b00)=""/4096, 0x1000}, {&(0x7f0000000880)=""/82, 0x52}], 0x6, 0x1, 0x1c9) socket$nl_route(0x10, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000300)=ANY=[@ANYRESHEX, @ANYRES16=r0, @ANYRES64], 0x0) socket$netlink(0x10, 0x3, 0xb) socket$tipc(0x1e, 0x5, 0x0) r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_SET_BINARY(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x8) openat$cgroup_subtree(r3, &(0x7f0000000100), 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r5], 0x90}, 0x1, 0x0, 0x0, 0x22008015}, 0x20000000) 0s ago: executing program 6 (id=10204): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x7b, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xc1, @void, @value}, 0x94) openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000d00)='sched_switch\x00', r0}, 0x18) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r2, &(0x7f0000002a80)=[{&(0x7f0000000a00)="1b68e2", 0x3}], 0x1) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r6}, 0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r7}, 0x10) r8 = open(&(0x7f0000000200)='./bus\x00', 0x1050c1, 0x156) fgetxattr(r8, &(0x7f00000003c0)=@known='security.selinux\x00', 0x0, 0x0) splice(r3, 0x0, r5, 0x0, 0xf3a, 0x0) write$cgroup_pid(r5, &(0x7f0000000000), 0xffffff98) splice(r1, 0x0, r5, 0x0, 0x80, 0x6) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$ETHTOOL_MSG_COALESCE_GET(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)={0x34, r10, 0x1, 0x70bd23, 0x25dfdbfe, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x48000}, 0x10) sendmsg$ETHTOOL_MSG_COALESCE_SET(r4, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x24, r10, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@ETHTOOL_A_COALESCE_RX_MAX_FRAMES_LOW={0x8, 0xf, 0x1}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES={0x8, 0x7, 0x7f}]}, 0x24}, 0x1, 0x0, 0x0, 0x48000}, 0x4000) kernel console output (not intermixed with test programs): 642 [ 742.415947][ T3364] EXT4-fs error (device loop2): ext4_orphan_get:1398: comm syz.2.9739: couldn't read orphan inode 15 (err -117) [ 742.521599][ T3371] FAULT_INJECTION: forcing a failure. [ 742.521599][ T3371] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 742.534793][ T3371] CPU: 0 UID: 0 PID: 3371 Comm: syz.6.9743 Not tainted 6.15.0-syzkaller-11121-gfe4281644c62 #0 PREEMPT(voluntary) [ 742.534820][ T3371] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 742.534832][ T3371] Call Trace: [ 742.534838][ T3371] [ 742.534849][ T3371] __dump_stack+0x1d/0x30 [ 742.534910][ T3371] dump_stack_lvl+0xe8/0x140 [ 742.534930][ T3371] dump_stack+0x15/0x1b [ 742.535002][ T3371] should_fail_ex+0x265/0x280 [ 742.535025][ T3371] should_fail+0xb/0x20 [ 742.535045][ T3371] should_fail_usercopy+0x1a/0x20 [ 742.535074][ T3371] _copy_to_user+0x20/0xa0 [ 742.535099][ T3371] simple_read_from_buffer+0xb5/0x130 [ 742.535125][ T3371] proc_fail_nth_read+0x100/0x140 [ 742.535188][ T3371] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 742.535216][ T3371] vfs_read+0x1a0/0x6f0 [ 742.535240][ T3371] ? kmem_cache_free+0xdf/0x300 [ 742.535274][ T3371] ? free_nsproxy+0x1fc/0x2a0 [ 742.535320][ T3371] ? switch_task_namespaces+0x79/0xc0 [ 742.535438][ T3371] ksys_read+0xda/0x1a0 [ 742.535511][ T3371] __x64_sys_read+0x40/0x50 [ 742.535538][ T3371] x64_sys_call+0x2d77/0x2fb0 [ 742.535605][ T3371] do_syscall_64+0xd2/0x200 [ 742.535679][ T3371] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 742.535712][ T3371] ? clear_bhb_loop+0x40/0x90 [ 742.535739][ T3371] ? clear_bhb_loop+0x40/0x90 [ 742.535761][ T3371] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 742.535840][ T3371] RIP: 0033:0x7fd4af4bd37c [ 742.535859][ T3371] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 742.535882][ T3371] RSP: 002b:00007fd4adb27030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 742.535906][ T3371] RAX: ffffffffffffffda RBX: 00007fd4af6e5fa0 RCX: 00007fd4af4bd37c [ 742.535922][ T3371] RDX: 000000000000000f RSI: 00007fd4adb270a0 RDI: 0000000000000005 [ 742.535934][ T3371] RBP: 00007fd4adb27090 R08: 0000000000000000 R09: 0000000000000000 [ 742.535987][ T3371] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 742.536002][ T3371] R13: 0000000000000000 R14: 00007fd4af6e5fa0 R15: 00007ffc4466e808 [ 742.536042][ T3371] [ 742.889584][ T3379] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 742.901120][ T3378] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 742.901506][ T3379] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 742.920937][ T3378] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 742.932354][ T3379] __nla_validate_parse: 4 callbacks suppressed [ 742.932374][ T3379] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9746'. [ 742.940859][ T3378] netlink: 28 bytes leftover after parsing attributes in process `syz.6.9747'. [ 742.947580][ T3379] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9746'. [ 742.956522][ T3378] netlink: 28 bytes leftover after parsing attributes in process `syz.6.9747'. [ 742.968191][ T3379] dummy0: entered promiscuous mode [ 742.981547][ T3379] dummy0: left promiscuous mode [ 743.166817][ T3394] loop8: detected capacity change from 0 to 128 [ 743.173478][ T3394] EXT4-fs: Ignoring removed nobh option [ 743.180802][ T3394] ext4 filesystem being mounted at /589/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 743.521343][ T3403] lo speed is unknown, defaulting to 1000 [ 743.578098][ T3407] loop2: detected capacity change from 0 to 128 [ 743.599135][ T3407] EXT4-fs: Ignoring removed nobh option [ 743.605265][ T3408] siw: device registration error -23 [ 743.614462][ T3407] ext4 filesystem being mounted at /325/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 743.888338][ T3421] netlink: 'syz.7.9755': attribute type 21 has an invalid length. [ 743.896296][ T3421] IPv6: NLM_F_CREATE should be specified when creating new route [ 743.946551][ T29] kauditd_printk_skb: 213 callbacks suppressed [ 743.946568][ T29] audit: type=1400 audit(2000000562.749:47910): avc: denied { create } for pid=3412 comm="syz.7.9755" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 743.972286][ T29] audit: type=1400 audit(2000000562.749:47911): avc: denied { write } for pid=3412 comm="syz.7.9755" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 744.124252][ T29] audit: type=1326 audit(2000000562.839:47912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3424 comm="syz.6.9758" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd4af4be969 code=0x0 [ 744.285600][ T29] audit: type=1326 audit(2000000563.099:47913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3427 comm="syz.8.9759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94c492e969 code=0x7ffc0000 [ 744.314871][ T29] audit: type=1326 audit(2000000563.129:47914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3427 comm="syz.8.9759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f94c492e969 code=0x7ffc0000 [ 744.338460][ T29] audit: type=1326 audit(2000000563.129:47915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3427 comm="syz.8.9759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94c492e969 code=0x7ffc0000 [ 744.361988][ T29] audit: type=1326 audit(2000000563.129:47916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3427 comm="syz.8.9759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f94c492e969 code=0x7ffc0000 [ 744.385543][ T29] audit: type=1326 audit(2000000563.129:47917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3427 comm="syz.8.9759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94c492e969 code=0x7ffc0000 [ 744.409277][ T29] audit: type=1326 audit(2000000563.129:47918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3427 comm="syz.8.9759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94c492e969 code=0x7ffc0000 [ 744.432966][ T29] audit: type=1326 audit(2000000563.129:47919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3427 comm="syz.8.9759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f94c492e969 code=0x7ffc0000 [ 744.458218][ T3429] netlink: 36 bytes leftover after parsing attributes in process `syz.8.9759'. [ 744.467267][ T3429] netlink: 16 bytes leftover after parsing attributes in process `syz.8.9759'. [ 744.476389][ T3429] netlink: 36 bytes leftover after parsing attributes in process `syz.8.9759'. [ 744.486895][ T3429] netlink: 36 bytes leftover after parsing attributes in process `syz.8.9759'. [ 744.543135][ T3431] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9760'. [ 744.624100][ T3436] FAULT_INJECTION: forcing a failure. [ 744.624100][ T3436] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 744.637443][ T3436] CPU: 1 UID: 0 PID: 3436 Comm: syz.7.9763 Not tainted 6.15.0-syzkaller-11121-gfe4281644c62 #0 PREEMPT(voluntary) [ 744.637562][ T3436] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 744.637579][ T3436] Call Trace: [ 744.637589][ T3436] [ 744.637600][ T3436] __dump_stack+0x1d/0x30 [ 744.637627][ T3436] dump_stack_lvl+0xe8/0x140 [ 744.637655][ T3436] dump_stack+0x15/0x1b [ 744.637696][ T3436] should_fail_ex+0x265/0x280 [ 744.637725][ T3436] should_fail+0xb/0x20 [ 744.637828][ T3436] should_fail_usercopy+0x1a/0x20 [ 744.637863][ T3436] _copy_to_user+0x20/0xa0 [ 744.637898][ T3436] simple_read_from_buffer+0xb5/0x130 [ 744.637927][ T3436] proc_fail_nth_read+0x100/0x140 [ 744.637959][ T3436] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 744.638052][ T3436] vfs_read+0x1a0/0x6f0 [ 744.638079][ T3436] ? __rcu_read_unlock+0x4f/0x70 [ 744.638111][ T3436] ? __fget_files+0x184/0x1c0 [ 744.638265][ T3436] ksys_read+0xda/0x1a0 [ 744.638290][ T3436] __x64_sys_read+0x40/0x50 [ 744.638328][ T3436] x64_sys_call+0x2d77/0x2fb0 [ 744.638358][ T3436] do_syscall_64+0xd2/0x200 [ 744.638432][ T3436] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 744.638467][ T3436] ? clear_bhb_loop+0x40/0x90 [ 744.638496][ T3436] ? clear_bhb_loop+0x40/0x90 [ 744.638598][ T3436] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 744.638678][ T3436] RIP: 0033:0x7faf7176d37c [ 744.638697][ T3436] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 744.638720][ T3436] RSP: 002b:00007faf6fdd7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 744.638761][ T3436] RAX: ffffffffffffffda RBX: 00007faf71995fa0 RCX: 00007faf7176d37c [ 744.638774][ T3436] RDX: 000000000000000f RSI: 00007faf6fdd70a0 RDI: 0000000000000005 [ 744.638873][ T3436] RBP: 00007faf6fdd7090 R08: 0000000000000000 R09: 0000000000000000 [ 744.638890][ T3436] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 744.638907][ T3436] R13: 0000000000000000 R14: 00007faf71995fa0 R15: 00007fffaa65b2b8 [ 744.638933][ T3436] [ 744.651195][ T3390] hid-generic 0000:0000:0000.0018: unknown main item tag 0x1 [ 744.851464][ T3390] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 744.851551][ T3390] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 744.851581][ T3390] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 744.851609][ T3390] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 744.851637][ T3390] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 744.851660][ T3390] hid-generic 0000:0000:0000.0018: unknown main item tag 0x4 [ 744.851682][ T3390] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 744.851748][ T3390] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 744.851776][ T3390] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 744.851803][ T3390] hid-generic 0000:0000:0000.0018: unknown main item tag 0x2 [ 744.851861][ T3390] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 744.851949][ T3390] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 744.851970][ T3390] hid-generic 0000:0000:0000.0018: unknown main item tag 0x4 [ 744.851998][ T3390] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 744.852026][ T3390] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 744.852054][ T3390] hid-generic 0000:0000:0000.0018: unknown main item tag 0x2 [ 744.852146][ T3390] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 744.852175][ T3390] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 744.852200][ T3390] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 744.852220][ T3390] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 744.852241][ T3390] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 744.852311][ T3390] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 744.852372][ T3390] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 744.852399][ T3390] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 744.852428][ T3390] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 744.852539][ T3390] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 744.852568][ T3390] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 744.852597][ T3390] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 744.852626][ T3390] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 744.852654][ T3390] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 744.852678][ T3390] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 744.852762][ T3390] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 744.852790][ T3390] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 745.097392][ T3390] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 745.104839][ T3390] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 745.112264][ T3390] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 745.119715][ T3390] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 745.129268][ T3390] hid-generic 0000:0000:0000.0018: hidraw0: HID v0.00 Device [syz0] on syz0 [ 745.213791][ T3461] netlink: 'syz.2.9769': attribute type 1 has an invalid length. [ 745.221824][ T3461] netlink: 224 bytes leftover after parsing attributes in process `syz.2.9769'. [ 745.238971][ T3459] loop6: detected capacity change from 0 to 256 [ 745.293933][ T3465] loop8: detected capacity change from 0 to 1024 [ 745.300778][ T3465] EXT4-fs: Ignoring removed i_version option [ 745.433049][ T3472] loop2: detected capacity change from 0 to 128 [ 745.440141][ T3474] FAULT_INJECTION: forcing a failure. [ 745.440141][ T3474] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 745.453243][ T3474] CPU: 0 UID: 0 PID: 3474 Comm: syz.6.9773 Not tainted 6.15.0-syzkaller-11121-gfe4281644c62 #0 PREEMPT(voluntary) [ 745.453314][ T3474] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 745.453331][ T3474] Call Trace: [ 745.453339][ T3474] [ 745.453349][ T3474] __dump_stack+0x1d/0x30 [ 745.453369][ T3474] dump_stack_lvl+0xe8/0x140 [ 745.453420][ T3474] dump_stack+0x15/0x1b [ 745.453453][ T3474] should_fail_ex+0x265/0x280 [ 745.453479][ T3474] should_fail+0xb/0x20 [ 745.453584][ T3474] should_fail_usercopy+0x1a/0x20 [ 745.453611][ T3474] _copy_to_user+0x20/0xa0 [ 745.453660][ T3474] simple_read_from_buffer+0xb5/0x130 [ 745.453682][ T3474] proc_fail_nth_read+0x100/0x140 [ 745.453730][ T3474] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 745.453752][ T3474] vfs_read+0x1a0/0x6f0 [ 745.453777][ T3474] ? __rcu_read_unlock+0x4f/0x70 [ 745.453856][ T3474] ? __fget_files+0x184/0x1c0 [ 745.453890][ T3474] ksys_read+0xda/0x1a0 [ 745.453919][ T3474] __x64_sys_read+0x40/0x50 [ 745.453998][ T3474] x64_sys_call+0x2d77/0x2fb0 [ 745.454074][ T3474] do_syscall_64+0xd2/0x200 [ 745.454108][ T3474] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 745.454133][ T3474] ? clear_bhb_loop+0x40/0x90 [ 745.454239][ T3474] ? clear_bhb_loop+0x40/0x90 [ 745.454281][ T3474] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 745.454306][ T3474] RIP: 0033:0x7fd4af4bd37c [ 745.454321][ T3474] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 745.454338][ T3474] RSP: 002b:00007fd4adb27030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 745.454382][ T3474] RAX: ffffffffffffffda RBX: 00007fd4af6e5fa0 RCX: 00007fd4af4bd37c [ 745.454393][ T3474] RDX: 000000000000000f RSI: 00007fd4adb270a0 RDI: 0000000000000005 [ 745.454404][ T3474] RBP: 00007fd4adb27090 R08: 0000000000000000 R09: 0000000000000000 [ 745.454415][ T3474] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 745.454425][ T3474] R13: 0000000000000000 R14: 00007fd4af6e5fa0 R15: 00007ffc4466e808 [ 745.454503][ T3474] [ 745.663902][ T3472] EXT4-fs: Ignoring removed nobh option [ 745.811243][ T3465] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 745.833466][ T3472] ext4 filesystem being mounted at /328/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 745.848714][ T3465] EXT4-fs error (device loop8): ext4_read_block_bitmap_nowait:483: comm syz.8.9771: Invalid block bitmap block 0 in block_group 0 [ 745.863910][ T3465] EXT4-fs error (device loop8): ext4_acquire_dquot:6933: comm syz.8.9771: Failed to acquire dquot type 0 [ 745.875524][ T3465] EXT4-fs error (device loop8): ext4_free_blocks:6587: comm syz.8.9771: Freeing blocks not in datazone - block = 0, count = 4096 [ 745.891043][ T3465] EXT4-fs error (device loop8): ext4_read_inode_bitmap:139: comm syz.8.9771: Invalid inode bitmap blk 0 in block_group 0 [ 745.904133][ T3465] EXT4-fs error (device loop8) in ext4_free_inode:361: Corrupt filesystem [ 745.912929][ T31] EXT4-fs error (device loop8): ext4_release_dquot:6969: comm kworker/u8:1: Failed to release dquot type 0 [ 745.927027][ T3465] EXT4-fs (loop8): 1 orphan inode deleted [ 745.976272][ T3465] lo speed is unknown, defaulting to 1000 [ 746.712815][ T3506] loop0: detected capacity change from 0 to 128 [ 747.230153][ T3508] loop6: detected capacity change from 0 to 512 [ 747.252788][ T3508] EXT4-fs error (device loop6): ext4_orphan_get:1393: inode #15: comm syz.6.9784: iget: bad i_size value: 38620345925642 [ 747.265944][ T3508] EXT4-fs error (device loop6): ext4_orphan_get:1398: comm syz.6.9784: couldn't read orphan inode 15 (err -117) [ 747.370414][ T3506] EXT4-fs: Ignoring removed nobh option [ 747.389229][ T3506] ext4 filesystem being mounted at /305/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 747.486606][ T3528] loop8: detected capacity change from 0 to 128 [ 747.498918][ T3528] EXT4-fs: Ignoring removed nobh option [ 747.573279][ T3528] ext4 filesystem being mounted at /595/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 747.705320][ T3530] loop2: detected capacity change from 0 to 8192 [ 747.749302][ T3530] loop2: p2 p3 p4 [ 747.753208][ T3530] loop2: p2 start 452985600 is beyond EOD, truncated [ 747.759994][ T3530] loop2: p3 size 33554432 extends beyond EOD, truncated [ 747.772459][ T3530] loop2: p4 start 8388607 is beyond EOD, truncated [ 747.959858][ T3547] loop7: detected capacity change from 0 to 1024 [ 747.966522][ T3547] EXT4-fs: Ignoring removed i_version option [ 747.975925][ T3547] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 748.014877][ T3547] EXT4-fs error (device loop7): ext4_read_block_bitmap_nowait:483: comm syz.7.9797: Invalid block bitmap block 0 in block_group 0 [ 748.029374][ T3547] EXT4-fs error (device loop7): ext4_acquire_dquot:6933: comm syz.7.9797: Failed to acquire dquot type 0 [ 748.046618][ T3547] EXT4-fs error (device loop7): ext4_free_blocks:6587: comm syz.7.9797: Freeing blocks not in datazone - block = 0, count = 4096 [ 748.072513][ T3549] loop2: detected capacity change from 0 to 512 [ 748.082882][ T3547] EXT4-fs error (device loop7): ext4_read_inode_bitmap:139: comm syz.7.9797: Invalid inode bitmap blk 0 in block_group 0 [ 748.098236][ T3547] EXT4-fs error (device loop7) in ext4_free_inode:361: Corrupt filesystem [ 748.108488][ T3547] EXT4-fs (loop7): 1 orphan inode deleted [ 748.249442][ T3547] lo speed is unknown, defaulting to 1000 [ 748.478342][ T31] EXT4-fs error (device loop7): ext4_release_dquot:6969: comm kworker/u8:1: Failed to release dquot type 0 [ 748.513935][ T3549] EXT4-fs error (device loop2): ext4_orphan_get:1393: inode #15: comm syz.2.9796: iget: bad i_size value: 38620345925642 [ 748.528460][ T3549] EXT4-fs error (device loop2): ext4_orphan_get:1398: comm syz.2.9796: couldn't read orphan inode 15 (err -117) [ 748.855179][ T3553] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 748.875471][ T3550] loop6: detected capacity change from 0 to 4096 [ 748.990407][ T3555] loop8: detected capacity change from 0 to 2048 [ 749.059243][ T3555] loop8: p1 < > p4 [ 749.063598][ T3555] loop8: p4 size 8388608 extends beyond EOD, truncated [ 749.171106][ T3560] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 749.186868][ T3560] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 749.197781][ T3560] __nla_validate_parse: 10 callbacks suppressed [ 749.197796][ T3560] netlink: 28 bytes leftover after parsing attributes in process `syz.8.9801'. [ 749.213101][ T3560] netlink: 28 bytes leftover after parsing attributes in process `syz.8.9801'. [ 749.423563][T27916] EXT4-fs unmount: 34 callbacks suppressed [ 749.423584][T27916] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 749.612913][ T29] kauditd_printk_skb: 297 callbacks suppressed [ 749.612963][ T29] audit: type=1326 audit(2000000568.429:48211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3564 comm="syz.2.9798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d8a6be969 code=0x7ffc0000 [ 749.648005][ T3570] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9803'. [ 749.680863][ T3570] bridge1: port 1(ip6gretap1) entered blocking state [ 749.687662][ T3570] bridge1: port 1(ip6gretap1) entered disabled state [ 749.698270][ T29] audit: type=1326 audit(2000000568.459:48212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3564 comm="syz.2.9798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=254 compat=0 ip=0x7f7d8a6be969 code=0x7ffc0000 [ 749.721989][ T29] audit: type=1326 audit(2000000568.459:48213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3564 comm="syz.2.9798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d8a6be969 code=0x7ffc0000 [ 749.745539][ T29] audit: type=1326 audit(2000000568.459:48214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3564 comm="syz.2.9798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d8a6be969 code=0x7ffc0000 [ 749.769026][ T29] audit: type=1326 audit(2000000568.469:48215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3564 comm="syz.2.9798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f7d8a6be969 code=0x7ffc0000 [ 749.792552][ T29] audit: type=1326 audit(2000000568.469:48216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3564 comm="syz.2.9798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d8a6be969 code=0x7ffc0000 [ 749.816070][ T29] audit: type=1326 audit(2000000568.469:48217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3564 comm="syz.2.9798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d8a6be969 code=0x7ffc0000 [ 749.839578][ T29] audit: type=1326 audit(2000000568.469:48218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3564 comm="syz.2.9798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7d8a6be969 code=0x7ffc0000 [ 749.863181][ T29] audit: type=1326 audit(2000000568.469:48219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3564 comm="syz.2.9798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d8a6be969 code=0x7ffc0000 [ 749.886672][ T29] audit: type=1326 audit(2000000568.469:48220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3564 comm="syz.2.9798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d8a6be969 code=0x7ffc0000 [ 749.929783][ T3570] ip6gretap1: entered allmulticast mode [ 749.938768][ T3570] ip6gretap1: entered promiscuous mode [ 749.965911][ T3575] netlink: 24 bytes leftover after parsing attributes in process `syz.8.9805'. [ 749.991393][ T3572] netlink: 36 bytes leftover after parsing attributes in process `syz.2.9804'. [ 750.000373][ T3572] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9804'. [ 750.009379][ T3572] netlink: 36 bytes leftover after parsing attributes in process `syz.2.9804'. [ 750.021404][ T3577] loop0: detected capacity change from 0 to 128 [ 750.046038][ T3577] EXT4-fs: Ignoring removed nobh option [ 750.052658][ T3572] netlink: 36 bytes leftover after parsing attributes in process `syz.2.9804'. [ 750.109668][ T3577] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 750.130677][ T3579] loop6: detected capacity change from 0 to 8192 [ 750.162639][ T3577] ext4 filesystem being mounted at /308/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 750.173246][ T3579] loop6: p2 p3 p4 [ 750.177092][ T3579] loop6: p2 start 452985600 is beyond EOD, truncated [ 750.183850][ T3579] loop6: p3 size 33554432 extends beyond EOD, truncated [ 750.192782][ T3579] loop6: p4 start 8388607 is beyond EOD, truncated [ 750.434994][T31311] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 750.525386][T27532] bridge_slave_1: left allmulticast mode [ 750.531927][T27532] bridge_slave_1: left promiscuous mode [ 750.537730][T27532] bridge0: port 2(bridge_slave_1) entered disabled state [ 750.556273][T27654] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 750.568106][ T3603] loop0: detected capacity change from 0 to 2048 [ 750.576909][T27532] bridge_slave_0: left allmulticast mode [ 750.582632][T27532] bridge_slave_0: left promiscuous mode [ 750.588356][T27532] bridge0: port 1(bridge_slave_0) entered disabled state [ 750.601922][ T3605] loop7: detected capacity change from 0 to 128 [ 750.608562][ T3605] EXT4-fs: Ignoring removed nobh option [ 750.610714][ T3603] loop0: p1 < > p4 [ 750.619628][ T3605] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 750.647889][ T3605] ext4 filesystem being mounted at /453/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 750.677462][ T3603] loop0: p4 size 8388608 extends beyond EOD, truncated [ 750.684428][ T3601] loop2: detected capacity change from 0 to 512 [ 750.741134][ T3601] EXT4-fs error (device loop2): ext4_orphan_get:1393: inode #15: comm syz.2.9809: iget: bad i_size value: 38620345925642 [ 750.754427][ T3601] EXT4-fs error (device loop2): ext4_orphan_get:1398: comm syz.2.9809: couldn't read orphan inode 15 (err -117) [ 750.768641][ T3601] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 750.840456][T27532] $Hÿ (unregistering): (slave bond_slave_0): Releasing backup interface [ 750.859429][T27532] bond_slave_0: left promiscuous mode [ 750.866861][T27532] $Hÿ (unregistering): (slave bond_slave_1): Releasing backup interface [ 750.885874][T27532] bond_slave_1: left promiscuous mode [ 750.897349][T27532] $Hÿ (unregistering): Released all slaves [ 750.928542][T27532] bond1 (unregistering): Released all slaves [ 751.014073][ T3585] lo speed is unknown, defaulting to 1000 [ 751.060291][ T3616] siw: device registration error -23 [ 751.168856][ T3625] loop0: detected capacity change from 0 to 1024 [ 751.176654][ T3585] chnl_net:caif_netlink_parms(): no params data found [ 751.186833][ T3610] lo speed is unknown, defaulting to 1000 [ 751.195374][ T3625] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 751.308971][ T3625] netlink: 'syz.0.9816': attribute type 10 has an invalid length. [ 751.447336][T27532] dummy0: left promiscuous mode [ 751.475318][T27532] team0: left promiscuous mode [ 751.480303][T27532] team_slave_0: left promiscuous mode [ 751.485808][T27532] team_slave_1: left promiscuous mode [ 751.537298][T27532] hsr_slave_0: left promiscuous mode [ 751.543295][T27532] hsr_slave_1: left promiscuous mode [ 751.556228][T27532] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 751.576708][T27532] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 751.586614][T27654] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 751.624065][ T3638] xt_hashlimit: max too large, truncated to 1048576 [ 751.636987][T27532] team0 (unregistering): Port device team_slave_1 removed [ 751.651482][T27532] team0 (unregistering): Port device team_slave_0 removed [ 751.661444][T30830] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 751.711925][ T3625] bridge0: port 3(team0) entered disabled state [ 751.718493][ T3625] bridge0: port 2(bridge_slave_1) entered disabled state [ 751.725745][ T3625] bridge0: port 1(bridge_slave_0) entered disabled state [ 751.740578][ T3625] team0: Device bridge0 is already an upper device of the team interface [ 751.755965][ T3644] loop7: detected capacity change from 0 to 8192 [ 751.763385][ T3585] bridge0: port 1(bridge_slave_0) entered blocking state [ 751.770755][ T3585] bridge0: port 1(bridge_slave_0) entered disabled state [ 751.778157][ T3585] bridge_slave_0: entered allmulticast mode [ 751.784615][ T3585] bridge_slave_0: entered promiscuous mode [ 751.791669][ T3585] bridge0: port 2(bridge_slave_1) entered blocking state [ 751.798847][ T3585] bridge0: port 2(bridge_slave_1) entered disabled state [ 751.806148][ T3585] bridge_slave_1: entered allmulticast mode [ 751.812796][ T3585] bridge_slave_1: entered promiscuous mode [ 751.819302][ T3640] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9818'. [ 751.822337][ T3644] loop7: p2 p3 p4 [ 751.837337][ T3644] loop7: p2 start 452985600 is beyond EOD, truncated [ 751.844271][ T3644] loop7: p3 size 33554432 extends beyond EOD, truncated [ 751.852409][ T3644] loop7: p4 start 8388607 is beyond EOD, truncated [ 751.876532][ T3585] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 751.885898][ T3647] netlink: 'syz.2.9821': attribute type 5 has an invalid length. [ 751.895073][ T3585] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 751.910115][ T3647] xt_hashlimit: max too large, truncated to 1048576 [ 751.927904][ T3585] team0: Port device team_slave_0 added [ 751.935178][ T3585] team0: Port device team_slave_1 added [ 751.958017][ T3585] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 751.965080][ T3585] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 751.991284][ T3585] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 752.003066][ T3585] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 752.010082][ T3585] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 752.036157][ T3585] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 752.038862][ T3651] loop7: detected capacity change from 0 to 8192 [ 752.069075][ T3651] loop7: p2 p3 p4 [ 752.072903][ T3651] loop7: p2 start 452985600 is beyond EOD, truncated [ 752.079662][ T3651] loop7: p3 size 33554432 extends beyond EOD, truncated [ 752.087179][ T3651] loop7: p4 start 8388607 is beyond EOD, truncated [ 752.090102][ T3585] hsr_slave_0: entered promiscuous mode [ 752.102120][ T3585] hsr_slave_1: entered promiscuous mode [ 752.108062][ T3585] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 752.115939][ T3585] Cannot create hsr debugfs directory [ 752.133737][T27532] IPVS: stop unused estimator thread 0... [ 752.325044][T31311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 752.422903][ T3675] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9829'. [ 752.497593][ T3585] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 752.508496][ T3585] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 752.523167][ T3585] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 752.567968][ T3685] loop7: detected capacity change from 0 to 512 [ 752.593835][ T3585] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 752.720546][ T3585] 8021q: adding VLAN 0 to HW filter on device bond0 [ 752.763014][ T3585] 8021q: adding VLAN 0 to HW filter on device team0 [ 752.778578][ T3690] loop0: detected capacity change from 0 to 128 [ 752.808311][ T3690] EXT4-fs: Ignoring removed nobh option [ 753.083601][ T3685] EXT4-fs error (device loop7): ext4_orphan_get:1393: inode #15: comm syz.7.9827: iget: bad i_size value: 38620345925642 [ 753.096699][ T3685] EXT4-fs error (device loop7): ext4_orphan_get:1398: comm syz.7.9827: couldn't read orphan inode 15 (err -117) [ 753.097716][ T3690] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 753.123118][ T3685] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 753.131163][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 753.136364][ T3690] ext4 filesystem being mounted at /318/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 753.142741][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 753.168001][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 753.175144][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 753.193317][ T3700] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 753.237249][T31311] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 753.313723][ T3585] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 753.329077][T27654] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 753.387231][ T3726] loop0: detected capacity change from 0 to 128 [ 753.396697][ T3726] EXT4-fs: Ignoring removed nobh option [ 753.418883][ T3726] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 753.441596][ T3726] ext4 filesystem being mounted at /321/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 753.453774][ T3735] loop6: detected capacity change from 0 to 128 [ 753.460735][ T3735] EXT4-fs: Ignoring removed nobh option [ 753.475243][ T3735] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 753.487880][ T3735] ext4 filesystem being mounted at /602/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 753.524510][T31311] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 753.544466][ T3585] veth0_vlan: entered promiscuous mode [ 753.553674][ T3585] veth1_vlan: entered promiscuous mode [ 753.567945][ T3585] veth0_macvtap: entered promiscuous mode [ 753.584161][ T3585] veth1_macvtap: entered promiscuous mode [ 753.596373][ T3585] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 753.606035][ T3585] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 753.619443][ T3585] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 753.628202][ T3585] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 753.637153][ T3585] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 753.645952][ T3585] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 753.690331][T27916] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 753.717934][ T3752] loop8: detected capacity change from 0 to 1024 [ 753.725431][ T3752] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 753.737700][ T3755] loop6: detected capacity change from 0 to 128 [ 753.745466][ T3752] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 753.755970][ T3755] EXT4-fs: Ignoring removed nobh option [ 753.762189][ T3752] EXT4-fs error (device loop8): ext4_get_journal_inode:5796: inode #32: comm syz.8.9808: iget: special inode unallocated [ 753.778193][ T3752] EXT4-fs (loop8): Remounting filesystem read-only [ 753.778938][ T3755] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 753.784821][ T3752] EXT4-fs (loop8): no journal found [ 753.802219][ T3752] EXT4-fs (loop8): can't get journal size [ 753.808496][ T3755] ext4 filesystem being mounted at /603/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 753.842744][ T3752] EXT4-fs (loop8): filesystem is read-only [ 753.847680][T27916] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 753.849362][ T3752] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 753.870872][ T3752] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 754.009062][ T3770] loop2: detected capacity change from 0 to 1024 [ 754.016306][ T3770] EXT4-fs: Ignoring removed i_version option [ 754.024869][ T3770] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 754.041250][ T3770] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.9853: Invalid block bitmap block 0 in block_group 0 [ 754.056668][ T3770] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.9853: Failed to acquire dquot type 0 [ 754.068913][ T3770] EXT4-fs error (device loop2): ext4_free_blocks:6587: comm syz.2.9853: Freeing blocks not in datazone - block = 0, count = 4096 [ 754.083147][ T3770] EXT4-fs error (device loop2): ext4_read_inode_bitmap:139: comm syz.2.9853: Invalid inode bitmap blk 0 in block_group 0 [ 754.096496][ T3770] EXT4-fs error (device loop2) in ext4_free_inode:361: Corrupt filesystem [ 754.105291][ T3770] EXT4-fs (loop2): 1 orphan inode deleted [ 754.111982][ T3770] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 754.308730][ T3762] loop0: detected capacity change from 0 to 8192 [ 754.365358][ T408] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 754.419263][ T3762] loop0: p2 p3 p4 [ 754.431888][ T3762] loop0: p2 start 452985600 is beyond EOD, truncated [ 754.438640][ T3762] loop0: p3 size 33554432 extends beyond EOD, truncated [ 754.479126][ T408] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 754.496956][ T3778] loop7: detected capacity change from 0 to 1024 [ 754.522163][ T3778] EXT4-fs: Ignoring removed bh option [ 754.549350][ T3762] loop0: p4 start 8388607 is beyond EOD, truncated [ 754.572985][ T3778] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 754.596787][ T408] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 754.634916][ T29] kauditd_printk_skb: 560 callbacks suppressed [ 754.634936][ T29] audit: type=1400 audit(2000000573.449:48779): avc: denied { setattr } for pid=3775 comm="syz.7.9854" name="file0" dev="loop7" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 754.724042][ T408] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 754.964124][ T37] Quota error (device loop2): do_check_range: Getting block 0 out of range 1-8 [ 754.973175][ T37] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:2: Failed to release dquot type 0 [ 756.741394][T27654] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 756.970016][ T3798] loop0: detected capacity change from 0 to 512 [ 757.321772][ T3772] chnl_net:caif_netlink_parms(): no params data found [ 757.344271][ T3798] EXT4-fs error (device loop0): ext4_orphan_get:1393: inode #15: comm syz.0.9856: iget: bad i_size value: 38620345925642 [ 757.359086][ T3798] EXT4-fs error (device loop0): ext4_orphan_get:1398: comm syz.0.9856: couldn't read orphan inode 15 (err -117) [ 757.372124][ T3798] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 757.414098][ T408] bridge_slave_1: left allmulticast mode [ 757.419819][ T408] bridge_slave_1: left promiscuous mode [ 757.425450][ T408] bridge0: port 2(bridge_slave_1) entered disabled state [ 757.433327][ T408] bridge_slave_0: left allmulticast mode [ 757.439052][ T408] bridge_slave_0: left promiscuous mode [ 757.444893][ T408] bridge0: port 1(bridge_slave_0) entered disabled state [ 757.572424][T31311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 757.642477][ T408] $Hÿ (unregistering): (slave bond_slave_0): Releasing backup interface [ 757.654044][ T408] bond_slave_0: left promiscuous mode [ 757.660862][ T29] audit: type=1400 audit(2000000576.479:48780): avc: denied { map } for pid=3808 comm="syz.8.9861" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 757.685872][T30830] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 757.699417][ T408] $Hÿ (unregistering): (slave bond_slave_1): Releasing backup interface [ 757.711625][ T408] bond_slave_1: left promiscuous mode [ 757.719048][ T408] $Hÿ (unregistering): Released all slaves [ 757.727302][ T3814] loop2: detected capacity change from 0 to 128 [ 757.736747][ T3814] EXT4-fs: Ignoring removed nobh option [ 757.751609][ T3814] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 757.763972][ T3814] ext4 filesystem being mounted at /342/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 757.779194][ T3817] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 757.787615][ T3817] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 757.843738][ T3821] loop8: detected capacity change from 0 to 512 [ 757.853593][T30830] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 757.864044][ T3772] bridge0: port 1(bridge_slave_0) entered blocking state [ 757.864675][ T3817] __nla_validate_parse: 5 callbacks suppressed [ 757.864760][ T3817] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9863'. [ 757.871180][ T3772] bridge0: port 1(bridge_slave_0) entered disabled state [ 757.871402][ T3772] bridge_slave_0: entered allmulticast mode [ 757.877570][ T3817] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9863'. [ 757.886953][ T3772] bridge_slave_0: entered promiscuous mode [ 757.916593][ T408] team0: left promiscuous mode [ 757.921657][ T408] team_slave_0: left promiscuous mode [ 757.927194][ T408] team_slave_1: left promiscuous mode [ 757.933829][ T29] audit: type=1326 audit(2000000576.749:48781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3808 comm="syz.8.9861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c7a6de969 code=0x7ffc0000 [ 757.936659][ T3824] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9864'. [ 757.957508][ T29] audit: type=1326 audit(2000000576.749:48782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3808 comm="syz.8.9861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c7a6de969 code=0x7ffc0000 [ 757.990040][ T29] audit: type=1326 audit(2000000576.749:48783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3808 comm="syz.8.9861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f3c7a6de969 code=0x7ffc0000 [ 758.013606][ T29] audit: type=1326 audit(2000000576.749:48784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3808 comm="syz.8.9861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c7a6de969 code=0x7ffc0000 [ 758.037136][ T29] audit: type=1326 audit(2000000576.749:48785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3808 comm="syz.8.9861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c7a6de969 code=0x7ffc0000 [ 758.060715][ T29] audit: type=1326 audit(2000000576.749:48786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3808 comm="syz.8.9861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=64 compat=0 ip=0x7f3c7a6de969 code=0x7ffc0000 [ 758.084100][ T29] audit: type=1326 audit(2000000576.749:48787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3808 comm="syz.8.9861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c7a6de969 code=0x7ffc0000 [ 758.107697][ T408] hsr_slave_0: left promiscuous mode [ 758.115851][ T408] hsr_slave_1: left promiscuous mode [ 758.121708][ T408] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 758.129260][ T408] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 758.136964][ T408] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 758.144545][ T408] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 758.155322][ T408] veth1_macvtap: left promiscuous mode [ 758.160932][ T408] veth0_macvtap: left promiscuous mode [ 758.166455][ T408] veth1_vlan: left promiscuous mode [ 758.171816][ T408] veth0_vlan: left promiscuous mode [ 758.213957][ T408] pim6reg (unregistering): left allmulticast mode [ 758.259794][ T408] team0 (unregistering): Port device team_slave_1 removed [ 758.272218][ T408] team0 (unregistering): Port device team_slave_0 removed [ 758.294743][ T3829] loop7: detected capacity change from 0 to 8192 [ 758.300877][ T408] vxcan1 (unregistering): left allmulticast mode [ 758.318310][ T3772] bridge0: port 2(bridge_slave_1) entered blocking state [ 758.325521][ T3772] bridge0: port 2(bridge_slave_1) entered disabled state [ 758.333022][ T3772] bridge_slave_1: entered allmulticast mode [ 758.339641][ T3772] bridge_slave_1: entered promiscuous mode [ 758.341081][ T3829] loop7: p2 p3 p4 [ 758.351056][ T3829] loop7: p2 start 452985600 is beyond EOD, truncated [ 758.357892][ T3829] loop7: p3 size 33554432 extends beyond EOD, truncated [ 758.365370][ T3829] loop7: p4 start 8388607 is beyond EOD, truncated [ 758.375210][ T3817] dummy0: entered promiscuous mode [ 758.382426][ T3817] dummy0: left promiscuous mode [ 758.393730][ T3824] bridge0: entered promiscuous mode [ 758.400652][ T3824] bridge0: port 3(macvlan3) entered blocking state [ 758.407229][ T3824] bridge0: port 3(macvlan3) entered disabled state [ 758.415174][ T3824] macvlan3: entered allmulticast mode [ 758.420745][ T3824] bridge0: entered allmulticast mode [ 758.427835][ T3824] macvlan3: left allmulticast mode [ 758.433026][ T3824] bridge0: left allmulticast mode [ 758.440842][ T3824] bridge0: left promiscuous mode [ 758.462095][ T3772] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 758.473923][ T3772] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 758.521664][ T3772] team0: Port device team_slave_0 added [ 758.528531][ T3772] team0: Port device team_slave_1 added [ 758.548799][ T3772] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 758.555944][ T3772] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 758.581977][ T3772] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 758.599373][ T3772] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 758.606348][ T3772] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 758.632423][ T3772] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 758.664500][ T3772] hsr_slave_0: entered promiscuous mode [ 758.670778][ T3772] hsr_slave_1: entered promiscuous mode [ 758.676908][ T3772] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 