last executing test programs: 1m14.449527718s ago: executing program 0 (id=2908): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0xf0) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5412, 0x0, 0x0) fdatasync(r0) 1m14.395345359s ago: executing program 0 (id=2910): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000004c0)={[{@delalloc}, {@nojournal_checksum}, {@barrier_val={'barrier', 0x3d, 0x10002}}, {@dioread_lock}, {@data_err_ignore}, {@mb_optimize_scan}, {@dioread_nolock}, {@nobarrier}, {@abort}, {@user_xattr}, {@norecovery}, {@errors_remount}]}, 0x1, 0x570, &(0x7f00000019c0)="$eJzs3c1rHOUfAPDvbF76+vs1hVJURAI9WNFumsSXCh7qUbRY0HtdkjGUbLoluylNLLQ92IsXKYKIBfHgTe8ei/+Af0VBi0VK0IOXyGxm022zm2zTbXbrfj4w4XlmZvM835l5nn1mn1k2gIE1nv0pRDwfEV8mEYciIsm3DUe+cXx9v9X7V2ayJYm1tY/+TOr7ZfnG/2q87kCeeS4ifvk84tXC5nKryyvzpXI5XczzE7WFixPV5ZUT5xdKc+lcemFqevrUG9NTb7/1ZtdifeXs3998ePu9U18cW/36p7uHbyZxOg7m25rjeALXmjPjMZ4fk5E4/ciOk10orJ8kva4AOzKUt/ORyPqAQzGUt3rgv+9qRKwBAyrR/mFANcYBjXv7Lt0HPzPuvbt+A7Q5/uH1z0Zib/3eaP9q8tCdUXa/O9aF8rMyfv791s1sie59DgGwrWvXI+Lk8PDm/i/J+7+dO9nBPo+Wof+D3XM7G/+81mr8U9gY/0SL8c+BFm13J7Zv/4W7XSimrWz8907L8e/GpNXYUJ77X33MN5J8er6cZn3b/yPieIzsyfJbzeecWr2z1m5b8/gvW7LyG2PBvB53h/c8/JrZUq30JDE3u3c94oWW499k4/wnLc5/djzOdljG0fTWS+22bR//07X2fcTLLc//gxmtZOv5yYn69TDRuCo2++vG0V/blb85/tHYzfiz879/6/jHkub52urjl/Hd3n/Sdtseij86v/5Hk4/r6dF83eVSrbY4GTGafLB5/dSD1zbyjf2z+I8f27r/a3X974uITzqM/8aRH1/sKP4eXP9Z/LOPdf4fP3Hn/c++bVd+Z/3f6/XU8XxNJ/1fpxV8kmMHAAAAAAAA/aYQEQcjKRQ30oVCsbj+fMeR2F8oj60//xGzUf+u7FiMFBoz3YeanoeYzJ+HbeSnHslPR8ThiPhqaF89X5yplGd7HTwAAAAAAAAAAAAAAAAAAAD0iQNtvv+f+W2o17UDnjo/+Q2Da9v2341fegL6kvd/GFzaPwwu7R8Gl/YPg6up/e/pZT2A3ef9HwaX9g+DS/sHAAAAAAAAAAAAAAAAAAAAAAAAAACArjp75ky2rK3evzKT5WcvLS/NVy6dmE2r88WFpZniTGXxYnGuUpkrp8WZysJ2/69cqVycnIqlyxO1tFqbqC6vnFuoLF2onTu/UJpLz6UjuxIVAAAAAAAAAAAAAAAAAAAAPFuqyyvzpXI5XZSQ2FFiuD+qsZ7ILummNVd7XZ+tEn/80BfVaJfodc8EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/8GwAA//9ITzKe") r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000003380)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000006cfa000018120000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xc, &(0x7f0000000200)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3, 0x0, 0xfffffffffffffffe}, 0x18) r4 = socket(0x10, 0x80003, 0x0) write(r4, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000fe0000000000000008000f00fd000000", 0x85) close_range(r4, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x35, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x4c58, 0x10000, 0x0, 0x1, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r5, &(0x7f0000000140)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e20, @broadcast}}, 0x24) sendmmsg(r5, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[{0x18, 0x110, 0x1, '\n'}], 0x18, 0xe000}, 0x5}], 0x1, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000b40)=@delchain={0x3c, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r6, {0xffe0, 0xffe0}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_IPV4_DST={0x8, 0xc, @multicast2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0), &(0x7f0000000140)=ANY=[], 0x841, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x37cc, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ffd, @void, @value}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x300000000000000, 0x0, 0x4004}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) io_uring_setup(0x4b8b, &(0x7f0000000000)={0x0, 0x4258, 0x2000, 0x0, 0x378}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000100), &(0x7f0000000700)=ANY=[@ANYBLOB="00fb8101408a9f9e8755f9a5a4c14af1c37801b23531862360e7c169ccfbb93fc84119b613"], 0x381, 0x2) 1m14.250076691s ago: executing program 0 (id=2916): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r0}, 0x18) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r1 = getpid() syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="dc0300", @ANYBLOB, @ANYRES32=r2], 0x3dc}}, 0x0) r3 = syz_pidfd_open(r1, 0x0) setns(r3, 0x24020000) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) r5 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x402) ioctl$USBDEVFS_ALLOW_SUSPEND(r5, 0x5522) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000500000002"], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect$cdc_ncm(0x5, 0x72, &(0x7f00000001c0)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x60, 0x2, 0x1, 0x5, 0x90, 0x9, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x9, 0x24, 0x6, 0x0, 0x1, "0afd38c6"}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x9, 0x4, 0x8001, 0x5}, {0x6, 0x24, 0x1a, 0x1, 0x10}}, {{0x9, 0x5, 0x81, 0x3, 0x40, 0x0, 0x46, 0xc4}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0x9, 0xf9, 0x4e}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x8, 0x2, 0x40}}}}}}}]}}, &(0x7f00000003c0)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x310, 0x2, 0x8, 0x6, 0x28}, 0x33, &(0x7f0000000100)={0x5, 0xf, 0x33, 0x3, [@ext_cap={0x7, 0x10, 0x2, 0x3a, 0xc, 0x0, 0x3}, @ssp_cap={0x1c, 0x10, 0xa, 0x9, 0x4, 0x449, 0xff00, 0xff8a, [0x0, 0xc000, 0xff0000, 0xf]}, @wireless={0xb, 0x10, 0x1, 0x2, 0x21, 0x6, 0x7, 0x5, 0x3}]}, 0x2, [{0xbc, &(0x7f0000000280)=@string={0xbc, 0x3, "6aa0e20c351099b84b24dead2b7a433831cf6762f76e97dec1c7f3798d86739ef8fe6b5415edfe52ff9b04548a8f596af027d2e95e01a1023197fdd0356d82494b59a1715e7fcca593a4ce57667682ae43da8d687ccf0122b100a3fd64971c7ffa4912c103c4ed4cf4891ac00ffb48d524f3eca0054d298b2347611029fe97bbf58fe7e5cb18d052c3a59e3946f94414e40f66a5862d46fbc61d9c41bd6829c8544c11c3edb92c059e20218659193362a0bf547e411d7251df70"}}, {0x3e, &(0x7f0000000340)=@string={0x3e, 0x3, "69df612720e25bd87782ce2aef1d799b1b49b9ddd83facbd13f6eca685e5c560dc82129f93169be6def63921cb2b0fda28bce73d75da53063a76a0d2"}}]}) shutdown(r4, 0x2) 1m13.408146072s ago: executing program 0 (id=2936): r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2, 0x0, 0x8000000000}, 0x18) syz_emit_ethernet(0xffffffffffffff71, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x2, 0x4) sendmsg$can_raw(r0, &(0x7f0000000240)={&(0x7f0000000780)={0x1d, r3}, 0x10, &(0x7f0000000480)={&(0x7f0000000040)=@can={{0x3, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "11e97f5d0c1f526b"}, 0x10}, 0x1, 0x0, 0x0, 0x2}, 0x20044850) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./file1\x00', 0x414, &(0x7f0000000000)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000"], 0x1, 0x2bb, &(0x7f0000000440)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x16a) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r4, 0x80047210, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x200008, &(0x7f00000001c0)={[{@grpquota}, {@barrier}, {@quota}]}, 0x1, 0x504, &(0x7f0000001000)="$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") r5 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) write$binfmt_register(r5, &(0x7f00000000c0)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x9, 0x3a, '+\'', 0x3a, '', 0x3a, './file2', 0x3a, [0x46]}, 0x2a) 1m13.237081365s ago: executing program 0 (id=2942): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f0000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) r2 = semget$private(0x0, 0x6, 0x84) semtimedop(r2, &(0x7f00000003c0)=[{0x2, 0x4, 0x1800}], 0x1, 0x0) 1m12.933792749s ago: executing program 0 (id=2954): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], 0x0, 0x4, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000040), 0x81, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$packet(0x11, 0x3, 0x300) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x8840) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000100)={'bridge_slave_0\x00', &(0x7f0000002fc0)=@ethtool_link_settings={0x1d}}) syz_emit_ethernet(0x7a, &(0x7f0000000580)=ANY=[@ANYBLOB="0180c200000000000000000086dd609a83c900442f00fe80000000000000000000000000000efe8000000000000000000000000000aa042088be000000000000080000c7343fc22c4d68fa000000100000000100000000000000080022eb00000000200000000200000000000000000000000800655800000000a6c0f511db7cb03ea9189b7dacd6ba12bf1f16ccf139165ef81de95a0f29e3989af1f23187c22bcc7683a3229ab6b12d0748b9e286fe0c3f6750161d4b411a512596e69c3c5f6dbe6134596a76649ef3d1fedca07809bdeccfa81db0c56ec63e466e1360d6710ff5f9f9ff23626b9a15c0dd62682c1fe94621970b"], 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) mq_unlink(&(0x7f0000000300)='\\#/%%*\x00') sendmsg$nl_route_sched(r3, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000e00)=@newtaction={0x4a8, 0x30, 0x12f, 0x40, 0x0, {}, [{0x494, 0x1, [@m_police={0x490, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xa4f, 0x0, 0x0, 0x0, 0x0, 0xcf4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2000, 0x0, 0x0, 0x7, 0x3, 0x8, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x6, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffc, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x5, 0x0, 0x0, 0x7, 0x20000]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x1, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x3, 0xffffc3fd}, {0x0, 0xf6c5d7a4e5a498ca}}}]]}, {0x21, 0x6, "30486a066e30369fa58356c7bfb80f2c4c75614ce05e23746885dd8f1c"}, {0xc, 0xb}, {0xc, 0xa, {0x0, 0x3}}}}]}]}, 0x4a8}}, 0x1) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='mm_migrate_pages\x00', r5, 0x0, 0x9}, 0x18) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001300)=[{&(0x7f0000000200)="1700000072006bcd9e3fe3dc6e08000007230000040200", 0x17}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x54, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) setsockopt(0xffffffffffffffff, 0x84, 0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f00000006c0), 0x1, 0x512, &(0x7f0000000c40)="$eJzs3W1rZFcdAPD/vcmk2d3UTFVkLdgWW9ktujNJY9so0lYQfVVQ6/s1JpMQMsmEzKRuQtEsfgBBRAU/gG8EP4Ag+xFEWND3oqKI7upL3St35kbzMJMMySSzTn4/OJlz7sP5n3PJ3LkPh3sDuLJeioh3ImIsIl6NiOlielqk2OukfLnHjz5YzFMSWfbe35JIimn7deXl8Yi4Uaw2GRFf/0rEt5LjcZs7u2sL9XptqyhXW+ub1ebO7p3V9YWV2kptY25u9o35N+dfn5/JCufqZzki3vrSn370/Z99+a1ffebbv7/7l9vfyZv1hY912h0Ri+cK0EOn7lJ7W+zLt9HWRQQbkrw/pbFhtwIAgH7kx/gfjohPto//p2OsfTQHAAAAjJLs7an4VxKRAQAAACMrjYipSNJKMRZgKtK0UumM4f1oXE/rjWbr08uN7Y2lfF5EOUrp8mq9NlOMFS5HKcnLs8UY2/3ya0fKcxHxXET8cPpau1xZbNSXhn3xAwAAAK6IGy8ePv//53TazgMAAAAjptyzAAAAAIwKp/wAAAAw+pz/AwAAwEj76rvv5inbf4/30vs722uN9+8s1ZprlfXtxcpiY2uzstJorLSf2bd+Wn31RmPzs7Gxfa/aqjVb1ebO7t31xvZG6+7qoVdgAwAAAJfouRcf/C6JiL3PX2unKJ4DCHDIH4fdAGCQxobdAGBoxofdAGBoSqcuYQ8Boy45Zf7xwTuda4Xx64tpDwAAMHi3Pn78/v9EMe/0awPA/zNjfQDg6nF3D66u0llHAN4cdEuAYflQ5+OZXvN7Pryjj/v/nWsMWXamhgEAAAMz1U5JWimO06ciTSuViGfbrwUoJcur9dpMcX7w2+nSM3l5tr1mcuqYYQAAAAAAAAAAAAAAAAAAAAAAAACgI8uSyAAAAICRFpH+OWk/zT/i1vQrU4evDhx569dP3/vxvYVWa2s2YiL5+3Q+aSIiWj8ppr+WeSUAAAAAPAU65+nF5+ywWwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAqHn86IPF/XSZcf/6xYgod4s/HpPtz8koRcT1fyQxfmC9JCLGBhB/735E3OwWP4knWZaVi1Z0i3/tguOX25ume/w0Im4MID5cZQ/y/c873b5/abzU/uz+/Rsv0nn13v+l/93/jfXY/zx7pNzL8w9/Ue0Z/37E8+Pd9z/78ZNO/EMh8sLLffbxm9/Y3e0640CV3eIfjFVtrW9Wmzu7d1bXF1ZqK7WNubnZN+bfnH99fqa6vFqvFX+7hvnBJ3755KT+X+8Rv3y4/8e2/yt99T6Lfz+89+gjnUKpW/zbL3f//b3ZI35a/PZ9qsjn82/t5/c6+YNe+PlvXjip/0s9+j95Sv9v99X/+NyrX/veH7rOObY1AIDL0NzZXVuo12tbJ2Qm+1jmkjNvPx3NGGAmno5mDCuTfbfz/3i+es65+rFMdp7Vx2MAzZg49j0di7NWmETs5XX1+Q8JAACMmP8d9J90BwkAAAAAAAAAAAAAAAAAAAC4SGd8LNlkRPS98NGYe8PpKgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAif4TAAD//4RX0Xo=") perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x7, 0x50410, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x4c58, 0x10000, 0xfffffffc, 0x1, 0x88, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) 1m12.92062864s ago: executing program 32 (id=2954): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], 0x0, 0x4, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000040), 0x81, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$packet(0x11, 0x3, 0x300) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x8840) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000100)={'bridge_slave_0\x00', &(0x7f0000002fc0)=@ethtool_link_settings={0x1d}}) syz_emit_ethernet(0x7a, &(0x7f0000000580)=ANY=[@ANYBLOB="0180c200000000000000000086dd609a83c900442f00fe80000000000000000000000000000efe8000000000000000000000000000aa042088be000000000000080000c7343fc22c4d68fa000000100000000100000000000000080022eb00000000200000000200000000000000000000000800655800000000a6c0f511db7cb03ea9189b7dacd6ba12bf1f16ccf139165ef81de95a0f29e3989af1f23187c22bcc7683a3229ab6b12d0748b9e286fe0c3f6750161d4b411a512596e69c3c5f6dbe6134596a76649ef3d1fedca07809bdeccfa81db0c56ec63e466e1360d6710ff5f9f9ff23626b9a15c0dd62682c1fe94621970b"], 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) mq_unlink(&(0x7f0000000300)='\\#/%%*\x00') sendmsg$nl_route_sched(r3, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000e00)=@newtaction={0x4a8, 0x30, 0x12f, 0x40, 0x0, {}, [{0x494, 0x1, [@m_police={0x490, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xa4f, 0x0, 0x0, 0x0, 0x0, 0xcf4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2000, 0x0, 0x0, 0x7, 0x3, 0x8, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x6, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffc, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x5, 0x0, 0x0, 0x7, 0x20000]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x1, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x3, 0xffffc3fd}, {0x0, 0xf6c5d7a4e5a498ca}}}]]}, {0x21, 0x6, "30486a066e30369fa58356c7bfb80f2c4c75614ce05e23746885dd8f1c"}, {0xc, 0xb}, {0xc, 0xa, {0x0, 0x3}}}}]}]}, 0x4a8}}, 0x1) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='mm_migrate_pages\x00', r5, 0x0, 0x9}, 0x18) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001300)=[{&(0x7f0000000200)="1700000072006bcd9e3fe3dc6e08000007230000040200", 0x17}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x54, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) setsockopt(0xffffffffffffffff, 0x84, 0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f00000006c0), 0x1, 0x512, &(0x7f0000000c40)="$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") perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x7, 0x50410, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x4c58, 0x10000, 0xfffffffc, 0x1, 0x88, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) 14.732159642s ago: executing program 4 (id=4161): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xb, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf53, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000700)='kfree\x00', r0, 0x0, 0x7}, 0x18) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'bond0\x00', 0x0}) sendmsg$nl_xfrm(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000140)=ANY=[@ANYBLOB="44010000100001000000000017002000fe800000000000000000000000000000ac1e000100000000000000000000000000000000000000000000200032000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc0100000000000000000000000000000000000032000000e000000200000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c001c00", @ANYRES32=r3], 0x144}}, 0x0) 14.701895633s ago: executing program 4 (id=4163): socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b70300000700000085000000110000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='ext4_ext_show_extent\x00', r0}, 0x18) socket$kcm(0x10, 0x2, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0x11, 0xf, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000280)=@ethtool_sfeatures={0x33, 0x1, [{0x8, 0x8}]}}) 14.665971933s ago: executing program 4 (id=4165): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00142102800800010008000000060002000100000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r0], 0x54}}, 0x0) 14.593281234s ago: executing program 4 (id=4166): syz_open_dev$usbfs(&(0x7f0000000040), 0x10001, 0x220000) r0 = syz_clone(0x8d002240, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$pokeuser(0x6, r0, 0xd8, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0xfd, 0x0, 0x7ffc9ffb}]}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000200)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x7fff}}, {@lazytime}, {@errors_remount}, {@quota}]}, 0x3, 0x42f, &(0x7f00000006c0)="$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") mbind(&(0x7f0000309000/0x1000)=nil, 0x1000, 0x1, 0x0, 0x0, 0x2) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000a40)={[{@stripe={'stripe', 0x3d, 0x3}}, {@noauto_da_alloc}, {@jqfmt_vfsold}, {@data_err_ignore}, {@noauto_da_alloc}, {@delalloc}, {@resuid}, {@oldalloc}, {@jqfmt_vfsv1}]}, 0xfc, 0x550, &(0x7f0000000b00)="$eJzs3d9rW1UcAPDvTdv91nUwhvoghT04mUvX1h8TfJiPosOBvs/Q3pXRZBlNOtY6cHtwL77IEEQciH+A7z4O/wH/ioEOhoyiD75EbnrTZWvSZm22Zubzgduec89Nzz0593t6bk5CAhhaE9mPQsSrEfFtEnG4rWw08sKJteNWH16fzbYkGo3P/koiyfe1jk/y3wfzzCsR8dvXEScLG+utLa8slMrldDHPT9YrVyZryyunLlVK8+l8enl6ZubMOzPT77/3bt/a+ub5f3749O5HZ745vvr9L/eP3E7ibBzKy9rbsQM32jMTMZE/J2Nx9okDp/pQ2SBJdvsE2JaRPM7HIhsDDsdIHvXA/99XEdEAhlQi/mFIteYBrXv7Pt0HvzAefLh2A7Sx/aNrr43Evua90YHV5LE7o+x+d7wP9Wd1/PrnndvZFv17HQJgSzduRsTp0dGN41+Sj3/bd7qHY56sw/gHz8/dbP7zVqf5T2F9/hMd5j8HO8Tudmwd/4X7faimq2z+90HH+e/6otX4SJ57qTnnG0suXiqn2dj2ckSciLG9WX6z9Zwzq/ca3cra53/ZltXfmgvm53F/dO/jj5kr1Us7aXO7BzcjXus4/03W+z/p0P/Z83G+xzqOpXde71a2dfufrcbPEW907P9HK1rJ5uuTk83rYbJ1VWz0961jv3erf7fbn/X/gc3bP560r9fWnr6On/b9m3Yr2+71vyf5vJnek++7VqrXF6ci9iSfbNw//eixrXzr+Kz9J45vPv51uv73R8QXPbb/1tFbXQ8dhP6fe6r+f/rEvY+//LFb/b31/9vN1Il8Ty/jX68nuJPnDgAAAAAAAAZNISIORVIorqcLhWJx7f0dR+NAoVyt1U9erC5dnovmZ2XHY6zQWuk+3PZ+iKn8/bCt/PQT+ZmIOBIR343sb+aLs9Xy3G43HgAAAAAAAAAAAAAAAAAAAAbEwYh9nT7/n/ljZLfPDnjmfOU3DK/u8Z+X9OObnoCB5P8/DC/xD8NL/MPwEv8wvMQ/DC/xD8NL/MPwEv8AAAAAAAAAAAAAAAAAAAAAAAAAAADQV+fPncu2xurD67NZfu7q8tJC9eqpubS2UKwszRZnq4tXivPV6nw5Lc5WK1v9vXK1emVqOpauTdbTWn2ytrxyoVJduly/cKlSmk8vpGPPpVUAAAAAAAAAAAAAAAAAAADwYqktryyUyuV0UUJiW4nRwTgNiT4ndntkAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBH/gsAAP//sQI4ww==") r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x103042, 0x0) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f00000001c0)='\x00', 0x1}], 0x1, 0x7fff, 0x1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x121c00, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r2, 0x6628) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000202300800000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x6, 0x0, 0x0, 0x40f00, 0x9, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000640)='kmem_cache_free\x00', r3, 0x0, 0x80001}, 0x18) statfs(&(0x7f0000000300)='./file0\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x4}, 0x18) r4 = timerfd_create(0x9, 0x80000) timerfd_gettime(r4, &(0x7f00000007c0)) 14.032726962s ago: executing program 4 (id=4168): socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='ext4_ext_show_extent\x00', r0}, 0x18) socket$kcm(0x10, 0x2, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0x11, 0xf, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000280)=@ethtool_sfeatures={0x33, 0x1, [{0x8, 0x8}]}}) 12.727707651s ago: executing program 4 (id=4185): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000072"], 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xcb783cacbccb866f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r1}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="7000000010000304020000000000000000000400", @ANYRES32=0x0, @ANYBLOB="0003070000000000500012800b0001006272696467650000400002800c001f0001000000000000001b0027000e0000"], 0x70}, 0x1, 0x0, 0x0, 0x4}, 0x8044) 12.72745372s ago: executing program 33 (id=4185): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000072"], 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xcb783cacbccb866f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r1}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="7000000010000304020000000000000000000400", @ANYRES32=0x0, @ANYBLOB="0003070000000000500012800b0001006272696467650000400002800c001f0001000000000000001b0027000e0000"], 0x70}, 0x1, 0x0, 0x0, 0x4}, 0x8044) 3.148451096s ago: executing program 6 (id=4382): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xb, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf53, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000700)='kfree\x00', r0, 0x0, 0x7}, 0x18) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x314, @void, @value}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240), 0x0) dup(r2) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00'}, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001cc0)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x100, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r4 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0xe1002) ioctl$SCSI_IOCTL_SEND_COMMAND(r4, 0x1, &(0x7f0000000040)=ANY=[@ANYRES64=r3]) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'bond0\x00'}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0x18, 0x30, 0xffff, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x1300}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000026c0)=ANY=[@ANYBLOB="1000000012000501ea00000000000000"], 0x10}, 0x1, 0x0, 0x0, 0x40}, 0x20040810) 3.107174686s ago: executing program 1 (id=4384): r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='smaps_rollup\x00') lseek(r0, 0x4, 0x0) socket$packet(0x11, 0xa, 0x300) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000300)={[{@min_batch_time={'min_batch_time', 0x3d, 0xadb}}, {@bsdgroups}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5a}}, {@init_itable}, {@errors_remount}, {@noinit_itable}, {@nojournal_checksum}]}, 0x2, 0x464, &(0x7f0000000880)="$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") r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000000080)=@abs={0x1, 0x0, 0x4e21}, 0x6e) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000002d00000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000640)={&(0x7f0000000580)='br_fdb_add\x00', r2}, 0x18) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001c008102e00f80ecdb4cb9f207c804a00d00000088081afb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065fffff53000000800395032303030"], 0x15) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000280)={0xffffffffffffffff}, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r1, &(0x7f0000000440)={0x13, 0x10, 0xfa00, {&(0x7f0000000d00), r6}}, 0x18) write$P9_RVERSION(r5, &(0x7f0000000300)=ANY=[], 0x15) r7 = dup(r5) write$P9_RLERRORu(r7, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r7, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) sendmmsg(r7, &(0x7f0000002a00)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000380)="f366f92d84bab83aaecc43", 0xb}], 0x1}}], 0x1, 0x20000000) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000240)='kfree\x00'}, 0x18) write$binfmt_elf64(r7, &(0x7f0000000480)=ANY=[@ANYRESHEX=r6], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r7]) write$cgroup_int(r1, &(0x7f0000000540), 0xfffffdd8) 3.049204847s ago: executing program 6 (id=4386): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x4c58, 0x10000, 0x0, 0x1, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000680)='kfree\x00'}, 0x18) syz_open_dev$usbfs(0x0, 0x1ff, 