758.684555][ T3772] Cannot create hsr debugfs directory [ 758.805075][ T408] IPVS: stop unused estimator thread 0... [ 758.955929][ T3850] loop2: detected capacity change from 0 to 1024 [ 758.963073][ T3850] EXT4-fs: Ignoring removed i_version option [ 758.970271][ T3850] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 758.983887][ T3850] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.9871: Invalid block bitmap block 0 in block_group 0 [ 758.997756][ T3850] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.9871: Failed to acquire dquot type 0 [ 759.011073][ T3850] EXT4-fs error (device loop2): ext4_free_blocks:6587: comm syz.2.9871: Freeing blocks not in datazone - block = 0, count = 4096 [ 759.024998][ T3850] EXT4-fs error (device loop2): ext4_read_inode_bitmap:139: comm syz.2.9871: Invalid inode bitmap blk 0 in block_group 0 [ 759.038240][ T3850] EXT4-fs error (device loop2) in ext4_free_inode:361: Corrupt filesystem [ 759.047025][ T3850] EXT4-fs (loop2): 1 orphan inode deleted [ 759.053868][ T3850] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 759.311873][ T3857] loop0: detected capacity change from 0 to 128 [ 759.319769][ T3857] EXT4-fs: Ignoring removed nobh option [ 759.328124][ T3857] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 759.344745][ T3857] ext4 filesystem being mounted at /332/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 759.611674][ T3772] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 759.626183][ T23] usb usb6-port1: attempt power cycle [ 759.655440][ T3772] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 759.721088][ T3772] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 759.737041][ T3772] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 759.781733][ T3772] 8021q: adding VLAN 0 to HW filter on device bond0 [ 759.802486][ T3772] 8021q: adding VLAN 0 to HW filter on device team0 [ 759.817716][ T3635] bridge0: port 1(bridge_slave_0) entered blocking state [ 759.824823][ T3635] bridge0: port 1(bridge_slave_0) entered forwarding state [ 759.846279][ T3880] __quota_error: 112 callbacks suppressed [ 759.846293][ T3880] Quota error (device loop2): do_check_range: Getting block 0 out of range 1-8 [ 759.861076][ T3880] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:8: Failed to release dquot type 0 [ 759.875475][ T3772] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 759.885974][ T3772] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 759.917678][ T3635] bridge0: port 2(bridge_slave_1) entered blocking state [ 759.924850][ T3635] bridge0: port 2(bridge_slave_1) entered forwarding state [ 759.939542][T31311] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 760.060603][ T3772] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 760.202277][ T3772] veth0_vlan: entered promiscuous mode [ 760.213502][ T3772] veth1_vlan: entered promiscuous mode [ 760.232367][ T3772] veth0_macvtap: entered promiscuous mode [ 760.240313][ T3772] veth1_macvtap: entered promiscuous mode [ 760.252918][ T3772] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 760.267139][ T3772] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 760.277174][ T3772] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 760.286040][ T3772] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 760.294883][ T3772] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 760.303642][ T3772] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 760.575885][T30830] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 760.614211][ T29] audit: type=1326 audit(2000000579.429:48898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3891 comm="syz.2.9877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d8a6be969 code=0x7ffc0000 [ 760.640026][ T29] audit: type=1326 audit(2000000579.429:48899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3891 comm="syz.2.9877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=254 compat=0 ip=0x7f7d8a6be969 code=0x7ffc0000 [ 760.663623][ T29] audit: type=1326 audit(2000000579.429:48900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3891 comm="syz.2.9877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d8a6be969 code=0x7ffc0000 [ 760.687303][ T29] audit: type=1326 audit(2000000579.429:48901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3891 comm="syz.2.9877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f7d8a6be969 code=0x7ffc0000 [ 760.710939][ T29] audit: type=1326 audit(2000000579.429:48902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3891 comm="syz.2.9877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d8a6be969 code=0x7ffc0000 [ 760.734602][ T29] audit: type=1326 audit(2000000579.429:48903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3891 comm="syz.2.9877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7d8a6be969 code=0x7ffc0000 [ 760.758128][ T29] audit: type=1326 audit(2000000579.429:48904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3891 comm="syz.2.9877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d8a6be969 code=0x7ffc0000 [ 760.781809][ T29] audit: type=1326 audit(2000000579.429:48905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3891 comm="syz.2.9877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7d8a6be969 code=0x7ffc0000 [ 760.805344][ T29] audit: type=1326 audit(2000000579.429:48906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3891 comm="syz.2.9877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d8a6be969 code=0x7ffc0000 [ 760.874790][ T3902] netlink: 36 bytes leftover after parsing attributes in process `syz.0.9881'. [ 760.883869][ T3902] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9881'. [ 760.893007][ T3902] netlink: 36 bytes leftover after parsing attributes in process `syz.0.9881'. [ 760.902950][ T3902] netlink: 36 bytes leftover after parsing attributes in process `syz.0.9881'. [ 760.918437][ T3906] netlink: 36 bytes leftover after parsing attributes in process `syz.2.9883'. [ 760.927442][ T3906] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9883'. [ 760.936534][ T3906] netlink: 36 bytes leftover after parsing attributes in process `syz.2.9883'. [ 760.952654][ T3910] loop0: detected capacity change from 0 to 128 [ 760.959514][ T3910] EXT4-fs: Ignoring removed nobh option [ 760.966543][ T3910] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 760.981851][ T3913] loop2: detected capacity change from 0 to 128 [ 760.982234][ T3910] ext4 filesystem being mounted at /335/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 760.988387][ T3913] EXT4-fs: Ignoring removed nobh option [ 761.005733][ T3913] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 761.021796][ T3913] ext4 filesystem being mounted at /353/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 761.056814][T31311] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 761.079458][ T3917] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 761.087997][ T3917] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 761.498875][ T23] usb usb6-port1: unable to enumerate USB device [ 761.530252][ T3924] netlink: 'syz.8.9889': attribute type 1 has an invalid length. [ 761.601559][ T3930] loop8: detected capacity change from 0 to 128 [ 761.608097][ T3930] EXT4-fs: Ignoring removed nobh option [ 761.616073][ T3930] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 761.629717][ T3930] ext4 filesystem being mounted at /8/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 761.669093][ T3585] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 761.707753][ T3937] loop8: detected capacity change from 0 to 128 [ 761.722176][ T3937] EXT4-fs: Ignoring removed nobh option [ 761.731074][ T3937] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 761.743715][ T3937] ext4 filesystem being mounted at /9/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 761.799660][ T3942] loop7: detected capacity change from 0 to 128 [ 761.809699][ T3942] EXT4-fs: Ignoring removed nobh option [ 761.813337][ T3585] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 761.957169][ T3942] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 761.971986][ T3942] ext4 filesystem being mounted at /470/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 761.972091][ T3948] loop8: detected capacity change from 0 to 8192 [ 761.989555][T30830] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 762.066832][ T3952] loop0: detected capacity change from 0 to 512 [ 762.118018][ T3948] loop8: p2 p3 p4 [ 762.126793][ T3948] loop8: p2 start 452985600 is beyond EOD, truncated [ 762.133618][ T3948] loop8: p3 size 33554432 extends beyond EOD, truncated [ 762.146795][T27654] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 762.199109][ T3952] EXT4-fs error (device loop0): ext4_orphan_get:1393: inode #15: comm syz.0.9899: iget: bad i_size value: 38620345925642 [ 762.218689][ T3952] EXT4-fs error (device loop0): ext4_orphan_get:1398: comm syz.0.9899: couldn't read orphan inode 15 (err -117) [ 762.232523][ T3952] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 762.265522][ T3948] loop8: p4 start 8388607 is beyond EOD, truncated [ 762.396256][ T3951] loop2: detected capacity change from 0 to 8192 [ 762.413059][ T3957] netlink: 'syz.7.9901': attribute type 1 has an invalid length. [ 762.427345][ T3961] loop6: detected capacity change from 0 to 128 [ 762.438950][ T3961] EXT4-fs: Ignoring removed nobh option [ 762.447452][ T3961] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 762.461386][ T3951] loop2: p2 p3 p4 [ 762.466615][ T3951] loop2: p2 start 452985600 is beyond EOD, truncated [ 762.473461][ T3951] loop2: p3 size 33554432 extends beyond EOD, truncated [ 762.479081][ T3961] ext4 filesystem being mounted at /3/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 762.517714][ T3951] loop2: p4 start 8388607 is beyond EOD, truncated [ 762.527088][ T3772] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 762.727762][T31311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 762.746680][ T3984] loop8: detected capacity change from 0 to 8192 [ 762.749431][ T3988] netlink: 'syz.0.9915': attribute type 1 has an invalid length. [ 762.789335][ T3984] loop8: p2 p3 p4 [ 762.793187][ T3984] loop8: p2 start 452985600 is beyond EOD, truncated [ 762.800091][ T3984] loop8: p3 size 33554432 extends beyond EOD, truncated [ 762.814952][ T3984] loop8: p4 start 8388607 is beyond EOD, truncated [ 762.849424][ T3994] loop0: detected capacity change from 0 to 128 [ 762.865390][ T3994] EXT4-fs: Ignoring removed nobh option [ 762.875006][ T3994] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 762.887215][ T3996] loop8: detected capacity change from 0 to 128 [ 762.887780][ T3994] ext4 filesystem being mounted at /343/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 762.906217][ T3996] EXT4-fs: Ignoring removed nobh option [ 762.920997][ T3996] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 762.933485][ T3996] ext4 filesystem being mounted at /13/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 762.964962][T31311] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 763.053820][ T3585] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 763.104843][ T4000] loop0: detected capacity change from 0 to 8192 [ 763.169041][ T4000] loop0: p2 p3 p4 [ 763.172905][ T4000] loop0: p2 start 452985600 is beyond EOD, truncated [ 763.179660][ T4000] loop0: p3 size 33554432 extends beyond EOD, truncated [ 763.190358][ T4000] loop0: p4 start 8388607 is beyond EOD, truncated [ 763.292533][ T4012] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 763.373301][ T4014] netlink: 'syz.0.9926': attribute type 1 has an invalid length. [ 763.381109][ T4014] __nla_validate_parse: 11 callbacks suppressed [ 763.381121][ T4014] netlink: 224 bytes leftover after parsing attributes in process `syz.0.9926'. [ 763.541158][ T4023] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 763.558851][ T4023] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 763.574647][ T4023] netlink: 28 bytes leftover after parsing attributes in process `syz.7.9930'. [ 763.583688][ T4023] netlink: 28 bytes leftover after parsing attributes in process `syz.7.9930'. [ 763.683937][ T4021] siw: device registration error -23 [ 763.836163][ T4037] loop2: detected capacity change from 0 to 8192 [ 763.898866][ T4037] loop2: p2 p3 p4 [ 763.902721][ T4037] loop2: p2 start 452985600 is beyond EOD, truncated [ 763.909410][ T4037] loop2: p3 size 33554432 extends beyond EOD, truncated [ 763.916806][ T4037] loop2: p4 start 8388607 is beyond EOD, truncated [ 764.391486][ T4048] netlink: 'syz.0.9940': attribute type 1 has an invalid length. [ 764.399296][ T4048] netlink: 224 bytes leftover after parsing attributes in process `syz.0.9940'. [ 764.538044][ T4050] loop0: detected capacity change from 0 to 8192 [ 764.599303][ T4050] loop0: p2 p3 p4 [ 764.605183][ T4050] loop0: p2 start 452985600 is beyond EOD, truncated [ 764.611983][ T4050] loop0: p3 size 33554432 extends beyond EOD, truncated [ 764.640149][ T4050] loop0: p4 start 8388607 is beyond EOD, truncated [ 764.774184][ T4059] FAULT_INJECTION: forcing a failure. [ 764.774184][ T4059] name failslab, interval 1, probability 0, space 0, times 0 [ 764.786905][ T4059] CPU: 1 UID: 0 PID: 4059 Comm: syz.0.9943 Not tainted 6.15.0-syzkaller-11121-gfe4281644c62 #0 PREEMPT(voluntary) [ 764.786962][ T4059] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 764.786975][ T4059] Call Trace: [ 764.786982][ T4059] [ 764.786991][ T4059] __dump_stack+0x1d/0x30 [ 764.787012][ T4059] dump_stack_lvl+0xe8/0x140 [ 764.787034][ T4059] dump_stack+0x15/0x1b [ 764.787076][ T4059] should_fail_ex+0x265/0x280 [ 764.787167][ T4059] should_failslab+0x8c/0xb0 [ 764.787200][ T4059] __kmalloc_noprof+0xa5/0x3e0 [ 764.787235][ T4059] ? copy_splice_read+0xc2/0x5f0 [ 764.787336][ T4059] copy_splice_read+0xc2/0x5f0 [ 764.787453][ T4059] ? __pfx_copy_splice_read+0x10/0x10 [ 764.787515][ T4059] splice_direct_to_actor+0x26f/0x680 [ 764.787537][ T4059] ? __pfx_direct_splice_actor+0x10/0x10 [ 764.787558][ T4059] do_splice_direct+0xda/0x150 [ 764.787652][ T4059] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 764.787718][ T4059] do_sendfile+0x380/0x650 [ 764.787756][ T4059] __x64_sys_sendfile64+0x105/0x150 [ 764.787783][ T4059] x64_sys_call+0xb39/0x2fb0 [ 764.787815][ T4059] do_syscall_64+0xd2/0x200 [ 764.787844][ T4059] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 764.787873][ T4059] ? clear_bhb_loop+0x40/0x90 [ 764.787896][ T4059] ? clear_bhb_loop+0x40/0x90 [ 764.787988][ T4059] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 764.788006][ T4059] RIP: 0033:0x7fbb22e7e969 [ 764.788023][ T4059] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 764.788094][ T4059] RSP: 002b:00007fbb214e7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 764.788111][ T4059] RAX: ffffffffffffffda RBX: 00007fbb230a5fa0 RCX: 