0xa401) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0x21, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x6) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="8f7e93b1d215a56672e8b5c4dede50a71c24228b6ac61c2f9d8ad5a5526479a3f787b0da2792479e5c4cf2b619cb3cfb204af26a9a15ab378c99ccda67ab5f3c24819aa3511633da75577e69973d90484701dbe805770c49372f562f8ebbee4fb89c4c6c75c1aba9afcc681b5c454dbb9fe80414f0f28a82ad31e381c4ce745d2daf2cf4ea32a6d41029261d62d5fb57215eb93559d52a711a2341b441a6461ca0f2188401cd11540392fd9b22e7e701cee6f7f10bffd4a908d169e43abc2413c13653e79df659fb026c42a4ccfd2d5bc30b49c746390ad1c8fa246f8902b7fac1845b4e4c1a1c0f7efa3086c983920a0c71abfb78ae339948f1bf4c6f021c7f4decfd19b2adf2a55ccec0b2f4bf68b614dd6a1ceb496b145439c027cd6ceb9ef5a770a06ecfaa811128ff6dd2c08e7bdd1e2ef4c3dd3675c5baea0c3f11df00276d1400be4a1af6f1bd22f775ff5dc46172e1c0cb4ff77d7075fae38eb5b928d291120ed6dd530c15ed26c91d44ac748cfe0872ab03296a6a388b0b2928a1a05a7297141791998995a77e5a9eaeb057ff0fb724ba1fd7884391b734a7b386ff3fa9786078b79eb33bc96ccabb65aa70366b355a7fa1d3d9ffef3017bdaf1534d58c93fa75f0b081756965880d0053ba11c816f62faf8bec559b154ad16d8499531f7ddd9eed1704b23353695f03ca6a80f3da429977986edb6b1c6fb676b4a3e8eac9103516431ac4b7041551c6b11fe9403b7323c3c3ff66797205611ab7b763dc4a9aae335d5cc82efd67a35d008a82d82d661abe4fb9f448fe811ec80706eb57bdb598d53f7b55648a8281d8f60cd3962ce90ba21b68cd0eb2d749cad8ec43f524b4d670b669662539d9c1df5cd54df41c7cd5f20df197eb92792d97e7a4fb3cd82f05f2a285b65cefa5d66523c1eb4cdd3229c3c825236281e606feebd4d89ab3083aedf94de0c1fb4e7137fbcd001b917ed88501d6e292f8fb85a9b5630c83d8aa1b2b4b83a6670b8d5d0a6ab41cdaa183ecff735eb358eb2957815d816a3dbd0128d6839c167cb8771fcdc4a5f80c54d6b3c95f3227f3e8950fa6206b5c9878db10aacc9c01d9073e569d778389dfdcd5100ac04bec2d9b3fd175da72563d28d9697dbfc56ba81e3e038e767bc2aca490d3b9052556ec9e866a5a58c20edd277a8137ceceb325cec804b1d3147797523663cc6e876c15b1f9859e5844f9d0afde97fe4877378dc0a696b180edcaad120ffd41840ba3274c0645ad7e517dbd958b4b7f731e1a96586439bc12c5c32a319b0c3b686840a0692eb6b6654b2e004d9c7c44b9bae3455af7e664c34c47ba5b7e58326b6ac2daa489042a60cd5f132a675c2c9116c3095b163f321d416115f583ae4595b5bc317234b5feabc426b3eeb8148689080532b389d807d95d9021627720ff5ec72ecdb05f2aa6cc044f716dcd8e517c9bfb94bea3fbb91656d792f3f87de484cb8c31f1c4ee6bd24d0f1cda51c5c08b35b551b6a93f2530eb3b6c335788f569146180f3efac8728c99a408a437eebbdb759aa56fd8a35c4d8b6e820c0f219a5aa39d094853eb955bcfe40a7884ca7e7323f712a02bf36bd42843444d3a25afdaef0a99321c04e68e4c91448c1425a9d4d3aa18eef634637002aaa23af4a9b3968661818772d41c2fd1c80dfca704bb7beccca23eb07adc339e15aea593e97ad87c8951ca3c1be5006426b6f31ef0e9cd290fbb466686000adc27b8fff5a691d2902568289ad27d7197e3944fa7651cb4c12abd74899d9c0971104e5187bddabac6b8719ba88c3dcb2f844299c641a4c3e88291c22972574cd20e0ef45528f285f2ef48f444cb01d23daaf3d0f24c8672a3297bf4ece591fee27b1a0c751381e3f8ea07b0d2a9da69a29f86d5b2e0c92809119f713bd712d20d5ef173d0cdd1de4ab413f65a3aaa121712ec4306bbeb5a783400fea23b53cde9bdb15b7920cf3d360dbb0fc779aa9147fac0dae50612068560fe896b037c92b906ea51b7a4880f43ad827f84abb0846dd5125a5e71869ed8d35e11c2901553a946fb64396dfd324d37dc3a8895ff1bc0a91398157860ee414893cb35442ab1bb4547b6c72741a40f9dd02f913e7b17d6b5807db7fce8738c05bbbbc46c0ec9a43afd55035deb90bed7bd98dffff25ee975fa0625c35978ff1c57eff1e4b10236d53c281cfd0840f192cb2204cf7f3d3e04b484b71e4a6eb688a0bce766af27e38cf33ec54ba7e235ca5cc754d791e46a21669b54dda412471422a541404fb37bb8b6f8e5b8cd3c04d427822b989767c9142bca68f8979197969e53a1fba0178b364274114f08a41d87404fe56f5034cfb762ddb781e42a8251684ef21a786e480b30496a4ba7681e949ff941ed900646c1bb1230737ffd99e90d5b22d0e94be2efe1217bf8dc2a3bd22ba20d57ebd547a3cf802eb7d111295fe8083de47a175f14e65dcdc5435ff8ea7abfc01bd267530fc15bdc710c154e187cd653f4be7dc278f085177b836ee51d8d2e9fd08be091b2379469ced9d86d51067e13ac239064982b8def909bc60240e6840be6e52528fdc84b2906ba2150acd931b804da5b64f704ba2b58f0ea942eb14b9f54e8370b77cc9a93d1f0690cf33ed664f0e11304a882ee593f987acac8bfcb317f0b6f37be428d4a8a8cb5ce9696410482e56965d81880f36b7e8a80e08ad31eb3cdddb28f1734b0a7c1bbcd998c3d35775e32afd9c3d7e14975ed049a023af8dc841afddee0f32a2363a089be15cbc054bf9d6538359bd01241caa1bdef6785cce3005edf32f7ed5743446e3cd0cddd5125d592f90f48a0fdf5171ed45faf71d885b2122fefdb53efdbd8b0e763e5c33cae8b7e3d51890064804fb2c098017214891c52e4d34ef6ae0a5c42332f4fcea53425378d1670f256f11700399b9f0412c7e43988304106508eed1ea60c2bc836a8a06a60a49f726aaab9bf20dc6a60232ca110e564cca703cc7ce04fda75a79e2e9c7208dcdff88f62bf40ca9c1ed6574fca98feaea8b1b2a8879722b8a1afe271423463e66f8a52db7e5899c89b1073c0136e1a6cdf9f4dda3503219d7249cdebb16aa5bddc80589a07862a50d114d75bb864167528b5955bbcf1373f438b388fffd3b4c7d6bbf75f7874a140316457bc88b19102ae8477b3e9514011916325e47e4691535446e60b60dbbe8cb62d2d95e58cf5c6c6ca95187768771351b9fa36ddcd52694a16fb57fa6d50d0a5c35342f55d394f81fc70522a38c01bbae26b507bfc34164f37c2d8363e6dd52ca7aa7a7bd8f70d4528d3781a66e831c9738e2a16f92fd5fe1659b077c79955dc37aaae0ba03bcc81007e7fe8d23c07306f1ea0ef2a017a8c382a72a18a6d7e6a56238eb04ea99d36aec267c0005738afcaf9f7b462b48c9e495d78bad88da6b4989507aa4ffcbf1f6634743c2b21cb709feadf351a72c4982890286e53b46d2cc721f4f729374051ae80c196fab4f0b5c1f5ea5060e6f4ce585e002685b0f260c296a7b7be1642025138bd2e0f0ae244c449c12260ca12060a02f234d9ec2330553103a6fd5dd6140c08a1c90a57ebc22d8b6045bf50ddb80040722d117ab20c2e4e0534acbe45937d8aabd1a8732c910a82f0a82d92c52f944e4b03e82827a187d56bbf5b3f2bf3a68b0736730f3ba28dcd700d64e84fbe431dea86eec697b3a209404c46e8fb39edf222716f2b8f2918e6361c38f1b4cce590be32a96a3d7944f82af3d3fd50612a3286c4e4b9bd3d1f8a58b64d652a8f9d9fe96809abe64cb282de213c930582fec83a9760e4a97efb4135721ae49c217a00fe336cf79c2ba3cc8be02a8f3f7b9be51d08ae3e3a04caf5ce66f0060748e10130126196d3c71d01c0735f0f8fa68100e5a7493e62a25343e8dc2ba485dc553ca705b7c7a5f2c8846d2f4cdd99b143e4380556775e6cfe30e26e4cbb2a666c961027f35b2900998943c45c3479934d6bfd735450be4d44ae3de8f96484f19adcf31072f8b490f8b71ba239303149974837ac43f9b99ad77c43b240ae8372e9a1fbe2e4ffc568d013b30d033baf0a536b95430e022841ade8d70d9eb033123535ec8fc23fd1427c6bdb83458883a14d47baf6f2c5252fe4a5642737ea4c8833f278c532b9d664d799f631bd5aba536305ba50504b7569caeca9d74112911becaf400230b6b0d119994ce5add7759c9ff9f9d07f64280b4a44bbb5e1950b67a61e9697762ca8803849a60d108d3cb61b48d140799a369ec104b62337db9dc8f3f9bbbe24fff2fb476aee28d8eab3ec10d968c237734845ed97b987921165b2417c429bc9b3a4159ee3381b959d1cd8e73e2d0aece410faf683e9a4bb50f2c1e15d92832456b180d3ec65fc0f4b76e62a47fb022b553d78dab9e97c7c5b364b4c998d0188672a0ecbdb13410026b28f7b9b7af63ad0c1f2e43059625dd0e3bf4ad588b6bdc01e468fb32d73cbe443a09cd1079502fed0dbd57d0409160ab827ef884b931f2a76acf55054cf6663ede3134b38fbd47e6c642257976b19fd08fd714d9ca916e7ff17630b38e0c04c4c7f0e0f10af3dbfefd9c74fb585d752946b3d5e2c933abced7cf375488fa331f635aa3ce38b513359b80a910fe3724b1cda55f4b0daec5fe6f9119f35f2c63d6e8c913e911c92ce6eee3c8cdcf91d651c3ded0f1cc5c9c3aefc026977d406d18d01a76e84f0d9f3c86f1b5d5a2811ace5fdda27408ea1b0bb3dfcc70738a44af773c2c6f4ebb186f914c4bcc881a08517cc12d15da2d9c157f5fd47e9264a160c8a2f849ed378d6d4184fae49600c3a8d2f158bb36e5153d15b7c3804b596c764311b4848ed077c0d52f4cd9c16d850e5de8d9ff17a8db78fd992e12f4d3957544f7017249f9cc8b54e194902a56de9d6d7950f2e1deb99d73c77d554aaa6c9076c5906909aab3f39ad004a18c790f35e81a4fa9ed2ef0f026c35a2c30b0e6b03e1a2e8452f685fdcc22267ac8079efca3a3822f216352798314200c2cd4e2c9e8fd00045011661c9a1e5bb76871557594b3bd130c1d353af788779627ad08301bc27d6ef8c29f1def930be1f6969123923104df60b2d7283f0b8b16a7ab54e52f136ab77ca28e84f7c42b2ea3f144213fb7d8e8519dbb482307fb2e5a17c646128a58ba385161207358db6cf8b37bfc85e06722058971cfc730b77b9defd1903746d42969052624ec7ef65dcb0069989558ebddb7d33b8fce14f5ac99b624f37102678922cdfbb206a837c6d9b987f92a0d8fd28bcf6b6d781193c9a12dc207952630ff558eebd8ccb7cd147a28b8a885231e1bd4e5ac985c9602dbdd4bbd4a3fb52ac8f91d1cfead7d949abe915b682f369ee8b6449df0cc212872702e457d2dd75611ec694a18bba88e97becca472a0fcd6cb96bf915893cbd1e9c36c361d6575a4c806e71c33d66b83d0f49dd74ee3f0a447a1a39076ec26e894dc2ab6f47e35ff3c9573e773a9e81c8a4dcb5d228b8f5f786642a0fd1611b78b5b07c72dea53a1e9b27e83a92cebd5cabf31688925e37b2416d48c50e19af059ac65cc4b17fbc8b62fa5c5f8c07c065afcb8bd316edabbdd148511da04b8ef69e80fb0e1d4c2c83998cf43cddc1ae17ec7a108a1b59e1741b6bee37b12da27ca2b7b1a4f9c23567c0a183cadf172f529c964d695f8eee167e46bcc01908f38186ee69ffbba3aa7acec4ca682c7a96fc44962591b3218b54271d5951997dc90896e5306a05f31a9e7e182d0f1d260b253c94eccb2f67dc938f0a606bee039fdd9412b", @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0xfffffffffffffffc, &(0x7f00000002c0), 0x13f}}, 0x20) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [], 0x0, [0x4, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x0, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) 3.006779028s ago: executing program 6 (id=4388): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000004c0)={[{@delalloc}, {@nojournal_checksum}, {@barrier_val={'barrier', 0x3d, 0x10002}}, {@dioread_lock}, {@data_err_ignore}, {@mb_optimize_scan}, {@dioread_nolock}, {@nobarrier}, {@abort}, {@user_xattr}, {@norecovery}, {@errors_remount}]}, 0x1, 0x570, &(0x7f00000019c0)="$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") r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000003380)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000006cfa000018120000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xc, &(0x7f0000000200)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3, 0x0, 0xfffffffffffffffe}, 0x18) r4 = socket(0x10, 0x80003, 0x0) write(r4, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000fe0000000000000008000f00fd00", 0x22) close_range(r4, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x35, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x4c58, 0x10000, 0x0, 0x1, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r5, &(0x7f0000000140)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e20, @broadcast}}, 0x24) sendmmsg(r5, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[{0x18, 0x110, 0x1, '\n'}], 0x18, 0xe000}, 0x5}], 0x1, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000b40)=@delchain={0x3c, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r6, {0xffe0, 0xffe0}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_IPV4_DST={0x8, 0xc, @multicast2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0), &(0x7f0000000140)=ANY=[], 0x841, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x37cc, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ffd, @void, @value}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x300000000000000, 0x0, 0x4004}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) io_uring_setup(0x4b8b, &(0x7f0000000000)={0x0, 0x4258, 0x2000, 0x0, 0x378}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000100), &(0x7f0000000700)=ANY=[@ANYBLOB="00fb8101408a9f9e8755f9a5a4c14af1c37801b23531862360e7c169ccfbb93fc84119b613"], 0x381, 0x2) 2.724783082s ago: executing program 2 (id=4392): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESHEX=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095", @ANYRES8=r0, @ANYRESDEC=r0, @ANYRES8=r0], 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r1}, 0x18) io_setup(0xfff, &(0x7f0000004200)) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0xc0f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x62, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3, 0x0, 0x3}, 0x3e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x50) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1, 0x0, 0x0, 0xff0f0000}, 0x20004000) open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00'}, 0x10) r5 = creat(0x0, 0x0) fsetxattr$system_posix_acl(r5, &(0x7f0000000000)='system.posix_acl_default\x00', 0x0, 0xfe44, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) open(0x0, 0x44842, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) connect$netlink(0xffffffffffffffff, 0x0, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r6, 0x5607, 0x2c) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = dup(r7) ioctl$TIOCL_SETVESABLANK(r8, 0x560e, &(0x7f0000000140)) r9 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$VT_ACTIVATE(r9, 0x5606, 0x4) 2.723570152s ago: executing program 1 (id=4394): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 2.708863632s ago: executing program 6 (id=4395): syz_open_dev$usbfs(&(0x7f0000000040), 0x10001, 0x220000) r0 = syz_clone(0x8d002240, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$pokeuser(0x6, r0, 0xd8, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0xfd, 0x0, 0x7ffc9ffb}]}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000200)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x7fff}}, {@lazytime}, {@errors_remount}, {@quota}]}, 0x3, 0x42f, &(0x7f00000006c0)="$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") mbind(&(0x7f0000309000/0x1000)=nil, 0x1000, 0x1, 0x0, 0x0, 0x2) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000a40)={[{@stripe={'stripe', 0x3d, 0x3}}, {@noauto_da_alloc}, {@jqfmt_vfsold}, {@data_err_ignore}, {@noauto_da_alloc}, {@delalloc}, {@resuid}, {@oldalloc}, {@jqfmt_vfsv1}]}, 0xfc, 0x550, &(0x7f0000000b00)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x103042, 0x0) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f00000001c0)='\x00', 0x1}], 0x1, 0x7fff, 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x121c00, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000202300800000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x6, 0x0, 0x0, 0x40f00, 0x9, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000640)='kmem_cache_free\x00', r2, 0x0, 0x80001}, 0x18) statfs(&(0x7f0000000300)='./file0\x00', 0x0) 2.622906503s ago: executing program 1 (id=4396): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x4c58, 0x10000, 0x0, 0x1, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000680)='kfree\x00'}, 0x18) syz_open_dev$usbfs(0x0, 0x1ff, 0xa401) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket(0x10, 0x3, 0x6) r2 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="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", @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0xfffffffffffffffc, &(0x7f00000002c0), 0x13f}}, 0x20) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [], 0x0, [0x4, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x0, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) 2.212962369s ago: executing program 1 (id=4397): syz_open_dev$usbfs(&(0x7f0000000040), 0x10001, 0x220000) r0 = syz_clone(0x8d002240, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$pokeuser(0x6, r0, 0xd8, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0xfd, 0x0, 0x7ffc9ffb}]}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000200)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x7fff}}, {@lazytime}, {@errors_remount}, {@quota}]}, 0x3, 0x42f, &(0x7f00000006c0)="$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") mbind(&(0x7f0000309000/0x1000)=nil, 0x1000, 0x1, 0x0, 0x0, 0x2) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000a40)={[{@stripe={'stripe', 0x3d, 0x3}}, {@noauto_da_alloc}, {@jqfmt_vfsold}, {@data_err_ignore}, {@noauto_da_alloc}, {@delalloc}, {@resuid}, {@oldalloc}, {@jqfmt_vfsv1}]}, 0xfc, 0x550, &(0x7f0000000b00)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x103042, 0x0) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f00000001c0)='\x00', 0x1}], 0x1, 0x7fff, 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x121c00, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000202300800000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x6, 0x0, 0x0, 0x40f00, 0x9, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000640)='kmem_cache_free\x00', r2, 0x0, 0x80001}, 0x18) statfs(&(0x7f0000000300)='./file0\x00', 0x0) 2.13307261s ago: executing program 3 (id=4398): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x4c58, 0x10000, 0x0, 0x1, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000680)='kfree\x00'}, 0x18) syz_open_dev$usbfs(0x0, 0x1ff, 0xa401) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0x21, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x6) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="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", @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0xfffffffffffffffc, &(0x7f00000002c0), 0x13f}}, 0x20) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [], 0x0, [0x4, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x0, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) 2.031842502s ago: executing program 6 (id=4399): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = accept4$packet(0xffffffffffffffff, &(0x7f0000001180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000780)=0x14, 0x800) sendmmsg$sock(r0, &(0x7f0000000e00)=[{{&(0x7f00000008c0)=@in={0x2, 0x4e23, @broadcast}, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000980)="ccc6b89250a3950761c7ed889d4d398af712c7", 0x13}, {&(0x7f00000009c0)="5203308c362122dd99262e2d7930f79aa80830daa4f911ae4e675814b78991b55adf53c55f1e081958114aa8e0e61b634146abbe2ef3ddc2d40e0c43c944ca9f795f0c40caec42a72f4cdf329d80278e5cedb472908434933e00c159a3a1baa0aa5356329b31497f6fdc01eb1919dd6af5d2014561f990f94ebb66ba6d8f08", 0x7f}], 0x2, &(0x7f0000000ac0)=[@mark={{0x14, 0x1, 0x24, 0x20000000}}, @mark={{0x14, 0x1, 0x24, 0x8b2}}, @mark={{0x14, 0x1, 0x24, 0x7a79}}, @timestamping={{0x14, 0x1, 0x25, 0x7ff}}, @txtime={{0x18, 0x1, 0x3d, 0x7}}], 0x78}}, {{0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000bc0)="8e2c13f5b3049f4e55a12cd21399ad26d5c33e760e2a9e1bcd87073fc916f06e934b490dc63e4ad64051752c89af8a7e5af5b6ab36edd32f8a60aad69b044c0a8ff7c1db5f0e905e0555b8489b962b6b0b874da802dac6198f76b0f2051d6a667ebc1de7bb8f119271c320f950888263532eb2148d98", 0x76}], 0x1, &(0x7f0000000d40)=[@timestamping={{0x14, 0x1, 0x25, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @timestamping={{0x14, 0x1, 0x25, 0xffff}}, @mark={{0x14, 0x1, 0x24, 0xfffffffe}}, @mark={{0x14, 0x1, 0x24, 0xfffffffc}}, @mark={{0x14, 0x1, 0x24, 0x5e}}, @txtime={{0x18, 0x1, 0x3d, 0x8}}], 0xa8}}], 0x2, 0x44098) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1800403, &(0x7f0000000940), 0x2, 0x5ad, &(0x7f0000000180)="$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") add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f00000005c0)={0x1, 0x80, 0x1, 0x10, 0xfe, 0x0, 0x0, 0x100, 0x10020, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x180, 0x0, @perf_config_ext={0x4, 0xe}, 0x9, 0x7, 0x5, 0x3, 0x0, 0x8, 0x84, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xa, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x7, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={0xffffffffffffffff}, 0x111, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000280)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x7fe, @empty, 0x1}, {0xa, 0x4e20, 0x1ff, @dev={0xfe, 0x80, '\x00', 0x1d}, 0x2}, r2, 0xb}}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001000)={0x11, 0x4, &(0x7f0000001000)=ANY=[], &(0x7f0000000fc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0xfffffffffffffe34) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, @perf_bp={0x0, 0x13}, 0x400, 0xffffffff, 0x6, 0x6, 0x0, 0x1, 0xfff9, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000700)=ANY=[@ANYBLOB="0203000310000000000000000000000002000900080000000a0000000000000005000600000000000a0000000000004000000000000000000000000000000001000000000000000002000100000000000000060c0000000005000500000000000a00000000000000000000000000000000000000000000010000000000000000"], 0x80}, 0x1, 0x7}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x3c1, 0x3, 0x370, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x2a0, 0x258, 0x258, 0x2a0, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @private0, [], [], 'wlan1\x00', '\x00', {}, {}, 0x11}, 0x0, 0x128, 0x170, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0x7}}, @common=@inet=@multiport={{0x50}, {0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4e21, 0x4e23]}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x5, 0x3, 0x7}}}, {{@ipv6={@private0, @empty, [0x0, 0x0, 0xff], [], 'lo\x00', 'erspan0\x00', {}, {}, 0x0, 0x0, 0x6, 0x4a}, 0x0, 0xf8, 0x130, 0x0, {}, [@common=@hl={{0x28}}, @inet=@rpfilter={{0x28}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x0, 0x6}, {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x2001}}, {0x28}}}}, 0x3d0) pipe2(&(0x7f0000001cc0), 0x80000) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000340)={0x8, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x1f, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="2100000000000000000000000000000085000000b90000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) truncate(&(0x7f00000001c0)='./file2\x00', 0xaeb3) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000100001000000f5ffffffffffffff000a14000000060a0000000000000000000002"], 0x3c}}, 0x0) 2.026029072s ago: executing program 3 (id=4400): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000780)=@mangle={'mangle\x00', 0x64, 0x6, 0x650, 0xd0, 0x400, 0x1a0, 0x0, 0x1a0, 0x580, 0x580, 0x580, 0x580, 0x580, 0x6, 0x0, {[{{@ipv6={@local, @local, [0xffffffff, 0xffffffff, 0x0, 0xff], [0x0, 0xffffff00, 0x0, 0xff], 'bond_slave_1\x00', 'pim6reg\x00', {}, {0xff}, 0x16, 0x2, 0x1, 0x6c}, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x26}}}, {{@ipv6={@mcast2, @loopback, [], [0x0, 0xffffffff], 'veth0_to_team\x00', 'syzkaller0\x00', {}, {0xff}, 0x0, 0x1, 0x0, 0x2}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@mh={{0x28}, {"a8ca", 0x1}}, @common=@inet=@socket1={{0x28, 'socket\x00', 0x3}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0x118, 0x140, 0x0, {}, [@common=@icmp6={{0x28}, {0xc, "f860"}}, @common=@hbh={{0x48}, {0x0, 0x0, 0x0, [0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40]}}]}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0x138, 0x180, 0x0, {}, [@common=@dst={{0x48}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f]}}, @common=@dst={{0x48}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x72c9, 0x0, 0x0, 0x0, 0x400], 0xfe}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@broadcast, @ipv4=@empty, 0x40, 0x7, 0x9}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6b0) syz_mount_image$vfat(&(0x7f00000003c0), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYRES32, @ANYRES8, @ANYRES32=r0], 0x8, 0x2f6, &(0x7f0000001cc0)="$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") syz_io_uring_submit(0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0xf0) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) pwritev2(r1, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5412, 0x0, 0x0) fdatasync(r1) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) ftruncate(0xffffffffffffffff, 0x5) perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x83, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x50a, 0x0, 0x0, 0x9, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000280)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_int(r4, &(0x7f0000000040)=0x7, 0x12) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480), 0x4) r5 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_io_uring_setup(0xbc3, &(0x7f00000008c0)={0x0, 0x1064, 0x80, 0x4, 0x1af}, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000300)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r6, 0x0, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x28}, 0x0, 0x4800, 0x1}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r10, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r11}, 0x18) io_uring_enter(r7, 0x47f8, 0x0, 0x0, 0x0, 0x0) 1.835195185s ago: executing program 1 (id=4401): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000001c000000000000ea04850000007b000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000001180)={@local, @multicast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, @local}}}}, 0x0) 1.822103905s ago: executing program 5 (id=4402): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000080000000c"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000000080021850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) symlink(&(0x7f0000001640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rmdir(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00') 1.523651639s ago: executing program 5 (id=4403): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000780)=@mangle={'mangle\x00', 0x64, 0x6, 0x650, 0xd0, 0x400, 0x1a0, 0x0, 0x1a0, 0x580, 0x580, 0x580, 0x580, 0x580, 0x6, 0x0, {[{{@ipv6={@local, @local, [0xffffffff, 0xffffffff, 0x0, 0xff], [0x0, 0xffffff00, 0x0, 0xff], 'bond_slave_1\x00', 'pim6reg\x00', {}, {0xff}, 0x16, 0x2, 0x1, 0x6c}, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x26}}}, {{@ipv6={@mcast2, @loopback, [], [0x0, 0xffffffff], 'veth0_to_team\x00', 'syzkaller0\x00', {}, {0xff}, 0x0, 0x1, 0x0, 0x2}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@mh={{0x28}, {"a8ca", 0x1}}, @common=@inet=@socket1={{0x28, 'socket\x00', 0x3}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0x118, 0x140, 0x0, {}, [@common=@icmp6={{0x28}, {0xc, "f860"}}, @common=@hbh={{0x48}, {0x0, 0x0, 0x0, [0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40]}}]}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0x138, 0x180, 0x0, {}, [@common=@dst={{0x48}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f]}}, @common=@dst={{0x48}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x72c9, 0x0, 0x0, 0x0, 0x400], 0xfe}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@broadcast, @ipv4=@empty, 0x40, 0x7, 0x9}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6b0) syz_mount_image$vfat(&(0x7f00000003c0), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYRES32, @ANYRES8, @ANYRES32=r0], 0x8, 0x2f6, &(0x7f0000001cc0)="$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") syz_io_uring_submit(0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0xf0) r2 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_GET_MR(r2, 0x114, 0x2, &(0x7f00000000c0)={{0x0}, 0x0, 0x2e}, 0x20) pwritev2(r1, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5412, 0x0, 0x0) fdatasync(r1) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) ftruncate(0xffffffffffffffff, 0x5) perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x83, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x50a, 0x0, 0x0, 0x9, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000280)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_int(r4, &(0x7f0000000040)=0x7, 0x12) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480), 0x4) r5 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_io_uring_setup(0xbc3, &(0x7f00000008c0)={0x0, 0x1064, 0x80, 0x4, 0x1af}, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000300)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r6, 0x0, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x28}, 0x0, 0x4800, 0x1}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r10, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r11}, 0x18) io_uring_enter(r7, 0x47f8, 0x0, 0x0, 0x0, 0x0) 1.45145161s ago: executing program 2 (id=4404): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000100000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kmem_cache_free\x00', r0}, 0x10) semop(0x0, 0x0, 0x61) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)=0x3, 0x4) r1 = syz_io_uring_setup(0x239, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000480)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x77359400}, 0x1, 0x8}) io_uring_enter(r1, 0x2df2, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_TIMEOUT={0xb, 0x44, 0x0, 0x0, 0x2, &(0x7f00000001c0)={0x0, 0x989680}, 0x1, 0x4}) io_uring_enter(r1, 0x4866, 0x58ba, 0xb, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000002000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000f00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="a80100002100010027bd7000fedbdf2502"], 0x1a8}, 0x1, 0x0, 0x0, 0x40000}, 0x4000050) creat(&(0x7f00000000c0)='./file0\x00', 0x48) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r7 = dup(0xffffffffffffffff) write$P9_RLERRORu(r7, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r7, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r7, &(0x7f0000000340)=ANY=[], 0x7c8) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000340), r7) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r7, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000380)={&(0x7f00000006c0)={0x190, r8, 0x20, 0x70bd25, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}}, {@pci={{0x8}, {0x11}}, {0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}}]}, 0x190}, 0x1, 0x0, 0x0, 0x40080}, 0x4000000) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r7]) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r9, 0x84, 0x7a, &(0x7f0000001100)={0x0, @in6={{0xa, 0x3, 0x0, @dev={0xfe, 0x80, '\x00', 0x36}}}}, &(0x7f0000000040)=0x84) creat(&(0x7f00000003c0)='./file0\x00', 0x36) 1.177111194s ago: executing program 3 (id=4405): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000004c0)={[{@delalloc}, {@nojournal_checksum}, {@barrier_val={'barrier', 0x3d, 0x10002}}, {@dioread_lock}, {@data_err_ignore}, {@mb_optimize_scan}, {@dioread_nolock}, {@nobarrier}, {@abort}, {@user_xattr}, {@norecovery}, {@errors_remount}]}, 0x1, 0x570, &(0x7f00000019c0)="$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") r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000003380)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000006cfa000018120000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xc, &(0x7f0000000200)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3, 0x0, 0xfffffffffffffffe}, 0x18) r4 = socket(0x10, 0x80003, 0x0) write(r4, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000fe0000000000000008000f00fd00", 0x22) close_range(r4, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x35, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x4c58, 0x10000, 0x0, 0x1, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r5, &(0x7f0000000140)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e20, @broadcast}}, 0x24) sendmmsg(r5, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[{0x18, 0x110, 0x1, '\n'}], 0x18, 0xe000}, 0x5}], 0x1, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000b40)=@delchain={0x3c, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r6, {0xffe0, 0xffe0}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_IPV4_DST={0x8, 0xc, @multicast2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0), &(0x7f0000000140)=ANY=[], 0x841, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x37cc, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ffd, @void, @value}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x300000000000000, 0x0, 0x4004}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) io_uring_setup(0x4b8b, &(0x7f0000000000)={0x0, 0x4258, 0x2000, 0x0, 0x378}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000100), &(0x7f0000000700)=ANY=[@ANYBLOB="00fb8101408a9f9e8755f9a5a4c14af1c37801b23531862360e7c169ccfbb93fc84119b613"], 0x381, 0x2) 1.176604814s ago: executing program 2 (id=4406): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 1.139043714s ago: executing program 2 (id=4407): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="6400000010000305160000001dc76dcd00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000004400128009000100626f6e6400000000340002800500010004000000050016000000000008001c000000000005000c00000000000a001a"], 0xc3}, 0x1, 0x100000000000000}, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000600)=""/4096, &(0x7f0000000180)=0x1000) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001f80)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x7}, {}, {0x7, 0xe}}, [@filter_kind_options=@f_basic={{0xa}, {0x14, 0x2, [@TCA_BASIC_EMATCHES={0x10, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_LIST={0x4}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="6400000010000305160000001dc76dcd00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000004400128009000100626f6e6400000000340002800500010004000000050016000000000008001c000000000005000c00000000000a001a"], 0xc3}, 0x1, 0x100000000000000}, 0x0) (async) socket(0x10, 0x3, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) socket(0x400000000010, 0x3, 0x0) (async) socket$unix(0x1, 0x1, 0x0) (async) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000600)=""/4096, &(0x7f0000000180)=0x1000) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001f80)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x7}, {}, {0x7, 0xe}}, [@filter_kind_options=@f_basic={{0xa}, {0x14, 0x2, [@TCA_BASIC_EMATCHES={0x10, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_LIST={0x4}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) (async) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) (async) 1.087167715s ago: executing program 5 (id=4408): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xb, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf53, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000700)='kfree\x00', r0, 0x0, 0x7}, 0x18) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x314, @void, @value}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240), 0x0) r2 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) ioctl$SG_IO(r2, 0x2285, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00'}, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001cc0)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x100, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r4 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0xe1002) ioctl$SCSI_IOCTL_SEND_COMMAND(r4, 0x1, &(0x7f0000000040)=ANY=[@ANYRES64=r3]) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'bond0\x00'}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0x18, 0x30, 0xffff, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x1300}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000026c0)=ANY=[@ANYBLOB="1000000012000501ea00000000000000"], 0x10}, 0x1, 0x0, 0x0, 0x40}, 0x20040810) 1.004911246s ago: executing program 2 (id=4409): syz_open_dev$usbfs(&(0x7f0000000040), 0x10001, 0x220000) r0 = syz_clone(0x8d002240, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$pokeuser(0x6, r0, 0xd8, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0xfd, 0x0, 0x7ffc9ffb}]}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000200)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x7fff}}, {@lazytime}, {@errors_remount}, {@quota}]}, 0x3, 0x42f, &(0x7f00000006c0)="$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") mbind(&(0x7f0000309000/0x1000)=nil, 0x1000, 0x1, 0x0, 0x0, 0x2) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000a40)={[{@stripe={'stripe', 0x3d, 0x3}}, {@noauto_da_alloc}, {@jqfmt_vfsold}, {@data_err_ignore}, {@noauto_da_alloc}, {@delalloc}, {@resuid}, {@oldalloc}, {@jqfmt_vfsv1}]}, 0xfc, 0x550, &(0x7f0000000b00)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x103042, 0x0) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f00000001c0)='\x00', 0x1}], 0x1, 0x7fff, 0x1, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000202300800000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x6, 0x0, 0x0, 0x40f00, 0x9, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000640)='kmem_cache_free\x00', r2, 0x0, 0x80001}, 0x18) statfs(&(0x7f0000000300)='./file0\x00', 0x0) 964.438527ms ago: executing program 5 (id=4410): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x4c58, 0x10000, 0x0, 0x1, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000680)='kfree\x00'}, 0x18) syz_open_dev$usbfs(0x0, 0x1ff, 0xa401) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0x21, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x6) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="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", @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0xfffffffffffffffc, &(0x7f00000002c0), 0x13f}}, 0x20) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [], 0x0, [0x4, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x0, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) 944.481567ms ago: executing program 3 (id=4411): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000004000001d8500000007000000440000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r0}, 0x10) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000580)='/sys/power/image_size', 0x1a1081, 0x18) pwritev(r1, &(0x7f0000000140)=[{&(0x7f0000000080)='2', 0x1}], 0x1, 0x3, 0x6ee0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x88040, 0x0) linkat(r2, &(0x7f0000000040)='./file0\x00', r1, &(0x7f00000000c0)='./file0\x00', 0x400) 891.617548ms ago: executing program 5 (id=4412): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f00000003c0)=ANY=[@ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000084000100b7000000000000009500000000000000"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d) ioctl$AUTOFS_IOC_FAIL(r0, 0x4c80, 0xffffffffffffffb6) unshare(0x40000000) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000300000000000000000000030000000003000000020000000000000000000000000000010500000010000000010000000000000800000000005f"], 0x0, 0x4f, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x73}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x120}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x94}}, 0x20050800) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x88e, &(0x7f0000000d80)={[{@mblk_io_submit}, {@dioread_nolock}, {@bh}, {@errors_continue}, {@nouid32}, {@quota}, {@nogrpid}]}, 0x3, 0x445, &(0x7f0000000800)="$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") r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000040), 0x208e24b) 837.177818ms ago: executing program 3 (id=4413): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000080000000c"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000000080021850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) symlink(&(0x7f0000001640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rmdir(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00') 836.632318ms ago: executing program 2 (id=4414): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r2, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x3e, &(0x7f0000000040)={@multicast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @dest_unreach={0x3, 0x1, 0x0, 0x0, 0x67, 0x1ff, {0x5, 0x4, 0x1, 0x2, 0x69d2, 0x66, 0xfff, 0x4, 0x21, 0x8, @multicast1, @multicast2}}}}}}, 0x0) 762.32311ms ago: executing program 3 (id=4415): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) socket$inet6(0xa, 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000080000000000000010000009400000007ad4160850000000f00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='netlink_extack\x00', r2}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@newtaction={0x14, 0x76, 0x1, 0x70bd29, 0xfffffffe}, 0x14}}, 0x4000) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r6 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x40000) readv(r6, &(0x7f0000000080)=[{&(0x7f0000000880)=""/97, 0x61}], 0x1) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sched_switch\x00', r8}, 0x18) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) fcntl$setown(r3, 0x8, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) unshare(0x4040600) r9 = getpid() r10 = syz_pidfd_open(r9, 0x0) pidfd_send_signal(r10, 0x2, &(0x7f0000000000)={0x2b, 0x1, 0x80}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x18040, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r11}, 0x10) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x2) 573.405553ms ago: executing program 6 (id=4416): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) ioprio_get$pid(0x3, 0x0) 484.365014ms ago: executing program 34 (id=4416): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) ioprio_get$pid(0x3, 0x0) 178.100248ms ago: executing program 1 (id=4417): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 113.843988ms ago: executing program 35 (id=4417): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 0s ago: executing program 5 (id=4419): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1, 0x0, 0x100}, 0x18) r2 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) mknod(&(0x7f0000000080)='./file0\x00', 0x40, 0x7fffffff) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4004110) openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000040)) kernel console output (not intermixed with test programs): d [ 251.056096][T14302] syz.3.3795: attempt to access beyond end of device [ 251.056096][T14302] loop3: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 251.075785][T14302] syz.3.3795: attempt to access beyond end of device [ 251.075785][T14302] loop3: rw=2049, sector=169, nr_sectors = 16 limit=128 [ 251.089431][T14302] syz.3.3795: attempt to access beyond end of device [ 251.089431][T14302] loop3: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 251.090949][T14304] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 251.102929][T14302] syz.3.3795: attempt to access beyond end of device [ 251.102929][T14302] loop3: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 251.130368][T14302] syz.3.3795: attempt to access beyond end of device [ 251.130368][T14302] loop3: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 251.143992][T14302] syz.3.3795: attempt to access beyond end of device [ 251.143992][T14302] loop3: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 251.157479][T14302] syz.3.3795: attempt to access beyond end of device [ 251.157479][T14302] loop3: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 251.171083][T14302] syz.3.3795: attempt to access beyond end of device [ 251.171083][T14302] loop3: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 251.189071][T14304] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3797'. [ 251.198210][T14302] syz.3.3795: attempt to access beyond end of device [ 251.198210][T14302] loop3: rw=2049, sector=289, nr_sectors = 9 limit=128 [ 251.255234][T14319] loop5: detected capacity change from 0 to 1024 [ 251.268091][T14319] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 251.279048][T14319] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 251.303615][T12549] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 251.313525][T14319] JBD2: no valid journal superblock found [ 251.319275][T14319] EXT4-fs (loop5): Could not load journal inode [ 251.346094][T14326] loop1: detected capacity change from 0 to 1024 [ 251.403972][T14326] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 251.406345][T14333] loop2: detected capacity change from 0 to 1024 [ 251.444200][T14333] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 251.445305][T14338] netlink: 'syz.5.3808': attribute type 39 has an invalid length. [ 251.464339][T14338] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3808'. [ 251.487188][T14333] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3807'. [ 251.490583][T14338] bridge5: entered promiscuous mode [ 251.501374][T14338] bridge5: entered allmulticast mode [ 251.516787][T12549] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 251.537114][T14342] loop3: detected capacity change from 0 to 2048 [ 251.544436][T14344] netdevsim netdevsim5: Direct firmware load for  failed with error -2 [ 251.588495][T11616] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 251.617697][T14354] loop3: detected capacity change from 0 to 1024 [ 251.638365][T14354] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 251.680622][T14354] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3816'. [ 251.710844][T14366] loop2: detected capacity change from 0 to 512 [ 251.733556][T14366] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 251.746517][T14366] ext4 filesystem being mounted at /207/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 251.784193][T12307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 251.799632][T14350] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 251.799735][T14350] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 251.830931][T14374] program syz.3.3821 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 251.849441][T14376] netlink: 'syz.3.3822': attribute type 39 has an invalid length. [ 251.863872][T14376] bridge4: entered promiscuous mode [ 251.863897][T14376] bridge4: entered allmulticast mode [ 251.918085][T14380] loop4: detected capacity change from 0 to 1024 [ 251.929798][T14380] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 251.963471][T14387] loop3: detected capacity change from 0 to 2048 [ 251.992818][T12111] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 252.015163][T14389] netlink: 'syz.4.3827': attribute type 3 has an invalid length. [ 252.071656][T14395] loop4: detected capacity change from 0 to 1024 [ 252.094106][T14395] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 252.208864][T14404] program syz.3.3833 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 252.247630][T14408] loop3: detected capacity change from 0 to 128 [ 252.254802][T14408] syz.3.3835: attempt to access beyond end of device [ 252.254802][T14408] loop3: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 252.291587][T12111] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 252.346794][T14411] loop4: detected capacity change from 0 to 2048 [ 252.454980][T14413] loop4: detected capacity change from 0 to 1024 [ 252.481761][T14413] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 252.553501][T12111] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 252.614687][T11616] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 252.626862][T14433] loop5: detected capacity change from 0 to 1024 [ 252.657977][T14433] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 252.706514][T14445] loop3: detected capacity change from 0 to 128 [ 252.724424][T14433] __nla_validate_parse: 4 callbacks suppressed [ 252.724436][T14433] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3846'. [ 252.759042][T14441] wireguard0: entered promiscuous mode [ 252.764596][T14441] wireguard0: entered allmulticast mode [ 252.834630][T11961] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 252.882718][T14457] loop5: detected capacity change from 0 to 1024 [ 252.907468][T14457] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 252.923689][T14464] FAULT_INJECTION: forcing a failure. [ 252.923689][T14464] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 252.936821][T14464] CPU: 1 UID: 0 PID: 14464 Comm: syz.3.3856 Not tainted 6.16.0-rc1-syzkaller-00157-g02adc1490e6d #0 PREEMPT(voluntary) [ 252.936873][T14464] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 252.936884][T14464] Call Trace: [ 252.936890][T14464] [ 252.936896][T14464] __dump_stack+0x1d/0x30 [ 252.936915][T14464] dump_stack_lvl+0xe8/0x140 [ 252.936932][T14464] dump_stack+0x15/0x1b [ 252.936946][T14464] should_fail_ex+0x265/0x280 [ 252.937016][T14464] should_fail+0xb/0x20 [ 252.937043][T14464] should_fail_usercopy+0x1a/0x20 [ 252.937062][T14464] _copy_from_user+0x1c/0xb0 [ 252.937087][T14464] ___sys_sendmsg+0xc1/0x1d0 [ 252.937171][T14464] __x64_sys_sendmsg+0xd4/0x160 [ 252.937259][T14464] x64_sys_call+0x2999/0x2fb0 [ 252.937277][T14464] do_syscall_64+0xd2/0x200 [ 252.937296][T14464] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 252.937381][T14464] ? clear_bhb_loop+0x40/0x90 [ 252.937400][T14464] ? clear_bhb_loop+0x40/0x90 [ 