00007fbb22e7e969 [ 764.788123][ T4059] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 [ 764.788133][ T4059] RBP: 00007fbb214e7090 R08: 0000000000000000 R09: 0000000000000000 [ 764.788144][ T4059] R10: 00000000003fffff R11: 0000000000000246 R12: 0000000000000001 [ 764.788157][ T4059] R13: 0000000000000000 R14: 00007fbb230a5fa0 R15: 00007ffde4e3f0c8 [ 764.788179][ T4059] [ 765.017435][ T4061] loop8: detected capacity change from 0 to 2048 [ 765.046443][ T4063] FAULT_INJECTION: forcing a failure. [ 765.046443][ T4063] name failslab, interval 1, probability 0, space 0, times 0 [ 765.059167][ T4063] CPU: 0 UID: 0 PID: 4063 Comm: syz.0.9945 Not tainted 6.15.0-syzkaller-11121-gfe4281644c62 #0 PREEMPT(voluntary) [ 765.059262][ T4063] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 765.059276][ T4063] Call Trace: [ 765.059283][ T4063] [ 765.059292][ T4063] __dump_stack+0x1d/0x30 [ 765.059315][ T4063] dump_stack_lvl+0xe8/0x140 [ 765.059410][ T4063] dump_stack+0x15/0x1b [ 765.059424][ T4063] should_fail_ex+0x265/0x280 [ 765.059474][ T4063] should_failslab+0x8c/0xb0 [ 765.059495][ T4063] kmem_cache_alloc_lru_noprof+0x55/0x310 [ 765.059526][ T4063] ? __d_alloc+0x3d/0x350 [ 765.059551][ T4063] __d_alloc+0x3d/0x350 [ 765.059573][ T4063] ? mpol_shared_policy_init+0xbd/0x4c0 [ 765.059666][ T4063] d_alloc_pseudo+0x1e/0x80 [ 765.059739][ T4063] alloc_file_pseudo+0x71/0x160 [ 765.059767][ T4063] __shmem_file_setup+0x1b9/0x1f0 [ 765.059836][ T4063] shmem_file_setup+0x3b/0x50 [ 765.059907][ T4063] __se_sys_memfd_create+0x2c3/0x590 [ 765.059926][ T4063] __x64_sys_memfd_create+0x31/0x40 [ 765.059943][ T4063] x64_sys_call+0x122f/0x2fb0 [ 765.059961][ T4063] do_syscall_64+0xd2/0x200 [ 765.059986][ T4063] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 765.060117][ T4063] ? clear_bhb_loop+0x40/0x90 [ 765.060135][ T4063] ? clear_bhb_loop+0x40/0x90 [ 765.060195][ T4063] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 765.060221][ T4063] RIP: 0033:0x7fbb22e7e969 [ 765.060239][ T4063] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 765.060282][ T4063] RSP: 002b:00007fbb214e6d68 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 765.060307][ T4063] RAX: ffffffffffffffda RBX: 00000000000005c3 RCX: 00007fbb22e7e969 [ 765.060323][ T4063] RDX: 00007fbb214e6dec RSI: 0000000000000000 RDI: 00007fbb22f01444 [ 765.060416][ T4063] RBP: 00002000000005c0 R08: 00007fbb214e6b07 R09: 0000000000000000 [ 765.060433][ T4063] R10: 000000000000000a R11: 0000000000000202 R12: 0000000000000001 [ 765.060449][ T4063] R13: 00007fbb214e6dec R14: 00007fbb214e6df0 R15: 00007ffde4e3f0c8 [ 765.060475][ T4063] [ 765.275825][ T4061] loop8: p1 < > p4 [ 765.280313][ T4061] loop8: p4 size 8388608 extends beyond EOD, truncated [ 765.333331][ T29] kauditd_printk_skb: 393 callbacks suppressed [ 765.333347][ T29] audit: type=1326 audit(2000000584.149:49300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4071 comm="syz.8.9948" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3c7a6de969 code=0x0 [ 765.340837][ T4074] netlink: 36 bytes leftover after parsing attributes in process `syz.0.9950'. [ 765.364257][ T29] audit: type=1326 audit(2000000584.149:49301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4073 comm="syz.0.9950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb22e7e969 code=0x7ffc0000 [ 765.371640][ T4074] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9950'. [ 765.395029][ T29] audit: type=1326 audit(2000000584.149:49302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4073 comm="syz.0.9950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb22e7e969 code=0x7ffc0000 [ 765.395092][ T29] audit: type=1326 audit(2000000584.149:49303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4073 comm="syz.0.9950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fbb22e7e969 code=0x7ffc0000 [ 765.404303][ T4074] netlink: 36 bytes leftover after parsing attributes in process `syz.0.9950'. [ 765.427671][ T29] audit: type=1326 audit(2000000584.149:49304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4073 comm="syz.0.9950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb22e7e969 code=0x7ffc0000 [ 765.427835][ T29] audit: type=1326 audit(2000000584.149:49305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4073 comm="syz.0.9950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fbb22e7e969 code=0x7ffc0000 [ 765.427864][ T29] audit: type=1326 audit(2000000584.149:49306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4073 comm="syz.0.9950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb22e7e969 code=0x7ffc0000 [ 765.455578][ T4074] netlink: 36 bytes leftover after parsing attributes in process `syz.0.9950'. [ 765.460301][ T29] audit: type=1326 audit(2000000584.149:49307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4073 comm="syz.0.9950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fbb22e7e969 code=0x7ffc0000 [ 765.563280][ T29] audit: type=1326 audit(2000000584.149:49308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4073 comm="syz.0.9950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb22e7e969 code=0x7ffc0000 [ 765.587057][ T29] audit: type=1326 audit(2000000584.149:49309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4073 comm="syz.0.9950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fbb22e7e969 code=0x7ffc0000 [ 765.724871][ T4085] loop6: detected capacity change from 0 to 8192 [ 765.737040][ T4078] siw: device registration error -23 [ 765.769226][ T4085] loop6: p2 p3 p4 [ 765.773141][ T4085] loop6: p2 start 452985600 is beyond EOD, truncated [ 765.779927][ T4085] loop6: p3 size 33554432 extends beyond EOD, truncated [ 765.787276][ T4085] loop6: p4 start 8388607 is beyond EOD, truncated [ 765.839989][ T4096] loop6: detected capacity change from 0 to 128 [ 765.846587][ T4096] EXT4-fs: Ignoring removed nobh option [ 765.854052][ T4096] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 765.866544][ T4096] ext4 filesystem being mounted at /10/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 766.190115][ T4102] loop8: detected capacity change from 0 to 2048 [ 766.220222][ T4102] loop8: p1 < > p4 [ 766.224917][ T4102] loop8: p4 size 8388608 extends beyond EOD, truncated [ 766.289263][ T4104] loop8: detected capacity change from 0 to 8192 [ 766.339056][ T4104] loop8: p2 p3 p4 [ 766.342923][ T4104] loop8: p2 start 452985600 is beyond EOD, truncated [ 766.349709][ T4104] loop8: p3 size 33554432 extends beyond EOD, truncated [ 766.357356][ T4104] loop8: p4 start 8388607 is beyond EOD, truncated [ 766.407690][ T4109] loop8: detected capacity change from 0 to 128 [ 766.417591][ T4111] loop7: detected capacity change from 0 to 128 [ 766.424326][ T4109] EXT4-fs: Ignoring removed nobh option [ 766.430269][ T4111] EXT4-fs: Ignoring removed nobh option [ 766.437741][ T4109] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 766.451121][ T4111] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 766.451741][ T4109] ext4 filesystem being mounted at /28/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 766.463509][ T4111] ext4 filesystem being mounted at /482/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 766.508757][T27654] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 766.576612][ T4119] netlink: 36 bytes leftover after parsing attributes in process `syz.7.9963'. [ 766.585690][ T4119] netlink: 16 bytes leftover after parsing attributes in process `syz.7.9963'. [ 766.640335][ T3585] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 766.651887][ T4123] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 766.662123][ T4125] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 766.692598][ T4127] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 766.698323][ T4129] loop0: detected capacity change from 0 to 2048 [ 766.708881][ T4125] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 766.719048][ T3772] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 766.740154][ T4129] loop0: p1 < > p4 [ 766.745741][ T4129] loop0: p4 size 8388608 extends beyond EOD, truncated [ 766.754005][ T4127] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 766.842163][ T4127] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 766.910434][ T4138] siw: device registration error -23 [ 766.919024][ T4127] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 767.382282][ T4142] loop7: detected capacity change from 0 to 128 [ 767.396662][ T4127] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 767.408328][ T4127] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 767.409492][ T4142] EXT4-fs: Ignoring removed nobh option [ 767.421367][ T4127] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 767.425494][ T4142] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 767.434224][ T4127] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 767.445708][ T4142] ext4 filesystem being mounted at /485/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 767.488888][T27654] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 767.728045][ T4158] infiniband syz2: set active [ 767.732787][ T4158] infiniband syz2: added veth0_to_bond [ 767.742420][ T4162] loop6: detected capacity change from 0 to 128 [ 767.745273][ T4158] RDS/IB: syz2: added [ 767.749018][ T4162] EXT4-fs: Ignoring removed nobh option [ 767.754514][ T4158] smc: adding ib device syz2 with port count 1 [ 767.760821][ T4162] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 767.764641][ T4158] smc: ib device syz2 port 1 has pnetid [ 767.779599][ T4162] ext4 filesystem being mounted at /14/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 768.607247][ T4172] loop8: detected capacity change from 0 to 8192 [ 768.644563][ T3772] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 768.678947][ T4172] loop8: p2 p3 p4 [ 768.682719][ T4172] loop8: p2 start 452985600 is beyond EOD, truncated [ 768.689544][ T4172] loop8: p3 size 33554432 extends beyond EOD, truncated [ 768.698364][ T4172] loop8: p4 start 8388607 is beyond EOD, truncated [ 768.864905][ T4189] loop7: detected capacity change from 0 to 2048 [ 768.899097][ T4189] loop7: p1 < > p4 [ 768.903699][ T4189] loop7: p4 size 8388608 extends beyond EOD, truncated [ 769.073992][ T4192] __nla_validate_parse: 8 callbacks suppressed [ 769.074012][ T4192] netlink: 36 bytes leftover after parsing attributes in process `syz.7.9991'. [ 769.089474][ T4192] netlink: 16 bytes leftover after parsing attributes in process `syz.7.9991'. [ 769.098456][ T4192] netlink: 36 bytes leftover after parsing attributes in process `syz.7.9991'. [ 769.111559][ T4192] netlink: 36 bytes leftover after parsing attributes in process `syz.7.9991'. [ 769.439499][ T4198] siw: device registration error -23 [ 769.525688][ T4202] loop0: detected capacity change from 0 to 128 [ 769.532320][ T4202] EXT4-fs: Ignoring removed nobh option [ 769.539452][ T4202] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 769.551794][ T4202] ext4 filesystem being mounted at /361/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 769.657884][ T4210] netlink: 8 bytes leftover after parsing attributes in process `syz.8.9998'. [ 769.666811][ T4210] netlink: 44 bytes leftover after parsing attributes in process `syz.8.9998'. [ 769.781473][ T4215] loop6: detected capacity change from 0 to 8192 [ 769.828893][ T4215] loop6: p2 p3 p4 [ 769.839883][ T4215] loop6: p2 start 452985600 is beyond EOD, truncated [ 769.846668][ T4215] loop6: p3 size 33554432 extends beyond EOD, truncated [ 769.888947][ T4220] netlink: 36 bytes leftover after parsing attributes in process `syz.2.10002'. [ 769.898074][ T4220] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10002'. [ 769.907204][ T4220] netlink: 36 bytes leftover after parsing attributes in process `syz.2.10002'. [ 769.920018][ T4220] netlink: 36 bytes leftover after parsing attributes in process `syz.2.10002'. [ 769.929422][ T4215] loop6: p4 start 8388607 is beyond EOD, truncated [ 769.939059][ T4221] siw: device registration error -23 [ 770.381247][T31311] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 770.571327][ T4251] loop0: detected capacity change from 0 to 1024 [ 770.578502][ T4251] EXT4-fs: Ignoring removed i_version option [ 770.588259][ T4251] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 770.881982][ T4255] loop8: detected capacity change from 0 to 128 [ 771.012964][ T4257] audit_log_start: 386 callbacks suppressed [ 771.012979][ T4257] audit: audit_backlog=65 > audit_backlog_limit=64 [ 771.025522][ T4257] audit: audit_lost=21 audit_rate_limit=0 audit_backlog_limit=64 [ 771.033396][ T4257] audit: backlog limit exceeded [ 771.038284][ T29] audit: type=1326 audit(2000000589.739:49694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4256 comm="syz.2.10015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d8a6be969 code=0x7ffc0000 [ 771.061982][ T29] audit: type=1326 audit(2000000589.739:49695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4256 comm="syz.2.10015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d8a6be969 code=0x7ffc0000 [ 771.085684][ T29] audit: type=1326 audit(2000000589.739:49696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4256 comm="syz.2.10015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f7d8a6be969 code=0x7ffc0000 [ 771.109309][ T29] audit: type=1326 audit(2000000589.759:49697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4256 comm="syz.2.10015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d8a6be969 code=0x7ffc0000 [ 771.132942][ T29] audit: type=1326 audit(2000000589.759:49698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4256 comm="syz.2.10015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d8a6be969 code=0x7ffc0000 [ 771.156515][ T29] audit: type=1326 audit(2000000589.759:49699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4256 comm="syz.2.10015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=209 compat=0 ip=0x7f7d8a6be969 code=0x7ffc0000 [ 771.180128][ T29] audit: type=1326 audit(2000000589.759:49700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4256 comm="syz.2.10015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d8a6be969 code=0x7ffc0000 [ 771.725536][ T4251] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.10012: Invalid block bitmap block 0 in block_group 0 [ 771.739716][ T4251] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.10012: Failed to acquire dquot type 0 [ 771.757532][ T4251] EXT4-fs error (device loop0): ext4_free_blocks:6587: comm syz.0.10012: Freeing blocks not in datazone - block = 0, count = 4096 [ 771.773334][ T4251] EXT4-fs error (device loop0): ext4_read_inode_bitmap:139: comm syz.0.10012: Invalid inode bitmap blk 0 in block_group 0 [ 771.787062][ T4251] EXT4-fs error (device loop0) in ext4_free_inode:361: Corrupt filesystem [ 771.797558][ T31] EXT4-fs error (device loop0): ext4_release_dquot:6969: comm kworker/u8:1: Failed to release