252.937420][T14464] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.937483][T14464] RIP: 0033:0x7f09e2d0e929 [ 252.937496][T14464] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 252.937512][T14464] RSP: 002b:00007f09e1377038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 252.937528][T14464] RAX: ffffffffffffffda RBX: 00007f09e2f35fa0 RCX: 00007f09e2d0e929 [ 252.937566][T14464] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000006 [ 252.937633][T14464] RBP: 00007f09e1377090 R08: 0000000000000000 R09: 0000000000000000 [ 252.937643][T14464] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 252.937724][T14464] R13: 0000000000000000 R14: 00007f09e2f35fa0 R15: 00007ffe3df65d58 [ 252.937810][T14464] [ 252.940796][T14457] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3854'. [ 252.975239][T14468] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 253.035542][T14455] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 253.093407][T14473] binfmt_misc: register: failed to install interpreter file ./file2 [ 253.097565][T14455] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 253.181768][T11961] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 253.202659][T14477] loop5: detected capacity change from 0 to 128 [ 253.210047][T14477] FAT-fs (loop5): Directory bread(block 162) failed [ 253.216957][T14477] FAT-fs (loop5): Directory bread(block 163) failed [ 253.225424][T14477] FAT-fs (loop5): Directory bread(block 164) failed [ 253.232533][T14477] FAT-fs (loop5): Directory bread(block 165) failed [ 253.239396][T14477] FAT-fs (loop5): Directory bread(block 166) failed [ 253.247554][T14477] FAT-fs (loop5): Directory bread(block 167) failed [ 253.254742][T14477] FAT-fs (loop5): Directory bread(block 168) failed [ 253.263653][T14477] FAT-fs (loop5): Directory bread(block 169) failed [ 253.273993][T14477] FAT-fs (loop5): Directory bread(block 162) failed [ 253.284104][T14477] FAT-fs (loop5): Directory bread(block 163) failed [ 253.304967][T14485] loop3: detected capacity change from 0 to 1024 [ 253.321840][T14485] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 253.337559][T14485] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3864'. [ 253.413272][T12307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 253.560962][T14502] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 253.592052][T14505] loop4: detected capacity change from 0 to 1024 [ 253.666718][T14505] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 253.689575][T14505] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3870'. [ 253.772051][T12111] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 253.788553][T14512] FAULT_INJECTION: forcing a failure. [ 253.788553][T14512] name failslab, interval 1, probability 0, space 0, times 0 [ 253.801279][T14512] CPU: 1 UID: 0 PID: 14512 Comm: syz.1.3873 Not tainted 6.16.0-rc1-syzkaller-00157-g02adc1490e6d #0 PREEMPT(voluntary) [ 253.801303][T14512] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 253.801315][T14512] Call Trace: [ 253.801322][T14512] [ 253.801330][T14512] __dump_stack+0x1d/0x30 [ 253.801352][T14512] dump_stack_lvl+0xe8/0x140 [ 253.801434][T14512] dump_stack+0x15/0x1b [ 253.801468][T14512] should_fail_ex+0x265/0x280 [ 253.801506][T14512] should_failslab+0x8c/0xb0 [ 253.801532][T14512] kmem_cache_alloc_noprof+0x50/0x310 [ 253.801562][T14512] ? skb_clone+0x151/0x1f0 [ 253.801641][T14512] skb_clone+0x151/0x1f0 [ 253.801705][T14512] __netlink_deliver_tap+0x2c9/0x500 [ 253.801797][T14512] netlink_unicast+0x64c/0x670 [ 253.801828][T14512] netlink_sendmsg+0x58b/0x6b0 [ 253.801848][T14512] ? __pfx_netlink_sendmsg+0x10/0x10 [ 253.801870][T14512] __sock_sendmsg+0x145/0x180 [ 253.801942][T14512] ____sys_sendmsg+0x31e/0x4e0 [ 253.801970][T14512] ___sys_sendmsg+0x17b/0x1d0 [ 253.802008][T14512] __x64_sys_sendmsg+0xd4/0x160 [ 253.802082][T14512] x64_sys_call+0x2999/0x2fb0 [ 253.802107][T14512] do_syscall_64+0xd2/0x200 [ 253.802130][T14512] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 253.802210][T14512] ? clear_bhb_loop+0x40/0x90 [ 253.802235][T14512] ? clear_bhb_loop+0x40/0x90 [ 253.802260][T14512] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.802284][T14512] RIP: 0033:0x7f7502bfe929 [ 253.802301][T14512] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 253.802395][T14512] RSP: 002b:00007f7501267038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 253.802416][T14512] RAX: ffffffffffffffda RBX: 00007f7502e25fa0 RCX: 00007f7502bfe929 [ 253.802430][T14512] RDX: 0000000000048000 RSI: 0000200000000000 RDI: 0000000000000003 [ 253.802490][T14512] RBP: 00007f7501267090 R08: 0000000000000000 R09: 0000000000000000 [ 253.802501][T14512] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 253.802514][T14512] R13: 0000000000000000 R14: 00007f7502e25fa0 R15: 00007ffeb2083be8 [ 253.802536][T14512] [ 254.042349][T14516] loop4: detected capacity change from 0 to 1024 [ 254.056535][T14518] loop2: detected capacity change from 0 to 1024 [ 254.064353][T14516] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 254.075310][T14516] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 254.087835][T14518] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 254.088268][T14516] JBD2: no valid journal superblock found [ 254.105828][T14516] EXT4-fs (loop4): Could not load journal inode [ 254.121491][T14525] netlink: 'syz.5.3877': attribute type 39 has an invalid length. [ 254.129392][T14525] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3877'. [ 254.137236][T14518] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3875'. [ 254.144606][T14525] bridge6: entered promiscuous mode [ 254.152608][T14525] bridge6: entered allmulticast mode [ 254.182526][T14533] netlink: 14 bytes leftover after parsing attributes in process `syz.4.3881'. [ 254.231628][T14540] loop4: detected capacity change from 0 to 128 [ 254.239401][T11616] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 254.292523][T14538] lo speed is unknown, defaulting to 1000 [ 254.431980][T14556] binfmt_misc: register: failed to install interpreter file ./file2 [ 254.472911][T14543] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 254.481438][T14543] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 254.522350][T14564] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3892'. [ 254.568090][T14570] loop3: detected capacity change from 0 to 1024 [ 254.593253][T14570] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 254.619493][T14570] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3895'. [ 254.698215][T12307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 254.720926][T14581] netlink: 14 bytes leftover after parsing attributes in process `syz.4.3899'. [ 254.807319][T14588] binfmt_misc: register: failed to install interpreter file ./file2 [ 254.950473][T14604] loop4: detected capacity change from 0 to 1024 [ 254.973634][T14604] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 254.994572][T14612] binfmt_misc: register: failed to install interpreter file ./file2 [ 255.091860][T14617] program syz.3.3913 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 255.166635][T12111] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 255.202675][T14625] loop4: detected capacity change from 0 to 1024 [ 255.210214][T14625] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 255.221406][T14625] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 255.241778][T14629] loop1: detected capacity change from 0 to 512 [ 255.263786][T14625] JBD2: no valid journal superblock found [ 255.269777][T14625] EXT4-fs (loop4): Could not load journal inode [ 255.314562][T14638] FAULT_INJECTION: forcing a failure. [ 255.314562][T14638] name failslab, interval 1, probability 0, space 0, times 0 [ 255.327404][T14638] CPU: 1 UID: 0 PID: 14638 Comm: syz.1.3923 Not tainted 6.16.0-rc1-syzkaller-00157-g02adc1490e6d #0 PREEMPT(voluntary) [ 255.327429][T14638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 255.327487][T14638] Call Trace: [ 255.327492][T14638] [ 255.327498][T14638] __dump_stack+0x1d/0x30 [ 255.327519][T14638] dump_stack_lvl+0xe8/0x140 [ 255.327539][T14638] dump_stack+0x15/0x1b [ 255.327610][T14638] should_fail_ex+0x265/0x280 [ 255.327705][T14638] should_failslab+0x8c/0xb0 [ 255.327729][T14638] kmem_cache_alloc_noprof+0x50/0x310 [ 255.327758][T14638] ? audit_log_start+0x365/0x6c0 [ 255.327788][T14638] audit_log_start+0x365/0x6c0 [ 255.327872][T14638] audit_seccomp+0x48/0x100 [ 255.327901][T14638] ? __seccomp_filter+0x68c/0x10d0 [ 255.327927][T14638] __seccomp_filter+0x69d/0x10d0 [ 255.327951][T14638] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 255.328008][T14638] ? vfs_write+0x75e/0x8e0 [ 255.328036][T14638] __secure_computing+0x82/0x150 [ 255.328121][T14638] syscall_trace_enter+0xcf/0x1e0 [ 255.328141][T14638] do_syscall_64+0xac/0x200 [ 255.328159][T14638] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 255.328186][T14638] ? clear_bhb_loop+0x40/0x90 [ 255.328206][T14638] ? clear_bhb_loop+0x40/0x90 [ 255.328260][T14638] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.328320][T14638] RIP: 0033:0x7f7502bfe929 [ 255.328336][T14638] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 255.328353][T14638] RSP: 002b:00007f7501267038 EFLAGS: 00000246 ORIG_RAX: 000000000000000c [ 255.328370][T14638] RAX: ffffffffffffffda RBX: 00007f7502e25fa0 RCX: 00007f7502bfe929 [ 255.328383][T14638] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000ffc000 [ 255.328396][T14638] RBP: 00007f7501267090 R08: 0000000000000000 R09: 0000000000000000 [ 255.328406][T14638] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 255.328444][T14638] R13: 0000000000000000 R14: 00007f7502e25fa0 R15: 00007ffeb2083be8 [ 255.328465][T14638] [ 255.562578][T14640] binfmt_misc: register: failed to install interpreter file ./file2 [ 255.598059][T14646] loop5: detected capacity change from 0 to 128 [ 255.608941][T14648] loop3: detected capacity change from 0 to 1024 [ 255.609104][T14644] loop1: detected capacity change from 0 to 2048 [ 255.644089][T14648] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 255.662784][T14654] program syz.4.3930 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 255.708010][T14658] loop1: detected capacity change from 0 to 128 [ 255.716886][T14658] FAT-fs (loop1): Directory bread(block 162) failed [ 255.723749][T14658] FAT-fs (loop1): Directory bread(block 163) failed [ 255.732255][T14658] FAT-fs (loop1): Directory bread(block 164) failed [ 255.739100][T14658] FAT-fs (loop1): Directory bread(block 165) failed [ 255.752357][ T29] kauditd_printk_skb: 57 callbacks suppressed [ 255.752390][ T29] audit: type=1326 audit(2000004202.004:25235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14660 comm="syz.4.3933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8f21de929 code=0x7ffc0000 [ 255.756122][T14658] FAT-fs (loop1): Directory bread(block 166) failed [ 255.758499][ T29] audit: type=1326 audit(2000004202.004:25236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14660 comm="syz.4.3933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8f21de929 code=0x7ffc0000 [ 255.758522][ T29] audit: type=1326 audit(2000004202.004:25237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14660 comm="syz.4.3933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=12 compat=0 ip=0x7fc8f21de929 code=0x7ffc0000 [ 255.789395][T14658] FAT-fs (loop1): Directory bread(block 167) failed [ 255.812319][ T29] audit: type=1326 audit(2000004202.004:25238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14660 comm="syz.4.3933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8f21de929 code=0x7ffc0000 [ 255.837591][T14658] FAT-fs (loop1): Directory bread(block 168) failed [ 255.882360][ T29] audit: type=1326 audit(2000004202.094:25239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14664 comm="syz.2.3935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f267eefe929 code=0x7ffc0000 [ 255.883410][T14658] FAT-fs (loop1): Directory bread(block 169) failed [ 255.905974][ T29] audit: type=1326 audit(2000004202.094:25240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14664 comm="syz.2.3935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f267eefe929 code=0x7ffc0000 [ 255.936477][ T29] audit: type=1326 audit(2000004202.094:25241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14664 comm="syz.2.3935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f267eefe929 code=0x7ffc0000 [ 255.960166][ T29] audit: type=1326 audit(2000004202.094:25242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14664 comm="syz.2.3935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f267eefe929 code=0x7ffc0000 [ 255.983898][ T29] audit: type=1326 audit(2000004202.094:25243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14664 comm="syz.2.3935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f267eefe929 code=0x7ffc0000 [ 256.015135][T14658] FAT-fs (loop1): Directory bread(block 162) failed [ 256.030959][T14658] FAT-fs (loop1): Directory bread(block 163) failed [ 256.045036][T14672] binfmt_misc: register: failed to install interpreter file ./file2 [ 256.056375][T12307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 256.087985][T14676] loop2: detected capacity change from 0 to 2048 [ 256.154341][T14685] program syz.5.3943 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 256.259135][T14697] loop5: detected capacity change from 0 to 128 [ 256.265786][T14699] loop2: detected capacity change from 0 to 128 [ 256.279088][T14699] bio_check_eod: 39 callbacks suppressed [ 256.279169][T14699] syz.2.3950: attempt to access beyond end of device [ 256.279169][T14699] loop2: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 256.300428][T14699] syz.2.3950: attempt to access beyond end of device [ 256.300428][T14699] loop2: rw=2049, sector=169, nr_sectors = 16 limit=128 [ 256.316070][T14699] syz.2.3950: attempt to access beyond end of device [ 256.316070][T14699] loop2: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 256.318207][T14697] syz.5.3949: attempt to access beyond end of device [ 256.318207][T14697] loop5: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 256.333138][T14699] syz.2.3950: attempt to access beyond end of device [ 256.333138][T14699] loop2: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 256.356539][T14697] syz.5.3949: attempt to access beyond end of device [ 256.356539][T14697] loop5: rw=2049, sector=169, nr_sectors = 16 limit=128 [ 256.373405][T14700] syz.2.3950: attempt to access beyond end of device [ 256.373405][T14700] loop2: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 256.387217][T14697] syz.5.3949: attempt to access beyond end of device [ 256.387217][T14697] loop5: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 256.403014][T14700] syz.2.3950: attempt to access beyond end of device [ 256.403014][T14700] loop2: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 256.417615][T14697] syz.5.3949: attempt to access beyond end of device [ 256.417615][T14697] loop5: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 256.524838][T14691] ref_ctr_offset mismatch. inode: 0x4b5 offset: 0x0 ref_ctr_offset(old): 0x3070 ref_ctr_offset(new): 0x0 [ 256.588875][T14707] binfmt_misc: register: failed to install interpreter file ./file2 [ 256.593727][T14704] program syz.3.3946 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 256.612148][T14709] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 256.621424][T14709] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 256.747687][ T29] audit: type=1326 audit(2000004202.994:25244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14726 comm="syz.3.3961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09e2d0e929 code=0x7ffc0000 [ 256.780211][T14727] pimreg: entered allmulticast mode [ 256.788860][T14727] pimreg: left allmulticast mode [ 256.790809][T14731] binfmt_misc: register: failed to install interpreter file ./file2 [ 256.853477][T14743] netdevsim netdevsim5: Direct firmware load for  failed with error -2 [ 256.874986][T14709] loop2: detected capacity change from 0 to 512 [ 256.893369][T14746] loop4: detected capacity change from 0 to 1024 [ 256.901317][T14709] EXT4-fs: Ignoring removed nomblk_io_submit option [ 256.909405][T14709] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 256.917421][T14709] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c01d, mo2=0102] [ 256.923185][T14750] loop3: detected capacity change from 0 to 1024 [ 256.928412][T14709] EXT4-fs (loop2): couldn't mount RDWR because of unsupported optional features (80) [ 256.941410][T14709] EXT4-fs (loop2): Skipping orphan cleanup due to unknown ROCOMPAT features [ 256.945539][T14729] unsupported nla_type 65024 [ 256.951082][T14709] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 256.975799][T14746] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 256.984777][T14750] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 256.998891][T14750] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 257.010261][T14709] EXT4-fs warning (device loop2): dx_probe:861: inode #2: comm syz.2.3952: dx entry: limit 65535 != root limit 120 [ 257.022455][T14709] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.3952: Corrupt directory, running e2fsck is recommended [ 257.037620][T14709] EXT4-fs error (device loop2): ext4_readdir:264: inode #2: block 3: comm syz.2.3952: path /225/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0 [ 257.040162][T14750] JBD2: no valid journal superblock found [ 257.063182][T14750] EXT4-fs (loop3): Could not load journal inode [ 257.111136][T12111] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 257.134502][T14765] loop4: detected capacity change from 0 to 2048 [ 257.158143][T14768] loop3: detected capacity change from 0 to 1024 [ 257.173649][T14768] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 257.249005][T12307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 257.324031][T14793] loop1: detected capacity change from 0 to 2048 [ 257.337842][T14795] program syz.4.3989 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 257.362921][T14797] loop4: detected capacity change from 0 to 128 [ 257.458071][T14805] loop1: detected capacity change from 0 to 1024 [ 257.471765][T14805] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 257.508417][T14789] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 257.517115][T14789] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 257.543756][T12549] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 257.557113][T14814] 9pnet_fd: Insufficient options for proto=fd [ 257.573671][T14816] program syz.1.3997 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 257.587849][T11616] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 257.605274][T14820] binfmt_misc: register: failed to install interpreter file ./file2 [ 257.644659][T14824] loop1: detected capacity change from 0 to 2048 [ 257.675627][T14830] netlink: 'syz.4.4006': attribute type 39 has an invalid length. [ 257.678815][T14832] loop2: detected capacity change from 0 to 128 [ 257.686987][T14830] bridge3: entered promiscuous mode [ 257.695177][T14830] bridge3: entered allmulticast mode [ 257.717002][T14834] loop4: detected capacity change from 0 to 128 [ 257.829381][T14842] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 257.837990][T14842] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 257.897868][T14845] binfmt_misc: register: failed to install interpreter file ./file2 [ 257.959134][T14850] program syz.5.4014 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 258.038386][T14864] loop5: detected capacity change from 0 to 1024 [ 258.049746][T14842] loop1: detected capacity change from 0 to 512 [ 258.056476][T14842] EXT4-fs: Ignoring removed nomblk_io_submit option [ 258.066900][T14864] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 258.068613][T14867] loop2: detected capacity change from 0 to 512 [ 258.087602][T14864] __nla_validate_parse: 12 callbacks suppressed [ 258.087613][T14864] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4021'. [ 258.088635][T14842] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 258.095951][T14867] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 258.102862][T14842] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c01d, mo2=0102] [ 258.120540][T14867] ext4 filesystem being mounted at /233/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 258.123365][T14842] EXT4-fs (loop1): couldn't mount RDWR because of unsupported optional features (80) [ 258.150978][T14842] EXT4-fs (loop1): Skipping orphan cleanup due to unknown ROCOMPAT features [ 258.151562][T14842] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 258.175987][T14842] EXT4-fs warning (device loop1): dx_probe:861: inode #2: comm syz.1.4011: dx entry: limit 65535 != root limit 120 [ 258.176015][T14842] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.4011: Corrupt directory, running e2fsck is recommended [ 258.176048][T14842] EXT4-fs error (device loop1): ext4_readdir:264: inode #2: block 3: comm syz.1.4011: path /195/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0 [ 258.223508][T11961] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 258.255673][T14877] loop5: detected capacity change from 0 to 128 [ 258.370338][T14886] loop3: detected capacity change from 0 to 1024 [ 258.377286][T14886] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 258.377306][T14886] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 258.378565][T14886] JBD2: no valid journal superblock found [ 258.404124][T14886] EXT4-fs (loop3): Could not load journal inode [ 258.503812][T14890] loop3: detected capacity change from 0 to 512 [ 258.510721][T14890] EXT4-fs error (device loop3): ext4_xattr_inode_iget:433: comm syz.3.4029: Parent and EA inode have the same ino 15 [ 258.525696][T14890] EXT4-fs (loop3): Remounting filesystem read-only [ 258.533006][T14890] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 258.533027][T14890] EXT4-fs warning (device loop3): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 258.533057][T14890] EXT4-fs (loop3): 1 orphan inode deleted [ 258.533783][T14890] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 258.608428][T14890] netlink: 830 bytes leftover after parsing attributes in process `syz.3.4029'. [ 258.668303][T12307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 258.741291][T12549] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 258.922936][T11616] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 258.933889][T14915] loop3: detected capacity change from 0 to 1024 [ 258.943730][T14915] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 258.954683][T14915] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 259.013055][T14916] lo speed is unknown, defaulting to 1000 [ 259.097426][T14916] loop1: detected capacity change from 0 to 512 [ 259.104079][T14916] EXT4-fs: Ignoring removed mblk_io_submit option [ 259.110568][T14916] EXT4-fs: Ignoring removed bh option [ 259.142212][T14916] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 259.173928][T14916] EXT4-fs (loop1): 1 truncate cleaned up [ 259.180686][T14916] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 259.269975][T14919] lo speed is unknown, defaulting to 1000 [ 259.293636][T14915] JBD2: no valid journal superblock found [ 259.299404][T14915] EXT4-fs (loop3): Could not load journal inode [ 259.301417][T14919] lo speed is unknown, defaulting to 1000 [ 259.314267][T14919] lo speed is unknown, defaulting to 1000 [ 259.323778][T14919] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 259.333761][T14919] lo speed is unknown, defaulting to 1000 [ 259.340457][T14919] lo speed is unknown, defaulting to 1000 [ 259.346873][T14919] lo speed is unknown, defaulting to 1000 [ 259.352942][T14919] lo speed is unknown, defaulting to 1000 [ 259.359203][T14919] lo speed is unknown, defaulting to 1000 [ 259.365211][T14919] lo speed is unknown, defaulting to 1000 [ 259.371750][T14919] lo speed is unknown, defaulting to 1000 [ 259.377721][T14919] lo speed is unknown, defaulting to 1000 [ 259.384031][T14919] lo speed is unknown, defaulting to 1000 [ 259.413961][T14922] loop2: detected capacity change from 0 to 128 [ 259.511569][T14934] netdevsim netdevsim3: Direct firmware load for  failed with error -2 [ 259.594212][T14941] loop2: detected capacity change from 0 to 512 [ 259.602944][T14944] loop3: detected capacity change from 0 to 128 [ 259.610415][T14944] vfat: Unknown parameter 'ÿÿ' [ 259.681753][T12549] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 259.698008][T14941] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 259.733782][T14941] ext4 filesystem being mounted at /236/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 260.049094][T14960] loop3: detected capacity change from 0 to 512 [ 260.064441][T14960] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 260.064581][T14960] ext4 filesystem being mounted at /257/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 260.444604][T11616] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 260.478245][T14969] netdevsim netdevsim5: Direct firmware load for  failed with error -2 [ 260.489429][T14971] loop2: detected capacity change from 0 to 128 [ 260.668299][T14987] netlink: 'syz.1.4067': attribute type 39 has an invalid length. [ 260.676229][T14987] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4067'. [ 260.694548][T14987] bridge6: entered promiscuous mode [ 260.699830][T14987] bridge6: entered allmulticast mode [ 260.715938][T14989] loop2: detected capacity change from 0 to 512 [ 260.752373][T14989] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 260.767139][T14989] ext4 filesystem being mounted at /240/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 260.795010][T14997] loop1: detected capacity change from 0 to 128 [ 260.809013][T14999] loop4: detected capacity change from 0 to 1024 [ 260.813977][T14999] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 260.814004][T14999] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 260.814759][T14999] JBD2: no valid journal superblock found [ 260.814774][T14999] EXT4-fs (loop4): Could not load journal inode [ 260.875580][T15002] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4073'. [ 260.927391][T12307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 260.965350][T15006] loop4: detected capacity change from 0 to 1024 [ 260.966525][T15008] loop3: detected capacity change from 0 to 128 [ 260.983164][T15006] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 260.985394][T15006] EXT4-fs error (device loop4): ext4_xattr_inode_iget:437: inode #11: comm syz.4.4075: missing EA_INODE flag [ 260.985558][T15006] EXT4-fs (loop4): Remounting filesystem read-only [ 260.986865][ T29] kauditd_printk_skb: 145 callbacks suppressed [ 260.986880][ T29] audit: type=1400 audit(2000004207.234:25390): avc: denied { unlink } for pid=15005 comm="syz.4.4075" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 261.165010][T15019] loop1: detected capacity change from 0 to 512 [ 261.181880][T15020] program syz.4.4079 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 261.205580][T15019] ext4 filesystem being mounted at /206/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 261.238599][ T29] audit: type=1326 audit(2000004207.474:25391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15018 comm="syz.1.4080" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7502bfe929 code=0x0 [ 261.414738][T15035] loop4: detected capacity change from 0 to 1024 [ 261.447700][T15035] EXT4-fs error (device loop4): ext4_xattr_inode_iget:437: inode #11: comm syz.4.4086: missing EA_INODE flag [ 261.447929][T15035] EXT4-fs (loop4): Remounting filesystem read-only [ 261.448325][T15035] FAULT_INJECTION: forcing a failure. [ 261.448325][T15035] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 261.448351][T15035] CPU: 1 UID: 0 PID: 15035 Comm: syz.4.4086 Not tainted 6.16.0-rc1-syzkaller-00157-g02adc1490e6d #0 PREEMPT(voluntary) [ 261.448455][T15035] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 261.448470][T15035] Call Trace: [ 261.448477][T15035] [ 261.448485][T15035] __dump_stack+0x1d/0x30 [ 261.448509][T15035] dump_stack_lvl+0xe8/0x140 [ 261.448562][T15035] dump_stack+0x15/0x1b [ 261.448580][T15035] should_fail_ex+0x265/0x280 [ 261.448633][T15035] should_fail+0xb/0x20 [ 261.448658][T15035] should_fail_usercopy+0x1a/0x20 [ 261.448675][T15035] _copy_from_user+0x1c/0xb0 [ 261.448770][T15035] io_submit_one+0x52/0x11d0 [ 261.448809][T15035] __se_sys_io_submit+0xfb/0x280 [ 261.448872][T15035] __x64_sys_io_submit+0x43/0x50 [ 261.448894][T15035] x64_sys_call+0xfc4/0x2fb0 [ 261.448960][T15035] do_syscall_64+0xd2/0x200 [ 261.448982][T15035] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 261.449024][T15035] ? clear_bhb_loop+0x40/0x90 [ 261.449048][T15035] ? clear_bhb_loop+0x40/0x90 [ 261.449069][T15035] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 261.449089][T15035] RIP: 0033:0x7fc8f21de929 [ 261.449105][T15035] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 261.449125][T15035] RSP: 002b:00007fc8f0847038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 261.449208][T15035] RAX: ffffffffffffffda RBX: 00007fc8f2405fa0 RCX: 00007fc8f21de929 [ 261.449219][T15035] RDX: 0000200000000300 RSI: 0000000000000001 RDI: 00007fc8f0816000 [ 261.449231][T15035] RBP: 00007fc8f0847090 R08: 0000000000000000 R09: 0000000000000000 [ 261.449241][T15035] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 261.449251][T15035] R13: 0000000000000000 R14: 00007fc8f2405fa0 R15: 00007ffde161c098 [ 261.449323][T15035] [ 261.455313][T15041] loop5: detected capacity change from 0 to 512 [ 261.478696][T15041] ext4 filesystem being mounted at /186/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 261.522619][ T29] audit: type=1326 audit(2000004207.764:25392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15040 comm="syz.5.4087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bb7f4e929 code=0x7ffc0000 [ 261.739336][ T29] audit: type=1326 audit(2000004207.764:25393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15040 comm="syz.5.4087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9bb7f4e929 code=0x7ffc0000 [ 261.762988][ T29] audit: type=1326 audit(2000004207.764:25394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15040 comm="syz.5.4087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bb7f4e929 code=0x7ffc0000 [ 261.786656][ T29] audit: type=1326 audit(2000004207.764:25395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15040 comm="syz.5.4087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9bb7f4e929 code=0x7ffc0000 [ 261.810254][ T29] audit: type=1326 audit(2000004207.764:25396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15040 comm="syz.5.4087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bb7f4e929 code=0x7ffc0000 [ 261.833813][ T29] audit: type=1326 audit(2000004207.764:25397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15040 comm="syz.5.4087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9bb7f4e929 code=0x7ffc0000 [ 261.857593][ T29] audit: type=1326 audit(2000004207.764:25398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15040 comm="syz.5.4087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bb7f4e929 code=0x7ffc0000 [ 261.881316][ T29] audit: type=1326 audit(2000004207.764:25399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15040 comm="syz.5.4087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9bb7f4e929 code=0x7ffc0000 [ 261.949339][T15052] loop5: detected capacity change from 0 to 128 [ 261.964258][T15052] bio_check_eod: 172 callbacks suppressed [ 261.964274][T15052] syz.5.4091: attempt to access beyond end of device [ 261.964274][T15052] loop5: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 261.989495][T15047] loop2: detected capacity change from 0 to 1024 [ 262.012136][T15053] syz.5.4091: attempt to access beyond end of device [ 262.012136][T15053] loop5: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 262.027761][T15053] syz.5.4091: attempt to access beyond end of device [ 262.027761][T15053] loop5: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 262.041449][T15053] syz.5.4091: attempt to access beyond end of device [ 262.041449][T15053] loop5: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 262.055501][T15053] syz.5.4091: attempt to access beyond end of device [ 262.055501][T15053] loop5: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 262.069096][T15053] syz.5.4091: attempt to access beyond end of device [ 262.069096][T15053] loop5: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 262.084805][T15059] loop1: detected capacity change from 0 to 128 [ 262.088396][T15047] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4089'. [ 262.135279][T15059] syz.1.4092: attempt to access beyond end of device [ 262.135279][T15059] loop1: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 262.187813][T15061] lo speed is unknown, defaulting to 1000 [ 262.194106][T15061] lo speed is unknown, defaulting to 1000 [ 262.246574][T15061] loop4: detected capacity change from 0 to 512 [ 262.253363][T15061] EXT4-fs: Ignoring removed mblk_io_submit option [ 262.259843][T15061] EXT4-fs: Ignoring removed bh option [ 262.272473][T15061] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 262.328671][T15061] EXT4-fs (loop4): 1 truncate cleaned up [ 262.377094][T15059] syz.1.4092: attempt to access beyond end of device [ 262.377094][T15059] loop1: rw=2049, sector=169, nr_sectors = 16 limit=128 [ 262.400265][T15052] syz.5.4091: attempt to access beyond end of device [ 262.400265][T15052] loop5: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 262.429028][T15066] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4093'. [ 262.441201][T15064] syz.1.4092: attempt to access beyond end of device [ 262.441201][T15064] loop1: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 262.467841][T15066] erspan0: entered promiscuous mode [ 262.527157][T15066] erspan0: left promiscuous mode [ 262.581782][T15074] loop2: detected capacity change from 0 to 1024 [ 262.614054][T15074] EXT4-fs error (device loop2): ext4_xattr_inode_iget:437: inode #11: comm syz.2.4096: missing EA_INODE flag [ 262.636980][T15083] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 262.666312][T15074] EXT4-fs (loop2): Remounting filesystem read-only [ 262.684495][T15083] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 262.702405][T15074] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4096'. [ 262.880025][T15089] lo speed is unknown, defaulting to 1000 [ 262.886290][T15089] lo speed is unknown, defaulting to 1000 [ 263.000616][T15089] loop3: detected capacity change from 0 to 512 [ 263.008345][T15089] EXT4-fs: Ignoring removed mblk_io_submit option [ 263.014884][T15089] EXT4-fs: Ignoring removed bh option [ 263.021202][T15089] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 263.039221][T15088] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 263.056000][T15089] EXT4-fs (loop3): 1 truncate cleaned up [ 263.132697][T15083] loop5: detected capacity change from 0 to 512 [ 263.153875][T15083] EXT4-fs: Ignoring removed nomblk_io_submit option [ 263.167465][T15088] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 263.186071][T15092] netlink: 14 bytes leftover after parsing attributes in process `syz.2.4101'. [ 263.198461][T15083] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 263.206435][T15083] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c01d, mo2=0102] [ 263.215075][T15083] EXT4-fs (loop5): couldn't mount RDWR because of unsupported optional features (80) [ 263.224601][T15083] EXT4-fs (loop5): Skipping orphan cleanup due to unknown ROCOMPAT features [ 263.228851][T15095] loop2: detected capacity change from 0 to 512 [ 263.236680][T15083] EXT4-fs warning (device loop5): dx_probe:861: inode #2: comm syz.5.4099: dx entry: limit 65535 != root limit 120 [ 263.251832][T15083] EXT4-fs warning (device loop5): dx_probe:934: inode #2: comm syz.5.4099: Corrupt directory, running e2fsck is recommended [ 263.262253][T15095] ext4 filesystem being mounted at /246/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 263.265257][T15083] EXT4-fs error (device loop5): ext4_readdir:264: inode #2: block 3: comm syz.5.4099: path /189/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0 [ 263.518708][T15106] loop3: detected capacity change from 0 to 1024 [ 263.547021][T15106] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4104'. [ 263.625508][T15115] FAULT_INJECTION: forcing a failure. [ 263.625508][T15115] name failslab, interval 1, probability 0, space 0, times 0 [ 263.638198][T15115] CPU: 1 UID: 0 PID: 15115 Comm: syz.3.4107 Not tainted 6.16.0-rc1-syzkaller-00157-g02adc1490e6d #0 PREEMPT(voluntary) [ 263.638225][T15115] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 263.638236][T15115] Call Trace: [ 263.638243][T15115] [ 263.638250][T15115] __dump_stack+0x1d/0x30 [ 263.638310][T15115] dump_stack_lvl+0xe8/0x140 [ 263.638377][T15115] dump_stack+0x15/0x1b [ 263.638389][T15115] should_fail_ex+0x265/0x280 [ 263.638464][T15115] should_failslab+0x8c/0xb0 [ 263.638481][T15115] kmem_cache_alloc_noprof+0x50/0x310 [ 263.638580][T15115] ? audit_log_start+0x365/0x6c0 [ 263.638606][T15115] audit_log_start+0x365/0x6c0 [ 263.638677][T15115] audit_seccomp+0x48/0x100 [ 263.638697][T15115] ? __seccomp_filter+0x68c/0x10d0 [ 263.638714][T15115] __seccomp_filter+0x69d/0x10d0 [ 263.638731][T15115] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 263.638774][T15115] ? vfs_write+0x75e/0x8e0 [ 263.638796][T15115] ? __rcu_read_unlock+0x4f/0x70 [ 263.638812][T15115] ? __fget_files+0x184/0x1c0 [ 263.638832][T15115] __secure_computing+0x82/0x150 [ 263.638849][T15115] syscall_trace_enter+0xcf/0x1e0 [ 263.638867][T15115] do_syscall_64+0xac/0x200 [ 263.638953][T15115] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 263.638972][T15115] ? clear_bhb_loop+0x40/0x90 [ 263.638987][T15115] ? clear_bhb_loop+0x40/0x90 [ 263.639071][T15115] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.639184][T15115] RIP: 0033:0x7f09e2d0e929 [ 263.639195][T15115] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 263.639208][T15115] RSP: 002b:00007f09e1377038 EFLAGS: 00000246 ORIG_RAX: 000000000000011f [ 263.639222][T15115] RAX: ffffffffffffffda RBX: 00007f09e2f35fa0 RCX: 00007f09e2d0e929 [ 263.639231][T15115] RDX: 0000000000000000 RSI: 00002000000007c0 RDI: 0000000000000004 [ 263.639241][T15115] RBP: 00007f09e1377090 R08: 0000000000000000 R09: 0000000000000000 [ 263.639302][T15115] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 263.639311][T15115] R13: 0000000000000000 R14: 00007f09e2f35fa0 R15: 00007ffe3df65d58 [ 263.639327][T15115] [ 263.881265][T15117] lo speed is unknown, defaulting to 1000 [ 263.887420][T15117] lo speed is unknown, defaulting to 1000 [ 263.897755][T15119] loop4: detected capacity change from 0 to 128 [ 264.034725][T15123] loop3: detected capacity change from 0 to 512 [ 264.065837][T15123] ext4 filesystem being mounted at /268/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 264.146054][T15135] loop2: detected capacity change from 0 to 1024 [ 264.160095][T15135] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4115'. [ 264.264880][T15143] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4117'. [ 264.628375][T15151] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 264.628634][T15151] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 264.834995][T15155] netlink: 14 bytes leftover after parsing attributes in process `syz.5.4120'. [ 264.858602][T15157] FAULT_INJECTION: forcing a failure. [ 264.858602][T15157] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 264.858692][T15157] CPU: 1 UID: 0 PID: 15157 Comm: syz.5.4121 Not tainted 6.16.0-rc1-syzkaller-00157-g02adc1490e6d #0 PREEMPT(voluntary) [ 264.858726][T15157] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 264.858742][T15157] Call Trace: [ 264.858749][T15157] [ 264.858758][T15157] __dump_stack+0x1d/0x30 [ 264.858840][T15157] dump_stack_lvl+0xe8/0x140 [ 264.858864][T15157] dump_stack+0x15/0x1b [ 264.858884][T15157] should_fail_ex+0x265/0x280 [ 264.858967][T15157] should_fail+0xb/0x20 [ 264.859006][T15157] should_fail_usercopy+0x1a/0x20 [ 264.859102][T15157] _copy_from_user+0x1c/0xb0 [ 264.859193][T15157] ___sys_sendmsg+0xc1/0x1d0 [ 264.859239][T15157] __x64_sys_sendmsg+0xd4/0x160 [ 264.859272][T15157] x64_sys_call+0x2999/0x2fb0 [ 264.859298][T15157] do_syscall_64+0xd2/0x200 [ 264.859399][T15157] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 264.859441][T15157] ? clear_bhb_loop+0x40/0x90 [ 264.859530][T15157] ? clear_bhb_loop+0x40/0x90 [ 264.859564][T15157] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 264.859597][T15157] RIP: 0033:0x7f9bb7f4e929 [ 264.859641][T15157] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 264.859669][T15157] RSP: 002b:00007f9bb65b7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 264.859696][T15157] RAX: ffffffffffffffda RBX: 00007f9bb8175fa0 RCX: 00007f9bb7f4e929 [ 264.859713][T15157] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000004 [ 264.859731][T15157] RBP: 00007f9bb65b7090 R08: 0000000000000000 R09: 0000000000000000 [ 264.859748][T15157] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 264.859788][T15157] R13: 0000000000000000 R14: 00007f9bb8175fa0 R15: 00007ffdb54932b8 [ 264.859817][T15157] [ 264.971839][T15162] loop4: detected capacity change from 0 to 128 [ 265.113942][T15166] loop3: detected capacity change from 0 to 128 [ 265.138135][T15170] loop1: detected capacity change from 0 to 1024 [ 265.183523][T15170] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4127'. [ 265.238462][T15175] loop4: detected capacity change from 0 to 128 [ 265.246094][T15175] FAT-fs (loop4): Directory bread(block 162) failed [ 265.252837][T15175] FAT-fs (loop4): Directory bread(block 163) failed [ 265.259508][T15175] FAT-fs (loop4): Directory bread(block 164) failed [ 265.266243][T15175] FAT-fs (loop4): Directory bread(block 165) failed [ 265.273116][T15175] FAT-fs (loop4): Directory bread(block 166) failed [ 265.291030][T15175] FAT-fs (loop4): Directory bread(block 167) failed [ 265.297671][T15175] FAT-fs (loop4): Directory bread(block 168) failed [ 265.300675][T15179] loop1: detected capacity change from 0 to 1024 [ 265.311637][T15175] FAT-fs (loop4): Directory bread(block 169) failed [ 265.319295][T15175] FAT-fs (loop4): Directory bread(block 162) failed [ 265.326132][T15175] FAT-fs (loop4): Directory bread(block 163) failed [ 265.354145][T15179] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4130'. [ 265.365085][T15186] binfmt_misc: register: failed to install interpreter file ./file2 [ 265.468673][T15198] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.544013][T15198] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.593579][T15198] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.643656][T15198] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.699557][T15198] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.710987][T15198] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.722621][T15198] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.734089][T15198] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.793139][T15207] binfmt_misc: register: failed to install interpreter file ./file2 [ 265.815914][T15209] loop5: detected capacity change from 0 to 128 [ 265.882729][T15211] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4142'. [ 265.892561][T15211] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 265.900179][T15211] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 265.908904][T15211] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 265.916373][T15211] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 266.150036][T15214] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 266.163506][T15214] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 266.235251][T15226] binfmt_misc: register: failed to install interpreter file ./file2 [ 266.247098][T15228] loop3: detected capacity change from 0 to 2048 [ 266.335892][T15238] loop2: detected capacity change from 0 to 1024 [ 266.348284][T15238] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 266.359248][T15238] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 266.372747][T15238] JBD2: no valid journal superblock found [ 266.374148][T15240] loop3: detected capacity change from 0 to 1024 [ 266.378490][T15238] EXT4-fs (loop2): Could not load journal inode [ 266.397626][T15242] loop4: detected capacity change from 0 to 128 [ 266.408994][T15240] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4152'. [ 266.489455][T15248] netdevsim netdevsim2: Direct firmware load for  failed with error -2 [ 266.558265][T15254] binfmt_misc: register: failed to install interpreter file ./file2 [ 266.583592][ T29] kauditd_printk_skb: 78 callbacks suppressed [ 266.583609][ T29] audit: type=1400 audit(2000004212.834:25476): avc: denied { ioctl } for pid=15251 comm="syz.4.4156" path="socket:[43513]" dev="sockfs" ino=43513 ioctlcmd=0x89f2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 266.603833][T15258] loop2: detected capacity change from 0 to 2048 [ 266.623223][T15252] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4156'. [ 266.728627][T15267] netdevsim netdevsim4: Direct firmware load for  failed with error -2 [ 266.799619][ T29] audit: type=1326 audit(2000004213.044:25477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15276 comm="syz.4.4166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8f21de929 code=0x7ffc0000 [ 266.825166][ T29] audit: type=1326 audit(2000004213.044:25478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15276 comm="syz.4.4166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fc8f21de929 code=0x7ffc0000 [ 266.848965][ T29] audit: type=1326 audit(2000004213.044:25479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15276 comm="syz.4.4166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fc8f21de963 code=0x7ffc0000 [ 266.859205][T15277] loop4: detected capacity change from 0 to 512 [ 266.872609][ T29] audit: type=1326 audit(2000004213.044:25480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15276 comm="syz.4.4166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fc8f21dd3df code=0x7ffc0000 [ 266.882735][T15281] FAULT_INJECTION: forcing a failure. [ 266.882735][T15281] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 266.901965][ T29] audit: type=1326 audit(2000004213.044:25481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15276 comm="syz.4.4166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fc8f21de9b7 code=0x7ffc0000 [ 266.907988][ T29] audit: type=1326 audit(2000004213.104:25482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15276 