dquot type 0 [ 771.819076][ T4251] EXT4-fs (loop0): 1 orphan inode deleted [ 772.260083][ T4255] bio_check_eod: 25 callbacks suppressed [ 772.260098][ T4255] syz.8.10014: attempt to access beyond end of device [ 772.260098][ T4255] loop8: rw=2049, sector=129, nr_sectors = 8 limit=128 [ 772.345139][ T4255] syz.8.10014: attempt to access beyond end of device [ 772.345139][ T4255] loop8: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 772.358726][ T4255] syz.8.10014: attempt to access beyond end of device [ 772.358726][ T4255] loop8: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 772.372281][ T4255] syz.8.10014: attempt to access beyond end of device [ 772.372281][ T4255] loop8: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 772.385792][ T4255] syz.8.10014: attempt to access beyond end of device [ 772.385792][ T4255] loop8: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 772.401219][ T4255] syz.8.10014: attempt to access beyond end of device [ 772.401219][ T4255] loop8: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 772.436685][ T4284] loop0: detected capacity change from 0 to 128 [ 772.444031][ T4284] EXT4-fs: Ignoring removed nobh option [ 772.448385][ T4255] syz.8.10014: attempt to access beyond end of device [ 772.448385][ T4255] loop8: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 772.472879][ T4284] ext4 filesystem being mounted at /366/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 772.488717][ T4255] syz.8.10014: attempt to access beyond end of device [ 772.488717][ T4255] loop8: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 772.560374][ T4255] syz.8.10014: attempt to access beyond end of device [ 772.560374][ T4255] loop8: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 772.579099][ T4255] syz.8.10014: attempt to access beyond end of device [ 772.579099][ T4255] loop8: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 772.689195][ T4297] loop8: detected capacity change from 0 to 128 [ 772.700743][ T4297] EXT4-fs: Ignoring removed nobh option [ 772.711738][ T4297] ext4 filesystem being mounted at /39/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 772.862220][ T4310] siw: device registration error -23 [ 772.894898][ T4305] loop2: detected capacity change from 0 to 8192 [ 772.921998][ T4305] loop2: p2 p3 p4 [ 772.926050][ T4305] loop2: p2 start 452985600 is beyond EOD, truncated [ 772.933266][ T4305] loop2: p3 size 33554432 extends beyond EOD, truncated [ 772.942492][ T4305] loop2: p4 start 8388607 is beyond EOD, truncated [ 773.343927][ T4322] loop2: detected capacity change from 0 to 8192 [ 773.400343][ T4322] loop2: p2 p3 p4 [ 773.414634][ T4322] loop2: p2 start 452985600 is beyond EOD, truncated [ 773.421593][ T4322] loop2: p3 size 33554432 extends beyond EOD, truncated [ 773.442473][ T4322] loop2: p4 start 8388607 is beyond EOD, truncated [ 773.533454][ T4328] loop2: detected capacity change from 0 to 128 [ 773.558245][ T4328] EXT4-fs: Ignoring removed nobh option [ 773.584368][ T4328] ext4 filesystem being mounted at /379/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 773.617030][ T4333] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 773.675187][ T4341] loop7: detected capacity change from 0 to 512 [ 773.706751][ T4341] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 773.721255][ T4345] loop2: detected capacity change from 0 to 128 [ 773.727711][ T4345] EXT4-fs: Ignoring removed nobh option [ 773.779799][ T4341] EXT4-fs (loop7): 1 truncate cleaned up [ 773.781208][ T4345] ext4 filesystem being mounted at /381/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 774.010755][ T4356] loop8: detected capacity change from 0 to 128 [ 774.017267][ T4356] EXT4-fs: Ignoring removed nobh option [ 774.028130][ T4356] ext4 filesystem being mounted at /42/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 774.379387][ T4360] loop0: detected capacity change from 0 to 8192 [ 774.419475][ T4360] loop0: p2 p3 p4 [ 774.423404][ T4360] loop0: p2 start 452985600 is beyond EOD, truncated [ 774.430141][ T4360] loop0: p3 size 33554432 extends beyond EOD, truncated [ 774.442619][ T4360] loop0: p4 start 8388607 is beyond EOD, truncated [ 774.538694][ T4373] siw: device registration error -23 [ 774.767509][ T4383] loop0: detected capacity change from 0 to 512 [ 774.882187][ T4385] loop7: detected capacity change from 0 to 128 [ 774.925824][ T4385] EXT4-fs: Ignoring removed nobh option [ 774.938544][ T4383] EXT4-fs error (device loop0): ext4_orphan_get:1393: inode #15: comm syz.0.10057: iget: bad i_size value: 38620345925642 [ 774.953258][ T4383] EXT4-fs error (device loop0): ext4_orphan_get:1398: comm syz.0.10057: couldn't read orphan inode 15 (err -117) [ 774.998238][ T4385] ext4 filesystem being mounted at /505/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 775.155287][ T4391] loop8: detected capacity change from 0 to 2048 [ 775.199527][ T4391] loop8: p1 < > p4 [ 775.223749][ T4391] loop8: p4 size 8388608 extends beyond EOD, truncated [ 775.665034][ T4408] __nla_validate_parse: 3 callbacks suppressed [ 775.665050][ T4408] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10065'. [ 775.782856][ T4410] netlink: 12 bytes leftover after parsing attributes in process `syz.8.10066'. [ 776.100399][ T4419] loop0: detected capacity change from 0 to 128 [ 776.106973][ T4419] EXT4-fs: Ignoring removed nobh option [ 776.126958][ T4417] loop2: detected capacity change from 0 to 8192 [ 776.137062][ T4419] ext4 filesystem being mounted at /374/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 776.168535][ T29] kauditd_printk_skb: 77 callbacks suppressed [ 776.168553][ T29] audit: type=1326 audit(2000000594.979:49775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4421 comm="syz.8.10071" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c7a6de969 code=0x7ffc0000 [ 776.179361][ T4417] loop2: p2 p3 p4 [ 776.198522][ T29] audit: type=1326 audit(2000000594.979:49776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4421 comm="syz.8.10071" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c7a6de969 code=0x7ffc0000 [ 776.210733][ T4422] netlink: 36 bytes leftover after parsing attributes in process `syz.8.10071'. [ 776.225625][ T29] audit: type=1326 audit(2000000595.019:49777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4421 comm="syz.8.10071" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3c7a6de969 code=0x7ffc0000 [ 776.234623][ T4422] netlink: 16 bytes leftover after parsing attributes in process `syz.8.10071'. [ 776.258048][ T29] audit: type=1326 audit(2000000595.019:49778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4421 comm="syz.8.10071" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c7a6de969 code=0x7ffc0000 [ 776.267102][ T4422] netlink: 36 bytes leftover after parsing attributes in process `syz.8.10071'. [ 776.299860][ T29] audit: type=1326 audit(2000000595.019:49779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4421 comm="syz.8.10071" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c7a6de969 code=0x7ffc0000 [ 776.323552][ T29] audit: type=1326 audit(2000000595.019:49780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4421 comm="syz.8.10071" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3c7a6de969 code=0x7ffc0000 [ 776.347029][ T29] audit: type=1326 audit(2000000595.019:49781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4421 comm="syz.8.10071" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c7a6de969 code=0x7ffc0000 [ 776.370654][ T29] audit: type=1326 audit(2000000595.019:49782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4421 comm="syz.8.10071" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3c7a6de969 code=0x7ffc0000 [ 776.394205][ T29] audit: type=1326 audit(2000000595.019:49783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4421 comm="syz.8.10071" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c7a6de969 code=0x7ffc0000 [ 776.417842][ T29] audit: type=1326 audit(2000000595.019:49784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4421 comm="syz.8.10071" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f3c7a6de969 code=0x7ffc0000 [ 776.449002][ T4417] loop2: p2 start 452985600 is beyond EOD, truncated [ 776.455808][ T4417] loop2: p3 size 33554432 extends beyond EOD, truncated [ 776.463086][ T4422] netlink: 36 bytes leftover after parsing attributes in process `syz.8.10071'. [ 776.499777][ T4417] loop2: p4 start 8388607 is beyond EOD, truncated [ 776.509487][ T4429] loop8: detected capacity change from 0 to 128 [ 776.516002][ T4429] EXT4-fs: Ignoring removed nobh option [ 776.524904][ T4429] ext4 filesystem being mounted at /48/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 776.635891][ T4434] loop8: detected capacity change from 0 to 2048 [ 776.659329][ T4434] loop8: p1 < > p4 [ 776.663561][ T4434] loop8: p4 size 8388608 extends beyond EOD, truncated [ 776.809222][ T4442] loop8: detected capacity change from 0 to 8192 [ 776.860808][ T4442] loop8: p2 p3 p4 [ 776.864867][ T4442] loop8: p2 start 452985600 is beyond EOD, truncated [ 776.871671][ T4442] loop8: p3 size 33554432 extends beyond EOD, truncated [ 776.879089][ T4442] loop8: p4 start 8388607 is beyond EOD, truncated [ 777.103056][ T4460] siw: device registration error -23 [ 777.483152][ T4465] netlink: 36 bytes leftover after parsing attributes in process `syz.7.10082'. [ 777.492407][ T4465] netlink: 16 bytes leftover after parsing attributes in process `syz.7.10082'. [ 777.501588][ T4465] netlink: 36 bytes leftover after parsing attributes in process `syz.7.10082'. [ 777.510786][ T4465] netlink: 36 bytes leftover after parsing attributes in process `syz.7.10082'. [ 777.601151][ T4473] loop7: detected capacity change from 0 to 8192 [ 777.628832][ T4473] loop7: p2 p3 p4 [ 777.632729][ T4473] loop7: p2 start 452985600 is beyond EOD, truncated [ 777.639466][ T4473] loop7: p3 size 33554432 extends beyond EOD, truncated [ 777.646785][ T4473] loop7: p4 start 8388607 is beyond EOD, truncated [ 778.002534][ T4496] loop8: detected capacity change from 0 to 512 [ 778.022438][ T4496] EXT4-fs error (device loop8): ext4_orphan_get:1393: inode #15: comm syz.8.10089: iget: bad i_size value: 38620345925642 [ 778.118443][ T4496] EXT4-fs error (device loop8): ext4_orphan_get:1398: comm syz.8.10089: couldn't read orphan inode 15 (err -117) [ 778.417132][ T4516] loop2: detected capacity change from 0 to 8192 [ 778.430746][ T4518] bond0: entered promiscuous mode [ 778.436042][ T4518] 8021q: adding VLAN 0 to HW filter on device bond0 [ 778.448988][ T4516] loop2: p2 p3 p4 [ 778.452868][ T4516] loop2: p2 start 452985600 is beyond EOD, truncated [ 778.459620][ T4516] loop2: p3 size 33554432 extends beyond EOD, truncated [ 778.468947][ T4516] loop2: p4 start 8388607 is beyond EOD, truncated [ 778.479069][ T4525] FAULT_INJECTION: forcing a failure. [ 778.479069][ T4525] name failslab, interval 1, probability 0, space 0, times 0 [ 778.491934][ T4525] CPU: 1 UID: 0 PID: 4525 Comm: syz.0.10099 Not tainted 6.15.0-syzkaller-11121-gfe4281644c62 #0 PREEMPT(voluntary) [ 778.492037][ T4525] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 778.492052][ T4525] Call Trace: [ 778.492059][ T4525] [ 778.492067][ T4525] __dump_stack+0x1d/0x30 [ 778.492168][ T4525] dump_stack_lvl+0xe8/0x140 [ 778.492190][ T4525] dump_stack+0x15/0x1b [ 778.492215][ T4525] should_fail_ex+0x265/0x280 [ 778.492239][ T4525] should_failslab+0x8c/0xb0 [ 778.492316][ T4525] kmem_cache_alloc_node_noprof+0x57/0x320 [ 778.492361][ T4525] ? __alloc_skb+0x101/0x320 [ 778.492389][ T4525] __alloc_skb+0x101/0x320 [ 778.492411][ T4525] ? audit_log_start+0x365/0x6c0 [ 778.492473][ T4525] audit_log_start+0x380/0x6c0 [ 778.492507][ T4525] audit_seccomp+0x48/0x100 [ 778.492537][ T4525] ? __seccomp_filter+0x68c/0x10d0 [ 778.492609][ T4525] __seccomp_filter+0x69d/0x10d0 [ 778.492637][ T4525] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 778.492700][ T4525] ? vfs_write+0x75e/0x8e0 [ 778.492725][ T4525] ? __rcu_read_unlock+0x4f/0x70 [ 778.492747][ T4525] ? __fget_files+0x184/0x1c0 [ 778.492773][ T4525] __secure_computing+0x82/0x150 [ 778.492842][ T4525] syscall_trace_enter+0xcf/0x1e0 [ 778.492874][ T4525] do_syscall_64+0xac/0x200 [ 778.492904][ T4525] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 778.492933][ T4525] ? clear_bhb_loop+0x40/0x90 [ 778.492959][ T4525] ? clear_bhb_loop+0x40/0x90 [ 778.492984][ T4525] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 778.493048][ T4525] RIP: 0033:0x7fbb22e7e969 [ 778.493066][ T4525] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 778.493085][ T4525] RSP: 002b:00007fbb214e7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000120 [ 778.493102][ T4525] RAX: ffffffffffffffda RBX: 00007fbb230a5fa0 RCX: 00007fbb22e7e969 [ 778.493207][ T4525] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffffffffffff [ 778.493281][ T4525] RBP: 00007fbb214e7090 R08: 0000000000000000 R09: 0000000000000000 [ 778.493293][ T4525] R10: 0000000000180800 R11: 0000000000000246 R12: 0000000000000001 [ 778.493372][ T4525] R13: 0000000000000000 R14: 00007fbb230a5fa0 R15: 00007ffde4e3f0c8 [ 778.493396][ T4525] [ 778.740727][ T4531] loop0: detected capacity change from 0 to 128 [ 778.747550][ T4531] EXT4-fs: Ignoring removed nobh option [ 778.784516][ T4531] ext4 filesystem being mounted at /381/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 778.814936][ T4536] loop8: detected capacity change from 0 to 128 [ 779.027199][ T4536] bio_check_eod: 73 callbacks suppressed [ 779.027219][ T4536] syz.8.10102: attempt to access beyond end of device [ 779.027219][ T4536] loop8: rw=2049, sector=129, nr_sectors = 8 limit=128 [ 779.067454][ T4536] syz.8.10102: attempt to access beyond end of device [ 779.067454][ T4536] loop8: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 779.081313][ T4536] syz.8.10102: attempt to access beyond end of device [ 779.081313][ T4536] loop8: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 779.095281][ T4536] syz.8.10102: attempt to access beyond end of device [ 779.095281][ T4536] loop8: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 779.109169][ T4536] syz.8.10102: attempt to access beyond end of device [ 779.109169][ T4536] loop8: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 779.129371][ T4536] syz.8.10102: attempt to access beyond end of device [ 779.129371][ T4536] loop8: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 779.143290][ T4536] syz.8.10102: attempt to access beyond end of device [ 779.143290][ T4536] loop8: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 779.157234][ T4536] syz.8.10102: attempt to access beyond end of device [ 779.157234][ T4536] loop8: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 779.171797][ T4536] syz.8.10102: attempt to access beyond end of device [ 779.171797][ T4536] loop8: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 