comm="syz.4.4166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc8f21dd290 code=0x7ffc0000 [ 266.915243][T15281] CPU: 0 UID: 0 PID: 15281 Comm: syz.2.4164 Not tainted 6.16.0-rc1-syzkaller-00157-g02adc1490e6d #0 PREEMPT(voluntary) [ 266.915272][T15281] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 266.915288][T15281] Call Trace: [ 266.915296][T15281] [ 266.915305][T15281] __dump_stack+0x1d/0x30 [ 266.915378][T15281] dump_stack_lvl+0xe8/0x140 [ 266.915401][T15281] dump_stack+0x15/0x1b [ 266.915421][T15281] should_fail_ex+0x265/0x280 [ 266.915542][T15281] should_fail_alloc_page+0xf2/0x100 [ 266.915573][T15281] __alloc_frozen_pages_noprof+0xff/0x360 [ 266.915750][T15281] alloc_pages_mpol+0xb3/0x250 [ 266.915788][T15281] vma_alloc_folio_noprof+0x1aa/0x300 [ 266.915827][T15281] handle_mm_fault+0xec2/0x2be0 [ 266.915851][T15281] ? __rcu_read_unlock+0x4f/0x70 [ 266.915959][T15281] do_user_addr_fault+0x3fe/0x1090 [ 266.916002][T15281] exc_page_fault+0x62/0xa0 [ 266.916040][T15281] asm_exc_page_fault+0x26/0x30 [ 266.916064][T15281] RIP: 0010:filldir64+0x1ee/0x420 [ 266.916223][T15281] Code: c4 ff 48 89 ef 4c 89 f6 e8 7f 32 c4 ff 4c 39 f5 0f 82 ab 01 00 00 4c 39 e5 0f 87 a2 01 00 00 0f 01 cb 0f ae e8 48 8b 44 24 40 <49> 89 46 08 48 8b 6c 24 10 48 8b 44 24 38 48 89 45 00 48 8b 04 24 [ 266.916243][T15281] RSP: 0018:ffffc9000432bd30 EFLAGS: 00050283 [ 266.916261][T15281] RAX: 0000000000000000 RBX: 0000000000000004 RCX: ffff888101c130c0 [ 266.916277][T15281] RDX: 0000000000000000 RSI: 0000200000002f40 RDI: 0000200000002f58 [ 266.916292][T15281] RBP: 0000200000002f58 R08: 0001c9000432bea7 R09: 0000000000000000 [ 266.916307][T15281] R10: 0000000000000001 R11: ffffffff819391a0 R12: 00007ffffffff000 [ 266.916402][T15281] R13: 0000000000000001 R14: 0000200000002f40 R15: ffffffff8642b205 [ 266.916421][T15281] ? __pfx_filldir64+0x10/0x10 [ 266.916504][T15281] ? __pfx_filldir64+0x10/0x10 [ 266.916542][T15281] proc_readfd_common+0x10a/0x3b0 [ 266.916578][T15281] ? selinux_file_permission+0x1e4/0x320 [ 266.916685][T15281] ? __pfx_proc_fd_instantiate+0x10/0x10 [ 266.916726][T15281] proc_fd_iterate+0x24/0x30 [ 266.916762][T15281] iterate_dir+0x114/0x330 [ 266.916809][T15281] ? mutex_lock+0xd/0x30 [ 266.916845][T15281] __se_sys_getdents64+0x88/0x1b0 [ 266.916923][T15281] ? __pfx_filldir64+0x10/0x10 [ 266.917034][T15281] __x64_sys_getdents64+0x43/0x50 [ 266.917109][T15281] x64_sys_call+0x1302/0x2fb0 [ 266.917134][T15281] do_syscall_64+0xd2/0x200 [ 266.917158][T15281] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 266.917192][T15281] ? clear_bhb_loop+0x40/0x90 [ 266.917217][T15281] ? clear_bhb_loop+0x40/0x90 [ 266.917291][T15281] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.917316][T15281] RIP: 0033:0x7f267eefe929 [ 266.917333][T15281] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 266.917355][T15281] RSP: 002b:00007f267d4f2038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 266.917377][T15281] RAX: ffffffffffffffda RBX: 00007f267f126160 RCX: 00007f267eefe929 [ 266.917392][T15281] RDX: 0000000000001002 RSI: 0000200000002f40 RDI: 0000000000000006 [ 266.917407][T15281] RBP: 00007f267d4f2090 R08: 0000000000000000 R09: 0000000000000000 [ 266.917467][T15281] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 266.917482][T15281] R13: 0000000000000000 R14: 00007f267f126160 R15: 00007ffdd8e05168 [ 266.917511][T15281] [ 266.922337][T15277] EXT4-fs: Invalid want_extra_isize 32767 [ 266.938760][ T29] audit: type=1326 audit(2000004213.104:25483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15276 comm="syz.4.4166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc8f21de52b code=0x7ffc0000 [ 267.057347][T15283] loop4: detected capacity change from 0 to 1024 [ 267.151377][ T29] audit: type=1326 audit(2000004213.174:25484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15276 comm="syz.4.4166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fc8f21dd58a code=0x7ffc0000 [ 267.159157][T15283] EXT4-fs: Ignoring removed oldalloc option [ 267.161103][ T29] audit: type=1326 audit(2000004213.174:25485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15276 comm="syz.4.4166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fc8f21dd58a code=0x7ffc0000 [ 267.165740][T15283] EXT4-fs (loop4): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 267.240761][T15287] hub 9-0:1.0: USB hub found [ 267.376777][T12111] EXT4-fs error (device loop4): ext4_readdir:264: inode #11: block 32: comm syz-executor: path /218/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 267.391865][T15287] hub 9-0:1.0: 8 ports detected [ 267.412635][T12111] EXT4-fs error (device loop4): ext4_empty_dir:3084: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 267.440914][T12111] EXT4-fs warning (device loop4): ext4_empty_dir:3086: inode #11: comm syz-executor: directory missing '.' [ 267.452562][T12111] EXT4-fs error (device loop4): ext4_readdir:264: inode #11: block 32: comm syz-executor: path /218/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 267.478253][T15291] binfmt_misc: register: failed to install interpreter file ./file2 [ 267.500776][T12111] EXT4-fs error (device loop4): ext4_empty_dir:3084: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 267.545341][T15293] loop5: detected capacity change from 0 to 512 [ 267.560364][T12111] EXT4-fs warning (device loop4): ext4_empty_dir:3086: inode #11: comm syz-executor: directory missing '.' [ 267.572253][T15295] loop3: detected capacity change from 0 to 2048 [ 267.584515][T15293] EXT4-fs error (device loop5): ext4_xattr_inode_iget:433: comm syz.5.4170: Parent and EA inode have the same ino 15 [ 267.607305][T12111] EXT4-fs error (device loop4): ext4_readdir:264: inode #11: block 32: comm syz-executor: path /218/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 267.638310][T12111] EXT4-fs error (device loop4): ext4_empty_dir:3084: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 267.640450][T15293] EXT4-fs (loop5): Remounting filesystem read-only [ 267.658117][T12111] EXT4-fs warning (device loop4): ext4_empty_dir:3086: inode #11: comm syz-executor: directory missing '.' [ 267.675649][T12111] EXT4-fs error (device loop4): ext4_readdir:264: inode #11: block 32: comm syz-executor: path /218/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 267.689351][T15303] loop3: detected capacity change from 0 to 128 [ 267.701368][T15293] EXT4-fs warning (device loop5): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 267.713980][T12111] EXT4-fs error (device loop4): ext4_empty_dir:3084: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 267.723136][T15303] bio_check_eod: 56 callbacks suppressed [ 267.723154][T15303] syz.3.4174: attempt to access beyond end of device [ 267.723154][T15303] loop3: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 267.744760][T15293] EXT4-fs (loop5): 1 orphan inode deleted [ 267.754421][T15303] syz.3.4174: attempt to access beyond end of device [ 267.754421][T15303] loop3: rw=2049, sector=169, nr_sectors = 16 limit=128 [ 267.758082][T12111] EXT4-fs warning (device loop4): ext4_empty_dir:3086: inode #11: comm syz-executor: directory missing '.' [ 267.771640][T15303] syz.3.4174: attempt to access beyond end of device [ 267.771640][T15303] loop3: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 267.791280][T12111] EXT4-fs error (device loop4): ext4_readdir:264: inode #11: block 32: comm syz-executor: path /218/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 267.824414][T15303] syz.3.4174: attempt to access beyond end of device [ 267.824414][T15303] loop3: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 267.848246][T15303] syz.3.4174: attempt to access beyond end of device [ 267.848246][T15303] loop3: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 267.864189][T12111] EXT4-fs error (device loop4): ext4_empty_dir:3084: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 267.902705][T15303] syz.3.4174: attempt to access beyond end of device [ 267.902705][T15303] loop3: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 267.915267][T12111] EXT4-fs warning (device loop4): ext4_empty_dir:3086: inode #11: comm syz-executor: directory missing '.' [ 267.919784][T15303] syz.3.4174: attempt to access beyond end of device [ 267.919784][T15303] loop3: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 267.930747][T12111] EXT4-fs warning (device loop4): ext4_empty_dir:3086: inode #11: comm syz-executor: directory missing '.' [ 267.941874][T15303] syz.3.4174: attempt to access beyond end of device [ 267.941874][T15303] loop3: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 267.954102][T12111] EXT4-fs warning (device loop4): ext4_empty_dir:3086: inode #11: comm syz-executor: directory missing '.' [ 267.970724][T15307] syz.3.4174: attempt to access beyond end of device [ 267.970724][T15307] loop3: rw=2049, sector=297, nr_sectors = 1 limit=128 [ 267.979280][T12111] EXT4-fs warning (device loop4): ext4_empty_dir:3086: inode #11: comm syz-executor: directory missing '.' [ 268.003381][T12111] EXT4-fs warning (device loop4): ext4_empty_dir:3086: inode #11: comm syz-executor: directory missing '.' [ 268.022741][T12111] EXT4-fs warning (device loop4): ext4_empty_dir:3086: inode #11: comm syz-executor: directory missing '.' [ 268.043542][T15314] loop2: detected capacity change from 0 to 1024 [ 268.054964][T15303] syz.3.4174: attempt to access beyond end of device [ 268.054964][T15303] loop3: rw=2049, sector=289, nr_sectors = 8 limit=128 [ 268.060428][T15314] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 268.079373][T15314] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 268.092589][T15314] JBD2: no valid journal superblock found [ 268.098331][T15314] EXT4-fs (loop2): Could not load journal inode [ 268.165053][T15318] loop5: detected capacity change from 0 to 1024 [ 268.224986][T15318] __nla_validate_parse: 1 callbacks suppressed [ 268.225002][T15318] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4177'. [ 268.240611][T15322] FAULT_INJECTION: forcing a failure. [ 268.240611][T15322] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 268.253838][T15322] CPU: 0 UID: 0 PID: 15322 Comm: syz.3.4178 Not tainted 6.16.0-rc1-syzkaller-00157-g02adc1490e6d #0 PREEMPT(voluntary) [ 268.253898][T15322] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 268.253911][T15322] Call Trace: [ 268.253917][T15322] [ 268.253925][T15322] __dump_stack+0x1d/0x30 [ 268.254013][T15322] dump_stack_lvl+0xe8/0x140 [ 268.254029][T15322] dump_stack+0x15/0x1b [ 268.254042][T15322] should_fail_ex+0x265/0x280 [ 268.254077][T15322] should_fail+0xb/0x20 [ 268.254216][T15322] should_fail_usercopy+0x1a/0x20 [ 268.254234][T15322] _copy_from_user+0x1c/0xb0 [ 268.254262][T15322] ___sys_sendmsg+0xc1/0x1d0 [ 268.254296][T15322] __x64_sys_sendmsg+0xd4/0x160 [ 268.254319][T15322] x64_sys_call+0x2999/0x2fb0 [ 268.254415][T15322] do_syscall_64+0xd2/0x200 [ 268.254434][T15322] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 268.254457][T15322] ? clear_bhb_loop+0x40/0x90 [ 268.254476][T15322] ? clear_bhb_loop+0x40/0x90 [ 268.254498][T15322] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 268.254517][T15322] RIP: 0033:0x7f09e2d0e929 [ 268.254530][T15322] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 268.254546][T15322] RSP: 002b:00007f09e1377038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 268.254587][T15322] RAX: ffffffffffffffda RBX: 00007f09e2f35fa0 RCX: 00007f09e2d0e929 [ 268.254598][T15322] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000005 [ 268.254609][T15322] RBP: 00007f09e1377090 R08: 0000000000000000 R09: 0000000000000000 [ 268.254620][T15322] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 268.254631][T15322] R13: 0000000000000000 R14: 00007f09e2f35fa0 R15: 00007ffe3df65d58 [ 268.254648][T15322] [ 268.464425][T15328] loop3: detected capacity change from 0 to 512 [ 268.482524][T15328] ext4 filesystem being mounted at /280/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 268.511738][T15334] binfmt_misc: register: failed to install interpreter file ./file2 [ 268.526004][T15335] ------------[ cut here ]------------ [ 268.531550][T15335] WARNING: CPU: 1 PID: 15335 at mm/page_alloc.c:4935 __alloc_frozen_pages_noprof+0x218/0x360 [ 268.541861][T15335] Modules linked in: [ 268.545829][T15335] CPU: 1 UID: 0 PID: 15335 Comm: syz.2.4179 Not tainted 6.16.0-rc1-syzkaller-00157-g02adc1490e6d #0 PREEMPT(voluntary) [ 268.558631][T15335] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 268.566809][T15339] loop5: detected capacity change from 0 to 2048 [ 268.568765][T15335] RIP: 0010:__alloc_frozen_pages_noprof+0x218/0x360 [ 268.581735][T15335] Code: 83 3d 53 24 50 05 02 72 0e 48 83 b8 e0 fb ff ff 00 0f 84 48 ff ff ff 81 ca 00 01 00 00 e9 3d ff ff ff c6 05 0a 1d 4c 05 01 90 <0f> 0b 90 31 c0 eb 84 a9 00 00 08 00 75 52 44 89 f1 81 e1 7f ff ff [ 268.601440][T15335] RSP: 0018:ffffc900040cfa30 EFLAGS: 00010246 [ 268.607699][T15335] RAX: 1dfeb5cfe61f0700 RBX: 0000000000000016 RCX: 0000000000000000 [ 268.615707][T15335] RDX: 0000000000000000 RSI: 0000000000000016 RDI: 0000000000040dc0 [ 268.623722][T15335] RBP: 0000000000000dc0 R08: ffff88810169cb98 R09: 0000000000000000 [ 268.631729][T15335] R10: ffff88811285e1c8 R11: 000188811285e1c8 R12: ffffc900040cfd28 [ 268.639719][T15335] R13: 0000000000001fa4 R14: 0000000000040dc0 R15: 0000000000000000 [ 268.647747][T15335] FS: 00007f267d5466c0(0000) GS:ffff8882aef3c000(0000) knlGS:0000000000000000 [ 268.656746][T15335] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 268.663364][T15335] CR2: 0000200000001000 CR3: 0000000111afa000 CR4: 00000000003506f0 [ 268.671366][T15335] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 268.679355][T15335] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 268.687397][T15335] Call Trace: [ 268.690857][T15335] [ 268.693946][T15335] __alloc_pages_noprof+0x9/0x20 [ 268.699036][T15335] ___kmalloc_large_node+0x73/0x140 [ 268.704355][T15335] __kmalloc_large_node_noprof+0x16/0xa0 [ 268.710039][T15335] __kmalloc_noprof+0x2ab/0x3e0 [ 268.715022][T15335] ? hashtab_init+0x9b/0xe0 [ 268.719624][T15335] ? common_read+0x3f/0x300 [ 268.724202][T15335] hashtab_init+0x9b/0xe0 [ 268.728568][T15335] symtab_init+0x2c/0x40 [ 268.732949][T15335] common_read+0x10b/0x300 [ 268.737414][T15335] ? hashtab_init+0xbc/0xe0 [ 268.742093][T15335] ? __pfx_common_read+0x10/0x10 [ 268.747102][T15335] policydb_read+0x652/0x1330 [ 268.752010][T15335] ? security_load_policy+0x90/0x890 [ 268.757411][T15335] security_load_policy+0xba/0x890 [ 268.762560][T15335] ? rep_movs_alternative+0x4a/0x90 [ 268.767767][T15335] sel_write_load+0x1d4/0x380 [ 268.772467][T15335] ? __pfx_sel_write_load+0x10/0x10 [ 268.777709][T15335] vfs_write+0x269/0x8e0 [ 268.781979][T15335] ? __rcu_read_unlock+0x4f/0x70 [ 268.786972][T15335] ? __fget_files+0x184/0x1c0 [ 268.791682][T15335] ksys_write+0xda/0x1a0 [ 268.795926][T15335] __x64_sys_write+0x40/0x50 [ 268.800540][T15335] x64_sys_call+0x2cdd/0x2fb0 [ 268.805283][T15335] do_syscall_64+0xd2/0x200 [ 268.809859][T15335] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 268.816023][T15335] ? clear_bhb_loop+0x40/0x90 [ 268.820791][T15335] ? clear_bhb_loop+0x40/0x90 [ 268.825531][T15335] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 268.831451][T15335] RIP: 0033:0x7f267eefe929 [ 268.835885][T15335] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 268.855564][T15335] RSP: 002b:00007f267d546038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 268.864116][T15335] RAX: ffffffffffffffda RBX: 00007f267f126080 RCX: 00007f267eefe929 [ 268.872133][T15335] RDX: 0000000000002000 RSI: 0000200000000000 RDI: 0000000000000003 [ 268.880140][T15335] RBP: 00007f267ef80b39 R08: 0000000000000000 R09: 0000000000000000 [ 268.888131][T15335] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 268.896117][T15335] R13: 0000000000000000 R14: 00007f267f126080 R15: 00007ffdd8e05168 [ 268.904106][T15335] [ 268.907117][T15335] ---[ end trace 0000000000000000 ]--- [ 268.912648][T15335] SELinux: failed to load policy [ 268.920771][T12492] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.983274][T15342] lo speed is unknown, defaulting to 1000 [ 268.989335][T15342] lo speed is unknown, defaulting to 1000 [ 269.004701][T12492] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.049850][T12492] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.077916][T15342] chnl_net:caif_netlink_parms(): no params data found [ 269.111109][T12492] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.141009][T15342] bridge0: port 1(bridge_slave_0) entered blocking state [ 269.148128][T15342] bridge0: port 1(bridge_slave_0) entered disabled state [ 269.157250][T15342] bridge_slave_0: entered allmulticast mode [ 269.164357][T15342] bridge_slave_0: entered promiscuous mode [ 269.181668][T15342] bridge0: port 2(bridge_slave_1) entered blocking state [ 269.188807][T15342] bridge0: port 2(bridge_slave_1) entered disabled state [ 269.196000][T15342] bridge_slave_1: entered allmulticast mode [ 269.202826][T15342] bridge_slave_1: entered promiscuous mode [ 269.225626][T15342] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 269.235068][T12492] bridge_slave_1: left allmulticast mode [ 269.240911][T12492] bridge_slave_1: left promiscuous mode [ 269.246680][T12492] bridge0: port 2(bridge_slave_1) entered disabled state [ 269.254399][T12492] bridge_slave_0: left allmulticast mode [ 269.260064][T12492] bridge_slave_0: left promiscuous mode [ 269.265749][T12492] bridge0: port 1(bridge_slave_0) entered disabled state [ 269.314671][T15366] tipc: Can't bind to reserved service type 0 [ 269.355377][T15371] netlink: 'syz.2.4193': attribute type 39 has an invalid length. [ 269.363266][T15371] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4193'. [ 269.384642][T15377] loop3: detected capacity change from 0 to 512 [ 269.395512][T15377] EXT4-fs error (device loop3): ext4_xattr_inode_iget:433: comm syz.3.4195: Parent and EA inode have the same ino 15 [ 269.407983][T15377] EXT4-fs (loop3): Remounting filesystem read-only [ 269.418135][T15377] EXT4-fs warning (device loop3): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 269.428251][T15377] EXT4-fs (loop3): 1 orphan inode deleted [ 269.532523][T12492] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 269.542708][T12492] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 269.552938][T12492] bond0 (unregistering): Released all slaves [ 269.562097][T15342] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 269.574384][T15371] bridge10: entered promiscuous mode [ 269.579772][T15371] bridge10: entered allmulticast mode [ 269.589714][T15377] netlink: 830 bytes leftover after parsing attributes in process `syz.3.4195'. [ 269.618531][T15382] loop2: detected capacity change from 0 to 128 [ 269.619603][T15342] team0: Port device team_slave_0 added [ 269.633336][T12492] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 269.640835][T12492] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 269.643327][T15382] ext4 filesystem being mounted at /270/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 269.658767][T12492] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 269.666205][T12492] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 269.685201][T12492] veth1_macvtap: left promiscuous mode [ 269.692302][T12492] veth0_macvtap: left promiscuous mode [ 269.697857][T12492] veth1_vlan: left promiscuous mode [ 269.703160][T12492] veth0_vlan: left promiscuous mode [ 269.735808][T15389] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=25836 sclass=netlink_route_socket pid=15389 comm=syz.2.4196 [ 269.800396][T12492] team0 (unregistering): Port device team_slave_1 removed [ 269.810072][T12492] team0 (unregistering): Port device team_slave_0 removed [ 269.841372][T15342] team0: Port device team_slave_1 added [ 269.858652][T15342] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 269.865781][T15342] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 269.892023][T15342] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 269.896053][T15387] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 269.904434][T15342] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 269.915195][T15387] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 269.917922][T15342] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 269.951797][T15342] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 269.981356][T15342] hsr_slave_0: entered promiscuous mode [ 269.987543][T15342] hsr_slave_1: entered promiscuous mode [ 269.993647][T15342] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 270.001221][T15342] Cannot create hsr debugfs directory [ 270.084598][T15342] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 270.095649][T15342] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 270.106987][T15342] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 270.115678][T15342] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 270.159611][T15342] 8021q: adding VLAN 0 to HW filter on device bond0 [ 270.175939][T15342] 8021q: adding VLAN 0 to HW filter on device team0 [ 270.186507][T12492] bridge0: port 1(bridge_slave_0) entered blocking state [ 270.193632][T12492] bridge0: port 1(bridge_slave_0) entered forwarding state [ 270.216912][T15342] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 270.227326][T15342] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 270.242945][T12492] bridge0: port 2(bridge_slave_1) entered blocking state [ 270.250080][T12492] bridge0: port 2(bridge_slave_1) entered forwarding state [ 270.307696][T15342] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 270.433228][T15342] veth0_vlan: entered promiscuous mode [ 270.442091][T15342] veth1_vlan: entered promiscuous mode [ 270.463083][T15342] veth0_macvtap: entered promiscuous mode [ 270.472874][T15342] veth1_macvtap: entered promiscuous mode [ 270.484208][T15342] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 270.495871][T15342] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 270.505703][T15342] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.514485][T15342] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.523310][T15342] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.532216][T15342] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.554329][T15417] loop3: detected capacity change from 0 to 128 [ 270.625395][T15420] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4186'. [ 270.663299][T15422] loop1: detected capacity change from 0 to 1024 [ 270.716772][T15422] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4201'. [ 270.747347][T15433] loop6: detected capacity change from 0 to 128 [ 270.765788][T15435] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4206'. [ 270.832220][T15441] loop5: detected capacity change from 0 to 128 [ 270.851433][T15441] FAT-fs (loop5): Directory bread(block 162) failed [ 270.858240][T15441] FAT-fs (loop5): Directory bread(block 163) failed [ 270.871175][T15441] FAT-fs (loop5): Directory bread(block 164) failed [ 270.899811][T15441] FAT-fs (loop5): Directory bread(block 165) failed [ 270.911118][T15441] FAT-fs (loop5): Directory bread(block 166) failed [ 270.921581][T15441] FAT-fs (loop5): Directory bread(block 167) failed [ 270.922181][T15447] loop1: detected capacity change from 0 to 128 [ 270.928237][T15441] FAT-fs (loop5): Directory bread(block 168) failed [ 270.928302][T15441] FAT-fs (loop5): Directory bread(block 169) failed [ 270.949937][T15447] FAT-fs (loop1): Directory bread(block 162) failed [ 270.965103][T15441] FAT-fs (loop5): Directory bread(block 162) failed [ 270.977612][T15447] FAT-fs (loop1): Directory bread(block 163) failed [ 270.990318][T15447] FAT-fs (loop1): Directory bread(block 164) failed [ 270.995465][T15441] FAT-fs (loop5): Directory bread(block 163) failed [ 271.004132][T15447] FAT-fs (loop1): Directory bread(block 165) failed [ 271.020323][T15447] FAT-fs (loop1): Directory bread(block 166) failed [ 271.028464][T15447] FAT-fs (loop1): Directory bread(block 167) failed [ 271.035218][T15447] FAT-fs (loop1): Directory bread(block 168) failed [ 271.042063][T15447] FAT-fs (loop1): Directory bread(block 169) failed [ 271.059314][T15447] FAT-fs (loop1): Directory bread(block 162) failed [ 271.075929][T15447] FAT-fs (loop1): Directory bread(block 163) failed [ 271.160463][T15459] loop6: detected capacity change from 0 to 1024 [ 271.193516][T15459] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4216'. [ 271.228080][T15451] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 271.236882][T15451] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 271.276795][T15468] loop6: detected capacity change from 0 to 1024 [ 271.286805][T15470] loop1: detected capacity change from 0 to 1024 [ 271.299830][T15468] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4219'. [ 271.342797][T15470] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4220'. [ 271.376145][T15478] dvmrp1: entered allmulticast mode [ 271.383621][T15478] dvmrp1: left allmulticast mode [ 271.447223][T15483] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 271.456480][T15483] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 271.665650][ T29] kauditd_printk_skb: 89 callbacks suppressed [ 271.665666][ T29] audit: type=1400 audit(2000004217.914:25575): avc: denied { unmount } for pid=11961 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 271.711763][T15483] loop1: detected capacity change from 0 to 512 [ 271.719657][T15483] EXT4-fs: Ignoring removed nomblk_io_submit option [ 271.740999][T15487] loop3: detected capacity change from 0 to 128 [ 271.747686][T15483] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 271.755832][T15483] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c01d, mo2=0102] [ 271.764809][ T29] audit: type=1400 audit(2000004218.014:25576): avc: denied { mount } for pid=15486 comm="syz.3.4225" name="/" dev="loop3" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 271.787050][ T29] audit: type=1400 audit(2000004218.014:25577): avc: denied { create } for pid=15486 comm="syz.3.4225" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 271.804470][T15490] loop5: detected capacity change from 0 to 2048 [ 271.806837][ T29] audit: type=1400 audit(2000004218.014:25578): avc: denied { setopt } for pid=15486 comm="syz.3.4225" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 271.816502][T15483] EXT4-fs (loop1): couldn't mount RDWR because of unsupported optional features (80) [ 271.842173][T15483] EXT4-fs (loop1): Skipping orphan cleanup due to unknown ROCOMPAT features [ 271.863829][ T29] audit: type=1400 audit(2000004218.114:25579): avc: denied { name_bind } for pid=15482 comm="syz.1.4223" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 271.885408][ T29] audit: type=1400 audit(2000004218.114:25580): avc: denied { node_bind } for pid=15482 comm="syz.1.4223" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 271.911700][T15494] loop3: detected capacity change from 0 to 512 [ 271.923068][T15494] ext4 filesystem being mounted at /290/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 271.937420][ T29] audit: type=1400 audit(2000004218.184:25581): avc: denied { write } for pid=15493 comm="syz.3.4228" path="/290/file1/bus" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 271.982273][ T29] audit: type=1400 audit(2000004218.184:25582): avc: denied { create } for pid=15497 comm="syz.5.4229" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 272.002736][ T29] audit: type=1400 audit(2000004218.184:25583): avc: denied { write } for pid=15497 comm="syz.5.4229" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 272.023085][ T29] audit: type=1400 audit(2000004218.184:25584): avc: denied { nlmsg_write } for pid=15497 comm="syz.5.4229" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 272.071185][T15509] netlink: 14 bytes leftover after parsing attributes in process `syz.5.4234'. [ 272.097025][T15511] loop5: detected capacity change from 0 to 128 [ 272.237588][T15519] program syz.3.4238 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 272.367575][T15534] loop3: detected capacity change from 0 to 512 [ 272.378636][T15534] EXT4-fs error (device loop3): ext4_xattr_inode_iget:433: comm syz.3.4245: Parent and EA inode have the same ino 15 [ 272.391814][T15534] EXT4-fs (loop3): Remounting filesystem read-only [ 272.400647][T15534] EXT4-fs warning (device loop3): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 272.411313][T15534] EXT4-fs (loop3): 1 orphan inode deleted [ 272.585131][T15563] lo speed is unknown, defaulting to 1000 [ 272.592998][T15563] lo speed is unknown, defaulting to 1000 [ 272.616561][T15569] loop1: detected capacity change from 0 to 128 [ 272.623815][T15569] FAT-fs (loop1): Directory bread(block 162) failed [ 272.631063][T15569] FAT-fs (loop1): Directory bread(block 163) failed [ 272.637819][T15569] FAT-fs (loop1): Directory bread(block 164) failed [ 272.646057][T15569] FAT-fs (loop1): Directory bread(block 165) failed [ 272.653332][T15569] FAT-fs (loop1): Directory bread(block 166) failed [ 272.660044][T15569] FAT-fs (loop1): Directory bread(block 167) failed [ 272.666881][T15569] FAT-fs (loop1): Directory bread(block 168) failed [ 272.673568][T15569] FAT-fs (loop1): Directory bread(block 169) failed [ 272.682074][T15571] loop3: detected capacity change from 0 to 512 [ 272.682317][T15569] FAT-fs (loop1): Directory bread(block 162) failed [ 272.695204][T15569] FAT-fs (loop1): Directory bread(block 163) failed [ 272.701965][T15571] EXT4-fs error (device loop3): ext4_xattr_inode_iget:433: comm syz.3.4260: Parent and EA inode have the same ino 15 [ 272.715087][T15571] EXT4-fs (loop3): Remounting filesystem read-only [ 272.724605][T15571] EXT4-fs warning (device loop3): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 272.735480][T15571] EXT4-fs (loop3): 1 orphan inode deleted [ 272.752130][T15575] loop1: detected capacity change from 0 to 1024 [ 272.871585][T15591] FAULT_INJECTION: forcing a failure. [ 272.871585][T15591] name failslab, interval 1, probability 0, space 0, times 0 [ 272.884356][T15591] CPU: 0 UID: 0 PID: 15591 Comm: syz.1.4268 Tainted: G W 6.16.0-rc1-syzkaller-00157-g02adc1490e6d #0 PREEMPT(voluntary) [ 272.884392][T15591] Tainted: [W]=WARN [ 272.884400][T15591] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 272.884413][T15591] Call Trace: [ 272.884420][T15591] [ 272.884481][T15591] __dump_stack+0x1d/0x30 [ 272.884504][T15591] dump_stack_lvl+0xe8/0x140 [ 272.884525][T15591] dump_stack+0x15/0x1b [ 272.884543][T15591] should_fail_ex+0x265/0x280 [ 272.884580][T15591] should_failslab+0x8c/0xb0 [ 272.884633][T15591] kmem_cache_alloc_node_noprof+0x57/0x320 [ 272.884729][T15591] ? __alloc_skb+0x101/0x320 [ 272.884765][T15591] __alloc_skb+0x101/0x320 [ 272.884800][T15591] netlink_alloc_large_skb+0xba/0xf0 [ 272.884844][T15591] netlink_sendmsg+0x3cf/0x6b0 [ 272.884928][T15591] ? __pfx_netlink_sendmsg+0x10/0x10 [ 272.884953][T15591] __sock_sendmsg+0x145/0x180 [ 272.884984][T15591] ____sys_sendmsg+0x31e/0x4e0 [ 272.885009][T15591] ___sys_sendmsg+0x17b/0x1d0 [ 272.885048][T15591] __x64_sys_sendmsg+0xd4/0x160 [ 272.885095][T15591] x64_sys_call+0x2999/0x2fb0 [ 272.885119][T15591] do_syscall_64+0xd2/0x200 [ 272.885152][T15591] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 272.885261][T15591] ? clear_bhb_loop+0x40/0x90 [ 272.885290][T15591] ? clear_bhb_loop+0x40/0x90 [ 272.885311][T15591] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 272.885335][T15591] RIP: 0033:0x7f7502bfe929 [ 272.885351][T15591] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 272.885371][T15591] RSP: 002b:00007f7501267038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 272.885392][T15591] RAX: ffffffffffffffda RBX: 00007f7502e25fa0 RCX: 00007f7502bfe929 [ 272.885480][T15591] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 000000000000000c [ 272.885540][T15591] RBP: 00007f7501267090 R08: 0000000000000000 R09: 0000000000000000 [ 272.885554][T15591] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 272.885565][T15591] R13: 0000000000000000 R14: 00007f7502e25fa0 R15: 00007ffeb2083be8 [ 272.885641][T15591] [ 272.893793][T15594] loop3: detected capacity change from 0 to 1024 [ 272.989398][T15598] loop6: detected capacity change from 0 to 512 [ 273.062423][T15603] loop1: detected capacity change from 0 to 1024 [ 273.105423][T15606] loop2: detected capacity change from 0 to 512 [ 273.135895][T15598] ext4 filesystem being mounted at /7/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 273.147616][T15606] EXT4-fs error (device loop2): ext4_xattr_inode_iget:433: comm syz.2.4274: Parent and EA inode have the same ino 15 [ 273.208619][T15606] EXT4-fs (loop2): Remounting filesystem read-only [ 273.219914][T15606] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 273.230325][T15606] EXT4-fs (loop2): 1 orphan inode deleted [ 273.252971][T15606] __nla_validate_parse: 6 callbacks suppressed [ 273.253066][T15606] netlink: 830 bytes leftover after parsing attributes in process `syz.2.4274'. [ 273.409090][T15643] loop5: detected capacity change from 0 to 1024 [ 273.427284][T15647] hub 9-0:1.0: USB hub found [ 273.432404][T15647] hub 9-0:1.0: 8 ports detected [ 273.452189][T15643] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4285'. [ 273.499854][T15655] loop1: detected capacity change from 0 to 1024 [ 273.527508][T15655] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4290'. [ 273.633284][T15675] loop5: detected capacity change from 0 to 128 [ 273.649467][T15675] bio_check_eod: 42 callbacks suppressed [ 273.649479][T15675] syz.5.4297: attempt to access beyond end of device [ 273.649479][T15675] loop5: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 273.671522][T15675] syz.5.4297: attempt to access beyond end of device [ 273.671522][T15675] loop5: rw=2049, sector=169, nr_sectors = 16 limit=128 [ 273.686293][T15675] syz.5.4297: attempt to access beyond end of device [ 273.686293][T15675] loop5: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 273.686741][T15678] hub 9-0:1.0: USB hub found [ 273.706157][T15678] hub 9-0:1.0: 8 ports detected [ 273.712227][T15675] syz.5.4297: attempt to access beyond end of device [ 273.712227][T15675] loop5: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 273.729398][T15675] syz.5.4297: attempt to access beyond end of device [ 273.729398][T15675] loop5: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 273.756006][T15675] syz.5.4297: attempt to access beyond end of device [ 273.756006][T15675] loop5: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 273.770668][T15675] syz.5.4297: attempt to access beyond end of device [ 273.770668][T15675] loop5: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 273.797942][T15675] syz.5.4297: attempt to access beyond end of device [ 273.797942][T15675] loop5: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 273.818811][T15675] syz.5.4297: attempt to access beyond end of device [ 273.818811][T15675] loop5: rw=2049, sector=289, nr_sectors = 9 limit=128 [ 273.826773][T15687] loop3: detected capacity change from 0 to 128 [ 273.873973][T15689] loop6: detected capacity change from 0 to 1024 [ 273.905521][T15689] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4302'. [ 273.930064][T15694] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 273.939991][T15694] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 274.009004][T15698] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4305'. [ 274.049110][T15702] loop6: detected capacity change from 0 to 1024 [ 274.078626][T15702] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4307'. [ 274.134003][T15713] loop3: detected capacity change from 0 to 512 [ 274.147021][T15715] hub 9-0:1.0: USB hub found [ 274.151867][T15715] hub 9-0:1.0: 8 ports detected [ 274.163094][T15713] ext4 filesystem being mounted at /324/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 274.219465][T15723] loop6: detected capacity change from 0 to 128 [ 274.235141][T15723] syz.6.4315: attempt to access beyond end of device [ 274.235141][T15723] loop6: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 274.287646][T15726] loop2: detected capacity change from 0 to 128 [ 274.288963][T15726] FAT-fs (loop2): Directory bread(block 162) failed [ 274.301210][T15726] FAT-fs (loop2): Directory bread(block 163) failed [ 274.301236][T15726] FAT-fs (loop2): Directory bread(block 164) failed [ 274.314741][T15726] FAT-fs (loop2): Directory bread(block 165) failed [ 274.314761][T15726] FAT-fs (loop2): Directory bread(block 166) failed [ 274.314781][T15726] FAT-fs (loop2): Directory bread(block 167) failed [ 274.314817][T15726] FAT-fs (loop2): Directory bread(block 168) failed [ 274.314832][T15726] FAT-fs (loop2): Directory bread(block 169) failed [ 274.333639][T15726] FAT-fs (loop2): Directory bread(block 162) failed [ 274.356175][T15726] FAT-fs (loop2): Directory bread(block 163) failed [ 274.536859][T15733] program syz.1.4319 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 274.581782][T15737] loop6: detected capacity change from 0 to 2048 [ 274.592867][T15741] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4323'. [ 274.718150][T15743] lo speed is unknown, defaulting to 1000 [ 274.718463][T15743] lo speed is unknown, defaulting to 1000 [ 274.887780][T15754] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4327'. [ 275.160697][T15758] loop5: detected capacity change from 0 to 128 [ 275.350370][T15763] loop5: detected capacity change from 0 to 128 [ 275.415927][T15770] FAULT_INJECTION: forcing a failure. [ 275.415927][T15770] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 275.429068][T15770] CPU: 1 UID: 0 PID: 15770 Comm: syz.1.4334 Tainted: G W 6.16.0-rc1-syzkaller-00157-g02adc1490e6d #0 PREEMPT(voluntary) [ 275.429208][T15770] Tainted: [W]=WARN [ 275.429215][T15770] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 275.429229][T15770] Call Trace: [ 275.429236][T15770] [ 275.429243][T15770] __dump_stack+0x1d/0x30 [ 275.429264][T15770] dump_stack_lvl+0xe8/0x140 [ 275.429346][T15770] dump_stack+0x15/0x1b [ 275.429367][T15770] should_fail_ex+0x265/0x280 [ 275.429407][T15770] should_fail+0xb/0x20 [ 275.429489][T15770] should_fail_usercopy+0x1a/0x20 [ 275.429516][T15770] _copy_to_user+0x20/0xa0 [ 275.429547][T15770] simple_read_from_buffer+0xb5/0x130 [ 275.429634][T15770] proc_fail_nth_read+0x100/0x140 [ 275.429659][T15770] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 275.429695][T15770] vfs_read+0x19d/0x6f0 [ 275.429718][T15770] ? __rcu_read_unlock+0x4f/0x70 [ 275.429752][T15770] ? __fget_files+0x184/0x1c0 [ 275.429784][T15770] ksys_read+0xda/0x1a0 [ 275.429884][T15770] __x64_sys_read+0x40/0x50 [ 275.429908][T15770] x64_sys_call+0x2d77/0x2fb0 [ 275.430010][T15770] do_syscall_64+0xd2/0x200 [ 275.430036][T15770] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 275.430064][T15770] ? clear_bhb_loop+0x40/0x90 [ 275.430085][T15770] ? clear_bhb_loop+0x40/0x90 [ 275.430111][T15770] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.430166][T15770] RIP: 0033:0x7f7502bfd33c [ 275.430181][T15770] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 275.430198][T15770] RSP: 002b:00007f7501267030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 275.430219][T15770] RAX: ffffffffffffffda RBX: 00007f7502e25fa0 RCX: 00007f7502bfd33c [ 275.430243][T15770] RDX: 000000000000000f RSI: 00007f75012670a0 RDI: 0000000000000007 [ 275.430258][T15770] RBP: 00007f7501267090 R08: 0000000000000000 R09: 0000000000000000 [ 275.430274][T15770] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 275.430289][T15770] R13: 0000000000000000 R14: 00007f7502e25fa0 R15: 00007ffeb2083be8 [ 275.430314][T15770] [ 275.767880][T15782] loop2: detected capacity change from 0 to 2048 [ 275.888825][T15794] loop6: detected capacity change from 0 to 512 [ 275.902788][T15796] netdevsim netdevsim2: Direct firmware load for  failed with error -2 [ 275.928916][T15794] EXT4-fs error (device loop6): ext4_xattr_inode_iget:433: comm syz.6.4345: Parent and EA inode have the same ino 15 [ 275.941785][T15794] EXT4-fs (loop6): Remounting filesystem read-only [ 275.950062][T15780] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 275.959273][T15780] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 275.970014][T15794] EXT4-fs warning (device loop6): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 275.981696][T15794] EXT4-fs (loop6): 1 orphan inode deleted [ 276.035646][T15794] netlink: 830 bytes leftover after parsing attributes in process `syz.6.4345'. [ 276.076381][T15805] lo speed is unknown, defaulting to 1000 [ 276.082855][T15805] lo speed is unknown, defaulting to 1000 [ 276.178076][T15805] loop5: detected capacity change from 0 to 512 [ 276.184771][T15805] EXT4-fs: Ignoring removed mblk_io_submit option [ 276.191298][T15805] EXT4-fs: Ignoring removed bh option [ 276.200987][T15805] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 276.216687][T15805] EXT4-fs (loop5): 1 truncate cleaned up [ 276.419911][T15815] loop3: detected capacity change from 0 to 512 [ 276.433255][T15815] EXT4-fs error (device loop3): ext4_xattr_inode_iget:433: comm syz.3.4353: Parent and EA inode have the same ino 15 [ 276.447050][T15815] EXT4-fs (loop3): Remounting filesystem read-only [ 276.457024][T15815] EXT4-fs warning (device loop3): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 276.458327][T15820] loop6: detected capacity change from 0 to 2048 [ 276.474160][T15815] EXT4-fs (loop3): 1 orphan inode deleted [ 276.509275][T15815] netlink: 830 bytes leftover after parsing attributes in process `syz.3.4353'. [ 276.717487][T15842] loop3: detected capacity change from 0 to 512 [ 276.729135][T15845] loop5: detected capacity change from 0 to 512 [ 276.758748][T15842] EXT4-fs error (device loop3): ext4_xattr_inode_iget:433: comm syz.3.4364: Parent and EA inode have the same ino 15 [ 276.759119][T15845] ext4 filesystem being mounted at /240/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 276.793384][T15853] loop6: detected capacity change from 0 to 2048 [ 276.799885][T15842] EXT4-fs (loop3): Remounting filesystem read-only [ 276.808124][T15842] EXT4-fs warning (device loop3): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 276.818761][T15842] EXT4-fs (loop3): 1 orphan inode deleted [ 276.834955][ T29] kauditd_printk_skb: 164 callbacks suppressed [ 276.834968][ T29] audit: type=1326 audit(2000004223.084:25749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15844 comm="syz.5.4365" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9bb7f4e929 code=0x0 [ 276.877832][T15858] hub 9-0:1.0: USB hub found [ 276.885207][T15858] hub 9-0:1.0: 8 ports detected [ 277.050218][ T29] audit: type=1400 audit(2000004223.304:25750): avc: denied { write } for pid=15869 comm="syz.3.4374" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 277.894096][T15875] lo speed is unknown, defaulting to 1000 [ 277.900563][T15875] lo speed is unknown, defaulting to 1000 [ 277.946740][T15876] lo speed is unknown, defaulting to 1000 [ 277.952843][T15876] lo speed is unknown, defaulting to 1000 [ 277.997793][T15872] loop6: detected capacity change from 0 to 512 [ 278.004463][T15872] EXT4-fs: Ignoring removed mblk_io_submit option [ 278.006921][T15871] loop1: detected capacity change from 0 to 512 [ 278.011013][T15872] EXT4-fs: Ignoring removed bh option [ 278.017548][T15871] EXT4-fs: Ignoring removed mblk_io_submit option [ 278.029181][T15871] EXT4-fs: Ignoring removed bh option [ 278.031358][T15872] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 278.044604][T15871] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 278.051260][T15872] EXT4-fs (loop6): 1 truncate cleaned up [ 278.061506][T15871] EXT4-fs (loop1): 1 truncate cleaned up [ 278.134467][T15884] netdevsim netdevsim3: Direct firmware load for  failed with error -2 [ 278.300988][T15895] loop5: detected capacity change from 0 to 128 [ 278.317034][T15897] program syz.6.4382 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 278.359218][T15899] loop1: detected capacity change from 0 to 512 [ 278.383029][T15899] EXT4-fs error (device loop1): ext4_xattr_inode_iget:433: comm syz.1.4384: Parent and EA inode have the same ino 15 [ 278.436189][T15910] loop6: detected capacity change from 0 to 1024 [ 278.443966][T15899] EXT4-fs (loop1): Remounting filesystem read-only [ 278.446223][T15909] xt_TPROXY: Can be used only with -p tcp or -p udp [ 278.464115][T15899] EXT4-fs warning (device loop1): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 278.475583][T15899] EXT4-fs (loop1): 1 orphan inode deleted [ 278.481274][ T29] audit: type=1400 audit(2000004224.734:25751): avc: denied { name_bind } for pid=15906 comm="syz.2.4387" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 278.503369][ T29] audit: type=1400 audit(2000004224.734:25752): avc: denied { create } for pid=15906 comm="syz.2.4387" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 278.527760][ T29] audit: type=1400 audit(2000004224.774:25753): avc: denied { getopt } for pid=15906 comm="syz.2.4387" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 278.564087][T15899] __nla_validate_parse: 2 callbacks suppressed [ 278.564104][T15899] netlink: 830 bytes leftover after parsing attributes in process `syz.1.4384'. [ 278.587026][T15916] netdevsim netdevsim2: Direct firmware load for  failed with error -2 [ 278.612560][T15910] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4388'. [ 278.683590][T15924] netlink: 'syz.2.4392': attribute type 39 has an invalid length. [ 278.795960][ T29] audit: type=1326 audit(2000004225.044:25754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15931 comm="syz.6.4395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3bd79e929 code=0x7ffc0000 [ 278.819900][T15932] loop6: detected capacity change from 0 to 512 [ 278.823755][ T29] audit: type=1326 audit(2000004225.044:25755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15931 comm="syz.6.4395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fa3bd79e929 code=0x7ffc0000 [ 278.850007][ T29] audit: type=1326 audit(2000004225.044:25756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15931 comm="syz.6.4395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fa3bd79e963 code=0x7ffc0000 [ 278.850520][T15932] EXT4-fs: Invalid want_extra_isize 32767 [ 278.873549][ T29] audit: type=1326 audit(2000004225.044:25757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15931 comm="syz.6.4395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fa3bd79d3df code=0x7ffc0000 [ 278.902535][ T29] audit: type=1326 audit(2000004225.044:25758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15931 comm="syz.6.4395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fa3bd79e9b7 code=0x7ffc0000 [ 278.974603][T15938] loop6: detected capacity change from 0 to 1024 [ 