779.186059][ T4536] syz.8.10102: attempt to access beyond end of device [ 779.186059][ T4536] loop8: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 779.532340][ T4558] loop2: detected capacity change from 0 to 1024 [ 779.539339][ T4558] EXT4-fs: Ignoring removed i_version option [ 779.547220][ T4558] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 779.601522][ T4558] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.10108: Invalid block bitmap block 0 in block_group 0 [ 779.616747][ T4558] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.10108: Failed to acquire dquot type 0 [ 779.628770][ T4558] EXT4-fs error (device loop2): ext4_free_blocks:6587: comm syz.2.10108: Freeing blocks not in datazone - block = 0, count = 4096 [ 779.642779][ T4558] EXT4-fs error (device loop2): ext4_read_inode_bitmap:139: comm syz.2.10108: Invalid inode bitmap blk 0 in block_group 0 [ 779.655959][ T4558] EXT4-fs error (device loop2) in ext4_free_inode:361: Corrupt filesystem [ 779.664738][ T4558] EXT4-fs (loop2): 1 orphan inode deleted [ 779.671346][ T4558] EXT4-fs mount: 25 callbacks suppressed [ 779.671364][ T4558] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 779.690882][ T31] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:1: Failed to release dquot type 0 [ 780.444802][ T4568] loop7: detected capacity change from 0 to 512 [ 780.989761][ T4568] EXT4-fs error (device loop7): ext4_orphan_get:1393: inode #15: comm syz.7.10112: iget: bad i_size value: 38620345925642 [ 781.004407][ T4568] EXT4-fs error (device loop7): ext4_orphan_get:1398: comm syz.7.10112: couldn't read orphan inode 15 (err -117) [ 781.018749][ T4568] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 781.206116][T31311] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 781.763808][T27654] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 781.774365][T30830] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 781.811826][ T29] kauditd_printk_skb: 330 callbacks suppressed [ 781.811844][ T29] audit: type=1326 audit(2000000600.629:50110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4573 comm="syz.6.10115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f228bdde969 code=0x7ffc0000 [ 781.873515][ T29] audit: type=1326 audit(2000000600.659:50111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4573 comm="syz.6.10115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f228bdde969 code=0x7ffc0000 [ 781.897736][ T29] audit: type=1326 audit(2000000600.659:50112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4573 comm="syz.6.10115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f228bdde969 code=0x7ffc0000 [ 781.921426][ T29] audit: type=1326 audit(2000000600.669:50113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4573 comm="syz.6.10115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f228bdde969 code=0x7ffc0000 [ 781.945111][ T29] audit: type=1326 audit(2000000600.669:50114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4573 comm="syz.6.10115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f228bdde969 code=0x7ffc0000 [ 782.039908][ T4587] loop2: detected capacity change from 0 to 128 [ 782.874960][ T4594] loop7: detected capacity change from 0 to 1024 [ 782.882401][ T4594] EXT4-fs: Ignoring removed i_version option [ 782.953770][ T4587] EXT4-fs: Ignoring removed nobh option [ 783.032171][ T4593] loop0: detected capacity change from 0 to 1024 [ 783.039743][ T4593] EXT4-fs: Ignoring removed i_version option [ 783.248936][ T4587] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 783.298687][ T4594] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 784.023338][ T4587] ext4 filesystem being mounted at /391/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 784.108836][ T4593] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 785.377533][ T4601] siw: device registration error -23 [ 785.398936][ T4594] EXT4-fs: error -4 creating inode table initialization thread [ 785.406614][ T4594] EXT4-fs (loop7): mount failed [ 785.551046][ T4593] EXT4-fs: error -4 creating inode table initialization thread [ 785.558726][ T4593] EXT4-fs (loop0): mount failed [ 785.577008][ T4617] loop6: detected capacity change from 0 to 128 [ 785.595822][ T4612] loop8: detected capacity change from 0 to 128 [ 785.608011][ T4617] EXT4-fs: Ignoring removed nobh option [ 785.698921][ T29] audit: type=1400 audit(2000000604.509:50115): avc: denied { create } for pid=4618 comm="syz.0.10125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 785.719009][ T29] audit: type=1400 audit(2000000604.509:50116): avc: denied { sys_admin } for pid=4618 comm="syz.0.10125" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 785.759245][T30830] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 785.768930][ T4617] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 785.820094][ T4617] ext4 filesystem being mounted at /48/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 785.828636][ T29] audit: type=1326 audit(2000000604.609:50117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4620 comm="syz.7.10124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf7176e969 code=0x7ffc0000 [ 785.854045][ T29] audit: type=1326 audit(2000000604.609:50118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4620 comm="syz.7.10124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf7176e969 code=0x7ffc0000 [ 785.877704][ T29] audit: type=1326 audit(2000000604.609:50119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4620 comm="syz.7.10124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=254 compat=0 ip=0x7faf7176e969 code=0x7ffc0000 [ 785.915629][ T4632] loop7: detected capacity change from 0 to 512 [ 786.032797][ T4632] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 786.042583][ T3772] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 786.064861][ T4632] EXT4-fs error (device loop7): ext4_get_branch:178: inode #11: block 4294967295: comm syz.7.10128: invalid block [ 786.188195][ T4632] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #11: comm syz.7.10128: invalid indirect mapped block 4294967295 (level 1) [ 786.209860][ T4632] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #11: comm syz.7.10128: invalid indirect mapped block 4294967295 (level 1) [ 786.248426][ T4632] EXT4-fs (loop7): 2 truncates cleaned up [ 786.283185][ T4632] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 786.313823][ T4647] loop6: detected capacity change from 0 to 512 [ 786.351785][ T4647] EXT4-fs error (device loop6): ext4_orphan_get:1393: inode #15: comm syz.6.10130: iget: bad i_size value: 38620345925642 [ 786.365301][ T4647] EXT4-fs error (device loop6): ext4_orphan_get:1398: comm syz.6.10130: couldn't read orphan inode 15 (err -117) [ 786.382827][ T4647] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 786.400768][ T4651] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=4651 comm=syz.7.10128 [ 786.504327][T27654] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 786.787965][ T4649] loop0: detected capacity change from 0 to 8192 [ 786.871876][ T4649] loop0: p2 p3 p4 [ 786.892935][ T4649] loop0: p2 start 452985600 is beyond EOD, truncated [ 786.899799][ T4649] loop0: p3 size 33554432 extends beyond EOD, truncated [ 786.916882][ T4658] loop8: detected capacity change from 0 to 8192 [ 786.980976][ T3772] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 787.041299][ T4649] loop0: p4 start 8388607 is beyond EOD, truncated [ 787.061216][ T4658] loop8: p2 p3 p4 [ 787.065061][ T4658] loop8: p2 start 452985600 is beyond EOD, truncated [ 787.071855][ T4658] loop8: p3 size 33554432 extends beyond EOD, truncated [ 787.089353][ T4658] loop8: p4 start 8388607 is beyond EOD, truncated [ 787.216169][ T4671] loop7: detected capacity change from 0 to 1024 [ 787.222859][ T4671] EXT4-fs: Ignoring removed i_version option [ 787.230759][ T4671] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 787.274912][ T4671] EXT4-fs error (device loop7): ext4_read_block_bitmap_nowait:483: comm syz.7.10135: Invalid block bitmap block 0 in block_group 0 [ 787.290406][ T4671] __quota_error: 106 callbacks suppressed [ 787.290420][ T4671] Quota error (device loop7): write_blk: dquota write failed [ 787.303668][ T4671] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota [ 787.313678][ T4671] EXT4-fs error (device loop7): ext4_acquire_dquot:6933: comm syz.7.10135: Failed to acquire dquot type 0 [ 787.326254][ T4671] EXT4-fs error (device loop7): ext4_free_blocks:6587: comm syz.7.10135: Freeing blocks not in datazone - block = 0, count = 4096 [ 787.340962][ T4671] EXT4-fs error (device loop7): ext4_read_inode_bitmap:139: comm syz.7.10135: Invalid inode bitmap blk 0 in block_group 0 [ 787.354700][ T4671] EXT4-fs error (device loop7) in ext4_free_inode:361: Corrupt filesystem [ 787.363533][ T4671] EXT4-fs (loop7): 1 orphan inode deleted [ 787.369893][ T4671] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 787.382553][ T408] Quota error (device loop7): do_check_range: Getting block 0 out of range 1-8 [ 787.391623][ T408] EXT4-fs error (device loop7): ext4_release_dquot:6969: comm kworker/u8:6: Failed to release dquot type 0 [ 787.868801][ T29] audit: type=1326 audit(2000000606.639:50226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4675 comm="syz.0.10138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb22e7e969 code=0x7ffc0000 [ 787.892572][ T29] audit: type=1326 audit(2000000606.639:50227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4675 comm="syz.0.10138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb22e7e969 code=0x7ffc0000 [ 787.916230][ T29] audit: type=1326 audit(2000000606.639:50228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4675 comm="syz.0.10138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbb22e7e969 code=0x7ffc0000 [ 787.939871][ T29] audit: type=1326 audit(2000000606.639:50229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4675 comm="syz.0.10138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb22e7e969 code=0x7ffc0000 [ 787.963539][ T29] audit: type=1326 audit(2000000606.639:50230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4675 comm="syz.0.10138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb22e7e969 code=0x7ffc0000 [ 787.987350][ T29] audit: type=1326 audit(2000000606.639:50231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4675 comm="syz.0.10138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbb22e7e969 code=0x7ffc0000 [ 788.011084][ T29] audit: type=1326 audit(2000000606.639:50232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4675 comm="syz.0.10138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb22e7e969 code=0x7ffc0000 [ 788.492975][ T4683] loop2: detected capacity change from 0 to 2048 [ 788.604113][ T4683] Alternate GPT is invalid, using primary GPT. [ 788.610585][ T4683] loop2: p1 p2 p3 [ 788.835325][ T4703] __nla_validate_parse: 4 callbacks suppressed [ 788.835344][ T4703] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10144'. [ 788.874282][ T4705] netlink: 4 bytes leftover after parsing attributes in process `syz.6.10145'. [ 788.887934][T27654] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 788.943624][ T4697] siw: device registration error -23 [ 788.954078][ T4707] loop7: detected capacity change from 0 to 512 [ 788.981517][ T4707] EXT4-fs: Ignoring removed oldalloc option [ 788.994146][ T4707] EXT4-fs (loop7): 1 truncate cleaned up [ 789.009154][ T4707] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 789.058431][ T4714] loop2: detected capacity change from 0 to 128 [ 789.140460][ T4714] EXT4-fs: Ignoring removed nobh option [ 789.149919][T27654] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 789.160596][ T4714] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 789.200582][ T4714] ext4 filesystem being mounted at /395/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 789.235674][ T4720] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4720 comm=syz.7.10150 [ 789.774813][ T4724] ALSA: seq fatal error: cannot create timer (-19) [ 790.028333][ T4743] FAULT_INJECTION: forcing a failure. [ 790.028333][ T4743] name failslab, interval 1, probability 0, space 0, times 0 [ 790.041136][ T4743] CPU: 1 UID: 0 PID: 4743 Comm: syz.6.10156 Not tainted 6.15.0-syzkaller-11121-gfe4281644c62 #0 PREEMPT(voluntary) [ 790.041293][ T4743] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 790.041356][ T4743] Call Trace: [ 790.041363][ T4743] [ 790.041374][ T4743] __dump_stack+0x1d/0x30 [ 790.041429][ T4743] dump_stack_lvl+0xe8/0x140 [ 790.041550][ T4743] dump_stack+0x15/0x1b [ 790.041570][ T4743] should_fail_ex+0x265/0x280 [ 790.041597][ T4743] should_failslab+0x8c/0xb0 [ 790.041682][ T4743] __kmalloc_noprof+0xa5/0x3e0 [ 790.041715][ T4743] ? ethnl_default_doit+0x109/0x8f0 [ 790.041746][ T4743] ethnl_default_doit+0x109/0x8f0 [ 790.041776][ T4743] ? genl_family_rcv_msg_attrs_parse+0x13b/0x190 [ 790.041937][ T4743] ? genl_family_rcv_msg_attrs_parse+0x184/0x190 [ 790.041970][ T4743] genl_family_rcv_msg_doit+0x143/0x1b0 [ 790.042000][ T4743] genl_rcv_msg+0x422/0x460 [ 790.042024][ T4743] ? __pfx_ethnl_default_doit+0x10/0x10 [ 790.042127][ T4743] netlink_rcv_skb+0x123/0x220 [ 790.042232][ T4743] ? __pfx_genl_rcv_msg+0x10/0x10 [ 790.042265][ T4743] genl_rcv+0x28/0x40 [ 790.042287][ T4743] netlink_unicast+0x5a1/0x670 [ 790.042397][ T4743] netlink_sendmsg+0x58b/0x6b0 [ 790.042532][ T4743] ? __pfx_netlink_sendmsg+0x10/0x10 [ 790.042570][ T4743] __sock_sendmsg+0x142/0x180 [ 790.042618][ T4743] ____sys_sendmsg+0x31e/0x4e0 [ 790.042649][ T4743] ___sys_sendmsg+0x17b/0x1d0 [ 790.042772][ T4743] __x64_sys_sendmsg+0xd4/0x160 [ 790.042813][ T4743] x64_sys_call+0x2999/0x2fb0 [ 790.042834][ T4743] do_syscall_64+0xd2/0x200 [ 790.042862][ T4743] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 790.042971][ T4743] ? clear_bhb_loop+0x40/0x90 [ 790.042999][ T4743] ? clear_bhb_loop+0x40/0x90 [ 790.043126][ T4743] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 790.043148][ T4743] RIP: 0033:0x7f228bdde969 [ 790.043173][ T4743] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 790.043197][ T4743] RSP: 002b:00007f228a447038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 790.043222][ T4743] RAX: ffffffffffffffda RBX: 00007f228c005fa0 RCX: 00007f228bdde969 [ 790.043312][ T4743] RDX: 0000000000000010 RSI: 00002000000003c0 RDI: 0000000000000006 [ 790.043326][ T4743] RBP: 00007f228a447090 R08: 0000000000000000 R09: 0000000000000000 [ 790.043412][ T4743] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 790.043429][ T4743] R13: 0000000000000000 R14: 00007f228c005fa0 R15: 00007fffa9529aa8 [ 790.043506][ T4743] [ 790.362715][ T4744] loop8: detected capacity change from 0 to 512 [ 790.406010][ T4744] EXT4-fs error (device loop8): ext4_orphan_get:1393: inode #15: comm syz.8.10155: iget: bad i_size value: 38620345925642 [ 790.422772][ T4744] EXT4-fs error (device loop8): ext4_orphan_get:1398: comm syz.8.10155: couldn't read orphan inode 15 (err -117) [ 790.436096][ T4744] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 790.512555][ T4747] loop6: detected capacity change from 0 to 128 [ 790.533005][ T4747] EXT4-fs: Ignoring removed nobh option [ 790.535217][T30830] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 790.542388][ T4747] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 790.560083][ T4747] ext4 filesystem being mounted at /58/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 790.578522][ T4752] netlink: 'syz.2.10159': attribute type 1 has an invalid length. [ 790.586431][ T4752] netlink: 224 bytes leftover after parsing attributes in process `syz.2.10159'. [ 790.623116][ T4756] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1, syncid = 33554432, id = 0 [ 790.634173][ T3772] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 790.654069][ T4761] FAULT_INJECTION: forcing a failure. [ 790.654069][ T4761] name failslab, interval 1, probability 0, space 0, times 0 [ 790.666759][ T4761] CPU: 1 UID: 0 PID: 4761 Comm: syz.2.10162 Not tainted 6.15.0-syzkaller-11121-gfe4281644c62 #0 PREEMPT(voluntary) [ 790.666785][ T4761] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 790.666849][ T4761] Call Trace: [ 790.666855][ T4761] [ 790.666861][ T4761] __dump_stack+0x1d/0x30 [ 790.666881][ T4761] dump_stack_lvl+0xe8/0x140 [ 790.666901][ T4761] dump_stack+0x15/0x1b [ 790.666916][ T4761] should_fail_ex+0x265/0x280 [ 790.666937][ T4761] should_failslab+0x8c/0xb0 [ 790.666961][ T4761] kmem_cache_alloc_node_noprof+0x57/0x320 [ 790.667021][ T4761] ? __alloc_skb+0x101/0x320 [ 790.667047][ T4761] __alloc_skb+0x101/0x320 [ 790.667072][ T4761] netlink_ack+0xfd/0x500 [ 790.667123][ T4761] netlink_rcv_skb+0x192/0x220 [ 790.667181][ T4761] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 790.667310][ T4761] rtnetlink_rcv+0x1c/0x30 [ 790.667327][ T4761] netlink_unicast+0x5a1/0x670 [ 790.667402][ T4761] netlink_sendmsg+0x58b/0x6b0 [ 790.667436][ T4761] ? __pfx_netlink_sendmsg+0x10/0x10 [ 790.667467][ T4761] __sock_sendmsg+0x142/0x180 [ 790.667527][ T4761] ____sys_sendmsg+0x31e/0x4e0 [ 790.667561][ T4761] ___sys_sendmsg+0x17b/0x1d0 [ 790.667660][ T4761] __x64_sys_sendmsg+0xd4/0x160 [ 790.667694][ T4761] x64_sys_call+0x2999/0x2fb0 [ 790.667715][ T4761] do_syscall_64+0xd2/0x200 [ 790.667761][ T4761] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 790.667852][ T4761] ? clear_bhb_loop+0x40/0x90 [ 790.667874][ T4761] ? clear_bhb_loop+0x40/0x90 [ 790.667958][ T4761] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 790.668022][ T4761] RIP: 0033:0x7f7d8a6be969 [ 790.668038][ T4761] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 790.668081][ T4761] RSP: 002b:00007f7d88d27038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 790.668103][ T4761] RAX: ffffffffffffffda RBX: 00007f7d8a8e5fa0 RCX: 00007f7d8a6be969 [ 790.668117][ T4761] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000005 [ 790.668130][ T4761] RBP: 00007f7d88d27090 R08: 0000000000000000 R09: 0000000000000000 [ 790.668143][ T4761] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 790.668156][ T4761] R13: 0000000000000000 R14: 00007f7d8a8e5fa0 R15: 00007ffd2b3212a8 [ 790.668199][ T4761] [ 790.946963][ T3585] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 791.096319][ T4778] loop0: detected capacity change from 0 to 1024 [ 791.114870][ T4778] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 791.149554][ T4784] netlink: 'syz.6.10171': attribute type 1 has an invalid length. [ 791.157445][ T4784] netlink: 224 bytes leftover after parsing attributes in process `syz.6.10171'. [ 791.222256][ T4786] loop6: detected capacity change from 0 to 8192 [ 791.234461][ T4787] loop2: detected capacity change from 0 to 1024 [ 791.277716][ T4791] bridge0: entered promiscuous mode [ 791.293869][ T4791] bridge0: port 3(macsec1) entered blocking state [ 791.300241][ T4787] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 791.300426][ T4791] bridge0: port 3(macsec1) entered disabled state [ 791.321102][ T4791] macsec1: entered allmulticast mode [ 791.326425][ T4791] bridge0: entered allmulticast mode [ 791.342189][ T4786] loop6: p2 p3 p4 [ 791.346287][ T4786] loop6: p2 start 452985600 is beyond EOD, truncated [ 791.346590][ T4791] macsec1: left allmulticast mode [ 791.353020][ T4786] loop6: p3 size 33554432 extends beyond EOD, [ 791.358119][ T4791] bridge0: left allmulticast mode [ 791.369493][ T4786] truncated [ 791.442418][T30830] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 791.480526][ T4786] loop6: p4 start 8388607 is beyond EOD, truncated [ 791.488137][ T4791] bridge0: left promiscuous mode [ 791.647406][ T4801] loop7: detected capacity change from 0 to 512 [ 792.853717][ T4804] loop2: detected capacity change from 0 to 512 [ 793.352208][ T4801] EXT4-fs error (device loop7): ext4_orphan_get:1393: inode #15: comm syz.7.10175: iget: bad i_size value: 38620345925642 [ 793.365290][ T4801] EXT4-fs error (device loop7): ext4_orphan_get:1398: comm syz.7.10175: couldn't read orphan inode 15 (err -117) [ 793.401134][ T4804] EXT4-fs error (device loop2): ext4_orphan_get:1393: inode #15: comm syz.2.10174: iget: bad i_size value: 38620345925642 [ 793.416939][ T4804] EXT4-fs error (device loop2): ext4_orphan_get:1398: comm syz.2.10174: couldn't read orphan inode 15 (err -117) [ 793.429747][ T4804] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 793.439337][ T4801] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 793.495302][T31311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 793.514656][ T29] kauditd_printk_skb: 184 callbacks suppressed [ 793.514672][ T29] audit: type=1326 audit(2000000612.329:50417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4811 comm="syz.0.10178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb22e7e969 code=0x7ffc0000 [ 793.535470][ T4812] netlink: 36 bytes leftover after parsing attributes in process `syz.0.10178'. [ 793.544766][ T29] audit: type=1326 audit(2000000612.339:50418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4811 comm="syz.0.10178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fbb22e7e969 code=0x7ffc0000 [ 793.553687][ T4812] netlink: 16 bytes leftover after parsing attributes in process `syz.0.10178'. [ 793.577341][ T29] audit: type=1326 audit(2000000612.339:50419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4811 comm="syz.0.10178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb22e7e969 code=0x7ffc0000 [ 793.586225][ T4812] netlink: 36 bytes leftover after parsing attributes in process `syz.0.10178'. [ 793.610964][ T4812] netlink: 36 bytes leftover after parsing attributes in process `syz.0.10178'. [ 793.619409][ T29] audit: type=1326 audit(2000000612.339:50420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4811 comm="syz.0.10178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb22e7e969 code=0x7ffc0000 [ 793.619446][ T29] audit: type=1326 audit(2000000612.339:50421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4811 comm="syz.0.10178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fbb22e7e969 code=0x7ffc0000 [ 793.675858][ T29] audit: type=1326 audit(2000000612.339:50422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4811 comm="syz.0.10178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb22e7e969 code=0x7ffc0000 [ 793.680653][ T4814] loop0: detected capacity change from 0 to 164 [ 793.699529][ T29] audit: type=1326 audit(2000000612.339:50423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4811 comm="syz.0.10178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb22e7e969 code=0x7ffc0000 [ 793.699568][ T29] audit: type=1326 audit(2000000612.339:50424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4811 comm="syz.0.10178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fbb22e7e969 code=0x7ffc0000 [ 793.729470][ T29] audit: type=1326 audit(2000000612.339:50425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4811 comm="syz.0.10178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb22e7e969 code=0x7ffc0000 [ 793.729570][ T29] audit: type=1326 audit(2000000612.339:50426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4811 comm="syz.0.10178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fbb22e7e969 code=0x7ffc0000 [ 793.849463][T27654] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 793.862891][ T4814] ISOFS: unable to read i-node block [ 793.868217][ T4814] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 793.878363][ T4814] isofs_fill_super: get root inode failed [ 793.885238][T30830] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 793.918000][ T4825] loop2: detected capacity change from 0 to 1024 [ 793.932483][ T4825] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 793.945089][ T4814] loop0: detected capacity change from 0 to 128 [ 793.951824][ T4814] vfat: Bad value for 'gid' [ 793.956365][ T4814] vfat: Bad value for 'gid' [ 793.963862][ T4814] netlink: 256 bytes leftover after parsing attributes in process `syz.0.10179'. [ 794.014645][ T4836] loop8: detected capacity change from 0 to 128 [ 794.022979][ T4836] EXT4-fs: Ignoring removed nobh option [ 794.034162][ T4836] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 794.069056][ T4836] ext4 filesystem being mounted at /71/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 794.122241][ T3585] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 794.131463][ T4842] loop7: detected capacity change from 0 to 8192 [ 794.143613][ T4845] loop0: detected capacity change from 0 to 512 [ 794.152837][ T4845] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 794.163016][ T4842] loop7: p2 p3 p4 [ 794.166970][ T4842] loop7: p2 start 452985600 is beyond EOD, truncated [ 794.173733][ T4842] loop7: p3 size 33554432 extends beyond EOD, truncated [ 794.179918][ T4845] EXT4-fs (loop0): 1 truncate cleaned up [ 794.183048][ T4842] loop7: p4 start 8388607 is beyond EOD, truncated [ 794.187241][ T4845] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 794.224657][T31311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 794.249867][ T4851] netlink: 36 bytes leftover after parsing attributes in process `syz.0.10189'. [ 794.259064][ T4851] netlink: 16 bytes leftover after parsing attributes in process `syz.0.10189'. [ 794.268144][ T4851] netlink: 36 bytes leftover after parsing attributes in process `syz.0.10189'. [ 794.279049][ T4851] netlink: 36 bytes leftover after parsing attributes in process `syz.0.10189'. [ 794.465423][ T4858] xt_hashlimit: max too large, truncated to 1048576 [ 794.486214][ T4858] loop7: detected capacity change from 0 to 2048 [ 794.501728][ T4858] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 794.700417][T27654] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 794.780869][ T4869] siw: device registration error -23 [ 794.933849][ T4872] loop0: detected capacity change from 0 to 512 [ 795.262990][T30830] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 795.295979][ T4872] EXT4-fs error (device loop0): ext4_orphan_get:1393: inode #15: comm syz.0.10193: iget: bad i_size value: 38620345925642 [ 795.320876][ T4872] EXT4-fs error (device loop0): ext4_orphan_get:1398: comm syz.0.10193: couldn't read orphan inode 15 (err -117) [ 795.334914][ T4872] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 795.357273][ T4879] loop7: detected capacity change from 0 to 128 [ 795.376688][ T4879] EXT4-fs: Ignoring removed nobh option [ 795.392576][ T4879] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 795.406161][ T4879] ext4 filesystem being mounted at /538/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 795.492090][ T4884] siw: device registration error -23 [ 795.637873][T31311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 795.685135][ T4894] loop6: detected capacity change from 0 to 8192 [ 795.738477][ T4897] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 795.755076][ T4894] loop6: p2 p3 p4 [ 795.757988][ T4897] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 795.759318][ T4894] loop6: p2 start 452985600 is beyond EOD, truncated [ 795.772037][ T4897] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10203'. [ 795.773284][ T4894] loop6: p3 size 33554432 extends beyond EOD, truncated [ 795.782360][ T4897] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10203'. [ 795.799136][ T4894] loop6: p4 start 8388607 is beyond EOD, truncated [ 795.802373][ T4897] dummy0: entered promiscuous mode [ 795.813577][ T4897] dummy0: left promiscuous mode [ 795.951848][ T4888] ================================================================== [ 795.959985][ T4888] BUG: KCSAN: data-race in __filemap_add_folio / filemap_write_and_wait_range [ 795.968901][ T4888] [ 795.971241][ T4888] read-write to 0xffff88810074cb88 of 8 bytes by task 4879 on cpu 0: [ 795.979376][ T4888] __filemap_add_folio+0x5b9/0x7d0 [ 795.984564][ T4888] filemap_add_folio+0x98/0x1b0 [ 795.989464][ T4888] page_cache_ra_unbounded+0x1f3/0x380 [ 795.994965][ T4888] page_cache_sync_ra+0x687/0x6a0 [ 796.000014][ T4888] filemap_get_pages+0x2d0/0x1150 [ 796.005079][ T4888] filemap_splice_read+0x333/0x6b0 [ 796.010224][ T4888] ext4_file_splice_read+0x8f/0xb0 [ 796.015401][ T4888] splice_direct_to_actor+0x26f/0x680 [ 796.020801][ T4888] do_splice_direct+0xda/0x150 [ 796.025607][ T4888] do_sendfile+0x380/0x650 [ 796.030063][ T4888] __x64_sys_sendfile64+0x105/0x150 [ 796.035286][ T4888] x64_sys_call+0xb39/0x2fb0 [ 796.039921][ T4888] do_syscall_64+0xd2/0x200 [ 796.044506][ T4888] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 796.050424][ T4888] [ 796.052766][ T4888] read to 0xffff88810074cb88 of 8 bytes by task 4888 on cpu 1: [ 796.060351][ T4888] filemap_write_and_wait_range+0x59/0x340 [ 796.066205][ T4888] ext4_file_write_iter+0xe04/0xf00 [ 796.071449][ T4888] iter_file_splice_write+0x5f2/0x970 [ 796.076884][ T4888] direct_splice_actor+0x153/0x2a0 [ 796.082029][ T4888] splice_direct_to_actor+0x30f/0x680 [ 796.087426][ T4888] do_splice_direct+0xda/0x150 [ 796.092259][ T4888] do_sendfile+0x380/0x650 [ 796.096709][ T4888] __x64_sys_sendfile64+0x105/0x150 [ 796.101933][ T4888] x64_sys_call+0xb39/0x2fb0 [ 796.106553][ T4888] do_syscall_64+0xd2/0x200 [ 796.111090][ T4888] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 796.116998][ T4888] [ 796.119326][ T4888] value changed: 0x0000000000000000 -> 0x0000000000000001 [ 796.126452][ T4888] [ 796.128790][ T4888] Reported by Kernel Concurrency Sanitizer on: [ 796.134945][ T4888] CPU: 1 UID: 0 PID: 4888 Comm: syz.7.10199 Not tainted 6.15.0-syzkaller-11121-gfe4281644c62 #0 PREEMPT(voluntary) [ 796.147101][ T4888] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 796.157174][ T4888] ================================================================== [ 796.245771][T27654] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.