279.001002][T15939] lo speed is unknown, defaulting to 1000 [ 279.007307][T15939] lo speed is unknown, defaulting to 1000 [ 279.061852][T15938] EXT4-fs: Ignoring removed oldalloc option [ 279.068895][T15938] EXT4-fs (loop6): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 279.086880][T15939] loop5: detected capacity change from 0 to 512 [ 279.093736][T15939] EXT4-fs: Ignoring removed mblk_io_submit option [ 279.100271][T15939] EXT4-fs: Ignoring removed bh option [ 279.106522][T15939] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 279.118733][T15939] EXT4-fs (loop5): 1 truncate cleaned up [ 279.296767][T15944] loop1: detected capacity change from 0 to 512 [ 279.317212][T15944] EXT4-fs: Invalid want_extra_isize 32767 [ 279.357772][T15944] loop1: detected capacity change from 0 to 1024 [ 279.364919][T15944] EXT4-fs: Ignoring removed oldalloc option [ 279.373268][T15944] EXT4-fs (loop1): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 279.386232][T15342] EXT4-fs error (device loop6): ext4_readdir:264: inode #11: block 32: comm syz-executor: path /36/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 279.411411][T15342] EXT4-fs error (device loop6): ext4_empty_dir:3084: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 279.430816][T15951] loop3: detected capacity change from 0 to 128 [ 279.434644][T15342] EXT4-fs warning (device loop6): ext4_empty_dir:3086: inode #11: comm syz-executor: directory missing '.' [ 279.445020][T15951] bio_check_eod: 37 callbacks suppressed [ 279.445036][T15951] syz.3.4400: attempt to access beyond end of device [ 279.445036][T15951] loop3: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 279.449027][T15342] EXT4-fs error (device loop6): ext4_readdir:264: inode #11: block 32: comm syz-executor: path /36/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 279.456986][T15951] syz.3.4400: attempt to access beyond end of device [ 279.456986][T15951] loop3: rw=2049, sector=169, nr_sectors = 16 limit=128 [ 279.468895][T15342] EXT4-fs error (device loop6): ext4_empty_dir:3084: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 279.488891][T15951] syz.3.4400: attempt to access beyond end of device [ 279.488891][T15951] loop3: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 279.559644][T12549] EXT4-fs error (device loop1): ext4_readdir:264: inode #11: block 32: comm syz-executor: path /270/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 279.583798][T15342] EXT4-fs warning (device loop6): ext4_empty_dir:3086: inode #11: comm syz-executor: directory missing '.' [ 279.585211][T15951] syz.3.4400: attempt to access beyond end of device [ 279.585211][T15951] loop3: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 279.595889][T12549] EXT4-fs error (device loop1): ext4_empty_dir:3084: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 279.608709][T15952] syz.3.4400: attempt to access beyond end of device [ 279.608709][T15952] loop3: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 279.633684][T15342] EXT4-fs error (device loop6): ext4_readdir:264: inode #11: block 32: comm syz-executor: path /36/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 279.660205][T15952] syz.3.4400: attempt to access beyond end of device [ 279.660205][T15952] loop3: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 279.664336][T12549] EXT4-fs warning (device loop1): ext4_empty_dir:3086: inode #11: comm syz-executor: directory missing '.' [ 279.677944][T11961] EXT4-fs unmount: 101 callbacks suppressed [ 279.677960][T11961] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 279.689162][T15342] EXT4-fs error (device loop6): ext4_empty_dir:3084: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 279.711970][T15951] syz.3.4400: attempt to access beyond end of device [ 279.711970][T15951] loop3: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 279.721137][T12549] EXT4-fs error (device loop1): ext4_readdir:264: inode #11: block 32: comm syz-executor: path /270/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 279.756348][T15342] EXT4-fs warning (device loop6): ext4_empty_dir:3086: inode #11: comm syz-executor: directory missing '.' [ 279.767931][T15342] EXT4-fs error (device loop6): ext4_readdir:264: inode #11: block 32: comm syz-executor: path /36/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 279.792013][T15951] syz.3.4400: attempt to access beyond end of device [ 279.792013][T15951] loop3: rw=2049, sector=289, nr_sectors = 9 limit=128 [ 279.792064][T12549] EXT4-fs error (device loop1): ext4_empty_dir:3084: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 279.824610][T15342] EXT4-fs error (device loop6): ext4_empty_dir:3084: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 279.829813][T12549] EXT4-fs warning (device loop1): ext4_empty_dir:3086: inode #11: comm syz-executor: directory missing '.' [ 279.856267][T15952] syz.3.4400: attempt to access beyond end of device [ 279.856267][T15952] loop3: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 279.857832][T12549] EXT4-fs error (device loop1): ext4_readdir:264: inode #11: block 32: comm syz-executor: path /270/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 279.894527][T15342] EXT4-fs warning (device loop6): ext4_empty_dir:3086: inode #11: comm syz-executor: directory missing '.' [ 279.918420][T12549] EXT4-fs error (device loop1): ext4_empty_dir:3084: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 279.921562][T15342] EXT4-fs error (device loop6): ext4_readdir:264: inode #11: block 32: comm syz-executor: path /36/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 279.961142][T15342] EXT4-fs error (device loop6): ext4_empty_dir:3084: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 279.981883][T15342] EXT4-fs warning (device loop6): ext4_empty_dir:3086: inode #11: comm syz-executor: directory missing '.' [ 279.994965][T15958] loop5: detected capacity change from 0 to 128 [ 280.004889][T12549] EXT4-fs warning (device loop1): ext4_empty_dir:3086: inode #11: comm syz-executor: directory missing '.' [ 280.011240][T15958] syz.5.4403: attempt to access beyond end of device [ 280.011240][T15958] loop5: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 280.039036][T15342] EXT4-fs warning (device loop6): ext4_empty_dir:3086: inode #11: comm syz-executor: directory missing '.' [ 280.039997][T12549] EXT4-fs error (device loop1): ext4_readdir:264: inode #11: block 32: comm syz-executor: path /270/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 280.070619][T15342] EXT4-fs warning (device loop6): ext4_empty_dir:3086: inode #11: comm syz-executor: directory missing '.' [ 280.083741][T15961] netlink: 404 bytes leftover after parsing attributes in process `syz.2.4404'. [ 280.095339][T15342] EXT4-fs warning (device loop6): ext4_empty_dir:3086: inode #11: comm syz-executor: directory missing '.' [ 280.096733][T15961] 9pnet_fd: Insufficient options for proto=fd [ 280.113353][T12549] EXT4-fs error (device loop1): ext4_empty_dir:3084: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 280.114684][T15342] EXT4-fs warning (device loop6): ext4_empty_dir:3086: inode #11: comm syz-executor: directory missing '.' [ 280.147233][T15342] EXT4-fs warning (device loop6): ext4_empty_dir:3086: inode #11: comm syz-executor: directory missing '.' [ 280.203937][T12549] EXT4-fs warning (device loop1): ext4_empty_dir:3086: inode #11: comm syz-executor: directory missing '.' [ 280.223549][T15963] loop3: detected capacity change from 0 to 1024 [ 280.230262][T12549] EXT4-fs error (device loop1): ext4_readdir:264: inode #11: block 32: comm syz-executor: path /270/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 280.254479][T12549] EXT4-fs error (device loop1): ext4_empty_dir:3084: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 280.278573][T15963] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 280.292394][T12549] EXT4-fs warning (device loop1): ext4_empty_dir:3086: inode #11: comm syz-executor: directory missing '.' [ 280.316716][T12549] EXT4-fs warning (device loop1): ext4_empty_dir:3086: inode #11: comm syz-executor: directory missing '.' [ 280.334371][T12549] EXT4-fs warning (device loop1): ext4_empty_dir:3086: inode #11: comm syz-executor: directory missing '.' [ 280.337545][T15933] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 280.346238][T12549] EXT4-fs warning (device loop1): ext4_empty_dir:3086: inode #11: comm syz-executor: directory missing '.' [ 280.371641][T15963] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4405'. [ 280.384194][T15976] program syz.5.4408 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 280.394713][T12549] EXT4-fs warning (device loop1): ext4_empty_dir:3086: inode #11: comm syz-executor: directory missing '.' [ 280.398835][T15977] loop2: detected capacity change from 0 to 512 [ 280.410768][T12549] EXT4-fs warning (device loop1): ext4_empty_dir:3086: inode #11: comm syz-executor: directory missing '.' [ 280.426857][T15977] EXT4-fs: Invalid want_extra_isize 32767 [ 280.444545][T15977] loop2: detected capacity change from 0 to 1024 [ 280.458740][T15977] EXT4-fs: Ignoring removed oldalloc option [ 280.474044][T12307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 280.476856][T15977] EXT4-fs (loop2): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 280.502104][T15977] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 280.558106][T15945] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 280.581911][T11616] EXT4-fs error (device loop2): ext4_readdir:264: inode #11: block 32: comm syz-executor: path /298/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 280.606542][T11616] EXT4-fs error (device loop2): ext4_empty_dir:3084: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 280.630913][T11616] EXT4-fs warning (device loop2): ext4_empty_dir:3086: inode #11: comm syz-executor: directory missing '.' [ 280.644196][T11616] EXT4-fs error (device loop2): ext4_readdir:264: inode #11: block 32: comm syz-executor: path /298/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 280.667991][T11616] EXT4-fs error (device loop2): ext4_empty_dir:3084: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 280.688498][T11616] EXT4-fs warning (device loop2): ext4_empty_dir:3086: inode #11: comm syz-executor: directory missing '.' [ 280.705562][ T3443] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.814430][T15995] lo speed is unknown, defaulting to 1000 [ 280.820845][T15995] lo speed is unknown, defaulting to 1000 [ 280.865736][T11616] EXT4-fs error (device loop2): ext4_readdir:264: inode #11: block 32: comm syz-executor: path /298/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 280.895941][T15995] loop5: detected capacity change from 0 to 512 [ 280.902660][T15995] EXT4-fs: Ignoring removed mblk_io_submit option [ 280.909142][T15995] EXT4-fs: Ignoring removed bh option [ 280.915159][T15995] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 280.963444][ T3443] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.982647][T15995] EXT4-fs (loop5): 1 truncate cleaned up [ 280.988977][T15995] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 281.053348][T11616] EXT4-fs error (device loop2): ext4_empty_dir:3084: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 281.084165][T11616] EXT4-fs warning (device loop2): ext4_empty_dir:3086: inode #11: comm syz-executor: directory missing '.' [ 281.096916][T11616] EXT4-fs error (device loop2): ext4_readdir:264: inode #11: block 32: comm syz-executor: path /298/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 281.120041][T11616] EXT4-fs error (device loop2): ext4_empty_dir:3084: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 281.148051][T11616] EXT4-fs warning (device loop2): ext4_empty_dir:3086: inode #11: comm syz-executor: directory missing '.' [ 281.169612][ T3443] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.178531][T11616] EXT4-fs error (device loop2): ext4_readdir:264: inode #11: block 32: comm syz-executor: path /298/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 281.204624][T11616] EXT4-fs error (device loop2): ext4_empty_dir:3084: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 281.227516][T11616] EXT4-fs warning (device loop2): ext4_empty_dir:3086: inode #11: comm syz-executor: directory missing '.' [ 281.242366][T11616] EXT4-fs warning (device loop2): ext4_empty_dir:3086: inode #11: comm syz-executor: directory missing '.' [ 281.255786][T11616] EXT4-fs warning (device loop2): ext4_empty_dir:3086: inode #11: comm syz-executor: directory missing '.' [ 281.271533][T11616] EXT4-fs warning (device loop2): ext4_empty_dir:3086: inode #11: comm syz-executor: directory missing '.' [ 281.283937][T11616] EXT4-fs warning (device loop2): ext4_empty_dir:3086: inode #11: comm syz-executor: directory missing '.' [ 281.301092][ T3443] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.313125][T11616] EXT4-fs warning (device loop2): ext4_empty_dir:3086: inode #11: comm syz-executor: directory missing '.' [ 281.336567][T15999] lo speed is unknown, defaulting to 1000 [ 281.352235][T15999] lo speed is unknown, defaulting to 1000 [ 281.396734][ T3443] bridge_slave_1: left allmulticast mode [ 281.402483][ T3443] bridge_slave_1: left promiscuous mode [ 281.408270][ T3443] bridge0: port 2(bridge_slave_1) entered disabled state [ 281.418662][ T3443] bridge_slave_0: left allmulticast mode [ 281.424418][ T3443] bridge_slave_0: left promiscuous mode [ 281.430222][ T3443] bridge0: port 1(bridge_slave_0) entered disabled state [ 281.432821][T11961] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 281.453315][T11961] ================================================================== [ 281.461411][T11961] BUG: KCSAN: data-race in find_get_block_common / has_bh_in_lru [ 281.469139][T11961] [ 281.471464][T11961] read-write to 0xffff888237c26f10 of 8 bytes by task 11616 on cpu 0: [ 281.479642][T11961] find_get_block_common+0x4f0/0x960 [ 281.484946][T11961] bdev_getblk+0x83/0x3d0 [ 281.489293][T11961] ext4_getblk+0x1b6/0x510 [ 281.493748][T11961] ext4_bread_batch+0x5c/0x320 [ 281.498524][T11961] __ext4_find_entry+0x840/0xf40 [ 281.503474][T11961] ext4_rmdir+0x164/0x640 [ 281.507814][T11961] vfs_rmdir+0x276/0x330 [ 281.512078][T11961] do_rmdir+0x19c/0x4b0 [ 281.516229][T11961] __x64_sys_unlinkat+0x86/0xb0 [ 281.521086][T11961] x64_sys_call+0x2438/0x2fb0 [ 281.525775][T11961] do_syscall_64+0xd2/0x200 [ 281.530281][T11961] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 281.536185][T11961] [ 281.538515][T11961] read to 0xffff888237c26f10 of 8 bytes by task 11961 on cpu 1: [ 281.546176][T11961] has_bh_in_lru+0x35/0x1f0 [ 281.550686][T11961] __lru_add_drain_all+0x234/0x3f0 [ 281.555819][T11961] lru_add_drain_all+0x10/0x20 [ 281.560598][T11961] invalidate_bdev+0x47/0x70 [ 281.565202][T11961] ext4_put_super+0x624/0x7d0 [ 281.569894][T11961] generic_shutdown_super+0xe6/0x210 [ 281.575218][T11961] kill_block_super+0x2a/0x70 [ 281.579900][T11961] ext4_kill_sb+0x42/0x80 [ 281.584262][T11961] deactivate_locked_super+0x75/0x1c0 [ 281.589640][T11961] deactivate_super+0x97/0xa0 [ 281.594323][T11961] cleanup_mnt+0x269/0x2e0 [ 281.598758][T11961] __cleanup_mnt+0x19/0x20 [ 281.603187][T11961] task_work_run+0x12e/0x1a0 [ 281.607789][T11961] exit_to_user_mode_loop+0xe4/0x100 [ 281.613086][T11961] do_syscall_64+0x1d6/0x200 [ 281.617682][T11961] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 281.623578][T11961] [ 281.625898][T11961] value changed: 0x0000000000000000 -> 0xffff88811c2d9d00 [ 281.633018][T11961] [ 281.635338][T11961] Reported by Kernel Concurrency Sanitizer on: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 281.641498][T11961] CPU: 1 UID: 0 PID: 11961 Comm: syz-executor Tainted: G W 6.16.0-rc1-syzkaller-00157-g02adc1490e6d #0 PREEMPT(voluntary) [ 281.655739][T11961] Tainted: [W]=WARN [ 281.659539][T11961] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 281.669599][T11961] ================================================================== [ 281.760880][T15978] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 281.815411][ T3443] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 281.840518][ T3443] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 281.851766][ T3443] bond0 (unregistering): Released all slaves [ 281.931887][ T3443] hsr_slave_0: left promiscuous mode [ 281.941795][ T3443] hsr_slave_1: left promiscuous mode [ 281.960360][ T3443] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 281.967807][ T3443] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 281.991135][ T3443] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 281.998571][ T3443] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 282.011200][ T3443] veth1_macvtap: left promiscuous mode [ 282.016812][ T3443] veth0_macvtap: left promiscuous mode [ 282.023711][ T3443] veth1_vlan: left promiscuous mode [ 282.028953][ T3443] veth0_vlan: left promiscuous mode [ 282.089626][ T3443] team0 (unregistering): Port device team_slave_1 removed [ 282.099777][ T3443] team0 (unregistering): Port device team_slave_0 removed [ 282.524099][ T3443] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.582383][ T3443] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.622763][ T3443] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.692537][ T3443] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.774988][ T3443] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.813263][ T3443] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.872294][ T3443] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.932175][ T3443] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.005728][ T3443] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.063038][ T3443] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.112417][ T3443] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.172467][ T3443] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.233751][ T3443] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.281634][ T3443] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.341497][ T3443] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.391487][ T3443] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.453121][ T3443] bridge_slave_1: left allmulticast mode [ 283.458862][ T3443] bridge_slave_1: left promiscuous mode [ 283.464578][ T3443] bridge0: port 2(bridge_slave_1) entered disabled state [ 283.472446][ T3443] bridge_slave_0: left allmulticast mode [ 283.478111][ T3443] bridge_slave_0: left promiscuous mode [ 283.483729][ T3443] bridge0: port 1(bridge_slave_0) entered disabled state [ 283.494019][ T3443] bridge_slave_1: left allmulticast mode [ 283.499651][ T3443] bridge_slave_1: left promiscuous mode [ 283.505316][ T3443] bridge0: port 2(bridge_slave_1) entered disabled state [ 283.512904][ T3443] bridge_slave_0: left allmulticast mode [ 283.518585][ T3443] bridge_slave_0: left promiscuous mode [ 283.524222][ T3443] bridge0: port 1(bridge_slave_0) entered disabled state [ 283.535172][ T3443] bridge_slave_1: left allmulticast mode [ 283.540858][ T3443] bridge_slave_1: left promiscuous mode [ 283.546511][ T3443] bridge0: port 2(bridge_slave_1) entered disabled state [ 283.554301][ T3443] bridge_slave_0: left allmulticast mode [ 283.560043][ T3443] bridge_slave_0: left promiscuous mode [ 283.565903][ T3443] bridge0: port 1(bridge_slave_0) entered disabled state [ 283.575172][ T3443] bridge_slave_1: left allmulticast mode [ 283.580939][ T3443] bridge_slave_1: left promiscuous mode [ 283.586697][ T3443] bridge0: port 2(bridge_slave_1) entered disabled state [ 283.594319][ T3443] bridge_slave_0: left allmulticast mode [ 283.599986][ T3443] bridge_slave_0: left promiscuous mode [ 283.605659][ T3443] bridge0: port 1(bridge_slave_0) entered disabled state [ 283.982317][ T3443] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 283.992027][ T3443] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 284.001654][ T3443] bond0 (unregistering): Released all slaves [ 284.552211][ T3443] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 284.562055][ T3443] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 284.571679][ T3443] bond0 (unregistering): Released all slaves [ 284.599480][ T3443] team0: Port device geneve1 removed [ 284.822482][ T3443] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 284.832208][ T3443] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 284.841731][ T3443] bond0 (unregistering): Released all slaves [ 284.864678][ T3443] bond0 (unregistering): (slave erspan0): Releasing backup interface [ 285.192123][ T3443] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 285.201874][ T3443] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 285.211609][ T3443] bond0 (unregistering): Released all slaves [ 285.254228][ T3443] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 285.261698][ T3443] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 285.269189][ T3443] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 285.277001][ T3443] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 285.286276][ T3443] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 285.293706][ T3443] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 285.301363][ T3443] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 285.308759][ T3443] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 285.318232][ T3443] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 285.325712][ T3443] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 285.333279][ T3443] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 285.340760][ T3443] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 285.360651][ T3443] veth1_macvtap: left promiscuous mode [ 285.366139][ T3443] veth0_macvtap: left promiscuous mode [ 285.371700][ T3443] veth1_vlan: left promiscuous mode [ 285.376964][ T3443] veth0_vlan: left promiscuous mode [ 285.384327][ T3443] veth1_macvtap: left promiscuous mode [ 285.389811][ T3443] veth0_macvtap: left promiscuous mode [ 285.395391][ T3443] veth1_vlan: left promiscuous mode [ 285.400677][ T3443] veth0_vlan: left promiscuous mode [ 285.406431][ T3443] veth1_macvtap: left promiscuous mode [ 285.411960][ T3443] veth0_macvtap: left promiscuous mode [ 285.417578][ T3443] veth1_vlan: left promiscuous mode [ 285.422851][ T3443] veth0_vlan: left promiscuous mode [ 285.428533][ T3443] veth1_macvtap: left promiscuous mode [ 285.434028][ T3443] veth0_macvtap: left promiscuous mode [ 285.439673][ T3443] veth1_vlan: left promiscuous mode [ 285.444925][ T3443] veth0_vlan: left promiscuous mode [ 285.598971][ T3443] team0 (unregistering): Port device team_slave_1 removed [ 285.608920][ T3443] team0 (unregistering): Port device team_slave_0 removed [ 285.675989][ T3443] team0 (unregistering): Port device team_slave_1 removed [ 285.685492][ T3443] team0 (unregistering): Port device team_slave_0 removed [ 285.755609][ T3443] team0 (unregistering): Port device team_slave_1 removed [ 285.765062][ T3443] team0 (unregistering): Port device team_slave_0 removed [ 285.833362][ T3443] team0 (unregistering): Port device team_slave_1 removed [ 285.843231][ T3443] team0 (unregistering): Port device team_slave_0 removed [ 285.872847][ T10] lo speed is unknown, defaulting to 1000 [ 285.878638][ T10] infiniband syz2: ib_query_port failed (-19) [ 285.884772][ T3980] lo speed is unknown, defaulting to 1000 [ 285.890574][ T3980] infiniband syz0: ib_query_port failed (-19)